Fix template CI: await ctx.error (lint) + clean bundle scan

.github/workflows/scan.yml

@@ -27,7 +27,7 @@ jobs:
         run: npx @anthropic-ai/mcpb pack
 
       - name: Run MTF scanner
-        run: uvx mpak-scanner scan *.mcpb --json > scan-results.json
+        run: uvx mpak-scanner scan *.mcpb --json -o scan-results.json
 
       - name: Check for critical/high findings
         run: |

.mcpbignore

@@ -30,6 +30,7 @@ __pycache__/
 /build/
 /dist/
 /tests/
+/tests-integration/
 /test/
 /e2e/
 /examples/

manifest.json

@@ -25,5 +25,16 @@
         "EXAMPLE_API_KEY": "${user_config.api_key}"
       }
     }
+  },
+  "_meta": {
+    "org.mpaktrust": {
+      "permissions": {
+        "filesystem": "read",
+        "network": "outbound",
+        "environment": "read",
+        "subprocess": "none",
+        "native": "none"
+      }
+    }
   }
 }

src/mcp_example/server.py

@@ -47,15 +47,15 @@
 _client: ExampleClient | None = None
 
 
-def get_client(ctx: Context | None = None) -> ExampleClient:
+async def get_client(ctx: Context | None = None) -> ExampleClient:
     """Get or create the API client instance."""
     global _client
     if _client is None:
         api_key = os.environ.get("EXAMPLE_API_KEY")
         if not api_key:
             msg = "EXAMPLE_API_KEY environment variable is required"
             if ctx:
-                ctx.error(msg)
+                await ctx.error(msg)
             raise ValueError(msg)
         _client = ExampleClient(api_key=api_key)
     return _client
@@ -87,12 +87,12 @@ async def list_items(
     Returns:
         List of items
     """
-    client = get_client(ctx)
+    client = await get_client(ctx)
     try:
         return await client.list_items(limit=limit)
     except ExampleAPIError as e:
         if ctx:
-            ctx.error(f"API error: {e.message}")
+            await ctx.error(f"API error: {e.message}")
         raise
 
 
@@ -110,12 +110,12 @@ async def get_item(
     Returns:
         Item details
     """
-    client = get_client(ctx)
+    client = await get_client(ctx)
     try:
         return await client.get_item(item_id)
     except ExampleAPIError as e:
         if ctx:
-            ctx.error(f"API error: {e.message}")
+            await ctx.error(f"API error: {e.message}")
         raise