unbound-cli 0.9.9 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/commands/policy.js +6 -3
package/package.json
CHANGED
package/src/commands/policy.js
CHANGED
|
@@ -1503,7 +1503,7 @@ Learn more: ${DOCS_TOOL}
|
|
|
1503
1503
|
.command('create-mcp')
|
|
1504
1504
|
.description('Create an MCP_TOOL policy: monitor or block MCP server tool calls.')
|
|
1505
1505
|
.requiredOption('--name <name>', 'Policy name (required)')
|
|
1506
|
-
.requiredOption('--mcp-server <server>', 'MCP server name (e.g.
|
|
1506
|
+
.requiredOption('--mcp-server <server>', 'MCP server name as shown by `policy tool mcp-servers` (e.g. linear, github). Resolved to its canonical group automatically.')
|
|
1507
1507
|
.option('--mcp-tool <tool>', 'Specific tool name on the MCP server (e.g. create_issue). Mutually exclusive with --mcp-action-type.')
|
|
1508
1508
|
.option('--mcp-action-type <type>', `Match by tool action type: ${MCP_ACTION_TYPES.join(' | ')}. Mutually exclusive with --mcp-tool.`)
|
|
1509
1509
|
.requiredOption('--action <action>', `Action to take: ${TOOL_ACTIONS.join(' | ')}`)
|
|
@@ -1516,12 +1516,15 @@ Learn more: ${DOCS_TOOL}
|
|
|
1516
1516
|
Examples:
|
|
1517
1517
|
Match a specific tool on a server:
|
|
1518
1518
|
$ unbound policy tool create-mcp --name "Block Linear writes" \\
|
|
1519
|
-
--mcp-server
|
|
1519
|
+
--mcp-server linear --mcp-tool create_issue --action BLOCK \\
|
|
1520
1520
|
--custom-message "Issue creation is blocked. Contact admin."
|
|
1521
1521
|
|
|
1522
1522
|
Match all destructive tools on a server:
|
|
1523
1523
|
$ unbound policy tool create-mcp --name "Audit all destructive Slack" \\
|
|
1524
|
-
--mcp-server
|
|
1524
|
+
--mcp-server slack --mcp-action-type destructive --action AUDIT
|
|
1525
|
+
|
|
1526
|
+
The server name is resolved to its canonical group automatically, so pass the
|
|
1527
|
+
name exactly as listed by \`policy tool mcp-servers\` (matching is case-insensitive).
|
|
1525
1528
|
|
|
1526
1529
|
Discover valid MCP servers and their tools: unbound policy tool mcp-servers
|
|
1527
1530
|
Learn more: ${DOCS_TOOL}
|