onetrust-api 1.3.3__tar.gz → 1.3.5__tar.gz

{onetrust_api-1.3.3/onetrust_api.egg-info → onetrust_api-1.3.5}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: onetrust-api
-Version: 1.3.3
+Version: 1.3.5
 Summary: OneTrust API + MCP Server + A2A Agent — 100% API coverage
-Author-email: Project Maintainers <maintainers@users.noreply.github.com>
+Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT
 Classifier: Development Status :: 4 - Beta
 Classifier: License :: OSI Approved :: MIT License
@@ -12,11 +12,11 @@ Classifier: Programming Language :: Python :: 3
 Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.4.1
+Requires-Dist: scion-sdk[mcp]<0.7.0,>=0.6.3
 Requires-Dist: python-dotenv>=1.2.4
 Requires-Dist: requests>=2.34.2
 Provides-Extra: mcp
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.4.1; extra == "mcp"
+Requires-Dist: scion-sdk[mcp]<0.7.0,>=0.6.3; extra == "mcp"
 Provides-Extra: all
 Requires-Dist: onetrust-api[mcp]>=1.3.0; extra == "all"
 Provides-Extra: test
@@ -49,7 +49,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/onetrust-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/onetrust-api)
 
-*Version: 1.3.3*
+*Version: 1.3.4*
 
 ## Overview
 
@@ -75,7 +75,7 @@ and a coverage test asserts the three sets stay in lock-step.
   Incidents), Tech Risk & Compliance, Third-Party Management, ESG, and Platform.
 - **Flexible auth** — a pre-minted OAuth2 bearer token *or* the OAuth2
   client-credentials flow (auto-exchanged and refreshed), plus OIDC delegation
-  (RFC 8693) via `agent-connector-sdk`.
+  (RFC 8693) via `scion-sdk`.
 - **Multi-region / multi-service aware** — regional tenant pods, the consent
   privacy-portal host, and on-prem worker nodes are resolved per-operation.
 - **Resilient** — honours `429` `Retry-After`, retries transient `5xx`, and
@@ -106,7 +106,7 @@ so the operator can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 | `ONETRUST_WORKER_URL` | — | On-prem Data Discovery worker-node host |
 | `TLS_PROFILE` | `private-pki` | ─── HTTP behaviour ──────────────────────────────────────────────────── TLS verification is mandatory. Select a named runtime profile from AgentConfig. |
 | `TLS_PROFILES_REF` | `secret://runtime/tls-profiles` |  |
-| `FASTMCP_LOG_LEVEL` | `INFO` | ─── MCP transport / auth (agent-connector-sdk) ──────────────────────────── |
+| `FASTMCP_LOG_LEVEL` | `INFO` | ─── MCP transport / auth (scion-sdk) ──────────────────────────── |
 | `TRANSPORT` | `stdio` |  |
 | `AUTH_TYPE` | `none` |  |
 | `ACCESS_MANAGEMENTTOOL` | `True` | ─── Tool Toggle Switches (per-domain <DOMAIN>TOOL; set False to disable) ─ These names match the authoritative "Toggle Env Var" column in the README MCP tools table (condensed action-routed surface). |
@@ -151,7 +151,7 @@ so the operator can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 | `ONETRUST_TLS_PROFILE_REF` | — |  |
 | `INGESTTOOL` | — | The drift scanner derives this name from register_ingest_tools, but this connector registers ingest tools directly and does not read this toggle. This is documentation of that limitation, not a working disable switch. |
 
-#### Inherited agent-connector-sdk variables (apply to every connector)
+#### Inherited scion-sdk variables (apply to every connector)
 
 | Variable | Example | Description |
 |----------|---------|-------------|
@@ -175,7 +175,7 @@ so the operator can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 | `PYTHONUNBUFFERED` | `1` | Unbuffered stdout (recommended in containers) |
 | `MCP_URL` | `http://localhost:8000/mcp` | URL of the MCP server the agent connects to |
 
-_53 package + 22 inherited variable(s). Auto-generated from `.env.example` + the shared agent-connector-sdk set — do not edit._
+_53 package + 22 inherited variable(s). Auto-generated from `.env.example` + the shared scion-sdk set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 
@@ -219,7 +219,7 @@ onetrust-mcp --transport "streamable-http" --host "0.0.0.0" --port "8000"
 
 ### Available MCP Tools
 
-<!-- This table is auto-generated by `python -m agent_connector_sdk.mcp.readme_tools` — do not edit by hand. -->
+<!-- This table is auto-generated by `python -m scion_sdk.mcp.readme_tools` — do not edit by hand. -->
 
 <!-- MCP-TOOLS-TABLE:START -->
 
@@ -275,7 +275,7 @@ _39 intent tool(s) · 0 operation(s). Call an operation as `act(action='<operati
 <!-- MCP-CONFIG-EXAMPLES:START -->
 
 > **Install the connector-focused `[mcp]` extra.** Examples use `onetrust-api[mcp]` to add
-> FastMCP / FastAPI through `agent-connector-sdk[mcp]`; the required Agent Utilities core
+> FastMCP / FastAPI through `scion-sdk[mcp]`; the required Agent Utilities core
 > still carries `epistemic-graph[full]`. The `[agent-runtime]` extra additionally
 > enables model orchestration.
 
@@ -532,8 +532,8 @@ Pick the extra that matches what the operator want to run:
 
 | Extra | Installs | Use when |
 |-------|----------|----------|
-| `onetrust-api[mcp]` | Connector-focused MCP server (`agent-connector-sdk[mcp]` — FastMCP/FastAPI + `epistemic-graph[full]`) | The operator only run the **MCP server** (smallest install / image) |
-| `onetrust-api[agent]` | Agent runtime (`agent-connector-sdk[agent-runtime,logfire]` — model orchestration + `epistemic-graph[full]`) | The operator run the **integrated agent** |
+| `onetrust-api[mcp]` | Connector-focused MCP server (`scion-sdk[mcp]` — FastMCP/FastAPI + `epistemic-graph[full]`) | The operator only run the **MCP server** (smallest install / image) |
+| `onetrust-api[agent]` | Agent runtime (`scion-sdk[agent-runtime,logfire]` — model orchestration + `epistemic-graph[full]`) | The operator run the **integrated agent** |
 | `onetrust-api[all]` | Everything (`mcp` + `agent`) | Development / both surfaces |
 
 ```bash
@@ -649,15 +649,15 @@ the source of truth for installation, usage, and deployment.
 ![GitHub User's stars](https://img.shields.io/github/stars/example)
 
 
-<!-- BEGIN agent-connector-sdk-deployment (generated; do not edit between markers) -->
+<!-- BEGIN scion-sdk-deployment (generated; do not edit between markers) -->
 
-## Deploy with `agent-connector-sdk-deployment`
+## Deploy with `scion-sdk-deployment`
 
-Provision this package with the consolidated **`agent-connector-sdk-deployment`**
+Provision this package with the consolidated **`scion-sdk-deployment`**
 workflow. It selects an installed-package, editable-source, or immutable-container
 path; records only runtime secret and TLS-profile references in `AgentConfig`; and
 runs doctor, registration, policy, observability, and rollback gates. Ask your agent
-to **"deploy `onetrust-api` with agent-connector-sdk-deployment"**.
+to **"deploy `onetrust-api` with scion-sdk-deployment"**.
 
 | Install mode | Command |
 |------|---------|
@@ -669,7 +669,7 @@ The repository embeds no deployment profile, credential value, certificate path,
 environment-specific endpoint. Supply those at runtime through `AgentConfig` and the
 configured secret provider.
 
-<!-- END agent-connector-sdk-deployment -->
+<!-- END scion-sdk-deployment -->
 
 <!-- GOVERNED-CAPABILITY:START -->
 ## Governed capability contract

{onetrust_api-1.3.3 → onetrust_api-1.3.5}/README.md

@@ -21,7 +21,7 @@
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/onetrust-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/onetrust-api)
 
-*Version: 1.3.3*
+*Version: 1.3.4*
 
 ## Overview
 
@@ -47,7 +47,7 @@ and a coverage test asserts the three sets stay in lock-step.
   Incidents), Tech Risk & Compliance, Third-Party Management, ESG, and Platform.
 - **Flexible auth** — a pre-minted OAuth2 bearer token *or* the OAuth2
   client-credentials flow (auto-exchanged and refreshed), plus OIDC delegation
-  (RFC 8693) via `agent-connector-sdk`.
+  (RFC 8693) via `scion-sdk`.
 - **Multi-region / multi-service aware** — regional tenant pods, the consent
   privacy-portal host, and on-prem worker nodes are resolved per-operation.
 - **Resilient** — honours `429` `Retry-After`, retries transient `5xx`, and
@@ -78,7 +78,7 @@ so the operator can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 | `ONETRUST_WORKER_URL` | — | On-prem Data Discovery worker-node host |
 | `TLS_PROFILE` | `private-pki` | ─── HTTP behaviour ──────────────────────────────────────────────────── TLS verification is mandatory. Select a named runtime profile from AgentConfig. |
 | `TLS_PROFILES_REF` | `secret://runtime/tls-profiles` |  |
-| `FASTMCP_LOG_LEVEL` | `INFO` | ─── MCP transport / auth (agent-connector-sdk) ──────────────────────────── |
+| `FASTMCP_LOG_LEVEL` | `INFO` | ─── MCP transport / auth (scion-sdk) ──────────────────────────── |
 | `TRANSPORT` | `stdio` |  |
 | `AUTH_TYPE` | `none` |  |
 | `ACCESS_MANAGEMENTTOOL` | `True` | ─── Tool Toggle Switches (per-domain <DOMAIN>TOOL; set False to disable) ─ These names match the authoritative "Toggle Env Var" column in the README MCP tools table (condensed action-routed surface). |
@@ -123,7 +123,7 @@ so the operator can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 | `ONETRUST_TLS_PROFILE_REF` | — |  |
 | `INGESTTOOL` | — | The drift scanner derives this name from register_ingest_tools, but this connector registers ingest tools directly and does not read this toggle. This is documentation of that limitation, not a working disable switch. |
 
-#### Inherited agent-connector-sdk variables (apply to every connector)
+#### Inherited scion-sdk variables (apply to every connector)
 
 | Variable | Example | Description |
 |----------|---------|-------------|
@@ -147,7 +147,7 @@ so the operator can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 | `PYTHONUNBUFFERED` | `1` | Unbuffered stdout (recommended in containers) |
 | `MCP_URL` | `http://localhost:8000/mcp` | URL of the MCP server the agent connects to |
 
-_53 package + 22 inherited variable(s). Auto-generated from `.env.example` + the shared agent-connector-sdk set — do not edit._
+_53 package + 22 inherited variable(s). Auto-generated from `.env.example` + the shared scion-sdk set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 
@@ -191,7 +191,7 @@ onetrust-mcp --transport "streamable-http" --host "0.0.0.0" --port "8000"
 
 ### Available MCP Tools
 
-<!-- This table is auto-generated by `python -m agent_connector_sdk.mcp.readme_tools` — do not edit by hand. -->
+<!-- This table is auto-generated by `python -m scion_sdk.mcp.readme_tools` — do not edit by hand. -->
 
 <!-- MCP-TOOLS-TABLE:START -->
 
@@ -247,7 +247,7 @@ _39 intent tool(s) · 0 operation(s). Call an operation as `act(action='<operati
 <!-- MCP-CONFIG-EXAMPLES:START -->
 
 > **Install the connector-focused `[mcp]` extra.** Examples use `onetrust-api[mcp]` to add
-> FastMCP / FastAPI through `agent-connector-sdk[mcp]`; the required Agent Utilities core
+> FastMCP / FastAPI through `scion-sdk[mcp]`; the required Agent Utilities core
 > still carries `epistemic-graph[full]`. The `[agent-runtime]` extra additionally
 > enables model orchestration.
 
@@ -504,8 +504,8 @@ Pick the extra that matches what the operator want to run:
 
 | Extra | Installs | Use when |
 |-------|----------|----------|
-| `onetrust-api[mcp]` | Connector-focused MCP server (`agent-connector-sdk[mcp]` — FastMCP/FastAPI + `epistemic-graph[full]`) | The operator only run the **MCP server** (smallest install / image) |
-| `onetrust-api[agent]` | Agent runtime (`agent-connector-sdk[agent-runtime,logfire]` — model orchestration + `epistemic-graph[full]`) | The operator run the **integrated agent** |
+| `onetrust-api[mcp]` | Connector-focused MCP server (`scion-sdk[mcp]` — FastMCP/FastAPI + `epistemic-graph[full]`) | The operator only run the **MCP server** (smallest install / image) |
+| `onetrust-api[agent]` | Agent runtime (`scion-sdk[agent-runtime,logfire]` — model orchestration + `epistemic-graph[full]`) | The operator run the **integrated agent** |
 | `onetrust-api[all]` | Everything (`mcp` + `agent`) | Development / both surfaces |
 
 ```bash
@@ -621,15 +621,15 @@ the source of truth for installation, usage, and deployment.
 ![GitHub User's stars](https://img.shields.io/github/stars/example)
 
 
-<!-- BEGIN agent-connector-sdk-deployment (generated; do not edit between markers) -->
+<!-- BEGIN scion-sdk-deployment (generated; do not edit between markers) -->
 
-## Deploy with `agent-connector-sdk-deployment`
+## Deploy with `scion-sdk-deployment`
 
-Provision this package with the consolidated **`agent-connector-sdk-deployment`**
+Provision this package with the consolidated **`scion-sdk-deployment`**
 workflow. It selects an installed-package, editable-source, or immutable-container
 path; records only runtime secret and TLS-profile references in `AgentConfig`; and
 runs doctor, registration, policy, observability, and rollback gates. Ask your agent
-to **"deploy `onetrust-api` with agent-connector-sdk-deployment"**.
+to **"deploy `onetrust-api` with scion-sdk-deployment"**.
 
 | Install mode | Command |
 |------|---------|
@@ -641,7 +641,7 @@ The repository embeds no deployment profile, credential value, certificate path,
 environment-specific endpoint. Supply those at runtime through `AgentConfig` and the
 configured secret provider.
 
-<!-- END agent-connector-sdk-deployment -->
+<!-- END scion-sdk-deployment -->
 
 <!-- GOVERNED-CAPABILITY:START -->
 ## Governed capability contract

{onetrust_api-1.3.3 → onetrust_api-1.3.5}/onetrust_api/__init__.py

@@ -58,3 +58,21 @@ onetrust-api
 
 Python OneTrust API client + MCP server + A2A agent with 100% API coverage
 """
+
+
+from scion_sdk.connector import Connector
+from scion_sdk.connector_hooks import RegistrationContext
+
+
+def _register_legacy_surface(context: RegistrationContext) -> None:
+    from onetrust_api.mcp_server import register_server_surface
+
+    vars(context.server)["_onetrust_registered_tags"] = register_server_surface(
+        context.server
+    )
+
+
+connector = Connector(
+    instructions="OneTrust Api MCP Server",
+    extra_registrations=(_register_legacy_surface,),
+)

{onetrust_api-1.3.3 → onetrust_api-1.3.5}/onetrust_api/api/_operation_manifest.py

@@ -1882,7 +1882,7 @@ OPERATIONS = [
                 "name": "userId",
                 "type": "string",
                 "required": True,
-                "description": ">- `userId` can be retireved using the [Retrieve list of Users](https://{$$.env.developer}/api-reference/general/user-provisioning/user-provisioning-apis/users/getallusersusingget) API",
+                "description": ">- `userId` can be retrieved using the [Retrieve list of Users](https://{$$.env.developer}/api-reference/general/user-provisioning/user-provisioning-apis/users/getallusersusingget) API",
             },
             {
                 "name": "includeChildObjects",
@@ -1909,7 +1909,7 @@ OPERATIONS = [
                 "in": "path",
                 "required": True,
                 "schema": {"type": "string"},
-                "description": ">- `userId` can be retireved using the [Retrieve list of Users](https://{$$.env.developer}/api-reference/general/user-provisioning/user-provisioning-apis/users/getallusersusingget) API",
+                "description": ">- `userId` can be retrieved using the [Retrieve list of Users](https://{$$.env.developer}/api-reference/general/user-provisioning/user-provisioning-apis/users/getallusersusingget) API",
             },
             {
                 "name": "includeChildObjects",
@@ -7085,7 +7085,7 @@ OPERATIONS = [
                 "name": "deleteFinding",
                 "type": "boolean",
                 "required": False,
-                "description": "Boolean which determines if associated findings to be deleted. If TRUE, findings associated with the Audit will be deleted. If FALSE, findings will have that relationship removed but still be availabl",
+                "description": "Boolean which determines if associated findings to be deleted. If TRUE, findings associated with the Audit will be deleted. If FALSE, findings will have that relationship removed but still be available",
             },
         ],
         "parameters": [
@@ -7101,7 +7101,7 @@ OPERATIONS = [
                 "in": "query",
                 "required": False,
                 "schema": {"type": "boolean"},
-                "description": "Boolean which determines if associated findings to be deleted. If TRUE, findings associated with the Audit will be deleted. If FALSE, findings will have that relationship removed but still be availabl",
+                "description": "Boolean which determines if associated findings to be deleted. If TRUE, findings associated with the Audit will be deleted. If FALSE, findings will have that relationship removed but still be available",
             },
         ],
     },
@@ -8801,7 +8801,7 @@ OPERATIONS = [
                 "name": "publishVersion",
                 "type": "string",
                 "required": False,
-                "description": "Version to publish, by default the lastest version will be used.",
+                "description": "Version to publish, by default the latest version will be used.",
             },
             {
                 "name": "production",
@@ -8847,7 +8847,7 @@ OPERATIONS = [
                 "in": "query",
                 "required": False,
                 "schema": {"type": "string"},
-                "description": "Version to publish, by default the lastest version will be used.",
+                "description": "Version to publish, by default the latest version will be used.",
             },
             {
                 "name": "production",
@@ -10787,7 +10787,7 @@ OPERATIONS = [
                 "name": "website",
                 "type": "string",
                 "required": True,
-                "description": "ID of the webiste or URL of the website.",
+                "description": "ID of the website or URL of the website.",
             },
             {
                 "name": "scriptType",
@@ -10802,7 +10802,7 @@ OPERATIONS = [
                 "in": "query",
                 "required": True,
                 "schema": {"type": "string"},
-                "description": "ID of the webiste or URL of the website.",
+                "description": "ID of the website or URL of the website.",
             },
             {
                 "name": "scriptType",
@@ -10827,7 +10827,7 @@ OPERATIONS = [
                 "name": "website",
                 "type": "string",
                 "required": True,
-                "description": "ID of the webiste or URL of the website.",
+                "description": "ID of the website or URL of the website.",
             },
             {
                 "name": "scriptType",
@@ -10857,13 +10857,13 @@ OPERATIONS = [
                 "name": "languageDetectionHtml",
                 "type": "boolean",
                 "required": False,
-                "description": "Indicates the script should detect the website visitors langauge based on the webpages language.",
+                "description": "Indicates the script should detect the website visitors language based on the webpages language.",
             },
             {
                 "name": "languageDetectionVisitor",
                 "type": "boolean",
                 "required": False,
-                "description": "Indicates the script should detect the website visitors langauge based on their browser language. By default this is ’True’.",
+                "description": "Indicates the script should detect the website visitors language based on their browser language. By default this is ’True’.",
             },
             {
                 "name": "languages",
@@ -10875,7 +10875,7 @@ OPERATIONS = [
                 "name": "publishIndividualLanguages",
                 "type": "boolean",
                 "required": False,
-                "description": "By default, this flag is ‘False’. Setting to ’True’ indicates you only wish to publish a subset of langauges.",
+                "description": "By default, this flag is ‘False’. Setting to ’True’ indicates you only wish to publish a subset of languages.",
             },
             {
                 "name": "requireReconsent",
@@ -10902,7 +10902,7 @@ OPERATIONS = [
                 "in": "query",
                 "required": True,
                 "schema": {"type": "string"},
-                "description": "ID of the webiste or URL of the website.",
+                "description": "ID of the website or URL of the website.",
             },
             {
                 "name": "scriptType",
@@ -10937,14 +10937,14 @@ OPERATIONS = [
                 "in": "query",
                 "required": False,
                 "schema": {"type": "boolean"},
-                "description": "Indicates the script should detect the website visitors langauge based on the webpages language.",
+                "description": "Indicates the script should detect the website visitors language based on the webpages language.",
             },
             {
                 "name": "languageDetectionVisitor",
                 "in": "query",
                 "required": False,
                 "schema": {"type": "boolean"},
-                "description": "Indicates the script should detect the website visitors langauge based on their browser language. By default this is ’True’.",
+                "description": "Indicates the script should detect the website visitors language based on their browser language. By default this is ’True’.",
             },
             {
                 "name": "languages",
@@ -10958,7 +10958,7 @@ OPERATIONS = [
                 "in": "query",
                 "required": False,
                 "schema": {"type": "boolean"},
-                "description": "By default, this flag is ‘False’. Setting to ’True’ indicates you only wish to publish a subset of langauges.",
+                "description": "By default, this flag is ‘False’. Setting to ’True’ indicates you only wish to publish a subset of languages.",
             },
             {
                 "name": "requireReconsent",
@@ -17851,7 +17851,7 @@ OPERATIONS = [
                 "name": "showAll",
                 "type": "string",
                 "required": False,
-                "description": "When set to `true`, returns the complete schema including all attribute details such as allowed values, validation rules, and metadata. When `false` or omitted, returns only basic attribute informatio",
+                "description": "When set to `true`, returns the complete schema including all attribute details such as allowed values, validation rules, and metadata. When `false` or omitted, returns only basic attribute information",
             },
         ],
         "parameters": [
@@ -17867,7 +17867,7 @@ OPERATIONS = [
                 "in": "query",
                 "required": False,
                 "schema": {"type": "string"},
-                "description": "When set to `true`, returns the complete schema including all attribute details such as allowed values, validation rules, and metadata. When `false` or omitted, returns only basic attribute informatio",
+                "description": "When set to `true`, returns the complete schema including all attribute details such as allowed values, validation rules, and metadata. When `false` or omitted, returns only basic attribute information",
             },
         ],
     },
@@ -35193,7 +35193,7 @@ OPERATIONS = [
                 "name": "DOISendConfirmationEmail",
                 "type": "boolean",
                 "required": False,
-                "description": "Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom emai",
+                "description": "Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom email",
             },
             {
                 "name": "DoiEmailToParent",
@@ -35580,7 +35580,7 @@ OPERATIONS = [
                 "in": "query",
                 "required": False,
                 "schema": {"type": "boolean"},
-                "description": "Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom emai",
+                "description": "Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom email",
             },
             {
                 "name": "DoiEmailToParent",
@@ -36064,7 +36064,7 @@ OPERATIONS = [
                 "name": "DOISendConfirmationEmail",
                 "type": "boolean",
                 "required": False,
-                "description": "Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom emai",
+                "description": "Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom email",
             },
             {
                 "name": "DoiEmailToParent",
@@ -36513,7 +36513,7 @@ OPERATIONS = [
                 "in": "query",
                 "required": False,
                 "schema": {"type": "boolean"},
-                "description": "Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom emai",
+                "description": "Double Opt In child setting to send the confirmation email or not. Note: the confirmation link is included in the Data Subject Profile Updated integrations event, which can be used to send custom email",
             },
             {
                 "name": "DoiEmailToParent",

{onetrust_api-1.3.3 → onetrust_api-1.3.5}/onetrust_api/api/api_client_base.py

@@ -24,15 +24,15 @@ import time
 from typing import Any, TypeVar
 
 import requests
-from agent_connector_sdk.exceptions import (
+from pydantic import ValidationError
+from scion_sdk.exceptions import (
     AuthError,
     MissingParameterError,
     ParameterError,
     UnauthorizedError,
 )
-from agent_connector_sdk.tls.profile import ResolvedTLSProfile
-from agent_connector_sdk.tls.resolve import resolve_tls_profile
-from pydantic import ValidationError
+from scion_sdk.tls.profile import ResolvedTLSProfile
+from scion_sdk.tls.resolve import resolve_tls_profile
 
 from onetrust_api.onetrust_models import Response
 

{onetrust_api-1.3.3 → onetrust_api-1.3.5}/onetrust_api/auth.py

@@ -4,7 +4,7 @@ Authentication priority:
 
 1. **OIDC Delegation** — If ``ENABLE_DELEGATION`` is active, exchanges the
    IdP-issued user token for a downstream OneTrust access token via RFC 8693
-   Token Exchange using ``agent_connector_sdk.auth.delegation``.
+   Token Exchange using ``scion_sdk.auth.delegation``.
 2. **Fixed Credentials** — Falls back to a pre-minted bearer token
    (``ONETRUST_TOKEN``) or an OAuth2 client-credentials pair
    (``ONETRUST_CLIENT_ID`` / ``ONETRUST_CLIENT_SECRET``).
@@ -15,10 +15,10 @@ import threading
 from dataclasses import dataclass
 from typing import Any
 
-from agent_connector_sdk.config import setting
-from agent_connector_sdk.exceptions import AuthError, UnauthorizedError
-from agent_connector_sdk.tls.profile import ResolvedTLSProfile
-from agent_connector_sdk.tls.resolve import resolve_tls_profile
+from scion_sdk.config import setting
+from scion_sdk.exceptions import AuthError, UnauthorizedError
+from scion_sdk.tls.profile import ResolvedTLSProfile
+from scion_sdk.tls.resolve import resolve_tls_profile
 
 local = threading.local()
 from onetrust_api.api_client import Api
@@ -91,11 +91,11 @@ def _is_delegation_enabled(config: dict[str, Any] | None) -> bool:
 
     An explicit ``config`` dict (test injection only -- no production caller
     passes one) wins outright; otherwise reads the real ``ENABLE_DELEGATION``
-    setting through ``agent_connector_sdk.auth.delegation.DelegationSettings``.
+    setting through ``scion_sdk.auth.delegation.DelegationSettings``.
     """
     if config is not None:
         return bool(config.get("enable_delegation", False))
-    from agent_connector_sdk.auth.delegation import DelegationSettings
+    from scion_sdk.auth.delegation import DelegationSettings
 
     return DelegationSettings.from_settings().enabled
 
@@ -107,18 +107,18 @@ def _delegated_client(
 
     Reads delegation settings (``OIDC_TOKEN_URL``/``OIDC_CLIENT_ID``/
     ``OIDC_CLIENT_SECRET_REF``/``AUDIENCE``/``DELEGATED_SCOPES``) from the
-    process settings via ``agent_connector_sdk.auth.delegation.DelegationSettings``;
-    unlike the old ``agent_connector_sdk`` helper, this has no per-call ``config``
+    process settings via ``scion_sdk.auth.delegation.DelegationSettings``;
+    unlike the old ``scion_sdk`` helper, this has no per-call ``config``
     override for those fields, only for whether delegation is attempted at all
     (see :func:`_is_delegation_enabled`).
     """
     import httpx
-    from agent_connector_sdk.auth.delegation import (
+    from scion_sdk.auth.delegation import (
         DelegationSettings,
         current_user_token,
         exchange_token,
     )
-    from agent_connector_sdk.exceptions import LoginRequiredError
+    from scion_sdk.exceptions import LoginRequiredError
 
     try:
         settings = DelegationSettings.from_settings()
@@ -184,7 +184,7 @@ def get_client(
     Credentials resolve live through the shared config layer (the one XDG
     ``config.json`` / env), read at call time rather than frozen at import.
     Supports OIDC delegation, a fixed bearer token, and the OAuth2
-    client-credentials flow via ``agent_connector_sdk.auth.delegation``.
+    client-credentials flow via ``scion_sdk.auth.delegation``.
     """
     resolved = _resolve_client_config(
         _ClientOverrides(

{onetrust_api-1.3.3 → onetrust_api-1.3.5}/onetrust_api/connector_sources.py

@@ -6,8 +6,7 @@ Served live as ``connector://resources``. Regenerate by editing the declarations
 # ruff: noqa: E501
 from __future__ import annotations
 
-from agent_connector_sdk.ingest.live_declaration import source_meta
-from agent_connector_sdk.ingest.sources import IngestSourceDeclaration, IngestSourceSpec
+from scion_sdk.ingest.live_declaration import source_meta
 
 CONNECTOR = "onetrust-mcp"
 
@@ -233,22 +232,3 @@ RESOURCES = (
         "name": "Inventory",
     },
 )
-
-
-def declaration() -> IngestSourceDeclaration:
-    """The declaration the server assembles from this module."""
-    specs = []
-    for item in SOURCES:
-        for entry in item["connector_sources"]:
-            body = {k: v for k, v in entry.items() if k not in ("tool", "mapping")}
-            specs.append(
-                IngestSourceSpec.model_validate({**body, "tools": (entry["tool"],)})
-            )
-    return IngestSourceDeclaration.model_validate(
-        {
-            "connector": CONNECTOR,
-            "sources": specs,
-            "schema_mappings": SCHEMA_MAPPINGS,
-            "resources": RESOURCES,
-        }
-    )

{onetrust_api-1.3.3 → onetrust_api-1.3.5}/onetrust_api/kg_ingest.py

@@ -1,7 +1,7 @@
 """Epistemic-graph ingestion for OneTrust records.
 
 CONCEPT:AU-KG.ingest.enterprise-source-extractor. Connector-specific mappers emit
-canonical node_type nodes and relationship edges. ``agent_connector_sdk.ingest`` --
+canonical node_type nodes and relationship edges. ``scion_sdk.ingest`` --
 the generated ``SourceIngest`` client, not a local ingestion helper -- owns the
 transaction and raises ``IngestError`` when epistemic-graph cannot commit.
 """
@@ -10,7 +10,7 @@ from __future__ import annotations
 
 from typing import Any
 
-from agent_connector_sdk.ingest import (
+from scion_sdk.ingest import (
     ChangeSet,
     Document,
     Entity,

{onetrust_api-1.3.3 → onetrust_api-1.3.5}/onetrust_api/mcp_server.py

@@ -4,17 +4,18 @@ import logging
 import sys
 from typing import Any
 
-from agent_connector_sdk.config import load_config
-from agent_connector_sdk.mcp.server import create_mcp_server
-from agent_connector_sdk.mcp.tool_surface import register_tool_surface
 from fastmcp import FastMCP
 from fastmcp.utilities.logging import get_logger
+from scion_sdk.config import load_config
+from scion_sdk.connector import build_server
+from scion_sdk.connector_identity import connector_version
+from scion_sdk.mcp.tool_surface import register_tool_surface
 
 from onetrust_api.api._operation_manifest import OPERATIONS
 from onetrust_api.api_client import Api
 from onetrust_api.auth import get_client
 
-__version__ = "1.3.3"
+__version__ = connector_version("onetrust_api")
 
 # Redirect logging to stderr to prevent MCP stdout corruption
 logger = get_logger(name="onetrust_mcp")
@@ -122,16 +123,16 @@ def register_ingest_tools(mcp: FastMCP):
         return {"listed": len(records), "ingested": nodes}
 
 
-def get_mcp_instance() -> tuple[Any, Any, Any, Any]:
+def get_mcp_instance(*, command_args=None) -> tuple[Any, Any, Any, Any]:
     """Initialize and return the OneTrust Api MCP instance, args, and middlewares."""
     load_config()
 
-    args, mcp, middlewares = create_mcp_server(
-        name="OneTrust Api MCP",
-        version=__version__,
-        instructions="OneTrust Api MCP Server",
-    )
+    args, mcp = build_server("onetrust_api", command_args=command_args)
+    return mcp, args, list(mcp.middleware), vars(mcp)["_onetrust_registered_tags"]
+
 
+def register_server_surface(mcp: FastMCP) -> list[str]:
+    """Reuse the manifest-backed surface, prompts and ingest tools in order."""
     # One central call selects the surface per MCP_TOOL_MODE: condensed gates each
     # generated TOOL_REGISTRY domain via setting("<TAG>TOOL", True); verbose adds
     # the fully-typed 1:1 tools sourced from the OpenAPI manifest (OPERATIONS).
@@ -149,10 +150,7 @@ def get_mcp_instance() -> tuple[Any, Any, Any, Any]:
     register_prompts(mcp)
     register_ingest_tools(mcp)
 
-    for mw in middlewares:
-        mcp.add_middleware(mw)
-
-    return mcp, args, middlewares, registered_tags
+    return registered_tags
 
 
 def mcp_server():