verify402-mcp 1.0.5 → 1.0.6

package/README.md

@@ -10,13 +10,13 @@ dedicated hot wallet funded with **Base Sepolia testnet USDC** (`eip155:84532`).
 The analysis reads mainnet chain data, but the demo never settles mainnet
 payments. The bridge never signs or sends a trade.
 
-> **Published package note:** npm `verify402-mcp@1.0.4` is immutable and its
-> published README predates this source-tree testnet default. Its built-in
-> runtime default is Base mainnet (`eip155:8453`). The explicit
-> `VERIFY402_NETWORKS=eip155:84532` block below is required with that package
-> for the public demo; a future patch release is needed to update the npm page
-> and change the built-in default. This source tree is `1.0.5` and already
-> defaults to Base Sepolia testnet, but `1.0.5` is not published yet.
+> **Published package note:** `verify402-mcp@1.0.6` is published to npm and
+> defaults paid calls to Base Sepolia testnet (`eip155:84532`) for the public
+> demo. Base mainnet (`eip155:8453`) requires an explicit `VERIFY402_NETWORKS`
+> opt-in in a separate deployment and is not enabled by this release. The
+> previously published `1.0.5` package is immutable; `1.0.4` is also immutable
+> and used Base mainnet by default. Do not republish or overwrite either
+> version.
 
 ## Tools
 
@@ -34,6 +34,13 @@ transaction or x402 payment request. If `sign_allowed` is false, **do not
 sign**. If `requires_ack` is true, surface the reasons to the operator. The
 receipt expires (default 90s); call again instead of reusing it.
 
+For payment intents, `policy.allowedResourceHosts` binds the host in
+`payment.resource`; a matching host can PASS and a foreign host is BLOCK.
+Without `allowedResourceHosts` or `expectedResource`, an otherwise valid
+resource is CAUTION `resource_identity_unverified` and `resource identity` is
+listed in `notChecked`. The bridge forwards this policy to the server; the
+server enforces it.
+
 The gate is advisory at this layer: the bridge does not hold the agent's
 transaction key and cannot stop an agent that ignores the answer. Enforcement
 belongs in the executor that signs — verify the receipt, then sign. See
@@ -185,7 +192,7 @@ Once configured, your agent automatically sees the tools in its context. You can
   proves that the requirement it signs is the exact object the server sent.
 - The allowlist can be narrowed or pointed at another deployment with
   `VERIFY402_NETWORKS`, `VERIFY402_PAY_TO`, and `VERIFY402_RESOURCE_PREFIX`.
-  The source-tree defaults are Base Sepolia testnet (`eip155:84532`) and the
+  The bridge defaults are Base Sepolia testnet (`eip155:84532`) and the
   public verify402 payee. `VERIFY402_NETWORKS` is constrained to the supported
   map (`eip155:84532`, `eip155:8453`); an explicitly empty value fails closed
   instead of falling back to a default.

package/index.mjs

@@ -42,7 +42,7 @@ installConsoleRedaction();
 const IS_MAIN = isMainModule();
 if (IS_MAIN) config();
 
-const VERSION = "1.0.5";
+const VERSION = "1.0.6";
 const EVM_PRIVATE_KEY = process.env.EVM_PRIVATE_KEY;
 // Normalise once so the axios base URL, the payment policy prefix, and the
 // per-tool expected resource are all the same string (no trailing slash).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verify402-mcp",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "mcpName": "io.github.a32116150-ctrl/verify402-mcp",
   "description": "MCP server for verify402: a free, fail-closed preflight gate before signing, plus five paid on-chain checks paid per call via x402.",
   "type": "module",