← yich.us

API Safety MCP

The same in-memory checkers the Node MCP runs (api_compile, api_access_check, api_integrity_check, api_verify, and the rest of Zafu/Mcp::catalog) compiled to Scala.js. Sources never touch the filesystem. Add ?webmcp=1 to expose them on navigator.modelContext for a local agent relay.

Try a source

Owner-scoped notes. Change the db_read key to a literal to watch api_access_check flip to violated.

package Demo/Service/NotesApi from Bosatsu/Prog import IO from Zafu/Access import Principal, AccessRule, AccessSpec, OwnerScoped from Yichus/Data import Db, Table, table, db_read from Yichus/Service import handler, route, service_def, ReadPerm export (notes_api, access_rules, Note()) exposes (Zafu/Access, Yichus/Service) struct Note(title: String) access_rules = AccessSpec([ AccessRule("notes", OwnerScoped), ]) def notes_table(db: Db) -> Table[List[Note]]: table(db, "notes") def list_notes(db: Db, p: Principal) -> IO[List[Note]]: Principal(uid, _) = p db_read(notes_table(db), uid) notes_api = service_def( "notes", [route("/notes", handler("list_notes", list_notes), [ReadPerm("notes")])] )

Engine still loading.