mcpsmith 0.2.0__tar.gz → 0.2.1__tar.gz

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mcpsmith",
   "displayName": "mcpsmith",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Turn an OpenAPI file or a recorded website session into a curated, tested MCP server. Skills and an MCP server for your coding agent.",
   "author": {
     "name": "Sepehr Radmard",
@@ -23,7 +23,7 @@
     "mcpsmith": {
       "command": "uvx",
       "args": [
-        "mcpsmith@0.2.0",
+        "mcpsmith@0.2.1",
         "mcp"
       ]
     }

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: mcpsmith
-Version: 0.2.0
+Version: 0.2.1
 Summary: Turn an OpenAPI file or a recorded website session into a curated, tested MCP server, with an LLM designing the tools.
 Project-URL: Homepage, https://github.com/sepehr071/mcpsmith
 Project-URL: Issues, https://github.com/sepehr071/mcpsmith/issues
@@ -22,6 +22,7 @@ Requires-Dist: httpx>=0.27
 Requires-Dist: keyring>=25
 Requires-Dist: mcp<3,>=2.2
 Requires-Dist: pyyaml>=6
+Requires-Dist: truststore>=0.9
 Requires-Dist: tzdata>=2024.1; sys_platform == 'win32'
 Requires-Dist: websockets>=12
 Provides-Extra: capture

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "mcpsmith"
-version = "0.2.0"
+version = "0.2.1"
 description = "Turn an OpenAPI file or a recorded website session into a curated, tested MCP server, with an LLM designing the tools."
 readme = "README.md"
 license = "MIT"
@@ -22,6 +22,7 @@ classifiers = [
 dependencies = [
     "mcp>=2.2,<3",
     "httpx>=0.27",
+    "truststore>=0.9",
     "pyyaml>=6",
     "websockets>=12",
     "keyring>=25",

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/server.json

@@ -8,13 +8,13 @@
     "source": "github"
   },
   "websiteUrl": "https://github.com/sepehr071/mcpsmith",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "packages": [
     {
       "registryType": "pypi",
       "registryBaseUrl": "https://pypi.org",
       "identifier": "mcpsmith",
-      "version": "0.2.0",
+      "version": "0.2.1",
       "runtimeHint": "uvx",
       "transport": {
         "type": "stdio"

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/src/mcpsmith/__init__.py

@@ -1,3 +1,3 @@
 """mcpsmith: turn an OpenAPI file or a recorded website session into a curated, tested MCP server."""
 
-__version__ = "0.2.0"
+__version__ = "0.2.1"

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/src/mcpsmith/importers/__init__.py

@@ -10,13 +10,14 @@ import yaml
 
 from mcpsmith.importers import har, openapi, rea
 from mcpsmith.model import Source
+from mcpsmith.runtime.http import tls_context
 
 
 def load(path_or_url: str, hosts: list[str] | None = None) -> Source:
     """`hosts` filters HAR traffic to those hosts (exact or subdomain); ignored for OpenAPI."""
     origin = None
     if path_or_url.startswith(("http://", "https://")):
-        resp = httpx.get(path_or_url, follow_redirects=True, timeout=60)
+        resp = httpx.get(path_or_url, follow_redirects=True, timeout=60, verify=tls_context())
         resp.raise_for_status()
         text, origin = resp.text, str(resp.url)
     else:

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/src/mcpsmith/runtime/http.py

@@ -16,12 +16,14 @@ import logging
 import os
 import random
 import re
+import ssl
 import time
 from collections.abc import Awaitable, Callable
 from typing import Any
 from urllib.parse import quote
 
 import httpx
+import truststore
 from mcp.server.mcpserver.exceptions import ToolError
 
 log = logging.getLogger("mcpsmith")
@@ -38,6 +40,12 @@ class ApiError(ToolError):
         self.status = status
 
 
+@functools.cache
+def tls_context() -> ssl.SSLContext:
+    """Verify with the OS trust store (fixes incomplete chains, honors corporate CAs); verification stays on."""
+    return truststore.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
+
+
 @functools.cache
 def _curl() -> tuple[type, Any] | None:
     """The curl_cffi transport class (Chrome TLS/HTTP2 fingerprint) and CurlOpt, or None without the extra."""
@@ -283,7 +291,9 @@ class Api:
                 proxy=proxy,
                 max_connections=2 * self.concurrency,
             )
-        return httpx.AsyncHTTPTransport(proxy=proxy, limits=httpx.Limits(max_connections=2 * self.concurrency))
+        return httpx.AsyncHTTPTransport(
+            verify=tls_context(), proxy=proxy, limits=httpx.Limits(max_connections=2 * self.concurrency)
+        )
 
     async def _request(self, method, url, query, headers, payload, host) -> tuple[httpx.Response, bytes]:
         client, limit = self._get_client()

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/tests/test_runtime.py

@@ -1,8 +1,10 @@
 import json
+import ssl
 from typing import Annotated
 
 import httpx
 import pytest
+import truststore
 from mcp import Client
 from pydantic import Field
 
@@ -351,3 +353,10 @@ async def test_browser_auth_cookie_errors_map_to_not_running(exc):
     api = make_api(lambda r: httpx.Response(200, json={}), auth={"type": "browser"}, cookie_provider=down)
     with pytest.raises(ApiError, match="The mcpsmith Chrome is not running"):
         await api.call("GET", "/x")
+
+
+def test_plain_transport_verifies_with_os_trust_store():
+    transport = Api(base_url="https://api.example.com", env_prefix="EX_MCP")._make_transport(None)
+    ctx = transport._pool._ssl_context
+    assert isinstance(ctx, truststore.SSLContext) and ctx is http.tls_context()
+    assert ctx.verify_mode == ssl.CERT_REQUIRED

{mcpsmith-0.2.0 → mcpsmith-0.2.1}/uv.lock

@@ -689,13 +689,14 @@ wheels = [
 
 [[package]]
 name = "mcpsmith"
-version = "0.2.0"
+version = "0.2.1"
 source = { editable = "." }
 dependencies = [
     { name = "httpx" },
     { name = "keyring" },
     { name = "mcp" },
     { name = "pyyaml" },
+    { name = "truststore" },
     { name = "tzdata", marker = "sys_platform == 'win32'" },
     { name = "websockets", version = "16.1.1", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version < '3.11'" },
     { name = "websockets", version = "17.3", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version >= '3.11'" },
@@ -726,6 +727,7 @@ requires-dist = [
     { name = "mcp", specifier = ">=2.2,<3" },
     { name = "playwright", marker = "extra == 'capture'", specifier = ">=1.45" },
     { name = "pyyaml", specifier = ">=6" },
+    { name = "truststore", specifier = ">=0.9" },
     { name = "tzdata", marker = "sys_platform == 'win32'", specifier = ">=2024.1" },
     { name = "websockets", specifier = ">=12" },
 ]