Merge pull request #58 from isaacus-dev/release-please--branches--main--changes--next--components--isaacus

release: 0.19.0

Author: umarbutler

.dockerignore

@@ -0,0 +1,59 @@
+# Dependencies
+node_modules/
+**/node_modules/
+
+# Build outputs
+dist/
+**/dist/
+
+# Git
+.git/
+.gitignore
+
+# CI/CD
+.github/
+.gitlab-ci.yml
+.travis.yml
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Testing
+test/
+tests/
+__tests__/
+*.test.js
+*.spec.js
+coverage/
+.nyc_output/
+
+# Logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Environment
+.env
+.env.*
+
+# Temporary files
+*.tmp
+*.temp
+.cache/
+
+# Examples and scripts
+examples/
+bin/
+
+# Other packages (we only need mcp-server)
+packages/*/
+!packages/mcp-server/

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.18.0"
+  ".": "0.19.0"
 }

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 5
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/isaacus%2Fisaacus-fd2419c8cf8666e821f55c4cc5a5402900c443e2db59b3e53cfb46fd5bb52316.yml
-openapi_spec_hash: a92a4436234b019c9c23feb11b1f2f28
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/isaacus%2Fisaacus-46de7b353c33e2b6c139e564caeec9e0462ad714121690f65167a7943e325000.yml
+openapi_spec_hash: 6527287f9709a8741c9cc5b4181d7bb1
 config_hash: 9040e7359f066240ad536041fb2c5185

CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.19.0 (2026-02-11)
+
+Full Changelog: [v0.18.0...v0.19.0](https://github.com/isaacus-dev/isaacus-typescript/compare/v0.18.0...v0.19.0)
+
+### Features
+
+* **api:** add chunking mode to enrichment ([c23e2b1](https://github.com/isaacus-dev/isaacus-typescript/commit/c23e2b1a8c7a68681eb98cabed366899a420478f))
+
+
+### Chores
+
+* **internal:** add health check to MCP server when running in HTTP mode ([26203bf](https://github.com/isaacus-dev/isaacus-typescript/commit/26203bf5e75676b47a2b31665915b395d153ea4c))
+* **internal:** allow basic filtering of methods allowed for MCP code mode ([aca9764](https://github.com/isaacus-dev/isaacus-typescript/commit/aca976487e874fa1d932073ee7d1a9f1ec8117f4))
+* **internal:** always generate MCP server dockerfiles and upgrade associated dependencies ([3805d28](https://github.com/isaacus-dev/isaacus-typescript/commit/3805d28a02392d1024b27e654565094ec5cb90cf))
+
+
+### Documentation
+
+* **api:** update `creation` date type definition ([9eca5b5](https://github.com/isaacus-dev/isaacus-typescript/commit/9eca5b5e307058ac5be6815b7d4d5836fba8a492))
+
 ## 0.18.0 (2026-02-07)
 
 Full Changelog: [v0.17.0...v0.18.0](https://github.com/isaacus-dev/isaacus-typescript/compare/v0.17.0...v0.18.0)

package.json

@@ -1,6 +1,6 @@
 {
   "name": "isaacus",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "The official TypeScript library for the Isaacus API",
   "author": "Isaacus <support@isaacus.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/Dockerfile

@@ -0,0 +1,71 @@
+# Dockerfile for Isaacus MCP Server
+#
+# This Dockerfile builds a Docker image for the MCP Server.
+#
+# To build the image locally:
+#   docker build -f packages/mcp-server/Dockerfile -t isaacus-mcp:local .
+#
+# To run the image:
+#   docker run -i isaacus-mcp:local [OPTIONS]
+#
+# Common options:
+#   --tool=<name>              Include specific tools
+#   --resource=<name>          Include tools for specific resources
+#   --operation=read|write     Filter by operation type
+#   --client=<type>            Set client compatibility (e.g., claude, cursor)
+#   --transport=<type>         Set transport type (stdio or http)
+#
+# For a full list of options:
+#   docker run -i isaacus-mcp:local --help
+#
+# Note: The MCP server uses stdio transport by default. Docker's -i flag
+# enables interactive mode, allowing the container to communicate over stdin/stdout.
+
+# Build stage
+FROM node:24-alpine AS builder
+
+# Install bash for build script
+RUN apk add --no-cache bash openssl
+
+# Set working directory
+WORKDIR /build
+
+# Copy entire repository
+COPY . .
+
+# Install all dependencies and build everything
+RUN yarn install --frozen-lockfile && \
+    yarn build
+
+# Production stage
+FROM node:24-alpine
+
+# Add non-root user
+RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
+
+# Set working directory
+WORKDIR /app
+
+# Copy the built mcp-server dist directory
+COPY --from=builder /build/packages/mcp-server/dist ./
+
+# Copy node_modules from mcp-server (includes all production deps)
+COPY --from=builder /build/packages/mcp-server/node_modules ./node_modules
+
+# Copy the built isaacus into node_modules
+COPY --from=builder /build/dist ./node_modules/isaacus
+
+# Change ownership to nodejs user
+RUN chown -R nodejs:nodejs /app
+
+# Switch to non-root user
+USER nodejs
+
+# The MCP server uses stdio transport by default
+# No exposed ports needed for stdio communication
+
+# Set the entrypoint to the MCP server
+ENTRYPOINT ["node", "index.js"]
+
+# Allow passing arguments to the MCP server
+CMD []

packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "isaacus-mcp",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "The official MCP Server for the Isaacus API",
   "author": "Isaacus <support@isaacus.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/src/code-tool.ts

@@ -4,6 +4,7 @@ import { McpTool, Metadata, ToolCallResult, asErrorResult, asTextContentResult }
 import { Tool } from '@modelcontextprotocol/sdk/types.js';
 import { readEnv, requireValue } from './server';
 import { WorkerInput, WorkerOutput } from './code-tool-types';
+import { SdkMethod } from './methods';
 import { Isaacus } from 'isaacus';
 
 const prompt = `Runs JavaScript code to interact with the Isaacus API.
@@ -39,7 +40,7 @@ Variables will not persist between calls, so make sure to return or log any data
  *
  * @param endpoints - The endpoints to include in the list.
  */
-export function codeTool(): McpTool {
+export function codeTool(params: { blockedMethods: SdkMethod[] | undefined }): McpTool {
   const metadata: Metadata = { resource: 'all', operation: 'write', tags: [] };
   const tool: Tool = {
     name: 'execute',
@@ -63,6 +64,24 @@ export function codeTool(): McpTool {
     const code = args.code as string;
     const intent = args.intent as string | undefined;
 
+    // Do very basic blocking of code that includes forbidden method names.
+    //
+    // WARNING: This is not secure against obfuscation and other evasion methods. If
+    // stronger security blocks are required, then these should be enforced in the downstream
+    // API (e.g., by having users call the MCP server with API keys with limited permissions).
+    if (params.blockedMethods) {
+      const blockedMatches = params.blockedMethods.filter((method) =>
+        code.includes(method.fullyQualifiedName),
+      );
+      if (blockedMatches.length > 0) {
+        return asErrorResult(
+          `The following methods have been blocked by the MCP server and cannot be used in code execution: ${blockedMatches
+            .map((m) => m.fullyQualifiedName)
+            .join(', ')}`,
+        );
+      }
+    }
+
     // this is not required, but passing a Stainless API key for the matching project_name
     // will allow you to run code-mode queries against non-published versions of your SDK.
     const stainlessAPIKey = readEnv('STAINLESS_API_KEY');

packages/mcp-server/src/http.ts

@@ -11,10 +11,12 @@ import { parseAuthHeaders } from './headers';
 
 const newServer = async ({
   clientOptions,
+  mcpOptions,
   req,
   res,
 }: {
   clientOptions: ClientOptions;
+  mcpOptions: McpOptions;
   req: express.Request;
   res: express.Response;
 }): Promise<McpServer | null> => {
@@ -24,6 +26,7 @@ const newServer = async ({
     const authOptions = parseAuthHeaders(req, false);
     await initMcpServer({
       server: server,
+      mcpOptions: mcpOptions,
       clientOptions: {
         ...clientOptions,
         ...authOptions,
@@ -98,6 +101,9 @@ export const streamableHTTPApp = ({
     app.use(morgan('combined'));
   }
 
+  app.get('/health', async (req: express.Request, res: express.Response) => {
+    res.status(200).send('OK');
+  });
   app.get('/', get);
   app.post('/', post({ clientOptions, mcpOptions }));
   app.delete('/', del);

packages/mcp-server/src/index.ts

@@ -18,7 +18,7 @@ async function main() {
 
   switch (options.transport) {
     case 'stdio':
-      await launchStdioServer();
+      await launchStdioServer(options);
       break;
     case 'http':
       await launchStreamableHTTPServer({