
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
@elicitly/tools
Advanced tools
Embeddable MCP elicitation toolkit — register elicit_confirm, elicit_form, elicit_doctor, and elicit_display on any McpServer, plus the elicitation-schema types and capability report/probe layer.
Embeddable MCP elicitation toolkit: put the Elicitly tools —
elicit_confirm, elicit_form, elicit_doctor, elicit_display — on your own McpServer,
with the elicitation-schema types and the capability report/probe layer they
build on.
import { makeElicitAdapter, registerFormTools } from "@elicitly/tools"
import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js"
const server = new McpServer({ name: "my-server", version: "1.0.0" })
const { elicit, clientView } = makeElicitAdapter(server, {
getProtocolVersion: () => null,
})
registerFormTools(server, {
elicit,
clientView,
serverInfo: { name: "my-server", version: "1.0.0" },
})
Your server now exposes the three elicitation tools with the same wire
contract as elicitly — dialogs
rendered by the connected host, results returned as typed JSON.
registerFormTools(server, deps) — registers elicit_confirm,
elicit_doctor, elicit_form (alphabetical wire order).registerDisplayTool(server, { version, extraResourceDomains }) — registers
elicit_display and its MCP Apps view (ui://elicitly/display): a LiquidJS
template rendered server-side, delivered to the view via the result's
_meta (never the model's context).makeElicitAdapter(server, opts) — bridges an McpServer to the injected
elicit function the tools use (SDK-coupled edge, kept in one place).confirm / elicitForm / doctor — the tool handlers themselves,
SDK-agnostic and unit-tested; use them directly for custom registration.core/ (re-exported) — the SDK-free layer: elicitation-schema types
(ElicitSchema, scalarSchema) and the passive capability report + probe
classification (buildPassiveReport, classifyProbe).FAQs
Embeddable MCP elicitation toolkit — register elicit_confirm, elicit_form, elicit_doctor, and elicit_display on any McpServer, plus the elicitation-schema types and capability report/probe layer.
The npm package @elicitly/tools receives a total of 736 weekly downloads. As such, @elicitly/tools popularity was classified as not popular.
We found that @elicitly/tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.