mirror of
https://github.com/hanzoai/python-sdk.git
synced 2026-10-27 04:20:09 +00:00
zeekay
02f2ec2014
The quickstart called create_mcp_server, server.register_*_tools and server.tools.read — no such names. The real surface is the hanzo-mcp command, its flags, and HanzoMCPServer; the tools come from whichever hanzo-tools-* packages are installed, through the hanzo.tools entry point. Verified against --version, --help and the constructor. Drop the three *_COMPLETE.md status reports, MODULAR_ARCHITECTURE.md (a proposal), COMPREHENSIVE_DOCUMENTATION.md (claims 70+ tools over a package with seven) and SEARCH_GUIDE.md (documents an ffind tool that does not exist). SECURITY_PATCH.md named files and lines for three findings in 0.8.13; all three are addressed in 0.15.15 — the shell escaper it flagged is gone with its module, permissions.py refuses .. and ~ before resolving, and the third asked for a token the server minted, persisted to ~/.hanzo/mcp_token and never once checked. That token is gone too: auth is IAM's, and a credential nothing verifies reads as a gate that is not there.