Merge pull request #25 from stainless-api/release-please--branches--main--changes--next--components--sdk

release: 0.1.0-alpha.23

Author: meorphis

packages/mcp-server/.dockerignore .dockerignorepackages/mcp-server/.dockerignore renamed to .dockerignore

@@ -5,8 +5,6 @@ node_modules/
 # Build outputs
 dist/
 **/dist/
-build/
-**/build/
 
 # Git
 .git/
@@ -28,11 +26,6 @@ build/
 .DS_Store
 Thumbs.db
 
-# Documentation
-*.md
-docs/
-LICENSE
-
 # Testing
 test/
 tests/

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: '10.24.0'
+          version: '10.27.0'
 
       - name: Bootstrap
         run: ./scripts/bootstrap
@@ -56,7 +56,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: '10.24.0'
+          version: '10.27.0'
 
       - name: Bootstrap
         run: ./scripts/bootstrap
@@ -103,7 +103,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: '10.24.0'
+          version: '10.27.0'
 
       - name: Bootstrap
         run: ./scripts/bootstrap

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.1.0-alpha.22"
+  ".": "0.1.0-alpha.23"
 }

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 21
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/stainless%2Fstainless-v0-2726a5c9d1b5921ca1eae4d3074e01d53b6a368df847a21722f30b34de324794.yml
-openapi_spec_hash: bdbc8f5388f88acaeff72e8f79e57e46
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/stainless%2Fstainless-v0-acfed4185515b0f9bfdb9b080df219b3bea1069daeb722d589564aa7d8eb32e6.yml
+openapi_spec_hash: 0fb1197c07e1f354f33d96c384e3ca3b
 config_hash: 3e46d270da9f524c0dee35db0bcf76df

CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 0.1.0-alpha.23 (2026-02-17)
+
+Full Changelog: [v0.1.0-alpha.22...v0.1.0-alpha.23](https://github.com/stainless-api/stainless-api-typescript/compare/v0.1.0-alpha.22...v0.1.0-alpha.23)
+
+### Features
+
+* record tree oid and return it in the builds api ([f75de39](https://github.com/stainless-api/stainless-api-typescript/commit/f75de398bde828e6007b775b7a5e4fbf8da38541))
+
+
+### Bug Fixes
+
+* **client:** avoid removing abort listener too early ([e657e39](https://github.com/stainless-api/stainless-api-typescript/commit/e657e394f7680df026868218af7cf08c425034ad))
+
+
+### Chores
+
+* **internal:** add health check to MCP server when running in HTTP mode ([01547f9](https://github.com/stainless-api/stainless-api-typescript/commit/01547f9e108bbe5339665f757852267d9baf5c41))
+* **internal:** allow basic filtering of methods allowed for MCP code mode ([84bc770](https://github.com/stainless-api/stainless-api-typescript/commit/84bc7701d32df4eac5d471c96f52074cc2557044))
+* **internal:** always generate MCP server dockerfiles and upgrade associated dependencies ([c87ed99](https://github.com/stainless-api/stainless-api-typescript/commit/c87ed994b929201c9b25bb22ada52bbaa3ee34d9))
+* **internal:** avoid type checking errors with ts-reset ([4a453b6](https://github.com/stainless-api/stainless-api-typescript/commit/4a453b6ebd23ec3eb05bbb5d4328e1cca1e4a928))
+* **internal:** codegen related update ([067f371](https://github.com/stainless-api/stainless-api-typescript/commit/067f371829d4a8fa499f6e6ac6a7abc3d3671cd4))
+* **internal:** codegen related update ([59776d5](https://github.com/stainless-api/stainless-api-typescript/commit/59776d54e59bd708082e8e634db84a4008d45560))
+* **internal:** fix pagination internals not accepting option promises ([89813a0](https://github.com/stainless-api/stainless-api-typescript/commit/89813a0632566f24d6589400d9e0a7b8c9dafa78))
+* **internal:** upgrade pnpm ([adc84e0](https://github.com/stainless-api/stainless-api-typescript/commit/adc84e0f1f32dfc793d79d51d943284c05bac350))
+
 ## 0.1.0-alpha.22 (2026-02-05)
 
 Full Changelog: [v0.1.0-alpha.21...v0.1.0-alpha.22](https://github.com/stainless-api/stainless-api-typescript/compare/v0.1.0-alpha.21...v0.1.0-alpha.22)

package.json

@@ -1,14 +1,14 @@
 {
   "name": "@stainless-api/sdk",
-  "version": "0.1.0-alpha.22",
+  "version": "0.1.0-alpha.23",
   "description": "The official TypeScript library for the Stainless API",
   "author": "Stainless <support@stainless.com>",
   "types": "dist/index.d.ts",
   "main": "dist/index.js",
   "type": "commonjs",
   "repository": "github:stainless-api/stainless-api-typescript",
   "license": "Apache-2.0",
-  "packageManager": "pnpm@10.24.0",
+  "packageManager": "pnpm@10.27.0",
   "files": [
     "**/*"
   ],

packages/mcp-server/Dockerfile

@@ -22,10 +22,11 @@
 # enables interactive mode, allowing the container to communicate over stdin/stdout.
 
 # Build stage
-FROM node:20-alpine AS builder
+FROM node:24-alpine AS builder
 
 # Enable corepack to use pnpm
 RUN corepack enable && corepack prepare pnpm@latest --activate
+
 # Install bash for build script
 RUN apk add --no-cache bash openssl
 
@@ -35,25 +36,24 @@ WORKDIR /build
 # Copy entire repository
 COPY . .
 
+# Set CI environment variable so pnpm install runs without prompts
+ENV CI=true
+
 # Install all dependencies and build everything
 RUN pnpm install --frozen-lockfile && \
     pnpm build
 
 # Production stage
-FROM node:20-alpine
+FROM node:24-alpine
 
 # Add non-root user
 RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
 
 # Set working directory
 WORKDIR /app
 
-# Copy the built mcp-server preserving directory structure
-COPY --from=builder /build/packages/mcp-server/dist ./packages/mcp-server/dist
-COPY --from=builder /build/packages/mcp-server/node_modules ./packages/mcp-server/node_modules
-
-# Copy node_modules from root (pnpm hoists dependencies here)
-COPY --from=builder /build/node_modules ./node_modules
+# Copy the build results, preserving directory structure
+COPY --from=builder /build .
 
 # Copy the built @stainless-api/sdk into node_modules
 COPY --from=builder /build/dist ./node_modules/@stainless-api/sdk

packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stainless-api/sdk-mcp",
-  "version": "0.1.0-alpha.22",
+  "version": "0.1.0-alpha.23",
   "description": "The official MCP Server for the Stainless API",
   "author": "Stainless <support@stainless.com>",
   "types": "dist/index.d.ts",
@@ -13,7 +13,7 @@
   },
   "homepage": "https://github.com/stainless-api/stainless-api-typescript/tree/main/packages/mcp-server#readme",
   "license": "Apache-2.0",
-  "packageManager": "pnpm@10.24.0",
+  "packageManager": "pnpm@10.27.0",
   "private": false,
   "publishConfig": {
     "access": "public"

packages/mcp-server/src/headers.ts packages/mcp-server/src/auth.tspackages/mcp-server/src/headers.ts renamed to packages/mcp-server/src/auth.ts

@@ -2,8 +2,9 @@
 
 import { McpTool, Metadata, ToolCallResult, asErrorResult, asTextContentResult } from './types';
 import { Tool } from '@modelcontextprotocol/sdk/types.js';
-import { readEnv } from './server';
+import { readEnv } from './util';
 import { WorkerInput, WorkerOutput } from './code-tool-types';
+import { SdkMethod } from './methods';
 import { Stainless } from '@stainless-api/sdk';
 
 const prompt = `Runs JavaScript code to interact with the Stainless API.
@@ -35,7 +36,7 @@ Variables will not persist between calls, so make sure to return or log any data
  *
  * @param endpoints - The endpoints to include in the list.
  */
-export function codeTool(): McpTool {
+export function codeTool(params: { blockedMethods: SdkMethod[] | undefined }): McpTool {
   const metadata: Metadata = { resource: 'all', operation: 'write', tags: [] };
   const tool: Tool = {
     name: 'execute',
@@ -59,6 +60,24 @@ export function codeTool(): McpTool {
     const code = args.code as string;
     const intent = args.intent as string | undefined;
 
+    // Do very basic blocking of code that includes forbidden method names.
+    //
+    // WARNING: This is not secure against obfuscation and other evasion methods. If
+    // stronger security blocks are required, then these should be enforced in the downstream
+    // API (e.g., by having users call the MCP server with API keys with limited permissions).
+    if (params.blockedMethods) {
+      const blockedMatches = params.blockedMethods.filter((method) =>
+        code.includes(method.fullyQualifiedName),
+      );
+      if (blockedMatches.length > 0) {
+        return asErrorResult(
+          `The following methods have been blocked by the MCP server and cannot be used in code execution: ${blockedMatches
+            .map((m) => m.fullyQualifiedName)
+            .join(', ')}`,
+        );
+      }
+    }
+
     // this is not required, but passing a Stainless API key for the matching project_name
     // will allow you to run code-mode queries against non-published versions of your SDK.
     const stainlessAPIKey = readEnv('STAINLESS_API_KEY');