RagLeapragleap-integrations 0.2.0 (published to PyPI on 2026-10-24)
Added
- connect(url, allow=[...]): one call from a URL to ready tools. Returns a Connection with tools, a ragleap-tools Toolkit, skipped tools and a report. The allowlist is an exact list, no wildcard. connect_config does the same for any McpConfig.
- Governance. Discovery keeps only the four boolean MCP tool hints, which the specification treats as untrusted. Every tool carries metadata with server, tool, annotations and requires_approval. A tool is flagged unless the owner pre-approves it, or trusts a server and the tool declares readOnlyHint true without destructiveHint true.
- McpPolicy.approve: a call to a flagged tool runs only if the hook returns exactly True. Otherwise the server is not contacted and the result is MCP call was not approved.
- McpConfig.on_event: one small event per discovery and per call. Arguments and results are never in an event, and a failing hook cannot break a call.
Changed
- Requires ragleap-tools 0.5.1 or newer. With no policy and no hook, calls behave as in 0.1.1.
- Project links point at the ragleap organization repository.
Verified
- 275 tests on Python 3.10 and 3.12, 67 of them new. Mutation-tested: 53 of 53 deliberate breaks caught.
- Published wheel and sdist checked from PyPI on 2026-10-24: installed files equal the repository source, and the sdist tests pass (275) against the installed wheel on Python 3.10.12.
Not verified
- connect(), the annotation handling and the events against a real MCP server. The new tests use fake servers.
Note
- PyPI shows a change of provenance notice on this release because the publishing repository moved from the antonyrag account to the ragleap organization. It is expected.
Design: packages/ragleap-integrations/docs/design/mcp-governance.md