marchon/verae-mcp-timestamping-server-go
Watch
1
0
Fork
You've already forked verae-mcp-timestamping-server-go
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
24 commits 3 branches 0 tags 301 KiB
Commit graph verae-mcp-timestamping-serv.../internal/server
Author SHA1 Message Date
George Lambert
369f9210bd fix(auth): clear public write errors and Grok client path
Some checks failed
test-and-deploy / test (push) Failing after 12m11s
Details
test-and-deploy / deploy-138 (push) Has been cancelled
Details 
Public DEC-654 still requires a caller bearer; anonymous session now
returns that guidance as a tool error instead of silent valid:false.
Error text names JWT and API key, Grok bearer_token_file, and local
stdio. BearerFromRequest also accepts X-Api-Key / X-Verae-Key.
Document Grok stdio vs public URL; add scripts/sync-mcp-bearer.sh.
 2026-10-12 14:09:22 -04:00
Grok Bot
ec899f5e11 Public server: anonymous verify/hash_report never rate limited (DEC-660); stamp_batch tool charged per item with the caller's key (DEC-659); 402 balance message passed through (DEC-658) 2026-10-10 15:26:37 -04:00
George Lambert
10c8634a53 D write-only lockdown (DEC-654): public HTTP server needs the caller's own Verae key/OAuth bearer for stamp (any scope), signup, create_user, session; login refused; no host-login fallback for writes; anonymous verify/hash_report kept, rate limited 30/min per client (burst 15), 600/min overall 2026-10-10 13:06:57 -04:00
George Lambert
00f5d18364 fix: disable localhost Host protection behind Caddy 
Public MCP requests arrive with Host mcp.verae.ai while the process binds
127.0.0.1; the go-sdk default rejected those with 403.
 2026-09-29 12:18:06 -04:00
George Lambert
e04fe6e2c4 feat: embedded NATS with VeraeTime handlers and stdio MCP 
Start in-process nats-server on VERAE_NATS_LISTEN (default 127.0.0.1:4223;
empty disables). Queue-subscribe verae.ts.request|verify|hash.report with
ledger/veraetime routing and authctx.Resolve from authorization/access_token.
Publish verae.ts.completed on core NATS only (no JetStream). Wire embed into
main alongside Streamable HTTP; stdio MCP via go-sdk StdioTransport.
 2026-09-29 12:11:47 -04:00
George Lambert
d379931bd1 feat: MCP Streamable HTTP server with full tool set 
Wire go-sdk Streamable HTTP at /mcp with stamp, verify, hash_report,
signup, login, session, create_user. Route global/CID to VeraeTime and
local|shared to FileLedger; resolve Authorization bearer via authctx.
Flags/env for transport, host, port, require-bearer, URLs, ledger path.
 2026-09-29 12:07:44 -04:00