docs: update READMEs, landing page, and npm for v0.6.0 release

Add MCP server section to README and npm README, add MCP feature card
and comparison row to landing page with translations for all 9 locales,
bump npm package to 0.6.0, mark v0.6 milestone as complete.

Author: eric8810

README.md

@@ -26,6 +26,30 @@ authy resolve config.yaml.tpl --scope deploy --output config.yaml
 
 `authy run` covers env vars. `authy resolve` covers config files.
 
+## MCP Server
+
+Run Authy as an MCP (Model Context Protocol) server for AI agent platforms like Claude Desktop, Cursor, and Windsurf:
+
+```bash
+authy serve --mcp
+```
+
+Add to your MCP client config (e.g. `claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "authy": {
+      "command": "authy",
+      "args": ["serve", "--mcp"],
+      "env": { "AUTHY_PASSPHRASE": "your-passphrase" }
+    }
+  }
+}
+```
+
+Exposes 5 tools over stdio JSON-RPC 2.0: `get_secret`, `list_secrets`, `store_secret`, `remove_secret`, `test_policy`.
+
 ## Library API
 
 Use Authy as a Rust crate for programmatic vault access:
@@ -194,6 +218,9 @@ Audit
   authy audit verify               Verify log integrity
   authy audit export               Export log as JSON
 
+Server
+  authy serve --mcp                Start MCP server (stdio JSON-RPC)
+
 Admin
   authy admin                      Launch admin TUI
   authy config show                Show configuration

milestones.md

@@ -115,7 +115,7 @@ Expose core vault operations as a Rust library crate. Make Authy embeddable —
 - Per-agent audit attribution
 - Delegation tokens (agent-to-agent scope narrowing)
 
-## v0.6 — Platform Integration Layer
+## v0.6 — Platform Integration Layer ✓
 
 Serve segment 3 (operators) through the platforms they already use. Serve platforms that need a service interface, not just CLI.
 

npm/authy-cli/README.md

@@ -40,6 +40,16 @@ export AUTHY_KEYFILE=~/.authy/keys/master.key
 authy run --scope backend --uppercase --replace-dash '_' -- node server.js
 ```
 
+## MCP Server
+
+Run as an MCP server for AI agent platforms (Claude Desktop, Cursor, Windsurf):
+
+```bash
+authy serve --mcp
+```
+
+Exposes 5 tools over stdio JSON-RPC 2.0: `get_secret`, `list_secrets`, `store_secret`, `remove_secret`, `test_policy`.
+
 ## Migrate from .env
 
 ```bash

npm/authy-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "authy-cli",
-  "version": "0.3.1",
+  "version": "0.6.0",
   "description": "CLI secrets store & dispatch for AI agents",
   "license": "MIT",
   "repository": {

web/components/Comparison.tsx

@@ -20,6 +20,7 @@ export const Comparison: React.FC = () => {
     { feature: t('comparison.features.runOnlyMode'), authy: true, pass: false, vault: false, onepassword: false },
     { feature: t('comparison.features.jsonOutput'), authy: true, pass: false, vault: true, onepassword: true },
     { feature: t('comparison.features.libraryApi'), authy: true, pass: false, vault: true, onepassword: true },
+    { feature: t('comparison.features.mcpServer'), authy: true, pass: false, vault: false, onepassword: false },
     { feature: t('comparison.features.builtForAgents'), authy: true, pass: false, vault: false, onepassword: false },
   ];
 

web/components/Features.tsx

@@ -1,6 +1,6 @@
 import React from 'react';
 import { useTranslation } from 'react-i18next';
-import { Shield, Key, FileJson, TerminalSquare, Lock, Monitor, FileCode, Code2 } from 'lucide-react';
+import { Shield, Key, FileJson, TerminalSquare, Lock, Monitor, FileCode, Code2, Server } from 'lucide-react';
 import { Feature } from '../types';
 import { FadeIn } from './FadeIn';
 
@@ -43,6 +43,11 @@ export const Features: React.FC = () => {
       description: t('features.auditLogging.description'),
       icon: FileJson
     },
+    {
+      title: t('features.mcpServer.title'),
+      description: t('features.mcpServer.description'),
+      icon: Server
+    },
     {
       title: t('features.adminTUI.title'),
       description: t('features.adminTUI.description'),

web/locales/de.json

@@ -8,7 +8,7 @@
     "viewOnGitHub": "Quellcode ansehen"
   },
   "hero": {
-    "released": "v0.5.0 — Bibliotheks-API für programmatischen Zugriff",
+    "released": "v0.6.0 — MCP-Server für AI-Agent-Plattformen",
     "title": "Secrets-Verwaltung für",
     "titleHighlight": "AI Agents",
     "description": "Ihre Agents brauchen API-Schlüssel, nicht die Schlüssel zum Königreich. Verschlüsselter Tresor, bereichsbasierte Richtlinien, kurzlebige Tokens und vollständiges Audit. Eine einzelne Binary, kein Server, kein Konto nötig.",
@@ -49,6 +49,10 @@
       "title": "Audit-Protokoll",
       "description": "Unveränderbares JSONL-Log mit HMAC-Verkettung. Vollständige Nachverfolgung, wer wann auf welches Secret zugegriffen hat."
     },
+    "mcpServer": {
+      "title": "MCP-Server",
+      "description": "Starten Sie Authy als Model Context Protocol-Server über stdio JSON-RPC 2.0. AI-Agent-Plattformen wie Claude Desktop, Cursor und Windsurf können Authy nativ aufrufen — ohne Shell. 5 Tools: get, list, store, remove, test policy."
+    },
     "adminTUI": {
       "title": "Admin-TUI",
       "description": "Vollbild-Terminal-Oberfläche zur Verwaltung von Secrets, Richtlinien, Sitzungen und Audit-Logs. Über maskierte Eingabefelder eingegebene Secrets gelangen nie in die Shell-Historie."
@@ -79,6 +83,7 @@
       "auditLogging": "Audit",
       "subprocessInjection": "Subprozess-Injektion",
       "libraryApi": "Programmatische Bibliotheks-API",
+      "mcpServer": "MCP-Server-Protokoll",
       "builtForAgents": "Für Agents entwickelt",
       "runOnlyMode": "Nur-Ausführungsmodus",
       "jsonOutput": "Strukturierte JSON-Ausgabe"

web/locales/en.json

@@ -8,7 +8,7 @@
     "viewOnGitHub": "View on GitHub"
   },
   "hero": {
-    "released": "v0.5.0 — Library API for Programmatic Access",
+    "released": "v0.6.0 — MCP Server for AI Agent Platforms",
     "title": "Secrets Management for",
     "titleHighlight": "AI Agents",
     "description": "Your agents need API keys — they don't need the keys to the kingdom. Authy is a CLI secrets manager with encrypted vault, scoped policies, run-only tokens, and full audit trail. Agents inject secrets into subprocesses but never see the values. Single binary, no server, no accounts.",
@@ -49,6 +49,10 @@
       "title": "Tamper-Evident Audit Logging",
       "description": "Append-only JSONL log with HMAC chain verification. Track every secret access with actor identity, timestamp, operation type, and access outcome. Detect any log tampering instantly."
     },
+    "mcpServer": {
+      "title": "MCP Server",
+      "description": "Run Authy as a Model Context Protocol server over stdio JSON-RPC 2.0. AI agent platforms like Claude Desktop, Cursor, and Windsurf can call Authy natively — no shell required. 5 tools: get, list, store, remove, test policy."
+    },
     "adminTUI": {
       "title": "Admin Terminal UI",
       "description": "Full-screen terminal interface for managing secrets, policies, sessions, and audit logs. Masked input fields ensure secrets never touch shell history. Intuitive keyboard-driven interface."
@@ -81,6 +85,7 @@
       "runOnlyMode": "Run-Only Mode",
       "jsonOutput": "Structured JSON Output",
       "libraryApi": "Programmatic Library API",
+      "mcpServer": "MCP Server Protocol",
       "builtForAgents": "Built for AI Agents"
     }
   },

web/locales/es.json

@@ -8,7 +8,7 @@
     "viewOnGitHub": "Ver código fuente"
   },
   "hero": {
-    "released": "v0.5.0 — API de biblioteca para acceso programático",
+    "released": "v0.6.0 — Servidor MCP para plataformas de agentes IA",
     "title": "Gestión de secretos para",
     "titleHighlight": "AI Agents",
     "description": "Tus agents necesitan claves API, pero no las llaves del reino. Cifrado, políticas de ámbito, tokens de corta duración y auditoría completa. Un solo ejecutable, sin servidor, sin registro.",
@@ -49,6 +49,10 @@
       "title": "Registro de auditoría",
       "description": "Log JSONL inmutable con encadenamiento HMAC. Registro completo de quién accedió a qué secreto y cuándo."
     },
+    "mcpServer": {
+      "title": "Servidor MCP",
+      "description": "Ejecute Authy como servidor Model Context Protocol sobre stdio JSON-RPC 2.0. Plataformas de agentes IA como Claude Desktop, Cursor y Windsurf pueden llamar a Authy de forma nativa — sin shell. 5 herramientas: get, list, store, remove, test policy."
+    },
     "adminTUI": {
       "title": "TUI de Administración",
       "description": "Interfaz de terminal a pantalla completa para gestionar secretos, políticas, sesiones y registros de auditoría. Los secretos introducidos en campos enmascarados nunca tocan el historial de shell."
@@ -79,6 +83,7 @@
       "auditLogging": "Auditoría",
       "subprocessInjection": "Inyección en subprocesos",
       "libraryApi": "API de biblioteca programática",
+      "mcpServer": "Protocolo servidor MCP",
       "builtForAgents": "Diseñado para Agents",
       "runOnlyMode": "Modo solo ejecución",
       "jsonOutput": "Salida JSON estructurada"

web/locales/fr.json

@@ -8,7 +8,7 @@
     "viewOnGitHub": "Voir le code source"
   },
   "hero": {
-    "released": "v0.5.0 — API bibliothèque pour accès programmatique",
+    "released": "v0.6.0 — Serveur MCP pour les plateformes d'agents IA",
     "title": "Gestion des secrets pour",
     "titleHighlight": "AI Agents",
     "description": "Vos agents ont besoin de clés API, pas des clés du royaume. Coffre chiffré, politiques de périmètre, tokens à durée limitée et audit complet. Un seul exécutable, pas de serveur, pas de compte.",
@@ -49,6 +49,10 @@
       "title": "Journal d'audit",
       "description": "Log JSONL immuable avec chaînage HMAC. Traçabilité complète de qui a accédé à quel secret et quand."
     },
+    "mcpServer": {
+      "title": "Serveur MCP",
+      "description": "Exécutez Authy en tant que serveur Model Context Protocol via stdio JSON-RPC 2.0. Les plateformes d'agents IA comme Claude Desktop, Cursor et Windsurf peuvent appeler Authy nativement — sans shell. 5 outils : get, list, store, remove, test policy."
+    },
     "adminTUI": {
       "title": "TUI d'Administration",
       "description": "Interface terminal plein écran pour gérer les secrets, politiques, sessions et journaux d'audit. Les secrets saisis via les champs masqués ne touchent jamais l'historique shell."
@@ -79,6 +83,7 @@
       "auditLogging": "Audit",
       "subprocessInjection": "Injection en sous-processus",
       "libraryApi": "API bibliothèque programmatique",
+      "mcpServer": "Protocole serveur MCP",
       "builtForAgents": "Conçu pour les Agents",
       "runOnlyMode": "Mode exécution seule",
       "jsonOutput": "Sortie JSON structurée"