marchon/verae-mcp-timestamping-server-go
Watch
1
0
Fork
You've already forked verae-mcp-timestamping-server-go
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
20 commits 3 branches 0 tags 301 KiB
Commit graph verae-mcp-timestamping-serv.../internal
Author SHA1 Message Date
George Lambert
10c8634a53 D write-only lockdown (DEC-654): public HTTP server needs the caller's own Verae key/OAuth bearer for stamp (any scope), signup, create_user, session; login refused; no host-login fallback for writes; anonymous verify/hash_report kept, rate limited 30/min per client (burst 15), 600/min overall 2026-10-10 13:06:57 -04:00
George Lambert
00f5d18364 fix: disable localhost Host protection behind Caddy 
Public MCP requests arrive with Host mcp.verae.ai while the process binds
127.0.0.1; the go-sdk default rejected those with 403.
 2026-09-29 12:18:06 -04:00
George Lambert
e04fe6e2c4 feat: embedded NATS with VeraeTime handlers and stdio MCP 
Start in-process nats-server on VERAE_NATS_LISTEN (default 127.0.0.1:4223;
empty disables). Queue-subscribe verae.ts.request|verify|hash.report with
ledger/veraetime routing and authctx.Resolve from authorization/access_token.
Publish verae.ts.completed on core NATS only (no JetStream). Wire embed into
main alongside Streamable HTTP; stdio MCP via go-sdk StdioTransport.
 2026-09-29 12:11:47 -04:00
George Lambert
d379931bd1 feat: MCP Streamable HTTP server with full tool set 
Wire go-sdk Streamable HTTP at /mcp with stamp, verify, hash_report,
signup, login, session, create_user. Route global/CID to VeraeTime and
local|shared to FileLedger; resolve Authorization bearer via authctx.
Flags/env for transport, host, port, require-bearer, URLs, ledger path.
 2026-09-29 12:07:44 -04:00
George Lambert
793746fcd0 feat: FileLedger for local and shared scopes 
JSON file ledger with Stamp/Verify/HashReport, idempotent hash+org+scope,
mutex safety, mode 0600 / parent 0700.
 2026-09-29 12:01:57 -04:00
George Lambert
348ccd0bf2 feat: VeraeTime client, auth.properties, and host-token keeper 
HTTPS GlobalClient (Stamp/Verify/HashReport/Signup/Login/Session/CreateUser)
with Fake RoundTripper tests; auth.properties read/write; Keeper refresh ~60s
before expiry or VERAE_GLOBAL_TOKEN; authctx.Resolve for require-bearer vs host fallback.
 2026-09-29 11:57:40 -04:00