mirror of
https://github.com/hanzoai/python-sdk.git
synced 2026-10-23 20:23:00 +00:00
zeekay
eab5541a89
Nine per-service packages registered a hanzo.tools entry point and sat in hanzo-mcp's default dependencies, so installing it put them in a model's tool list beside the unified tool and without its filter. hanzo-tools-kms offered inject, which lists a path and reads every secret at it. hanzo-tools-iam offered create_user, delete_user and the token and session reads. cloud withholds all of them from an agent; these were a second way to the same API, so the rule held on one path and not the other. The auto-registration is withdrawn, not the packages: they stay importable for a human at a CLI, which is where reading a secret is a legitimate act. An agent reaches all eight through the unified tool, verified against the live document. mpc keeps its registration because the fleet has no equivalent, and auth keeps its because it reads the caller's own claims rather than another identity's.