Keesan12/Martin-Loop

vmcp-v0.1.4 scope: mcp Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 16d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-runtime ai-agent-runtime ai-coding-agents ai-control-plane ai-governance ai-safety

+13 more

audit-trail budget-enforcement claude-code codex coding-agents control-plane governed-runtime llmops mcp model-context-protocol observability policy-as-code rollback

Summary

AI summary

Updates Release-proof hardening, Highlights, and Verification Gates across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Exposes martin_doctor, martin_preflight, martin_run, martin_inspect, martin_status. Exposes martin_doctor, martin_preflight, martin_run, martin_inspect, martin_status. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Provides host-native install guidance for Codex and Claude Code platforms. Provides host-native install guidance for Codex and Claude Code platforms. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Exposes tools: martin_doctor, martin_preflight, martin_run, martin_inspect, martin_status. Exposes tools: martin_doctor, martin_preflight, martin_run, martin_inspect, martin_status. Source: granite4.1:30b@2026-05-19-audit Confidence: high	—
Feature	Low	Provides host-native install guidance for Codex and Claude Code (macOS/Linux/Windows). Provides host-native install guidance for Codex and Claude Code (macOS/Linux/Windows). Source: granite4.1:30b@2026-05-19-audit Confidence: high	—
Performance
Performance	Low	Release-proof hardening aligns package metadata between package.json and server.json. Release-proof hardening aligns package metadata between package.json and server.json. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Performance	Low	Publish workflow verifies smoke:pack, smoke:published:pack, verify:release, smoke:published. Publish workflow verifies smoke:pack, smoke:published:pack, verify:release, smoke:published. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Performance	Low	Aligns package metadata between package.json and server.json for release-proof hardening. Aligns package metadata between package.json and server.json for release-proof hardening. Source: granite4.1:30b@2026-05-19-audit Confidence: high	—
Performance	Low	Publish workflow verifies smoke:pack, smoke:published:pack, verify:release, and smoke:published steps. Publish workflow verifies smoke:pack, smoke:published:pack, verify:release, and smoke:published steps. Source: granite4.1:30b@2026-05-19-audit Confidence: high	—
Deprecation	Low	Does not include resources, resource templates, prompts, martin_list_runs, martin_triage_runs, martin_get_run, martin_get_attempt, martin_get_verification_results, martin_run_dossier. Does not include resources, resource templates, prompts, martin_list_runs, martin_triage_runs, martin_get_run, martin_get_attempt, martin_get_verification_results, martin_run_dossier. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Deprecation	Low	Omits resources, resource templates, prompts, martin_list_runs, martin_triage_runs, martin_get_run, martin_get_attempt, martin_get_verification_results, martin_run_dossier. Omits resources, resource templates, prompts, martin_list_runs, martin_triage_runs, martin_get_run, martin_get_attempt, martin_get_verification_results, martin_run_dossier. Source: granite4.1:30b@2026-05-19-audit Confidence: high	—

Full changelog

@martinloop/mcp v0.1.4

@martinloop/[email protected] is the operator-foundation release for the public standalone Martin Loop MCP package.

Highlights

Five-tool operator flow

0.1.4 exposes:

martin_doctor
martin_preflight
martin_run
martin_inspect
martin_status

Recommended flow:

martin_doctor
martin_preflight
martin_run
martin_inspect or martin_status

Host-native install guidance

Codex: codex mcp add martin-loop -- npx -y @martinloop/mcp
Claude Code macOS/Linux: claude mcp add --transport stdio --scope user martin-loop -- npx -y @martinloop/mcp
Claude Code Windows: claude mcp add --transport stdio --scope user martin-loop -- cmd /c npx -y @martinloop/mcp

Release-proof hardening

package metadata stays aligned between package.json and server.json
checked-in release notes are used for the GitHub release body
the publish workflow verifies:
- smoke:pack
- smoke:published:pack
- verify:release
- smoke:published

What `0.1.4` does not claim

This release is still a tools-only MCP server. It does not claim:

resources
resource templates
prompts
martin_list_runs
martin_triage_runs
martin_get_run
martin_get_attempt
martin_get_verification_results
martin_run_dossier

Those belong to the later 0.2.x public releases, not to 0.1.4.

Metadata

npm package: @martinloop/mcp
MCP registry server name: io.github.Keesan12/martin-loop
Node runtime: >=20

Verification Gates

pnpm --filter @martinloop/mcp lint
pnpm --filter @martinloop/mcp test
pnpm --filter @martinloop/mcp build
pnpm --filter @martinloop/mcp smoke:pack
pnpm --filter @martinloop/mcp smoke:published:pack
pnpm --filter @martinloop/mcp verify:release
pnpm --filter @martinloop/mcp smoke:published

Publish Path

merge the 0.1.4 release candidate
push tag mcp-v0.1.4
let .github/workflows/publish-mcp.yml publish through npm trusted publishing
verify live npm with npm view @martinloop/mcp version

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Keesan12/Martin-Loop

Get notified when new releases ship.

About Keesan12/Martin-Loop

All releases →

Related context

Related tools

Earlier breaking changes

vmcp-v0.1.3 martin_status uses oneOf for selector exclusivity, latest as const.
vmcp-v0.1.3 maxIterations and maxTokens modeled as integers in tool schemas.
vmcp-v0.1.3 Tool schemas enforce additionalProperties: false on public contracts.
vmcp-v0.1.3 Packaged artifacts now require and ship server.json alongside package.json.