0nmcp 1.3.1 → 1.5.0

package/cli.js

@@ -6,6 +6,8 @@
  * 
  * Usage:
  *   npx 0nmcp              Start MCP server (stdio)
+ *   npx 0nmcp serve        Start HTTP server (REST + MCP + webhooks)
+ *   npx 0nmcp run <wf>     Run a .0n workflow from CLI
  *   npx 0nmcp init         Initialize ~/.0n directory
  *   npx 0nmcp connect      Interactive connection setup
  *   npx 0nmcp list         List connected services
@@ -68,12 +70,22 @@ async function main() {
     console.log(`
 ${c.bright}Usage:${c.reset}
 
-  ${c.cyan}npx 0nmcp${c.reset}              Start MCP server (for Claude Desktop)
+  ${c.cyan}npx 0nmcp${c.reset}              Start MCP server (stdio, for Claude Desktop)
+  ${c.cyan}npx 0nmcp serve${c.reset}        Start HTTP server (REST + MCP + webhooks)
+  ${c.cyan}npx 0nmcp run <wf>${c.reset}     Run a .0n workflow from CLI
   ${c.cyan}npx 0nmcp init${c.reset}         Initialize ~/.0n directory
   ${c.cyan}npx 0nmcp connect${c.reset}      Interactive connection setup
   ${c.cyan}npx 0nmcp list${c.reset}         List connected services
   ${c.cyan}npx 0nmcp migrate${c.reset}      Migrate from ~/.0nmcp to ~/.0n
 
+${c.bright}Serve options:${c.reset}
+
+  ${c.cyan}npx 0nmcp serve --port 3000 --host 0.0.0.0${c.reset}
+
+${c.bright}Run options:${c.reset}
+
+  ${c.cyan}npx 0nmcp run invoice-notify --input customer_email=test@x.com --input amount=100${c.reset}
+
 ${c.bright}Configure Claude Desktop:${c.reset}
 
   Add to your claude_desktop_config.json:
@@ -117,6 +129,85 @@ ${c.bright}Links:${c.reset}
     return;
   }
 
+  // Serve (HTTP server)
+  if (command === 'serve') {
+    console.log(BANNER);
+    const port = getFlag(args, '--port', 3000);
+    const host = getFlag(args, '--host', '0.0.0.0');
+
+    console.log(`${c.bright}Starting HTTP server...${c.reset}\n`);
+
+    const { startServer } = await import('./server.js');
+    await startServer({ port: Number(port), host: String(host) });
+    return;
+  }
+
+  // Run (execute a workflow from CLI)
+  if (command === 'run') {
+    const workflowName = args[1];
+    if (!workflowName) {
+      console.log(`${c.red}Usage: npx 0nmcp run <workflow-name> [--input key=value]${c.reset}`);
+      process.exit(1);
+    }
+
+    // Parse --input flags
+    const inputs = {};
+    for (let i = 2; i < args.length; i++) {
+      if (args[i] === '--input' && args[i + 1]) {
+        const [key, ...valueParts] = args[i + 1].split('=');
+        const value = valueParts.join('=');
+        // Auto-type: numbers and booleans
+        if (value === 'true') inputs[key] = true;
+        else if (value === 'false') inputs[key] = false;
+        else if (!isNaN(value) && value !== '') inputs[key] = Number(value);
+        else inputs[key] = value;
+        i++;
+      }
+    }
+
+    console.log(`${c.bright}Running workflow: ${c.cyan}${workflowName}${c.reset}`);
+    if (Object.keys(inputs).length > 0) {
+      console.log(`${c.bright}Inputs:${c.reset}`, JSON.stringify(inputs, null, 2));
+    }
+    console.log('');
+
+    try {
+      const { ConnectionManager } = await import('./connections.js');
+      const { WorkflowRunner } = await import('./workflow.js');
+
+      const connections = new ConnectionManager();
+      const runner = new WorkflowRunner(connections);
+      const result = await runner.run({ workflowPath: workflowName, inputs });
+
+      if (result.success) {
+        console.log(`${c.green}${c.bright}Workflow completed successfully${c.reset}`);
+      } else {
+        console.log(`${c.red}${c.bright}Workflow failed${c.reset}`);
+      }
+
+      console.log(`\n${c.bright}Execution ID:${c.reset} ${result.executionId}`);
+      console.log(`${c.bright}Steps:${c.reset} ${result.stepsSuccessful}/${result.stepsExecuted} successful`);
+      console.log(`${c.bright}Duration:${c.reset} ${result.duration}ms`);
+
+      if (result.outputs && Object.keys(result.outputs).length > 0) {
+        console.log(`\n${c.bright}Outputs:${c.reset}`);
+        console.log(JSON.stringify(result.outputs, null, 2));
+      }
+
+      if (result.errors.length > 0) {
+        console.log(`\n${c.red}${c.bright}Errors:${c.reset}`);
+        for (const err of result.errors) {
+          console.log(`  ${c.red}●${c.reset} ${err.service}.${err.action}: ${err.error}`);
+        }
+      }
+
+      process.exit(result.success ? 0 : 1);
+    } catch (err) {
+      console.log(`${c.red}Error: ${err.message}${c.reset}`);
+      process.exit(1);
+    }
+  }
+
   // Migrate
   if (command === 'migrate') {
     console.log(BANNER);
@@ -132,6 +223,15 @@ ${c.bright}Links:${c.reset}
   process.exit(1);
 }
 
+/**
+ * Get a CLI flag value: --flag value
+ */
+function getFlag(args, flag, defaultValue) {
+  const idx = args.indexOf(flag);
+  if (idx !== -1 && args[idx + 1]) return args[idx + 1];
+  return defaultValue;
+}
+
 function initDotOn() {
   const dirs = [
     DOT_ON_DIR,

package/connections.js

@@ -244,8 +244,12 @@ export class ConnectionManager {
 
   /**
    * Get credentials for a service.
+   * Checks vault unsealed cache first for sealed connections.
    */
   getCredentials(serviceKey) {
+    // Check if vault has unsealed credentials in memory
+    const unsealed = this._vaultCache?.get(serviceKey);
+    if (unsealed) return unsealed;
     return this.connections[serviceKey]?.credentials || null;
   }
 

package/index.js

@@ -21,362 +21,53 @@
 
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z } from "zod";
 
-import { SERVICE_CATALOG, listServices, getService } from "./catalog.js";
 import { ConnectionManager } from "./connections.js";
 import { Orchestrator } from "./orchestrator.js";
+import { WorkflowRunner } from "./workflow.js";
+import { registerAllTools } from "./tools.js";
 import { registerCrmTools } from "./crm/index.js";
+import { registerVaultTools, autoUnseal } from "./vault/index.js";
+import { unsealedCache } from "./vault/cache.js";
 
 // ── Initialize ─────────────────────────────────────────────
 const connections = new ConnectionManager();
+connections._vaultCache = unsealedCache;
 const orchestrator = new Orchestrator(connections);
+const workflowRunner = new WorkflowRunner(connections);
 
 const server = new McpServer({
   name: "0nMCP",
-  version: "1.3.1",
+  version: "1.5.0",
 });
 
 // ============================================================
-// UNIVERSAL TOOLS
+// REGISTER ALL TOOLS
 // ============================================================
 
-// ─── execute ───────────────────────────────────────────────
-server.tool(
-  "execute",
-  `Execute any task using connected services. The AI orchestrator automatically:
-1. Parses your intent from natural language
-2. Finds the best services to use
-3. Creates an execution plan
-4. Executes all necessary API calls
-5. Returns results
-
-Examples:
-- "Send an email to john@example.com about the meeting tomorrow"
-- "Create a Stripe customer for sarah@test.com"
-- "Post to #sales on Slack: We just closed a deal!"
-- "Get my Stripe balance"
-- "Add a record to Airtable: Name=John, Status=Active"
-- "Send an SMS to +1234567890: Your order shipped"
-- "Create a GitHub issue: Bug in login page"`,
-  {
-    task: z.string().describe("Natural language description of what you want to accomplish"),
-  },
-  async ({ task }) => {
-    const result = await orchestrator.execute(task);
-
-    if (result.success) {
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({
-            status: "completed",
-            message: result.message,
-            steps_executed: result.details?.stepsExecuted || 0,
-            steps_successful: result.details?.stepsSuccessful || 0,
-            duration_ms: result.details?.duration || 0,
-            services_used: result.details?.servicesUsed || [],
-            plan: result.details?.plan || [],
-          }, null, 2),
-        }],
-      };
-    } else {
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({
-            status: "failed",
-            error: result.error,
-            suggestion: result.suggestion,
-            connected_services: result.connected_services,
-          }, null, 2),
-        }],
-      };
-    }
-  }
-);
-
-// ─── connect_service ───────────────────────────────────────
-server.tool(
-  "connect_service",
-  `Connect a service so the orchestrator can use it. Each service requires specific credentials.
-
-Examples:
-- Stripe: { "apiKey": "sk_live_..." }
-- SendGrid: { "apiKey": "SG..." }
-- Twilio: { "accountSid": "AC...", "authToken": "..." }
-- Slack: { "botToken": "xoxb-..." }
-- OpenAI: { "apiKey": "sk-..." }
-- GitHub: { "token": "ghp_..." }
-- Notion: { "apiKey": "ntn_..." }
-- Airtable: { "apiKey": "pat..." }
-- CRM: { "access_token": "..." }
-- HubSpot: { "accessToken": "..." }
-- Shopify: { "accessToken": "...", "store": "mystore" }
-- Supabase: { "apiKey": "...", "projectRef": "..." }
-- Gmail: { "access_token": "..." }
-- Google Sheets: { "access_token": "..." }
-- Google Drive: { "access_token": "..." }
-- Jira: { "email": "...", "apiToken": "...", "domain": "mycompany" }
-- Zendesk: { "email": "...", "apiToken": "...", "subdomain": "mycompany" }
-- Mailchimp: { "apiKey": "...-us21" }
-- Zoom: { "access_token": "..." }
-- Microsoft 365: { "access_token": "..." }
-- MongoDB: { "apiKey": "...", "appId": "..." }`,
-  {
-    service: z.string().describe("Service key (e.g., stripe, sendgrid, twilio, slack, crm, github, notion, airtable, openai, shopify, hubspot, supabase, discord, linear, resend, calendly, google_calendar, gmail, google_sheets, google_drive, jira, zendesk, mailchimp, zoom, microsoft, mongodb)"),
-    credentials: z.record(z.string()).describe("Service credentials as key-value pairs"),
-  },
-  async ({ service, credentials }) => {
-    const result = connections.connect(service, credentials);
-
-    if (result.success) {
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({
-            status: "connected",
-            service: result.service.name,
-            capabilities: result.service.capabilities,
-            message: `Connected to ${result.service.name}. You now have ${result.service.capabilities} capabilities available.`,
-          }, null, 2),
-        }],
-      };
-    } else {
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({ status: "failed", error: result.error }, null, 2),
-        }],
-      };
-    }
-  }
-);
-
-// ─── disconnect_service ────────────────────────────────────
-server.tool(
-  "disconnect_service",
-  "Disconnect a connected service. Removes stored credentials.",
-  {
-    service: z.string().describe("Service key to disconnect (e.g., stripe, sendgrid)"),
-  },
-  async ({ service }) => {
-    const result = connections.disconnect(service);
-    return {
-      content: [{
-        type: "text",
-        text: JSON.stringify({
-          status: result.success ? "disconnected" : "failed",
-          error: result.error,
-        }, null, 2),
-      }],
-    };
-  }
-);
-
-// ─── list_connections ──────────────────────────────────────
-server.tool(
-  "list_connections",
-  "List all connected services, their types, and capability counts.",
-  {},
-  async () => {
-    const connected = connections.list();
-
-    if (connected.length === 0) {
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({
-            count: 0,
-            services: [],
-            message: "No services connected. Use connect_service to add integrations.",
-          }, null, 2),
-        }],
-      };
-    }
-
-    return {
-      content: [{
-        type: "text",
-        text: JSON.stringify({
-          count: connected.length,
-          services: connected,
-        }, null, 2),
-      }],
-    };
-  }
-);
-
-// ─── list_available_services ───────────────────────────────
-server.tool(
-  "list_available_services",
-  "List all services that can be connected, grouped by category.",
-  {},
-  async () => {
-    const services = listServices();
-    const connected = new Set(connections.keys());
-
-    // Group by type
-    const grouped = {};
-    for (const svc of services) {
-      if (!grouped[svc.type]) grouped[svc.type] = [];
-      grouped[svc.type].push({
-        key: svc.key,
-        name: svc.name,
-        description: svc.description,
-        capabilities: svc.capabilityCount,
-        authType: svc.authType,
-        credentialKeys: svc.credentialKeys,
-        connected: connected.has(svc.key),
-      });
-    }
-
-    return {
-      content: [{
-        type: "text",
-        text: JSON.stringify({
-          total: services.length,
-          connected: connected.size,
-          services: grouped,
-        }, null, 2),
-      }],
-    };
-  }
-);
-
-// ─── get_service_info ──────────────────────────────────────
-server.tool(
-  "get_service_info",
-  "Get detailed information about a specific service — capabilities, endpoints, and required credentials.",
-  {
-    service: z.string().describe("Service key (e.g., stripe, crm)"),
-  },
-  async ({ service }) => {
-    const catalog = getService(service);
-    if (!catalog) {
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({ error: `Unknown service: ${service}`, available: listServices().map(s => s.key) }, null, 2),
-        }],
-      };
-    }
-
-    return {
-      content: [{
-        type: "text",
-        text: JSON.stringify({
-          key: service,
-          name: catalog.name,
-          type: catalog.type,
-          description: catalog.description,
-          authType: catalog.authType,
-          credentialKeys: catalog.credentialKeys,
-          connected: connections.isConnected(service),
-          capabilities: catalog.capabilities,
-          endpoints: Object.entries(catalog.endpoints).map(([key, ep]) => ({
-            name: key,
-            method: ep.method,
-            path: ep.path,
-          })),
-        }, null, 2),
-      }],
-    };
-  }
-);
-
-// ─── api_call ──────────────────────────────────────────────
-server.tool(
-  "api_call",
-  "Make a direct API call to any connected service. For advanced use when you need fine-grained control beyond the execute tool.",
-  {
-    service: z.string().describe("Service key (e.g., stripe, sendgrid)"),
-    endpoint: z.string().describe("Endpoint name from the service catalog"),
-    params: z.record(z.any()).optional().describe("Parameters for the API call"),
-  },
-  async ({ service, endpoint, params }) => {
-    const catalog = getService(service);
-    if (!catalog) {
-      return { content: [{ type: "text", text: JSON.stringify({ error: `Unknown service: ${service}` }, null, 2) }] };
-    }
-
-    const ep = catalog.endpoints[endpoint];
-    if (!ep) {
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({ error: `Unknown endpoint: ${endpoint}`, available: Object.keys(catalog.endpoints) }, null, 2),
-        }],
-      };
-    }
-
-    const creds = connections.getCredentials(service);
-    if (!creds) {
-      return { content: [{ type: "text", text: JSON.stringify({ error: `Service ${service} not connected` }, null, 2) }] };
-    }
-
-    try {
-      let url = catalog.baseUrl + ep.path;
-      const allParams = { ...creds, ...(params || {}) };
-
-      // Substitute path params
-      url = url.replace(/\{(\w+)\}/g, (_, key) => allParams[key] || `{${key}}`);
-
-      const headers = catalog.authHeader(creds);
-      const options = { method: ep.method, headers };
-
-      if (ep.method !== "GET" && params) {
-        const contentType = ep.contentType || "application/json";
-        if (contentType === "application/x-www-form-urlencoded") {
-          headers["Content-Type"] = "application/x-www-form-urlencoded";
-          const flat = {};
-          for (const [k, v] of Object.entries(params)) {
-            if (typeof v !== "object") flat[k] = String(v);
-          }
-          options.body = new URLSearchParams(flat).toString();
-        } else {
-          headers["Content-Type"] = "application/json";
-          options.body = JSON.stringify(params);
-        }
-      }
-
-      if (ep.method === "GET" && params) {
-        const flat = {};
-        for (const [k, v] of Object.entries(params)) {
-          if (typeof v !== "object") flat[k] = String(v);
-        }
-        const qs = new URLSearchParams(flat).toString();
-        if (qs) url += (url.includes("?") ? "&" : "?") + qs;
-      }
-
-      const response = await fetch(url, options);
-      const data = await response.json().catch(() => ({ status: response.status, statusText: response.statusText }));
-
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({ success: response.ok, status: response.status, data }, null, 2),
-        }],
-      };
-    } catch (err) {
-      return { content: [{ type: "text", text: JSON.stringify({ error: err.message }, null, 2) }] };
-    }
-  }
-);
+registerAllTools(server, connections, orchestrator, workflowRunner);
 
 // ============================================================
 // SERVICE-SPECIFIC TOOLS
 // ============================================================
 
-// Register CRM tools (the first full integration)
+import { z } from "zod";
 registerCrmTools(server, z);
 
-// Future: registerStripeTools(server, z);
-// Future: registerSlackTools(server, z);
-// Future: registerShopifyTools(server, z);
+// ============================================================
+// VAULT TOOLS (machine-bound credential encryption)
+// ============================================================
+
+registerVaultTools(server, z);
+
+// Auto-unseal sealed connections if ON_VAULT_PASSPHRASE is set
+const vaultResult = autoUnseal();
+if (vaultResult.unsealed.length > 0) {
+  console.error(`Vault: auto-unsealed ${vaultResult.unsealed.length} connection(s)`);
+}
 
 // ============================================================
-// START SERVER
+// START SERVER (stdio transport)
 // ============================================================
 
 const transport = new StdioServerTransport();

package/lib/badges.json

@@ -26,7 +26,7 @@
   "total": {
     "schemaVersion": 1,
     "label": "capabilities",
-    "message": "693",
+    "message": "697",
     "color": "00ff88"
   }
 }

package/lib/stats.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-02-12T04:15:16.550Z",
+  "generated": "2026-02-15T00:30:00.808Z",
   "catalogVersion": "1.2.2",
   "services": 26,
   "tools": 290,
@@ -792,6 +792,7 @@
     "mongodb"
   ],
   "crmTools": 245,
-  "totalTools": 535,
-  "totalCapabilities": 693
+  "vaultTools": 4,
+  "totalTools": 539,
+  "totalCapabilities": 697
 }

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "0nmcp",
-  "version": "1.3.1",
+  "version": "1.5.0",
   "mcpName": "io.github.0nork/0nMCP",
-  "description": "Universal AI API Orchestrator — 535 tools, 26 services, natural language interface. The most comprehensive MCP server available. Free and open source from 0nORK.",
+  "description": "Universal AI API Orchestrator — 539 tools, 26 services, machine-bound vault encryption. The most comprehensive MCP server available. Free and open source from 0nORK.",
   "type": "module",
   "main": "index.js",
   "types": "types/index.d.ts",
   "bin": {
-    "0nmcp": "./cli.js"
+    "0nmcp": "cli.js"
   },
   "exports": {
     ".": {
@@ -34,10 +34,23 @@
     },
     "./orchestrator": {
       "import": "./orchestrator.js"
+    },
+    "./workflow": {
+      "import": "./workflow.js"
+    },
+    "./tools": {
+      "import": "./tools.js"
+    },
+    "./server": {
+      "import": "./server.js"
+    },
+    "./vault": {
+      "import": "./vault/index.js"
     }
   },
   "scripts": {
     "start": "node index.js",
+    "serve": "node cli.js serve",
     "test": "node --test",
     "stats": "node scripts/generate-stats.js --all",
     "stats:badge": "node scripts/generate-stats.js --badge",
@@ -97,6 +110,10 @@
     "teams",
     "onedrive",
     "mongodb",
+    "vault",
+    "encryption",
+    "machine-bound",
+    "credential-storage",
     "0n",
     "0nork",
     "0nmcp"
@@ -119,7 +136,11 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.26.0"
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "express": "^4.21.0"
+  },
+  "optionalDependencies": {
+    "0n-spec": "^1.1.0"
   },
   "peerDependencies": {
     "@anthropic-ai/sdk": ">=0.30.0"
@@ -132,6 +153,9 @@
   "files": [
     "index.js",
     "cli.js",
+    "tools.js",
+    "workflow.js",
+    "server.js",
     "catalog.js",
     "connections.js",
     "orchestrator.js",
@@ -139,6 +163,7 @@
     "crm/",
     "webhooks.js",
     "ratelimit.js",
+    "vault/",
     "lib/",
     "types/",
     "README.md",
@@ -147,12 +172,13 @@
   "0nmcp-stats": {
     "tools": 290,
     "crmTools": 245,
-    "totalTools": 535,
+    "vaultTools": 4,
+    "totalTools": 539,
     "services": 26,
     "actions": 65,
     "triggers": 93,
-    "totalCapabilities": 693,
+    "totalCapabilities": 697,
     "categories": 13,
-    "lastUpdated": "2026-02-12T04:15:16.550Z"
+    "lastUpdated": "2026-02-15T00:30:00.808Z"
   }
 }