Skip to content

FO Semantic MCP v1.3.4 - Minimalist Obfuscation (WORKS!)

Choose a tag to compare

@xplusplusai xplusplusai released this 09 Oct 17:28
· 31 commits to main since this release

✅ Minimalist Obfuscation - Surgical IP Protection

What's Fixed

The Winning Strategy: Stop trying to obfuscate everything. Protect ONLY what matters.

v1.3.2/v1.3.3 Problem: Bundling/obfuscating entire codebase broke MCP JSON-RPC protocol

v1.3.4 Solution: Surgical approach - obfuscate ONLY embeddedInstructions.js

Changes

Tool Registration WORKS - Zero bundling = zero protocol issues
Obfuscate IP Only - Instructions file: 29KB → 115KB (obfuscated)
MCP Protocol Clean - All protocol code untouched and readable
Standard Structure - Normal dist/ folder, only instructions protected
100% Compatible - Works with all MCP clients (Cursor IDE, Claude Desktop, VS Code)

Technical Details

Minimalist Build Process:

  1. Embed instructions from markdown → TypeScript
  2. Build TypeScript → JavaScript (normal)
  3. Copy entire dist/ to dist-obfuscated/
  4. Obfuscate ONLY embeddedInstructions.js in place

What's Obfuscated:

  • dist/embeddedInstructions.js (115KB obfuscated)

What's NOT Obfuscated:

  • dist/server.js (clean, readable)
  • dist/tools/ (clean, readable)
  • dist/services/ (clean, readable)
  • dist/utils/ (clean, readable)
  • node_modules/@modelcontextprotocol/sdk (untouched)

Result:

  • MCP protocol: 100% compliant (no modifications)
  • Your IP: 100% protected (instruction content obfuscated)
  • File size: Minimal (only 115KB obfuscated file)
  • Debuggable: All code except instructions readable

Why This Approach Wins

Lesson Learned: Don't obfuscate protocol implementations!

  • Protocol libraries stay clean (MCP SDK untouched)
  • Protocol implementation stays clean (server.js readable)
  • Only IP gets protected (instructions obfuscated)
  • Zero compatibility issues (standard JavaScript structure)

Installation

  1. Download the latest release (Source code zip/tar.gz)
  2. Extract to your preferred location
  3. Get API Key from https://www.xplusplus.ai/
  4. Configure your MCP client:
{
  "mcpServers": {
    "fo-semantic-mcp": {
      "command": "node",
      "args": ["path/to/fo-semantic-mcp/dist/server.js"],
      "env": {
        "FOINDEX_API_KEY": "your_api_key"
      }
    }
  }
}
  1. Restart your MCP client
  2. Verify tool appears: search_fo_artifacts

See README.md for detailed setup.


Full Changelog: https://github.com/xplusplusai/fo-semantic-mcp/blob/main/CHANGELOG.md#134---2025-10-09