Action whitelist — glob patterns matched with matchesPattern
('cart*', exact names, or '*'). Only matching schema actions are
listed by tools/list and callable via tools/call.
Pass this. Omitting it exposes EVERY schema action — writes included —
to an LLM-driven caller, and dev-warns to say so. An MCP client is the one
caller class this library treats as untrusted by construction, and least
privilege applies: expose reads broadly, writes narrowly. ['*'] opts
into everything explicitly and silences the warning, which is the point:
demo convenience should be a deliberate keystroke, not a default.
OptionalserverName
serverName?:string
Server name reported by initialize. Default: 'vapor-chamber'.
OptionalserverVersion
serverVersion?:string
Server version reported by initialize. Default: the package version.
Action whitelist — glob patterns matched with matchesPattern (
'cart*', exact names, or'*'). Only matching schema actions are listed bytools/listand callable viatools/call.Pass this. Omitting it exposes EVERY schema action — writes included — to an LLM-driven caller, and dev-warns to say so. An MCP client is the one caller class this library treats as untrusted by construction, and least privilege applies: expose reads broadly, writes narrowly.
['*']opts into everything explicitly and silences the warning, which is the point: demo convenience should be a deliberate keystroke, not a default.