@aicanvas/mcp 0.2.0 → 0.2.2

package/README.md

@@ -120,11 +120,11 @@ This opens a browser UI where you can call each tool by hand.
 | Env var | Default | What it does |
 |---|---|---|
 | `AICANVAS_REGISTRY_BASE` | `https://aicanvas.me/r` | Registry root URL. Override only for local development against a self-hosted mirror. |
-| `AICANVAS_TOKEN` | _(none)_ | Optional per-account token. The website bakes it into the MCP config it gives you. It identifies your account so pulls count against the right quota and unlock premium content. Sent as a `Bearer` token on every registry request. Absent means anonymous, which is subject to the daily free limit. |
+| `AICANVAS_TOKEN` | _(none)_ | Optional per-account token. The website bakes it into the MCP config it gives you. It identifies your AI Canvas account so source pulls are authorized and any premium content you own unlocks. Sent as a `Bearer` token on every registry request. Without it you are anonymous: metadata browsing still works, but pulling a component's source returns a short "create a free account" notice instead of the code. |
 
-### Daily limits and premium content
+### Accounts and premium content
 
-Anonymous use is capped by a daily free limit, and some content (such as full design systems) is premium. When you hit the limit or request gated content without entitlement, a source fetch returns HTTP 402 and the tool reports a clear message: upgrade at [aicanvas.me/pricing](https://aicanvas.me/pricing), set `AICANVAS_TOKEN` to use your account, and update with `npx @aicanvas/mcp@latest`. Metadata browsing (`list_categories`, `list_components`, `search_components`, `list_systems`) is not gated. The 402 only affects source fetches (`get_component`, `get_system`, `get_template`).
+Browsing metadata (`list_categories`, `list_components`, `search_components`, `list_systems`, `get_install_command`) is free and needs no account. Pulling actual source (`get_component`, `get_system`, `get_template`) runs against a free AI Canvas account: set `AICANVAS_TOKEN` from your account and the website gives you the ready-made config. Without a token, a free-component source pull returns a short "create a free account" notice instead of the code, and premium content (full design systems and templates) returns HTTP 402 with an upgrade link at [aicanvas.me/pricing](https://aicanvas.me/pricing). Update anytime with `npx @aicanvas/mcp@latest`.
 
 ## How the registry stays fresh
 

package/dist/index.js

@@ -20,11 +20,12 @@ import { z } from 'zod';
 const REGISTRY_BASE = process.env.AICANVAS_REGISTRY_BASE ?? 'https://aicanvas.me/r';
 const META_URL = `${REGISTRY_BASE}/aicanvas-mcp.json`;
 const META_TTL_MS = 5 * 60 * 1000; // 5 minutes — meta updates with deploys
-const MCP_VERSION = '0.2.0';
+const MCP_VERSION = '0.2.1';
 const USER_AGENT = `aicanvas-mcp/${MCP_VERSION}`;
 // Optional per-user token (the website bakes it into the copied MCP config).
-// Identifies the account so pulls count against the right quota and unlock
-// premium content. Absent = anonymous (subject to the daily free limit).
+// Identifies the account so free-component source pulls are authorized and any
+// premium content you own unlocks. Absent = anonymous: metadata browsing still
+// works, but source pulls of free components need a free account.
 const USER_TOKEN = process.env.AICANVAS_TOKEN ?? '';
 function registryHeaders() {
     return {
@@ -53,10 +54,30 @@ async function fetchComponentSource(slug) {
     if (res.status === 402) {
         const j = (await res.json().catch(() => ({})));
         throw new Error(j.message ??
-            'This requires AI Canvas Premium, or you have hit the daily free limit. ' +
-                'Upgrade at https://aicanvas.me/pricing. Set AICANVAS_TOKEN to use your account, ' +
+            'This is premium AI Canvas content. Upgrade at https://aicanvas.me/pricing, ' +
+                'then use the AI Canvas MCP config from your account (your token is included) ' +
                 'and update with: npx @aicanvas/mcp@latest');
     }
+    // Free component pulled without an account: the registry returns a 200
+    // placeholder (not a 402), tagged with this header. Surface a warm sign-up
+    // CTA instead of handing the placeholder back as if it were real source.
+    if (res.headers.get('x-aicanvas-content-type') === 'free-account-required') {
+        const j = (await res.json().catch(() => ({})));
+        const name = typeof j.title === 'string'
+            ? j.title.replace(/\s*\(free account required\)\s*$/i, '')
+            : slug;
+        throw new Error(`Almost there! "${name}" is free with an AI Canvas account (free, unlimited installs). ` +
+            `Sign up at https://aicanvas.me/account/sign-up, then use the AI Canvas MCP config from ` +
+            `your account (your token is included) and ask again.`);
+    }
+    // NOTE: premium standalones ALSO return a 200 placeholder (header
+    // 'premium-standalone'), but that header value is NOT unique to the
+    // placeholder — an entitled subscriber's REAL source carries it too (the
+    // success path stamps the contentType). Keying the MCP on it would strip a
+    // paying subscriber's real component. So premium is deliberately NOT
+    // intercepted here. Closing that footgun safely needs premiumStub to emit a
+    // distinct header (like freeAccountStub's 'free-account-required'); tracked
+    // as a separate, billing-reviewed follow-up.
     if (!res.ok) {
         throw new Error(`Failed to fetch source for "${slug}" from ${url}: ${res.status} ${res.statusText}`);
     }
@@ -158,7 +179,7 @@ server.registerTool('list_categories', {
     try {
         const meta = await fetchMeta();
         const lines = [
-            `AI Canvas — ${meta.componentCount} components across ${meta.categories.length} categories.`,
+            `AI Canvas: ${meta.componentCount} components across ${meta.categories.length} categories.`,
             '',
             ...meta.categories.map((c) => `  ${c.label.padEnd(24)}  ${String(c.count).padStart(3)} components`),
         ];
@@ -395,7 +416,7 @@ server.registerTool('get_install_command', {
                     '',
                     `  ${component.installCommand}`,
                     '',
-                    `Dependencies: ${component.dependencies.join(', ') || '(none — React only)'}`,
+                    `Dependencies: ${component.dependencies.join(', ') || '(none, React only)'}`,
                     `Source: ${component.sourceUrl}`,
                     `Preview: ${component.homepageUrl}`,
                 ].join('\n')),

package/package.json

@@ -1,15 +1,29 @@
 {
   "name": "@aicanvas/mcp",
-  "version": "0.2.0",
+  "version": "0.2.2",
+  "mcpName": "io.github.uiNerd16/aicanvas",
   "description": "Model Context Protocol server for AI Canvas — search, inspect, and install components from the aicanvas.me registry directly from your AI editor.",
   "keywords": [
     "mcp",
     "model-context-protocol",
+    "mcp-server",
     "aicanvas",
     "shadcn",
-    "react",
-    "components",
-    "framer-motion"
+    "shadcn-registry",
+    "shadcn-ui",
+    "react-components",
+    "ui-components",
+    "component-library",
+    "framer-motion",
+    "animated-components",
+    "tailwindcss",
+    "design-system",
+    "ai-agents",
+    "ai-coding",
+    "claude",
+    "cursor",
+    "code-generation",
+    "registry"
   ],
   "homepage": "https://aicanvas.me",
   "repository": {