August 17, 2026 1 min read

Phase 7 shipped: Guarded MCP server mode

ainfra now exposes read-only inspection and explicitly authorized, plan-bound lifecycle operations through MCP over stdio.

Phase 7 exposed the existing typed application lifecycle through a guarded MCP adapter without weakening its authorization or evidence contracts.

What shipped#

An official-SDK MCP server over newline-delimited JSON-RPC stdio.
A fixed project boundary and read-only default tool registry.
Sanitized doctor, status, output, inventory, schema, and documentation resources.
Explicit planning and lifecycle capability allowlists.
Independent authorization for deployment and destruction tools.
The same locking, plan-binding, recovery, and evidence rules as the CLI.