qring-mcp

Instructions

Implementation Reference

• src/core/validate.ts:233-256 (handler)

  The core logic for validating a secret, which delegates to the appropriate provider based on the value or options provided.

  export async function validateSecret(
    value: string,
    opts?: { provider?: string; validationUrl?: string },
  ): Promise<ValidationResult> {
    const provider = opts?.provider
      ? registry.get(opts.provider)
      : registry.detectProvider(value);
  
    if (!provider) {
      return {
        valid: false,
        status: "unknown",
        message: "No provider detected — set a provider in the manifest or secret metadata",
        latencyMs: 0,
        provider: "none",
      };
    }
  
    if (provider.name === "http" && opts?.validationUrl) {
      return (provider as any).validate(value, opts.validationUrl);
    }
  
    return provider.validate(value);
  }

• src/mcp/server.ts:879-898 (registration)

  Registration of the 'validate_secret' tool in the MCP server, defining its input schema and using the 'validateSecret' function.

  server.tool(
    "validate_secret",
    "Test if a secret is actually valid with its target service (e.g., OpenAI, Stripe, GitHub). Uses provider auto-detection based on key prefixes, or accepts an explicit provider name. Never logs the secret value.",
    {
      key: z.string().describe("The secret key name"),
      provider: z.string().optional().describe("Force a specific provider (openai, stripe, github, aws, http)"),
      scope: scopeSchema,
      projectPath: projectPathSchema,
    },
    async (params) => {
      const value = getSecret(params.key, opts(params));
      if (value === null) return text(`Secret "${params.key}" not found`, true);
  
      const envelope = getEnvelope(params.key, opts(params));
      const provHint = params.provider ?? envelope?.envelope.meta.provider;
  
      const result = await validateSecret(value, { provider: provHint });
      return text(JSON.stringify(result, null, 2));
    },
  );

• src/mcp/server.ts:882-887 (schema)

  The schema definition for the 'validate_secret' tool, specifying parameters like key, provider, scope, and projectPath.

  {
    key: z.string().describe("The secret key name"),
    provider: z.string().optional().describe("Force a specific provider (openai, stripe, github, aws, http)"),
    scope: scopeSchema,
    projectPath: projectPathSchema,
  },