From 3ea58532e148f4aaa7d4b600c5e70a26ecb0094e Mon Sep 17 00:00:00 2001 From: vvillait88 Date: Thu, 27 Aug 2026 21:26:04 -0400 Subject: [PATCH] Release 0.5.0: MCP tool surface closed, plaintext passphrase cache removed Minor rather than patch because this is breaking on 0.x. The `unlock` command is removed, and six commands no longer appear over MCP: wallet create, wallet show-mnemonic, wallet export, wallet remove, send and unlock. All six still run from a shell. What changes is that they are no longer served as agent tools, where the CLI's --danger and typed-confirm gates degrade into boolean parameters a model sets for itself, and where anything they return lands in the transcript. Unattended use of the wallet is AGENTSCORE_PAY_PASSPHRASE in the environment, which the removed command's own hint text already recommended. A leftover .unlock file is deleted rather than ignored on the next command that needs a passphrase. Spend limits now apply to `send`, which previously let a configured ceiling be walked past with a raw transfer. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 223b358..83c06ac 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@agent-score/pay", - "version": "0.4.14", + "version": "0.5.0", "description": "CLI wallet for one-shell-command agent payments across x402 (Base) and MPP (Tempo, Solana)", "type": "module", "main": "./dist/index.js",