feat(mcp): publish vouch to the mcp registry as io.github.vouchdev/vouch

[plind-junior]

adds the packaging needed to list vouch in the official mcp registry (registry.modelcontextprotocol.io, mirrored at
github.com/mcp/plind-junior/vouch):

• server.json at the repo root — pypi vouch-kb artifact, run over stdio via uvx vouch-kb serve.
• vouch-kb console-script alias so the registry can launch the package by its pypi identifier; the existing vouch script name wouldn't match.
• an mcp-name: io.github.vouchdev/vouch marker in the readme, which the registry matches against server.json to verify package ownership.

bumps to 1.2.2 across the four version sites so the marker ships in a published pypi release — pypi descriptions are immutable per version, so the ownership check needs a fresh release to read.

What changed

Why

What might break

VEP

Tests

• make check passes locally (lint + mypy + pytest)
• New / changed behaviour has a test
• CHANGELOG.md updated under ## [Unreleased]

Summary by CodeRabbit

• New Features

  • Added a new vouch-kb launch alias for starting the service.
  • Added registry and package metadata so the app can be published and discovered more consistently.

• Chores

  • Updated the app version to 1.2.2 across project metadata and release notes.
  • Added package ownership markers in documentation for registry verification.

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR releases version 1.2.2 across package manifests, adds an MCP registry server manifest (server.json), introduces a vouch-kb console-script alias, adds an MCP package-name marker in README.md, and documents the release in CHANGELOG.md.

Changes

v1.2.2 Release and MCP Registry Packaging

Layer / File(s)	Summary
Version bump across manifests package.json, openclaw.plugin.json, pyproject.toml, src/vouch/__init__.py	Version fields updated from 1.2.1 to 1.2.2 in all package manifests and the module version constant.
MCP registry manifest and script alias server.json, pyproject.toml, README.md	Adds server.json declaring the vouch-kb pypi package with uvx runtime, stdio transport, and VOUCH_KB_PATH env var; adds a vouch-kb console-script entry; adds an MCP package-name marker comment in README.md.
Changelog entry CHANGELOG.md	Documents the 1.2.2 release under a new Packaging subsection covering MCP registry publication, the console-script alias, and ownership verification markers.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• vouchdev/vouch#87: Both PRs are release/packaging changes for the vouch-kb PyPI package, bumping versions and updating packaging docs/changelog.
• vouchdev/vouch#221: Both PRs concern exposing Vouch via OpenClaw/MCP, involving openclaw.plugin.json and related packaging/manifest changes.

Suggested labels: cli

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: publishing Vouch to the MCP registry under io.github.vouchdev/vouch.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/mcp-registry

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

🧹 Nitpick comments (1)

server.json (1)

11-35: 📐 Maintainability & Code Quality | 🔵 Trivial | 💤 Low value

Consider adding registryBaseUrl for the pypi package.

Other example manifests explicitly set registryBaseUrl (e.g. "https://pypi.org") alongside registryType: "pypi". It's optional but adds clarity/robustness against future registry ambiguity.

Optional addition

     {
       "registryType": "pypi",
+      "registryBaseUrl": "https://pypi.org",
       "identifier": "vouch-kb",
       "version": "1.2.2",

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@server.json` around lines 11 - 35, The pypi package entry in server.json is
missing an explicit registryBaseUrl, which other manifests use for clarity.
Update the package object for vouch-kb to include registryBaseUrl with the
standard PyPI URL alongside registryType and identifier, keeping the existing
runtimeHint, packageArguments, and environmentVariables unchanged.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@server.json`:
- Around line 11-35: The pypi package entry in server.json is missing an
explicit registryBaseUrl, which other manifests use for clarity. Update the
package object for vouch-kb to include registryBaseUrl with the standard PyPI
URL alongside registryType and identifier, keeping the existing runtimeHint,
packageArguments, and environmentVariables unchanged.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4a1396c0-2091-4034-ac11-ee1661d12578

📥 Commits

Reviewing files that changed from the base of the PR and between 759d240 and a63424c.

📒 Files selected for processing (7)

• CHANGELOG.md
• README.md
• openclaw.plugin.json
• package.json
• pyproject.toml
• server.json
• src/vouch/__init__.py