🛠️ soigia-mcp
MCP (Model Context Protocol) server expose 120+ tools của soigia SDK cho
mọi client hỗ trợ MCP. Bản này tập trung bảo mật: HTTP transport
(sse / streamable-http) giờ bắt buộc token (--require-token hoặc
env SOIGIA_MCP_TOKEN) — thiếu token server từ chối chạy ngay (fail-closed);
mọi request không hợp lệ trả 401 (so sánh constant-time chống timing attack).
Đồng thời HTTP transport block toàn bộ tool mutates (run-python,
filesystem, edit-file, execute-sql, process…) — client HTTP chỉ đọc, không
thay đổi gì trên máy. stdio giữ nguyên hành vi cũ (client tự spawn process
nên đã có quyền tương đương shell). Kèm fix: optional param gửi null từ MCP
client không còn làm tool vỡ int(None).
Các bản release
- 0.1.1 — 2026-08-09: Bảo mật HTTP — bắt buộc Bearer token cho
sse/streamable-http(fail-closed, 401 + constant-time compare), block tool mutates khi chạy qua HTTP (chỉ đọc), fix optional paramnull. - 0.1.0 — 2026-08-09: Release đầu tiên — expose 120+ tools của soigia qua
MCP (manifest-driven discovery, lazy import), 3 transport
(
stdio/sse/streamable-http), CLIsoigia-mcp+ factorycreate_app().
📄 License
1 maintainer
Metadata
1 maintainer
Release files for soigia-mcp 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| soigia_mcp-0.1.1.tar.gz | 14.0 kB | Without provenance | Details for soigia_mcp-0.1.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| soigia_mcp-0.1.1-py3-none-any.whl | Python 3 | none | any | Details for soigia_mcp-0.1.1-py3-none-any.whl |
Total release size: 23.0 kB
Release files / soigia_mcp-0.1.1.tar.gz
| Download URL | soigia_mcp-0.1.1.tar.gz |
|---|---|
| Size | 14.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
0368bdb3253870135b65bf7564d7a4c1dd30975843289147dbae73ed932be4be
|
|
BLAKE2b-256 checksum How to use checksums |
98e7ec924cd4da7b348234da14a7c07f9ae6b2395db3fae1227c742eab4b94ea
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.4
|
Release files / soigia_mcp-0.1.1-py3-none-any.whl
| Download URL | soigia_mcp-0.1.1-py3-none-any.whl |
|---|---|
| Size | 9.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
5f5ae732161a47c23cbed9d6c0487f35cff56df3686f1d81016cbff7cd546b37
|
|
BLAKE2b-256 checksum How to use checksums |
60c86bdb39409019d70e30a6cb8456213a85cc226438f7b50e062ab1150e8ae9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.4
|
Security for soigia-mcp 0.1.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
