wattetheria 0.3.8 → 0.3.9

package/.env.release

@@ -35,6 +35,7 @@ WATTETHERIA_AGENT_CONTROL_PLANE_ENDPOINT=http://127.0.0.1:7777
 WATTETHERIA_AGENT_WATTSWARM_UI_BASE_URL=http://127.0.0.1:7788
 WATTETHERIA_AGENT_WATTSWARM_SYNC_GRPC_ENDPOINT=http://127.0.0.1:7791
 WATTETHERIA_AGENT_HOST_DATA_DIR=/var/lib/wattetheria
+WATTETHERIA_MCP_TOKEN_AUTH=false
 
 # Wattetheria runtime
 WATTETHERIA_BRAIN_PROVIDER_KIND=rules

package/README.md

@@ -809,6 +809,7 @@ WATTETHERIA_AGENT_CONTROL_PLANE_ENDPOINT=http://127.0.0.1:7777
 WATTETHERIA_AGENT_WATTSWARM_UI_BASE_URL=http://127.0.0.1:7788
 WATTETHERIA_AGENT_WATTSWARM_SYNC_GRPC_ENDPOINT=http://127.0.0.1:7791
 WATTETHERIA_AGENT_HOST_DATA_DIR=./data/wattetheria
+WATTETHERIA_MCP_TOKEN_AUTH=false
 WATTETHERIA_BRAIN_PROVIDER_KIND=openai-compatible
 WATTETHERIA_BRAIN_BASE_URL=http://host.docker.internal:18789/v1
 WATTETHERIA_BRAIN_MODEL=openclaw
@@ -966,15 +967,31 @@ The MCP security model is:
 
 - the runtime configures either the local HTTP MCP endpoint or the local `mcp-proxy`
 - `tools/list` reports the live tools exposed by the local Wattetheria node
-- `tools/call` must pass local bearer-token authentication
+- MCP bearer-token authentication is disabled by default for attached runtimes; set
+  `WATTETHERIA_MCP_TOKEN_AUTH=true` to require `Authorization: Bearer <contents-of-control.token>`
 - state-changing and money-adjacent tools must still pass local identity, capability, policy, audit,
   signed-event, and persistence checks in the control plane
 - delegated settlement parameters are provider references, not proof that Wattetheria has verified
   funds or accepted the third-party provider's settlement rules
+- when exposing MCP through a tunnel, protect the tunnel URL with an access policy, allowlist, or
+  equivalent boundary if token auth remains disabled
 
 For OpenClaw, HermesAgent, or custom runtimes that can call HTTP MCP endpoints directly, configure
-the local authenticated endpoint and read the token path from the agent participation manifest. Field
-names vary by host, but the shape is:
+the MCP endpoint from the agent participation manifest. Field names vary by host, but the default
+shape is:
+
+```json
+{
+  "mcpServers": {
+    "wattetheria": {
+      "transport": "http",
+      "url": "http://127.0.0.1:8080/mcp"
+    }
+  }
+}
+```
+
+If `WATTETHERIA_MCP_TOKEN_AUTH=true`, include the control token header:
 
 ```json
 {
@@ -1000,8 +1017,8 @@ externally wake those runtimes or push work directly into them.
 The MCP `tools/list` response is the source of truth for live tool names such as `list_missions`,
 `publish_mission`, `publish_delegated_mission`, `list_agent_payments`, `send_agent_dm_message`, and
 `invoke_servicenet_agent_sync`. Most MCP `tools/call`
-requests dispatch through the existing local control-plane routes, preserving bearer-token auth,
-rate limiting, audit logging, signed event writes, and persistence behavior. `tools/call`
+requests dispatch through the existing local control-plane routes, preserving local authorization,
+audit logging, signed event writes, and persistence behavior. `tools/call`
 responses always expose MCP `structuredContent` as an object; route payloads that are top-level
 lists are returned under `items`. The
 `list_hives` and `list_missions` tools are gateway-backed discovery exceptions: `list_hives`
@@ -1045,8 +1062,8 @@ SQLite table `collective_mission_runs` stores the `mission_id -> run_id` mapping
 `get_collective_mission_result`.
 
 For agent runtimes that support stdio MCP servers, prefer the local proxy command instead of
-configuring bearer-token headers by hand. The proxy reads `control.token` itself and
-forwards MCP JSON-RPC requests to the local control plane:
+configuring bearer-token headers by hand. The proxy forwards MCP JSON-RPC requests to the local
+control plane and only reads `control.token` when `WATTETHERIA_MCP_TOKEN_AUTH=true`:
 
 ```json
 {

package/docker-compose.release.yml

@@ -32,6 +32,7 @@ services:
       WATTETHERIA_AGENT_WATTSWARM_UI_BASE_URL: ${WATTETHERIA_AGENT_WATTSWARM_UI_BASE_URL:-http://127.0.0.1:7788}
       WATTETHERIA_AGENT_WATTSWARM_SYNC_GRPC_ENDPOINT: ${WATTETHERIA_AGENT_WATTSWARM_SYNC_GRPC_ENDPOINT:-http://127.0.0.1:7791}
       WATTETHERIA_AGENT_HOST_DATA_DIR: ${WATTETHERIA_AGENT_HOST_DATA_DIR:-/var/lib/wattetheria}
+      WATTETHERIA_MCP_TOKEN_AUTH: ${WATTETHERIA_MCP_TOKEN_AUTH:-false}
       WATTETHERIA_BRAIN_PROVIDER_KIND: ${WATTETHERIA_BRAIN_PROVIDER_KIND:-rules}
       WATTETHERIA_BRAIN_BASE_URL: ${WATTETHERIA_BRAIN_BASE_URL:-}
       WATTETHERIA_BRAIN_MODEL: ${WATTETHERIA_BRAIN_MODEL:-}

package/lib/cli.js

@@ -992,9 +992,11 @@ function resolveMcpProxyConfig(options) {
   const tokenPath = path.join(dataDir, "control.token");
   const host = getEnvValue(envMap, "WATTETHERIA_CONTROL_PLANE_BIND_HOST", "127.0.0.1");
   const port = getEnvValue(envMap, "WATTETHERIA_CONTROL_PLANE_PORT", "7777");
+  const tokenAuth = getEnvValue(envMap, "WATTETHERIA_MCP_TOKEN_AUTH", "false") === "true";
   return {
     endpoint: (options.controlPlane || `http://${host}:${port}`).replace(/\/+$/, ""),
-    tokenPath
+    tokenPath,
+    tokenAuth
   };
 }
 
@@ -1119,8 +1121,8 @@ async function logs(options) {
 }
 
 async function mcpProxy(options) {
-  const { endpoint, tokenPath } = resolveMcpProxyConfig(options);
-  if (!fs.existsSync(tokenPath)) {
+  const { endpoint, tokenPath, tokenAuth } = resolveMcpProxyConfig(options);
+  if (tokenAuth && !fs.existsSync(tokenPath)) {
     throw new Error(
       [
         `Wattetheria control token not found: ${tokenPath}`,
@@ -1128,8 +1130,8 @@ async function mcpProxy(options) {
       ].join("\n")
     );
   }
-  const token = fs.readFileSync(tokenPath, "utf8").trim();
-  if (!token) {
+  const token = fs.existsSync(tokenPath) ? fs.readFileSync(tokenPath, "utf8").trim() : "";
+  if (tokenAuth && !token) {
     throw new Error(`Wattetheria control token is empty: ${tokenPath}`);
   }
 
@@ -1168,13 +1170,16 @@ async function mcpProxy(options) {
 }
 
 async function forwardMcpRequest(endpoint, token, request) {
+  const headers = {
+    "content-type": "application/json"
+  };
+  if (token) {
+    headers.authorization = `Bearer ${token}`;
+  }
   try {
     const response = await fetch(`${endpoint}/mcp`, {
       method: "POST",
-      headers: {
-        authorization: `Bearer ${token}`,
-        "content-type": "application/json"
-      },
+      headers,
       body: JSON.stringify(request)
     });
     const payload = await response.json().catch(() => null);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wattetheria",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "description": "Wattetheria deployment CLI",
   "license": "AGPL-3.0-only",
   "type": "commonjs",