[project]
name = "mcp-trust"
version = "0.1.1"
description = "A neutral public trust registry for MCP servers — check before you connect."
readme = "README.md"
requires-python = ">=3.11"
license = { text = "MIT" }
dependencies = [
    "cryptography>=45,<51",
    "pydantic>=2.0",
    "fastapi>=0.115",
    "uvicorn>=0.30",
    "typer>=0.12",
    "rich>=13.8",
    "mcp>=1.28.1,<2",
]

[project.optional-dependencies]
# Real scanning backend. Without it, the registry runs on the StubEngine.
# Upper bound: a major bump of the scan engine is a contract change that must
# fail at resolve time, not as an AttributeError mid-scan.
engine = ["mcp-audits>=2.4.0,<3"]
dev = [
    "pytest>=8.0",
    "httpx>=0.27",
    "ruff>=0.6",
]

[project.scripts]
mcp-trust = "mcp_trust.cli.main:app"

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[tool.hatch.build.targets.wheel]
packages = ["src/mcp_trust"]

[tool.ruff]
line-length = 100
target-version = "py311"

[tool.ruff.lint]
select = ["E", "F", "I", "UP", "B"]

[tool.pytest.ini_options]
pythonpath = ["src"]
testpaths = ["tests"]