{"_id":"@a2amesh/mcp","_rev":"17-48569945f779bbd2e48b23f145df6ad2","name":"@a2amesh/mcp","dist-tags":{"alpha":"0.18.0-alpha.1","latest":"0.18.2"},"versions":{"0.1.0-alpha.0":{"name":"@a2amesh/mcp","version":"0.1.0-alpha.0","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.1.0-alpha.0","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"ee29665af69a8e34f5f15cdec12236a95531f504","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.1.0-alpha.0.tgz","fileCount":19,"integrity":"sha512-cc4xjN5h0gPh1rd3mWUXajo/8wHXkaCquSYbULzxNrI/KlAaDt0JshuMCIKK9eO3QSuT5JxaNCF5S0+2KPCtJA==","signatures":[{"sig":"MEUCIDcPbHGVGCQAVksJHoVeAaeAnxM2QXulFymFuqlj4889AiEA+5k2uNjKoIaR/ps7GXMEflypdfN2eEAaLyxHyLYOE00=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":29397},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"gitHead":"f4d5d6dca177aaab8454d706ae21a3522ad33223","scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"oaslananka","email":"oaslananka@gmail.com"},"deprecated":"Broken alpha: may contain workspace protocol dependencies. Use 0.1.0-alpha.1 or newer.","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.17.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.18.0","dependencies":{"@a2amesh/runtime":"workspace:^","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.1.0-alpha.0_1782653665605_0.5023021269868522","host":"s3://npm-registry-packages-npm-production"}},"0.1.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.1.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.1.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"c067bf488adc51fb8cfa199dc7ce42f4d552cd56","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.1.0-alpha.1.tgz","fileCount":19,"integrity":"sha512-ds2VQxWIQpgyRAJEe5eXTLWXhEIoubUOLGZ2MU+brMbDjSqBl9o6l8I5DVcCahQR7EDPjaAf/MkENTHJhHUqTw==","signatures":[{"sig":"MEYCIQCwK+AHpHeZyKm6HUqCB/00kvup5RsChHUKSavPyX3rbAIhAPPPXeCJv7USGjrxgaGlp3TX7ME/I4P+KPxPDznZM6K9","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":29399},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"gitHead":"f4d5d6dca177aaab8454d706ae21a3522ad33223","scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"oaslananka","email":"oaslananka@gmail.com"},"repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.17.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.18.0","dependencies":{"@a2amesh/runtime":"0.1.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.1.0-alpha.1_1782655570800_0.07439391901037373","host":"s3://npm-registry-packages-npm-production"}},"0.2.0-alpha.0":{"name":"@a2amesh/mcp","version":"0.2.0-alpha.0","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.2.0-alpha.0","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"5dbb9c8918386908d5f541b84de868778bf09b0b","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.2.0-alpha.0.tgz","fileCount":19,"integrity":"sha512-MfH5ADVYX5GdYRlBWYp1CxqYlsKcDo8nIyL6ckTjhMPFF9OnSUQgwHPKXcVZ95slfFJJ8mZk87fvFa7rxQYWMA==","signatures":[{"sig":"MEUCIADV+FzAsAxcss5cR4sabGYQC31G+NNY+9xYHL4P+6+GAiEA2iC86BY1hBe8E4dhIEUrfa6IwS39zLEHNVqQ6vQxMJg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.2.0-alpha.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":29423},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.2.0-alpha.0.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.2.0-alpha.0.tgz","_integrity":"sha512-MfH5ADVYX5GdYRlBWYp1CxqYlsKcDo8nIyL6ckTjhMPFF9OnSUQgwHPKXcVZ95slfFJJ8mZk87fvFa7rxQYWMA==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.15.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"@a2amesh/runtime":"^0.2.0-alpha.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.2.0-alpha.0_1782692941756_0.849011505122073","host":"s3://npm-registry-packages-npm-production"}},"0.2.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.2.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.2.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"79b6b0c349d393d12c20f093fcec02d5dabcd351","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.2.0-alpha.1.tgz","fileCount":19,"integrity":"sha512-3RmxlQibO+0yS1r7kxBds2ew21gcbZjHASpSwQag6KUSj6SvCsJcYeR9CiFWAP9LdUl1q2iVqlBSGsHXJSLXjw==","signatures":[{"sig":"MEUCIDH2XyWcdME5258/olYh0NLAOvqAKUWvs9bfGBrKJy+WAiEAjPD6zpn3jwK2F7fC50Hw5q+72pgrFQ3uwqpAXr3lTq8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.2.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":29423},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.2.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.2.0-alpha.1.tgz","_integrity":"sha512-3RmxlQibO+0yS1r7kxBds2ew21gcbZjHASpSwQag6KUSj6SvCsJcYeR9CiFWAP9LdUl1q2iVqlBSGsHXJSLXjw==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.15.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"@a2amesh/runtime":"^0.2.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.2.0-alpha.1_1782832178041_0.17570731215254098","host":"s3://npm-registry-packages-npm-production"}},"0.5.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.5.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.5.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"677e7906f76b1a7959fbdf39194ca2abcd15e187","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.5.0-alpha.1.tgz","fileCount":31,"integrity":"sha512-fx7NO7lHpTgJfQV2Uca6UbDmT7vYDIM4JxjLOTVQxSLzV/van/2jsGa4U+zIjZVoKRBv26G/iPlAnmWR213y/g==","signatures":[{"sig":"MEQCIC6Os94EG1DOq0xol5HsLa7lrEomuNs7Xz2qgl1jshX4AiBNZd2QsAYd8N24uYvscpeOFUwQb4Up0brBnqSN3tYWoQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.5.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":86172},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.5.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.5.0-alpha.1.tgz","_integrity":"sha512-fx7NO7lHpTgJfQV2Uca6UbDmT7vYDIM4JxjLOTVQxSLzV/van/2jsGa4U+zIjZVoKRBv26G/iPlAnmWR213y/g==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"@a2amesh/runtime":"^0.5.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.5.0-alpha.1_1783157150105_0.026774608268381295","host":"s3://npm-registry-packages-npm-production"}},"0.12.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.12.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.12.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"4bdca20700168eb585404ddb8cacd2a0160d5859","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.12.0-alpha.1.tgz","fileCount":31,"integrity":"sha512-sfljfTLSurEXJ3PBK9iMf+iEVlINJqI7ANFYfJ3W5YcNmFxMkcU65CQgPEiUByd09RjPMv5zG88lDKeSglSlWw==","signatures":[{"sig":"MEUCIAGC5Xar5Zp02IOTOyC5edXZn/mXjh7Mnl5HGgkSjQk4AiEAmd0W3CuzxHcTyS49jokDDWGQHacptbt1x1W2LbwRhjY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.12.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":86158},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.12.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.12.0-alpha.1.tgz","_integrity":"sha512-sfljfTLSurEXJ3PBK9iMf+iEVlINJqI7ANFYfJ3W5YcNmFxMkcU65CQgPEiUByd09RjPMv5zG88lDKeSglSlWw==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"@a2amesh/runtime":"^0.12.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.12.0-alpha.1_1784749065021_0.8385271489963679","host":"s3://npm-registry-packages-npm-production"}},"0.13.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.13.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.13.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"2dfc5b237ca5b7614f7070eda34e3844e022f265","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.13.0-alpha.1.tgz","fileCount":31,"integrity":"sha512-A+T41x2QMHxpKmtenfxhVZP9UuYFSyDTp3NZThxO4euif4EfBqCwnUruhHiu2YfNr6Y0toLgTQ2VptpsBT6bEw==","signatures":[{"sig":"MEYCIQD2OhkxLbJEbJ35G5FMUDPX9N3V5S80RhUaJeHRexJwqAIhAO5M012lmXCTSz4xVoY+sp1GFb4v11cO829QuELUS9xh","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.13.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":86158},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.13.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.13.0-alpha.1.tgz","_integrity":"sha512-A+T41x2QMHxpKmtenfxhVZP9UuYFSyDTp3NZThxO4euif4EfBqCwnUruhHiu2YfNr6Y0toLgTQ2VptpsBT6bEw==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"@a2amesh/runtime":"^0.13.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.13.0-alpha.1_1784820663174_0.3035342669002148","host":"s3://npm-registry-packages-npm-production"}},"0.14.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.14.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.14.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"d61660245547e9d9bd80fd293e623505db1261ca","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.14.0-alpha.1.tgz","fileCount":31,"integrity":"sha512-WHLhZI1kFEzmIsuKhi9wHa86C+jBCXGIdkCuuRD97Q+N5xxPUr6PW7PXf/JFwHM/6H5/jE7qs/tMFX3mp4gHTg==","signatures":[{"sig":"MEQCIHBNh0pE2e/RjG4D0aKn/JYeDvz1S8OFP84hkhnw+ud6AiBveseaRYii7sVKcOWinBgLaxV4H9xGyJt6NzzOluMH1w==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.14.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":86158},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.14.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.14.0-alpha.1.tgz","_integrity":"sha512-WHLhZI1kFEzmIsuKhi9wHa86C+jBCXGIdkCuuRD97Q+N5xxPUr6PW7PXf/JFwHM/6H5/jE7qs/tMFX3mp4gHTg==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"@a2amesh/runtime":"^0.14.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.14.0-alpha.1_1785117766240_0.48655964312265665","host":"s3://npm-registry-packages-npm-production"}},"0.15.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.15.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.15.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"dist":{"shasum":"a6684f6a541c9ca29b8d76965d12fa7aee35298d","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.15.0-alpha.1.tgz","fileCount":31,"integrity":"sha512-aMUVT5MAOLaPbywkvg+djZ1m/aqB/+gAwHi8d2vL+jNyfyBJ0WAYZKuOjaJTIbFHqgdG1vtVlPqmjUQnrRVgkw==","signatures":[{"sig":"MEYCIQDvznsydWPi+xQQ42jUg7atxs9ofHO101CiQ/xRxoOLDgIhALJTS8JN8F+PZmR0g2f0O5CyDZiGdO3kIIrlx1hfNGHP","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.15.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":86987},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.15.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.15.0-alpha.1.tgz","_integrity":"sha512-aMUVT5MAOLaPbywkvg+djZ1m/aqB/+gAwHi8d2vL+jNyfyBJ0WAYZKuOjaJTIbFHqgdG1vtVlPqmjUQnrRVgkw==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"@a2amesh/runtime":"^0.15.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.15.0-alpha.1_1785297345615_0.6474022946141607","host":"s3://npm-registry-packages-npm-production"}},"0.16.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.16.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.16.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"bin":{"a2amesh-mcp":"dist/server/cli.js"},"dist":{"shasum":"336c4171d2d57e730d7d0a28047a8f898ae73a8d","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.16.0-alpha.1.tgz","fileCount":67,"integrity":"sha512-ldZD7o0QDsjWXF7vKp5XOCHDu8tE3WIszxQLbJZhRVH01YM4SgyNKJGorRfjIzdCKOjAMoccPvtThEDeKp2QIw==","signatures":[{"sig":"MEUCIQCiaX/ZnHqZG9G22EJMEnyTB9NKT2Cfm1/80ggWNlK6qwIgIHFgHgvbC3k9Rt2YgphgfRkggt/allj1QC/wmRaa/Og=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.16.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":170350},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.16.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"},"./server":{"types":"./dist/server/index.d.ts","import":"./dist/server/index.js","default":"./dist/server/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.16.0-alpha.1.tgz","_integrity":"sha512-ldZD7o0QDsjWXF7vKp5XOCHDu8tE3WIszxQLbJZhRVH01YM4SgyNKJGorRfjIzdCKOjAMoccPvtThEDeKp2QIw==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"zod":"^4.4.3","@a2amesh/runtime":"^0.16.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.16.0-alpha.1_1785550651575_0.7739059542141249","host":"s3://npm-registry-packages-npm-production"}},"0.16.1-alpha.1":{"name":"@a2amesh/mcp","version":"0.16.1-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.16.1-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"bin":{"a2amesh-mcp":"dist/server/cli.js"},"dist":{"shasum":"db64127d250c762ef3445c0782578de31bc108ca","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.16.1-alpha.1.tgz","fileCount":67,"integrity":"sha512-kKR80yq8lb+eJN8qx0OH52Z4iKKd71hL0k4ykC7dajIvfXBA/+A66xFDw5n1yYbHnL47Z0bzCsr281dyHtSX6g==","signatures":[{"sig":"MEUCIQCN9vWDnr2/CbjKL2x1cp7dQyUrnQ3PGwtA3kmM+hnFjgIgMGU00XayVCF7GnqC0cuaNhiBeX5b6frVByR4C2SDcBU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.16.1-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":170840},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.16.1-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"},"./server":{"types":"./dist/server/index.d.ts","import":"./dist/server/index.js","default":"./dist/server/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.16.1-alpha.1.tgz","_integrity":"sha512-kKR80yq8lb+eJN8qx0OH52Z4iKKd71hL0k4ykC7dajIvfXBA/+A66xFDw5n1yYbHnL47Z0bzCsr281dyHtSX6g==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"zod":"^4.4.3","@a2amesh/runtime":"^0.16.1-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.16.1-alpha.1_1785556378391_0.6918911202640128","host":"s3://npm-registry-packages-npm-production"}},"0.17.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.17.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.17.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"bin":{"a2amesh-mcp":"dist/server/cli.js"},"dist":{"shasum":"2bb23016d9d77d4539483a4fe750a7a9cb3f537e","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.17.0-alpha.1.tgz","fileCount":67,"integrity":"sha512-MlON+Afr/Lu8ZEu8Ih0PnNm6eT7isJgP9CbMfiFo9HoC5B5tg9DgkshmDcwBOhwSB5i0p83PHyCQpSumPFBL5g==","signatures":[{"sig":"MEUCICQKyb4pUKn4P+bI/exax7h9gVfFF18qLwJ9EhvRkh5AAiEAy5F4TIBb6Pl2/8dur6Asy5dNYQwj9CkepuRa43gXHcM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.17.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":170840},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.17.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"},"./server":{"types":"./dist/server/index.d.ts","import":"./dist/server/index.js","default":"./dist/server/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.17.0-alpha.1.tgz","_integrity":"sha512-MlON+Afr/Lu8ZEu8Ih0PnNm6eT7isJgP9CbMfiFo9HoC5B5tg9DgkshmDcwBOhwSB5i0p83PHyCQpSumPFBL5g==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"zod":"^4.4.3","@a2amesh/runtime":"^0.17.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.17.0-alpha.1_1785623817023_0.11909340880371144","host":"s3://npm-registry-packages-npm-production"}},"0.18.0-alpha.1":{"name":"@a2amesh/mcp","version":"0.18.0-alpha.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.18.0-alpha.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"bin":{"a2amesh-mcp":"dist/server/cli.js"},"dist":{"shasum":"be5bfee33387844327e0f8624942a2d72443cd45","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.18.0-alpha.1.tgz","fileCount":67,"integrity":"sha512-7TxL9pSMRMcufpWoyyPuYF9sBHo/YjzcoAvHKB/vWY9zpQihOCfkro2EOprtM1KElysz65DQoB7pOKYyMW99Cw==","signatures":[{"sig":"MEUCIBMk5JQCwr0+7Gtpcant96wRPeP2YQxDGi/6OSPfgEVEAiEAud84a5qf3ba9+RgpQrIARlahStJehEhcLr8jjNxfG50=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.18.0-alpha.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":170840},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.18.0-alpha.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"},"./server":{"types":"./dist/server/index.d.ts","import":"./dist/server/index.js","default":"./dist/server/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.18.0-alpha.1.tgz","_integrity":"sha512-7TxL9pSMRMcufpWoyyPuYF9sBHo/YjzcoAvHKB/vWY9zpQihOCfkro2EOprtM1KElysz65DQoB7pOKYyMW99Cw==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"zod":"^4.4.3","@a2amesh/runtime":"^0.18.0-alpha.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.18.0-alpha.1_1785662791057_0.33923763376289484","host":"s3://npm-registry-packages-npm-production"}},"0.18.1":{"name":"@a2amesh/mcp","version":"0.18.1","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","_id":"@a2amesh/mcp@0.18.1","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"homepage":"https://oaslananka.github.io/a2amesh/","bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"bin":{"a2amesh-mcp":"bin/a2amesh-mcp.js"},"dist":{"shasum":"5a8951047bbbfdb0ca59ebc8cd5a9158a27e990e","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.18.1.tgz","fileCount":68,"integrity":"sha512-qtXjdCTH7wQ2nL0KbwRsg1oVQENwbMUVbXMF5AdV5GYyb4RTnIw10AWaIORNAoBtpNqsGA9WE07QYfEhBgnGyA==","signatures":[{"sig":"MEUCIQCYuCsax3FeZ2UQKLB/3mJ+td4tylo71/m1K7791EdqWQIgXJy6pFZ5oEWeGhfw0CDiw+2keoinWK8GizscYpsMdZA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.18.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":171286},"main":"./dist/index.js","type":"module","_from":"file:.artifacts/npm/a2amesh-mcp-0.18.1.tgz","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=22.22.1 <25"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"},"./server":{"types":"./dist/server/index.d.ts","import":"./dist/server/index.js","default":"./dist/server/index.js"}},"scripts":{"test":"vitest run","build":"node ../../scripts/build-tsc-package.mjs","typecheck":"tsc -b"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.18.1.tgz","_integrity":"sha512-qtXjdCTH7wQ2nL0KbwRsg1oVQENwbMUVbXMF5AdV5GYyb4RTnIw10AWaIORNAoBtpNqsGA9WE07QYfEhBgnGyA==","repository":{"url":"git+https://github.com/oaslananka/a2amesh.git","type":"git","directory":"packages/mcp"},"_npmVersion":"11.13.0","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","directories":{},"sideEffects":false,"_nodeVersion":"24.16.0","dependencies":{"zod":"^4.4.3","@a2amesh/runtime":"^0.18.1","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"devDependencies":{"vitest":"4.1.9","typescript":"6.0.3"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.18.1_1786373899316_0.16828866367955286","host":"s3://npm-registry-packages-npm-production"}},"0.18.2":{"name":"@a2amesh/mcp","version":"0.18.2","description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"author":{"name":"oaslananka"},"license":"Apache-2.0","homepage":"https://oaslananka.github.io/a2amesh/","repository":{"type":"git","url":"git+https://github.com/oaslananka/a2amesh.git","directory":"packages/mcp"},"type":"module","main":"./dist/index.js","module":"./dist/index.js","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"},"./server":{"types":"./dist/server/index.d.ts","import":"./dist/server/index.js","default":"./dist/server/index.js"}},"dependencies":{"@modelcontextprotocol/sdk":"^1.29.0","zod":"^4.4.3","@a2amesh/runtime":"^0.18.2"},"devDependencies":{"typescript":"6.0.3","vitest":"4.1.9"},"bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"publishConfig":{"access":"public","provenance":true},"sideEffects":false,"engines":{"node":">=22.22.1 <25"},"bin":{"a2amesh-mcp":"bin/a2amesh-mcp.js"},"scripts":{"build":"node ../../scripts/build-tsc-package.mjs","test":"vitest run","typecheck":"tsc -b"},"_id":"@a2amesh/mcp@0.18.2","_integrity":"sha512-afyasqubjDQ6sjVufXW5T2CJT/gu1kyXDOcQTOqWluXFFVp55oC8y3c+aI91ZEJxCb23D7cOqKJ0EoCj3HSYdg==","_resolved":"/home/runner/work/a2amesh/a2amesh/.artifacts/npm/a2amesh-mcp-0.18.2.tgz","_from":"file:.artifacts/npm/a2amesh-mcp-0.18.2.tgz","_nodeVersion":"24.16.0","_npmVersion":"11.13.0","dist":{"integrity":"sha512-afyasqubjDQ6sjVufXW5T2CJT/gu1kyXDOcQTOqWluXFFVp55oC8y3c+aI91ZEJxCb23D7cOqKJ0EoCj3HSYdg==","shasum":"39e3e5a72f52c7761f888c53829a4cb59b06e4be","tarball":"https://registry.npmjs.org/@a2amesh/mcp/-/mcp-0.18.2.tgz","fileCount":68,"unpackedSize":171283,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@a2amesh%2fmcp@0.18.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQDKlRxgINt8zuAtGHeTzJjhNibZr7+sIA7GIBmgaGqf/gIhALSzFCkBKASrCYGk9X6nPRAnf72JD+6iL2jweCbRY4ek"}]},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a14def0a-1e46-460b-b9e2-fc092a3a53da"}},"directories":{},"maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/mcp_0.18.2_1786439846704_0.1029590138811236"},"_hasShrinkwrap":false}},"time":{"created":"2026-06-28T13:34:25.436Z","modified":"2026-08-11T09:17:27.161Z","0.1.0-alpha.0":"2026-06-28T13:34:25.733Z","0.1.0-alpha.1":"2026-06-28T14:06:10.936Z","0.2.0-alpha.0":"2026-06-29T00:29:01.879Z","0.2.0-alpha.1":"2026-06-30T15:09:38.205Z","0.5.0-alpha.1":"2026-07-04T09:25:50.228Z","0.12.0-alpha.1":"2026-07-22T19:37:45.192Z","0.13.0-alpha.1":"2026-07-23T15:31:03.392Z","0.14.0-alpha.1":"2026-07-27T02:02:46.375Z","0.15.0-alpha.1":"2026-07-29T03:55:45.757Z","0.16.0-alpha.1":"2026-08-01T02:17:31.770Z","0.16.1-alpha.1":"2026-08-01T03:52:58.517Z","0.17.0-alpha.1":"2026-08-01T22:36:57.166Z","0.18.0-alpha.1":"2026-08-02T09:26:31.235Z","0.18.1":"2026-08-10T14:58:19.470Z","0.18.2":"2026-08-11T09:17:26.856Z"},"bugs":{"url":"https://github.com/oaslananka/a2amesh/issues"},"author":{"name":"oaslananka"},"license":"Apache-2.0","homepage":"https://oaslananka.github.io/a2amesh/","keywords":["a2a","a2amesh","a2a-mesh","agent-to-agent","agents","mcp","security","audit","typescript"],"repository":{"type":"git","url":"git+https://github.com/oaslananka/a2amesh.git","directory":"packages/mcp"},"description":"Secure, auditable, approval-aware, risk-classified, and policy-bound MCP execution bridge for A2A Mesh.","maintainers":[{"name":"oaslananka","email":"oaslananka@gmail.com"}],"readme":"# @a2amesh/mcp\n\nMapping helpers for supported Agent2Agent and MCP tool shapes.\n\nSee [Compatibility](../../docs/compatibility.md) for supported Node.js, protocol, transport, package, and peer ranges.\n\n## Boundary helpers\n\nThe MCP package keeps endpoint targeting and tool approval as separate decisions:\n\n- `validateMcpAudience` checks that a caller context targets the selected MCP resource.\n- `decideMcpRuntimeAuthority` checks whether the selected MCP tool is allowed, review-only, or denied by policy.\n- `createMcpSafeAuditEvent` records request id, context hash, selected MCP server/tool, decision, reason code, and evidence pointers.\n\nA caller context accepted for an MCP resource does not automatically approve every tool on that resource. Multi-audience contexts require an explicit selected MCP resource.\n\n## Installation\n\nThe supported stable channel is `latest`:\n\n```bash\nnpm install @a2amesh/mcp\n```\n\nThe installed binary can print help without runtime credentials:\n\n```bash\na2amesh-mcp --help\n```\n\nRepository contributors should run `corepack pnpm run build:clean` before executing the workspace\nlauncher directly from a source checkout.\n\n## Standalone server\n\nThe package publishes a local MCP server command in addition to the library API:\n\n```bash\nnpx -y -p @a2amesh/mcp a2amesh-mcp --transport stdio\n```\n\nThe command reads only `A2AMESH_MCP_*` environment variables. The supported client\nexamples are `.mcp.json`, `.codex/config.example.toml`,\n`.vscode/mcp.example.json`, and `opencode.example.jsonc` in the repository root.\nThey expose `a2a_discover` and `a2a_get_task` by default. Enabling\n`a2a_send_message` also requires the send scope and a fresh, explicitly approved\n`A2AMESH_MCP_SEND_APPROVAL_ID` for the session.\n\nAgent credentials are referenced by `tokenEnv` inside `A2AMESH_MCP_AGENTS_JSON`;\nconcrete values stay in the process secret source. Localhost and private-network\ndestinations remain disabled unless the operator deliberately enables the matching\noutbound-policy variables.\n\nThe reusable server APIs are exported from `@a2amesh/mcp/server`.\n\n## Tool guardrails\n\nThe MCP package also provides execution guardrail helpers:\n\n- `classifyMcpToolManifestRisk` scores tool, skill, and metadata text for policy, schema, side-effect, and metadata-risk findings.\n- `decideMcpToolGuardrail` returns `allow`, `review`, or `block` with a reason code and evidence pointers.\n- `createMcpDryRunPlan` builds a non-executing plan with input hashes and type-only previews.\n- `createMcpGuardrailAuditEvent` emits a compact event for audit hooks without raw tool input values.\n\nUse the guardrail decision before executing MCP tools. Tools that require human review or dry-run evidence should be surfaced to the caller or operator instead of executed directly.\n\n## Secured A2A invocation\n\n`handleA2AMcpToolCall` fails closed unless `security` is supplied. The execution\nboundary validates the caller audience and principal, required scopes, tenant\nidentity, tool policy, guardrail result, and explicit consent evidence before any\nnetwork access. The outbound policy blocks localhost, private addresses, unsafe\nschemes, and redirects unless the operator deliberately permits the target.\n\nAudit hooks receive authorization and execution events containing hashes and\ntype-safe evidence only. Tokens, subjects, raw prompts, arguments, and provider\nerrors are not included. Local development endpoints therefore require an explicit\n`outboundPolicy: { allowLocalhost: true }`; do not use that setting for untrusted\nagent URLs.\n\nThe MCP bridge follows redirects only through the same validating policy used for the\ninitial target. DNS results are pinned to connection setup, response and SSE bodies are\nbounded, and the operation deadline remains active through body consumption. JSON-RPC POST\nrequests are not retried without an explicit idempotency key.\n\n## MCP 2026-07-28 compatibility evidence\n\nThe published package remains on `@modelcontextprotocol/sdk ^1.29.0` and does not\nclaim support for MCP `2026-07-28`. A versioned matrix and golden fixtures run in\nthe required conformance suite, while an isolated exact split-SDK `2.0.0` harness\nchecks `server/discover`, stateless tool discovery and invocation, modern headers,\ncache hints, and a synthetic authentication boundary.\n\nRun the repository-owned contract and the isolated SDK probe with:\n\n```bash\npnpm run test:mcp-next\npnpm run mcp-next:probe\n```\n\nThe SDK probe is pre-adoption evidence only. MCP tasks and MCP Apps remain separate\noptional evaluations, and the existing bridge authorization and outbound policy\ncontinue to be authoritative. See\n[ADR-0015](../../docs/architecture/adr/0015-mcp-2026-protocol-adoption.md).\n","readmeFilename":"README.md"}