From 102e7f0c3bc263f7c31b01a1a06b32b52033dd3e Mon Sep 17 00:00:00 2001 From: chrisjleal <184772742+chrisjleal@users.noreply.github.com> Date: Sat, 10 Oct 2026 13:34:13 -0500 Subject: [PATCH 1/3] release(mcp): prepare 0.1.7 reviewer tools and skills --- .agents/plugins/marketplace.json | 2 +- .claude-plugin/marketplace.json | 2 +- .cursor-plugin/marketplace.json | 2 +- README.md | 1 + package-lock.json | 4 ++-- package.json | 2 +- plugins/proofable-mcp/.claude-plugin/plugin.json | 2 +- plugins/proofable-mcp/.codex-plugin/plugin.json | 2 +- plugins/proofable-mcp/.cursor-plugin/plugin.json | 2 +- .../skills/proofable-integrate/SKILL.md | 2 +- .../skills/proofable-setup/SKILL.md | 2 +- .../skills/proofable-trust-workflow/SKILL.md | 4 ++-- server.json | 16 ++++++++++++---- skills/proofable-integrate/SKILL.md | 2 +- skills/proofable-setup/SKILL.md | 2 +- skills/proofable-trust-workflow/SKILL.md | 4 ++-- 16 files changed, 30 insertions(+), 21 deletions(-) diff --git a/.agents/plugins/marketplace.json b/.agents/plugins/marketplace.json index 35504e4..9e25d61 100644 --- a/.agents/plugins/marketplace.json +++ b/.agents/plugins/marketplace.json @@ -5,7 +5,7 @@ }, "metadata": { "description": "Identity, scoped access, and proof for AI agents through Proofable MCP.", - "version": "0.1.6" + "version": "0.1.7" }, "plugins": [ { diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index 35504e4..9e25d61 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -5,7 +5,7 @@ }, "metadata": { "description": "Identity, scoped access, and proof for AI agents through Proofable MCP.", - "version": "0.1.6" + "version": "0.1.7" }, "plugins": [ { diff --git a/.cursor-plugin/marketplace.json b/.cursor-plugin/marketplace.json index 35504e4..9e25d61 100644 --- a/.cursor-plugin/marketplace.json +++ b/.cursor-plugin/marketplace.json @@ -5,7 +5,7 @@ }, "metadata": { "description": "Identity, scoped access, and proof for AI agents through Proofable MCP.", - "version": "0.1.6" + "version": "0.1.7" }, "plugins": [ { diff --git a/README.md b/README.md index af87a62..5ce3ab6 100644 --- a/README.md +++ b/README.md @@ -66,6 +66,7 @@ Install one Proofable connection per client. A marketplace plugin and a manual e | Check whether a qualifying proof already exists | `proofable_proofs_check` | | Reuse a current proof or get the next verification step | `proofable_verify_or_guide` | | Create or refresh a proof | `proofable_verify` | +| Prepare and submit a check needing another signer | `proofable_verify_prepare`, `proofable_verify_submit` | | Find and read proofs | `proofable_proofs_get` | | Update proof metadata or add feedback | `proofable_proofs_update` | | Check, create, and load agent permissions | `proofable_agent_link`, `proofable_agent_create`, `proofable_agent_mount` | diff --git a/package-lock.json b/package-lock.json index 51d57f8..ee6ad67 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "@proofable/mcp", - "version": "0.1.6", + "version": "0.1.7", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@proofable/mcp", - "version": "0.1.6", + "version": "0.1.7", "license": "Apache-2.0", "engines": { "node": ">=20.0.0" diff --git a/package.json b/package.json index b0ed22b..9326f99 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@proofable/mcp", - "version": "0.1.6", + "version": "0.1.7", "description": "Identity, scoped access, and proof for AI agents through Proofable MCP.", "type": "module", "main": "./index.mjs", diff --git a/plugins/proofable-mcp/.claude-plugin/plugin.json b/plugins/proofable-mcp/.claude-plugin/plugin.json index 4446d5e..eb44e53 100644 --- a/plugins/proofable-mcp/.claude-plugin/plugin.json +++ b/plugins/proofable-mcp/.claude-plugin/plugin.json @@ -2,7 +2,7 @@ "name": "proofable-mcp", "displayName": "Proofable", "description": "Identity, scoped access, and proof for AI agents through Proofable MCP.", - "version": "0.1.6", + "version": "0.1.7", "author": { "name": "Proofable", "url": "https://proofable.me" diff --git a/plugins/proofable-mcp/.codex-plugin/plugin.json b/plugins/proofable-mcp/.codex-plugin/plugin.json index 5cc16c6..037c8c2 100644 --- a/plugins/proofable-mcp/.codex-plugin/plugin.json +++ b/plugins/proofable-mcp/.codex-plugin/plugin.json @@ -1,6 +1,6 @@ { "name": "proofable-mcp", - "version": "0.1.6", + "version": "0.1.7", "description": "Identity, scoped access, and proof for AI agents through Proofable MCP.", "author": { "name": "Proofable", diff --git a/plugins/proofable-mcp/.cursor-plugin/plugin.json b/plugins/proofable-mcp/.cursor-plugin/plugin.json index a359238..a1203e6 100644 --- a/plugins/proofable-mcp/.cursor-plugin/plugin.json +++ b/plugins/proofable-mcp/.cursor-plugin/plugin.json @@ -2,7 +2,7 @@ "name": "proofable-mcp", "displayName": "Proofable", "description": "Identity, scoped access, and proof for AI agents through Proofable MCP.", - "version": "0.1.6", + "version": "0.1.7", "author": { "name": "Proofable" }, diff --git a/plugins/proofable-mcp/skills/proofable-integrate/SKILL.md b/plugins/proofable-mcp/skills/proofable-integrate/SKILL.md index 92ee18f..9e428ef 100644 --- a/plugins/proofable-mcp/skills/proofable-integrate/SKILL.md +++ b/plugins/proofable-mcp/skills/proofable-integrate/SKILL.md @@ -5,7 +5,7 @@ license: Apache-2.0 compatibility: Requires @proofable/sdk (npm). metadata: author: Proofable - version: "0.1.6" + version: "0.1.7" homepage: https://docs.proofable.me/use-cases/gate-access --- diff --git a/plugins/proofable-mcp/skills/proofable-setup/SKILL.md b/plugins/proofable-mcp/skills/proofable-setup/SKILL.md index 0b5cfe6..b54aea6 100644 --- a/plugins/proofable-mcp/skills/proofable-setup/SKILL.md +++ b/plugins/proofable-mcp/skills/proofable-setup/SKILL.md @@ -5,7 +5,7 @@ license: Apache-2.0 compatibility: Requires an MCP-capable client that can register a remote HTTP server. metadata: author: Proofable - version: "0.1.6" + version: "0.1.7" homepage: https://docs.proofable.me/mcp/setup --- diff --git a/plugins/proofable-mcp/skills/proofable-trust-workflow/SKILL.md b/plugins/proofable-mcp/skills/proofable-trust-workflow/SKILL.md index 1c41d3b..d67f1cf 100644 --- a/plugins/proofable-mcp/skills/proofable-trust-workflow/SKILL.md +++ b/plugins/proofable-mcp/skills/proofable-trust-workflow/SKILL.md @@ -5,7 +5,7 @@ license: Apache-2.0 compatibility: Requires a client that supports remote HTTP MCP servers and hosted OAuth. metadata: author: Proofable - version: "0.1.6" + version: "0.1.7" homepage: https://docs.proofable.me/mcp/setup --- @@ -25,7 +25,7 @@ Use this before an assistant runs sensitive tools or takes another verification- 1. **`proofable_context`** once per session. Prefer signed-in profile context; omit wallet fields on check/verify tools. 2. **Profile agent:** **`proofable_agent_mount`** (or `proofable mount --apply `) for identity, permissions, skills, and context. -3. **Trust before action:** use **`proofable_verify_or_guide`** directly. It reuses qualifying proofs or returns the next secure step. Use **`proofable_proofs_check`** only for an explicit yes/no eligibility, gate, or access question; never use it for memory, context, or content retrieval. When signed in, ownership checks continue with **`proofable_verify`**. Share a browser link only when a tool returns one. +3. **Trust before action:** use **`proofable_verify_or_guide`** directly. It reuses qualifying proofs or returns the next secure step. Use **`proofable_proofs_check`** only for an explicit yes/no eligibility, gate, or access question; never use it for memory, context, or content retrieval. When signed in, ownership checks continue with **`proofable_verify`**. For another signer, prepare with **`proofable_verify_prepare`** and submit with **`proofable_verify_submit`**. Share a browser link only when a tool returns one. 4. **Agent:** **`proofable_agent_link`**. If missing, **`proofable_agent_create`** (a dedicated account needs a key you create and hold; pass only its public address). Then **`proofable_agent_mount`**. 5. **Proofs and context:** use the `proofable_context` context index first, then **`proofable_proofs_get`** with a known proof ID and `include=content` for an exact body. 6. **Vault:** **`proofable_secret_list`** / **`proofable_secret_create`** / **`proofable_secret_revoke`**. diff --git a/server.json b/server.json index 1460ce8..57b0f17 100644 --- a/server.json +++ b/server.json @@ -3,7 +3,7 @@ "name": "io.github.proofable/mcp", "title": "Proofable MCP", "description": "Identity, scoped access, and proof for AI agents through Proofable MCP.", - "version": "0.1.6", + "version": "0.1.7", "repository": { "url": "https://github.com/proofable/mcp", "source": "github" @@ -44,7 +44,7 @@ }, { "name": "proofable_verifiers_catalog", - "description": "List the verification checks Proofable supports, including required inputs and supported networks for each check. Verifier IDs select Proofable checks; they are not separate MCP tools." + "description": "Return supported check definitions with the inputs and networks each requires." }, { "name": "proofable_proofs_check", @@ -52,7 +52,15 @@ }, { "name": "proofable_verify", - "description": "Create or refresh portable proofs for the requested Proofable checks. For signed-in ownership checks, omit the wallet; the session supplies it. Share a browser link only when this tool returns one." + "description": "Create a proof directly for the signed-in account. Omit the wallet for your own account. If another signer is required, use proofable_verify_prepare and proofable_verify_submit." + }, + { + "name": "proofable_verify_prepare", + "description": "Prepare a Proofable check for an external signature. Returns the exact signing string, timestamp, chain, and hosted fallback; does not create a proof." + }, + { + "name": "proofable_verify_submit", + "description": "Submit a prepared Proofable check with its signature and original signing timestamp. Creates a proof when verification succeeds." }, { "name": "proofable_verify_or_guide", @@ -80,7 +88,7 @@ }, { "name": "proofable_secret_create", - "description": "Encrypt and save one secret in the Vault for the signed-in profile. Returns metadata only; the stored value is never returned." + "description": "Encrypt and save one secret in the Vault for the signed-in profile. Saving the same alias again replaces and revokes its prior value. Returns metadata only; the stored value is never returned." }, { "name": "proofable_secret_list", diff --git a/skills/proofable-integrate/SKILL.md b/skills/proofable-integrate/SKILL.md index 92ee18f..9e428ef 100644 --- a/skills/proofable-integrate/SKILL.md +++ b/skills/proofable-integrate/SKILL.md @@ -5,7 +5,7 @@ license: Apache-2.0 compatibility: Requires @proofable/sdk (npm). metadata: author: Proofable - version: "0.1.6" + version: "0.1.7" homepage: https://docs.proofable.me/use-cases/gate-access --- diff --git a/skills/proofable-setup/SKILL.md b/skills/proofable-setup/SKILL.md index 0b5cfe6..b54aea6 100644 --- a/skills/proofable-setup/SKILL.md +++ b/skills/proofable-setup/SKILL.md @@ -5,7 +5,7 @@ license: Apache-2.0 compatibility: Requires an MCP-capable client that can register a remote HTTP server. metadata: author: Proofable - version: "0.1.6" + version: "0.1.7" homepage: https://docs.proofable.me/mcp/setup --- diff --git a/skills/proofable-trust-workflow/SKILL.md b/skills/proofable-trust-workflow/SKILL.md index 1c41d3b..d67f1cf 100644 --- a/skills/proofable-trust-workflow/SKILL.md +++ b/skills/proofable-trust-workflow/SKILL.md @@ -5,7 +5,7 @@ license: Apache-2.0 compatibility: Requires a client that supports remote HTTP MCP servers and hosted OAuth. metadata: author: Proofable - version: "0.1.6" + version: "0.1.7" homepage: https://docs.proofable.me/mcp/setup --- @@ -25,7 +25,7 @@ Use this before an assistant runs sensitive tools or takes another verification- 1. **`proofable_context`** once per session. Prefer signed-in profile context; omit wallet fields on check/verify tools. 2. **Profile agent:** **`proofable_agent_mount`** (or `proofable mount --apply `) for identity, permissions, skills, and context. -3. **Trust before action:** use **`proofable_verify_or_guide`** directly. It reuses qualifying proofs or returns the next secure step. Use **`proofable_proofs_check`** only for an explicit yes/no eligibility, gate, or access question; never use it for memory, context, or content retrieval. When signed in, ownership checks continue with **`proofable_verify`**. Share a browser link only when a tool returns one. +3. **Trust before action:** use **`proofable_verify_or_guide`** directly. It reuses qualifying proofs or returns the next secure step. Use **`proofable_proofs_check`** only for an explicit yes/no eligibility, gate, or access question; never use it for memory, context, or content retrieval. When signed in, ownership checks continue with **`proofable_verify`**. For another signer, prepare with **`proofable_verify_prepare`** and submit with **`proofable_verify_submit`**. Share a browser link only when a tool returns one. 4. **Agent:** **`proofable_agent_link`**. If missing, **`proofable_agent_create`** (a dedicated account needs a key you create and hold; pass only its public address). Then **`proofable_agent_mount`**. 5. **Proofs and context:** use the `proofable_context` context index first, then **`proofable_proofs_get`** with a known proof ID and `include=content` for an exact body. 6. **Vault:** **`proofable_secret_list`** / **`proofable_secret_create`** / **`proofable_secret_revoke`**. From 8a21c9cb8939cef17d9a806dad81d4b4cec10cd1 Mon Sep 17 00:00:00 2001 From: chrisjleal <184772742+chrisjleal@users.noreply.github.com> Date: Sat, 10 Oct 2026 13:35:53 -0500 Subject: [PATCH 2/3] ci(mcp): compare matching SDK review branch when available --- .github/workflows/ci.yml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a25eae0..8d576d2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,10 +14,21 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 + - name: Select matching SDK review branch + id: sdk-ref + env: + CANDIDATE_REF: ${{ github.head_ref }} + run: | + ref=main + if [[ -n "$CANDIDATE_REF" ]] && git ls-remote --exit-code https://github.com/proofable/sdk.git "refs/heads/$CANDIDATE_REF" >/dev/null; then + ref="$CANDIDATE_REF" + fi + echo "ref=$ref" >> "$GITHUB_OUTPUT" - name: Check out proofable/sdk for skill parity uses: actions/checkout@v7 with: repository: proofable/sdk + ref: ${{ steps.sdk-ref.outputs.ref }} path: sdk - uses: actions/setup-node@v7 with: @@ -27,4 +38,4 @@ jobs: run: npm test env: PROOFABLE_SDK_SKILLS_ROOT: ${{ github.workspace }}/sdk/skills - - run: npm pack --dry-run \ No newline at end of file + - run: npm pack --dry-run From 084f69df6067d850fa6a81fcd7e44ff856161116 Mon Sep 17 00:00:00 2001 From: chrisjleal <184772742+chrisjleal@users.noreply.github.com> Date: Sat, 10 Oct 2026 20:47:16 -0500 Subject: [PATCH 3/3] fix(mcp): clarify verification tool boundaries --- server.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server.json b/server.json index 57b0f17..6209510 100644 --- a/server.json +++ b/server.json @@ -56,11 +56,11 @@ }, { "name": "proofable_verify_prepare", - "description": "Prepare a Proofable check for an external signature. Returns the exact signing string, timestamp, chain, and hosted fallback; does not create a proof." + "description": "Prepare a signature request for the selected Proofable checks. Returns the exact signing string, timestamp, chain, and hosted fallback. This call does not submit the check or create a proof." }, { "name": "proofable_verify_submit", - "description": "Submit a prepared Proofable check with its signature and original signing timestamp. Creates a proof when verification succeeds." + "description": "Submit a signed Proofable check using the same wallet, checks, data, and chain used to prepare it, plus the returned signing timestamp and signature. Creates a proof only when verification succeeds." }, { "name": "proofable_verify_or_guide",