@aborruso/ckan-mcp-server 0.4.91 → 0.4.93

package/LOG.md

@@ -1,7 +1,17 @@
 # LOG
 
+## 2026-03-24
+
+### v0.4.93
+
+- fix(worker): return 405 immediately for GET /mcp — prevents bot scanners from hanging the Worker and consuming CPU quota
+
 ## 2026-03-23
 
+### v0.4.92
+
+- fix(http): create server + transport per request — SDK 1.26.0 security fix enforces stateless transport cannot be reused across requests
+
 ### v0.4.91
 
 - fix(worker): create server + transport per request — SDK 1.27.1 enforces stateless transport cannot be reused across requests

package/dist/index.js

@@ -1094,8 +1094,8 @@ function compactPackageShow(result, serverUrl) {
     } : {}
   };
 }
-function registerPackageTools(server2) {
-  server2.registerTool(
+function registerPackageTools(server) {
+  server.registerTool(
     "ckan_package_search",
     {
       title: "Search CKAN Datasets",
@@ -1448,7 +1448,7 @@ Note: showing top ${sorted.length} only. Use \`response_format: json\` for full
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_find_relevant_datasets",
     {
       title: "Find Relevant CKAN Datasets",
@@ -1636,7 +1636,7 @@ Typical workflow: ckan_find_relevant_datasets \u2192 ckan_package_show (inspect
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_package_show",
     {
       title: "Show CKAN Dataset Details",
@@ -1715,7 +1715,7 @@ Typical workflow: ckan_package_show \u2192 pick a resource with datastore_active
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_list_resources",
     {
       title: "List CKAN Dataset Resources",
@@ -1939,8 +1939,8 @@ function compactOrganizationShow(result, serverUrl) {
     }))
   };
 }
-function registerOrganizationTools(server2) {
-  server2.registerTool(
+function registerOrganizationTools(server) {
+  server.registerTool(
     "ckan_organization_list",
     {
       title: "List CKAN Organizations",
@@ -2134,7 +2134,7 @@ Note: organization_list returned 500; using package_search facets.
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_organization_show",
     {
       title: "Show CKAN Organization Details",
@@ -2198,7 +2198,7 @@ Typical workflow: ckan_organization_show \u2192 ckan_package_show (inspect a dat
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_organization_search",
     {
       title: "Search CKAN Organizations by Name",
@@ -2432,8 +2432,8 @@ function compactDatastoreResult(result) {
     total: result.total ?? 0
   };
 }
-function registerDatastoreTools(server2) {
-  server2.registerTool(
+function registerDatastoreTools(server) {
+  server.registerTool(
     "ckan_datastore_search",
     {
       title: "Search CKAN DataStore",
@@ -2524,7 +2524,7 @@ Typical workflow: ckan_package_search \u2192 ckan_package_show (find resource_id
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_datastore_search_sql",
     {
       title: "Search CKAN DataStore with SQL",
@@ -2607,8 +2607,8 @@ function formatStatusMarkdown(result, serverUrl, hvdCount) {
 **Site URL**: ${result.site_url || "N/A"}
 ` + sparqlLine + hvdLine;
 }
-function registerStatusTools(server2) {
-  server2.registerTool(
+function registerStatusTools(server) {
+  server.registerTool(
     "ckan_status_show",
     {
       title: "Check CKAN Server Status",
@@ -2693,8 +2693,8 @@ function normalizeTagFacets(result) {
   }
   return [];
 }
-function registerTagTools(server2) {
-  server2.registerTool(
+function registerTagTools(server) {
+  server.registerTool(
     "ckan_tag_list",
     {
       title: "List CKAN Tags",
@@ -2914,8 +2914,8 @@ function compactGroupShow(result) {
     }))
   };
 }
-function registerGroupTools(server2) {
-  server2.registerTool(
+function registerGroupTools(server) {
+  server.registerTool(
     "ckan_group_list",
     {
       title: "List CKAN Groups",
@@ -3041,7 +3041,7 @@ Typical workflow: ckan_group_list \u2192 ckan_group_show (inspect one) \u2192 ck
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_group_show",
     {
       title: "Show CKAN Group Details",
@@ -3102,7 +3102,7 @@ Typical workflow: ckan_group_show \u2192 ckan_package_show (inspect a dataset) \
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_group_search",
     {
       title: "Search CKAN Groups by Name",
@@ -3830,8 +3830,8 @@ function formatQualityDetailsMarkdown(data, datasetId) {
   lines.push(`Metrics endpoint: ${breakdown.metricsUrl || `${MQA_METRICS_BASE}/${portalId}/metrics`}`);
   return lines.join("\n");
 }
-function registerQualityTools(server2) {
-  server2.registerTool(
+function registerQualityTools(server) {
+  server.registerTool(
     "ckan_get_mqa_quality",
     {
       title: "Get MQA Quality Score",
@@ -3880,7 +3880,7 @@ The MQA (Metadata Quality Assurance) system is operated by data.europa.eu and on
       }
     }
   );
-  server2.registerTool(
+  server.registerTool(
     "ckan_get_mqa_quality_details",
     {
       title: "Get MQA Quality Details",
@@ -4015,8 +4015,8 @@ function formatAnalyzeDatasetsMarkdown(serverUrl, query, total, datasets) {
   }
   return md;
 }
-function registerAnalyzeTools(server2) {
-  server2.registerTool(
+function registerAnalyzeTools(server) {
+  server.registerTool(
     "ckan_analyze_datasets",
     {
       title: "Analyze CKAN Datasets and DataStore Schema",
@@ -4142,8 +4142,8 @@ function formatCatalogStatsMarkdown(serverUrl, total, facets) {
   }
   return md;
 }
-function registerCatalogStatsTools(server2) {
-  server2.registerTool(
+function registerCatalogStatsTools(server) {
+  server.registerTool(
     "ckan_catalog_stats",
     {
       title: "Get CKAN Portal Statistics",
@@ -4311,8 +4311,8 @@ function formatSparqlJson(data) {
   });
   return { count: rows.length, columns: vars, rows };
 }
-function registerSparqlTools(server2) {
-  server2.registerTool(
+function registerSparqlTools(server) {
+  server.registerTool(
     "sparql_query",
     {
       title: "SPARQL Query",
@@ -4435,8 +4435,8 @@ ${rows}
 ---
 \u{1F4A1} Use the portal URL as \`server_url\` in any CKAN tool.`;
 }
-function registerPortalDiscoveryTools(server2) {
-  server2.registerTool(
+function registerPortalDiscoveryTools(server) {
+  server.registerTool(
     "ckan_find_portals",
     {
       title: "Find CKAN Portals",
@@ -4535,13 +4535,13 @@ function parseCkanUri(uri) {
   if (!type || !id) {
     throw new Error("Invalid ckan:// URI: missing type or id");
   }
-  const server2 = getPortalApiUrlForHostname(hostname) || `https://${hostname}`;
-  return { server: server2, type, id };
+  const server = getPortalApiUrlForHostname(hostname) || `https://${hostname}`;
+  return { server, type, id };
 }
 
 // src/resources/dataset.ts
-function registerDatasetResource(server2) {
-  server2.registerResource(
+function registerDatasetResource(server) {
+  server.registerResource(
     "ckan-dataset",
     new ResourceTemplate("ckan://{server}/dataset/{id}", { list: void 0 }),
     {
@@ -4584,8 +4584,8 @@ function registerDatasetResource(server2) {
 
 // src/resources/resource.ts
 import { ResourceTemplate as ResourceTemplate2 } from "@modelcontextprotocol/sdk/server/mcp.js";
-function registerResourceResource(server2) {
-  server2.registerResource(
+function registerResourceResource(server) {
+  server.registerResource(
     "ckan-resource",
     new ResourceTemplate2("ckan://{server}/resource/{id}", { list: void 0 }),
     {
@@ -4628,8 +4628,8 @@ function registerResourceResource(server2) {
 
 // src/resources/organization.ts
 import { ResourceTemplate as ResourceTemplate3 } from "@modelcontextprotocol/sdk/server/mcp.js";
-function registerOrganizationResource(server2) {
-  server2.registerResource(
+function registerOrganizationResource(server) {
+  server.registerResource(
     "ckan-organization",
     new ResourceTemplate3("ckan://{server}/organization/{name}", {
       list: void 0
@@ -4693,8 +4693,8 @@ var buildFormatFilter = (rawFormat) => {
   );
   return `(${clauses.join(" OR ")})`;
 };
-var registerDatasetFilterResource = (server2, config) => {
-  server2.registerResource(
+var registerDatasetFilterResource = (server, config) => {
+  server.registerResource(
     config.name,
     new ResourceTemplate4(config.template, { list: void 0 }),
     {
@@ -4735,8 +4735,8 @@ var registerDatasetFilterResource = (server2, config) => {
     }
   );
 };
-function registerGroupDatasetsResource(server2) {
-  registerDatasetFilterResource(server2, {
+function registerGroupDatasetsResource(server) {
+  registerDatasetFilterResource(server, {
     name: "ckan-group-datasets",
     template: "ckan://{server}/group/{name}/datasets",
     title: "CKAN Group Datasets",
@@ -4744,8 +4744,8 @@ function registerGroupDatasetsResource(server2) {
     buildFq: (variables) => `groups:"${escapeSolrTerm(variables.name)}"`
   });
 }
-function registerOrganizationDatasetsResource(server2) {
-  registerDatasetFilterResource(server2, {
+function registerOrganizationDatasetsResource(server) {
+  registerDatasetFilterResource(server, {
     name: "ckan-organization-datasets",
     template: "ckan://{server}/organization/{name}/datasets",
     title: "CKAN Organization Datasets",
@@ -4753,8 +4753,8 @@ function registerOrganizationDatasetsResource(server2) {
     buildFq: (variables) => `organization:"${escapeSolrTerm(variables.name)}"`
   });
 }
-function registerTagDatasetsResource(server2) {
-  registerDatasetFilterResource(server2, {
+function registerTagDatasetsResource(server) {
+  registerDatasetFilterResource(server, {
     name: "ckan-tag-datasets",
     template: "ckan://{server}/tag/{name}/datasets",
     title: "CKAN Tag Datasets",
@@ -4762,8 +4762,8 @@ function registerTagDatasetsResource(server2) {
     buildFq: (variables) => `tags:"${escapeSolrTerm(variables.name)}"`
   });
 }
-function registerFormatDatasetsResource(server2) {
-  registerDatasetFilterResource(server2, {
+function registerFormatDatasetsResource(server) {
+  registerDatasetFilterResource(server, {
     name: "ckan-format-datasets",
     template: "ckan://{server}/format/{format}/datasets",
     title: "CKAN Format Datasets",
@@ -4773,14 +4773,14 @@ function registerFormatDatasetsResource(server2) {
 }
 
 // src/resources/index.ts
-function registerAllResources(server2) {
-  registerDatasetResource(server2);
-  registerResourceResource(server2);
-  registerOrganizationResource(server2);
-  registerGroupDatasetsResource(server2);
-  registerOrganizationDatasetsResource(server2);
-  registerTagDatasetsResource(server2);
-  registerFormatDatasetsResource(server2);
+function registerAllResources(server) {
+  registerDatasetResource(server);
+  registerResourceResource(server);
+  registerOrganizationResource(server);
+  registerGroupDatasetsResource(server);
+  registerOrganizationDatasetsResource(server);
+  registerTagDatasetsResource(server);
+  registerFormatDatasetsResource(server);
 }
 
 // src/prompts/theme.ts
@@ -4838,8 +4838,8 @@ ckan_package_search({
 Note: metadata_modified is a CKAN record timestamp (publish time on source portals,
 harvest time on aggregators). If the user asks for
 content publication dates, prefer issued (or modified) with explicit ISO ranges.`;
-var registerThemePrompt = (server2) => {
-  server2.registerPrompt(
+var registerThemePrompt = (server) => {
+  server.registerPrompt(
     THEME_PROMPT_NAME,
     {
       title: "Search datasets by theme",
@@ -4883,8 +4883,8 @@ ckan_package_search({
 Note: metadata_modified is a CKAN record timestamp (publish time on source portals,
 harvest time on aggregators). If the user asks for
 content publication dates, prefer issued (or modified) with explicit ISO ranges.`;
-var registerOrganizationPrompt = (server2) => {
-  server2.registerPrompt(
+var registerOrganizationPrompt = (server) => {
+  server.registerPrompt(
     ORGANIZATION_PROMPT_NAME,
     {
       title: "Search datasets by organization",
@@ -4917,8 +4917,8 @@ Tip: try uppercase (CSV/JSON) or common variants if results are sparse.
 Note: metadata_modified is a CKAN record timestamp (publish time on source portals,
 harvest time on aggregators). If the user asks for
 content publication dates, prefer issued (or modified) with explicit ISO ranges.`;
-var registerFormatPrompt = (server2) => {
-  server2.registerPrompt(
+var registerFormatPrompt = (server) => {
+  server.registerPrompt(
     FORMAT_PROMPT_NAME,
     {
       title: "Search datasets by resource format",
@@ -4975,8 +4975,8 @@ ckan_package_search({
   content_recent_days: 30,
   rows: ${rows}
 })`;
-var registerRecentPrompt = (server2) => {
-  server2.registerPrompt(
+var registerRecentPrompt = (server) => {
+  server.registerPrompt(
     RECENT_PROMPT_NAME,
     {
       title: "Find recently updated datasets",
@@ -5026,8 +5026,8 @@ ckan_datastore_search_sql({
   server_url: "${serverUrl}",
   sql: "SELECT * FROM "<resource-id>" LIMIT 10"
 })`;
-var registerDatasetAnalysisPrompt = (server2) => {
-  server2.registerPrompt(
+var registerDatasetAnalysisPrompt = (server) => {
+  server.registerPrompt(
     DATASET_ANALYSIS_PROMPT_NAME,
     {
       title: "Analyze a dataset",
@@ -5097,8 +5097,8 @@ Note: HVD categories are defined by EU regulation. Common ones on Italian portal
 - Statistical: \`http://data.europa.eu/bna/c_e1da4e07\`
 - Meteorological: \`http://data.europa.eu/bna/c_164e0bf5\``;
 };
-var registerHvdPrompt = (server2) => {
-  server2.registerPrompt(
+var registerHvdPrompt = (server) => {
+  server.registerPrompt(
     HVD_PROMPT_NAME,
     {
       title: "Search High-Value Datasets (HVD)",
@@ -5116,61 +5116,63 @@ var registerHvdPrompt = (server2) => {
 };
 
 // src/prompts/index.ts
-var registerAllPrompts = (server2) => {
-  registerThemePrompt(server2);
-  registerOrganizationPrompt(server2);
-  registerFormatPrompt(server2);
-  registerRecentPrompt(server2);
-  registerDatasetAnalysisPrompt(server2);
-  registerHvdPrompt(server2);
+var registerAllPrompts = (server) => {
+  registerThemePrompt(server);
+  registerOrganizationPrompt(server);
+  registerFormatPrompt(server);
+  registerRecentPrompt(server);
+  registerDatasetAnalysisPrompt(server);
+  registerHvdPrompt(server);
 };
 
 // src/server.ts
 function createServer() {
   return new McpServer({
     name: "ckan-mcp-server",
-    version: "0.4.91"
+    version: "0.4.93"
   });
 }
-function registerAll(server2) {
-  registerPackageTools(server2);
-  registerOrganizationTools(server2);
-  registerDatastoreTools(server2);
-  registerStatusTools(server2);
-  registerTagTools(server2);
-  registerGroupTools(server2);
-  registerQualityTools(server2);
-  registerAnalyzeTools(server2);
-  registerCatalogStatsTools(server2);
-  registerSparqlTools(server2);
-  registerPortalDiscoveryTools(server2);
-  registerAllResources(server2);
-  registerAllPrompts(server2);
+function registerAll(server) {
+  registerPackageTools(server);
+  registerOrganizationTools(server);
+  registerDatastoreTools(server);
+  registerStatusTools(server);
+  registerTagTools(server);
+  registerGroupTools(server);
+  registerQualityTools(server);
+  registerAnalyzeTools(server);
+  registerCatalogStatsTools(server);
+  registerSparqlTools(server);
+  registerPortalDiscoveryTools(server);
+  registerAllResources(server);
+  registerAllPrompts(server);
 }
 
 // src/transport/stdio.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-async function runStdio(server2) {
+async function runStdio(server) {
   const transport2 = new StdioServerTransport();
-  await server2.connect(transport2);
+  await server.connect(transport2);
   console.error("CKAN MCP server running on stdio");
 }
 
 // src/transport/http.ts
 import express from "express";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-async function runHTTP(server2) {
+async function runHTTP() {
   const app = express();
   app.use(express.json());
-  const transport2 = new StreamableHTTPServerTransport({
-    sessionIdGenerator: void 0,
-    enableJsonResponse: true
-  });
-  await server2.connect(transport2);
   app.get("/.well-known/oauth-authorization-server", (_req, res) => {
     res.status(404).json({ error: "authorization_not_supported", error_description: "This server does not require authentication" });
   });
   app.post("/mcp", async (req, res) => {
+    const server = createServer();
+    registerAll(server);
+    const transport2 = new StreamableHTTPServerTransport({
+      sessionIdGenerator: void 0,
+      enableJsonResponse: true
+    });
+    await server.connect(transport2);
     await transport2.handleRequest(req, res, req.body);
   });
   const port = parseInt(process.env.PORT || "3000");
@@ -5180,15 +5182,15 @@ async function runHTTP(server2) {
 }
 
 // src/index.ts
-var server = createServer();
-registerAll(server);
 var transport = process.env.TRANSPORT || "stdio";
 if (transport === "http") {
-  runHTTP(server).catch((error) => {
+  runHTTP().catch((error) => {
     console.error("Server error:", error);
     process.exit(1);
   });
 } else {
+  const server = createServer();
+  registerAll(server);
   runStdio(server).catch((error) => {
     console.error("Server error:", error);
     process.exit(1);