vpsnet-mcp 2.3.10 → 2.3.11

package/README.md

@@ -262,7 +262,9 @@ one. `list_restore_file_points`, `browse_restore_files` and
 charge the account, never overwrite the disk, and never put a file back on the
 server. Initially supported on Firecracker VPS.
 
-Browsing is asynchronous. `browse_restore_files` returns a browse id in a
+Browsing is asynchronous. `browse_restore_files` creates a persisted job and
+queues worker activity, so its MCP annotation is `readOnlyHint: false` even
+though the backup and running server are unchanged. It returns a browse id in a
 pending state; poll `get_restore_file_browse` until `state` is `succeeded`.
 Entries exist only in that state — a `failed` browse carries an `errorCode` and
 no listing, and must not be presented as an empty directory.
@@ -736,7 +738,7 @@ everything else.
 | `list_restore_points` | List whole-service restore points | `services:read` | free |
 | `request_restore` | **Paid and destructive:** restore the whole service disk from a point | `services:read` | Paid: `services:restore` |
 | `list_restore_file_points` | List browsable backup points and whether folder search is available (free) | `services:read` | free |
-| `browse_restore_files` | Queue a listing of one directory inside a backup (free, read-only) | `services:read` | free |
+| `browse_restore_files` | Queue a backup directory listing job without restoring files | `services:read` | free |
 | `get_restore_file_browse` | Poll a queued backup directory listing (free, read-only) | `services:read` | free |
 
 ### SSH Keys

package/build/index.js

@@ -3739,7 +3739,7 @@ export function createVpsnetServer(options = {}) {
         };
     });
     server.registerTool("browse_restore_files", {
-        description: "Queue a free, read-only listing of one directory inside a backup point. This does NOT restore anything, does not charge the account, and does not modify the server. Start at the backup root by passing only backupPointId. To open a subdirectory, pass sourceBrowseId plus the directoryEntryId of a type=directory entry from that result; filesystem paths are never accepted. A directory can hold an enormous number of files, so the server selects pages of 200 or 1,000 entries: while result.nextOffset is non-null, call again with the same sourceBrowseId and directoryEntryId and offset set to result.nextOffset. Use result.pageSize rather than assuming 200 when moving backwards. When nextOffset is null the listing cannot be paged further even if truncated is true — that is a capped scan; check result.listingStatus: 'complete' means the folder was read end to end, 'partial' means the listing is a bounded lower-bound slice, so never present it as the whole folder. Optionally pass filter to search entry NAMES in that one directory (substring, case-insensitive, never recursive) — but only when list_restore_file_points reported searchAvailable=true, otherwise this tool refuses rather than silently returning an unfiltered listing. The call is asynchronous: it returns a browse id in a pending state, and you must poll get_restore_file_browse until state is succeeded. Requires services:read and, because it is a POST, an API key that permits write operations plus an idempotencyKey.",
+        description: "Create a persisted asynchronous browse job to list one directory inside a backup point. This queues worker activity and stores the listing result; it does not restore files, change backup contents or the running server, or charge the account. Start at the backup root by passing only backupPointId. To open a subdirectory, pass sourceBrowseId plus the directoryEntryId of a type=directory entry from that result; filesystem paths are never accepted. A directory can hold an enormous number of files, so the server selects pages of 200 or 1,000 entries: while result.nextOffset is non-null, call again with the same sourceBrowseId and directoryEntryId and offset set to result.nextOffset. Use result.pageSize rather than assuming 200 when moving backwards. When nextOffset is null the listing cannot be paged further even if truncated is true — that is a capped scan; check result.listingStatus: 'complete' means the folder was read end to end, 'partial' means the listing is a bounded lower-bound slice, so never present it as the whole folder. Optionally pass filter to search entry NAMES in that one directory (substring, case-insensitive, never recursive) — but only when list_restore_file_points reported searchAvailable=true, otherwise this tool refuses rather than silently returning an unfiltered listing. The call is asynchronous: it returns a browse id in a pending state, and you must poll get_restore_file_browse until state is succeeded. Requires services:read and, because it is a POST, an API key that permits write operations plus an idempotencyKey.",
         inputSchema: {
             orderNo: serviceOrderNoSchema,
             backupPointId: fileBrowsePointIdSchema,
@@ -3755,7 +3755,7 @@ export function createVpsnetServer(options = {}) {
         },
         annotations: {
             title: "Browse backup files",
-            readOnlyHint: true,
+            readOnlyHint: false,
             destructiveHint: false,
             idempotentHint: true,
         },

package/build/remote-policy.js

@@ -185,9 +185,9 @@ const deduplicatedTools = new Set([
     'run_vm_command', 'inspect_vm', 'read_vm_file', 'write_vm_file', 'create_vm_file', 'cancel_vm_operation',
     'create_function', 'invoke_function', 'confirm_service_order', 'confirm_domain_register',
 ]);
-// These read guest state but queue durable operations, so their read scopes do
+// These read guest or backup state but queue durable operations, so their read scopes do
 // not imply a read-only MCP call.
-const queuedReadTools = new Set(['inspect_vm', 'read_vm_file', 'get_application_health', 'get_application_logs', 'discover_service_containers']);
+const queuedReadTools = new Set(['browse_restore_files', 'inspect_vm', 'read_vm_file', 'get_application_health', 'get_application_logs', 'discover_service_containers']);
 // Keep cached aggregate calls valid, but advertise the individually scoped
 // actions to new directory clients. The SDK uses one handler for tools/list;
 // filtering its result leaves the normal tools/call dispatcher intact.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vpsnet-mcp",
-  "version": "2.3.10",
+  "version": "2.3.11",
   "type": "module",
   "description": "MCP server for managing VPSnet.com services, applications, DNS, domains, billing, and server lifecycle operations",
   "bin": {