@aiwerk/mcp-bridge 2.6.7 → 2.7.0

package/dist/bin/mcp-bridge.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { readFileSync, existsSync } from "fs";
-import { join, dirname, resolve } from "path";
+import { readFileSync, existsSync, writeFileSync } from "fs";
+import { join, dirname, resolve, extname } from "path";
 import { fileURLToPath } from "url";
-import { platform } from "os";
+import { platform, homedir } from "os";
 import { execFileSync } from "child_process";
 import { loadConfig, initConfigDir } from "../src/config.js";
 import { StandaloneServer } from "../src/standalone-server.js";
@@ -10,6 +10,7 @@ import { PACKAGE_VERSION } from "../src/protocol.js";
 import { checkForUpdate, runUpdate } from "../src/update-checker.js";
 import { FileTokenStore } from "../src/token-store.js";
 import { performAuthCodeLogin, performDeviceCodeLogin } from "../src/cli-auth.js";
+import { RateLimiter } from "../src/rate-limiter.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 // After tsc, this file lives at dist/bin/mcp-bridge.js.
@@ -96,6 +97,22 @@ function parseArgs(argv) {
             case "--offline":
                 args.offline = true;
                 break;
+            case "--daily":
+                i++;
+                args.daily = parseInt(argv[i], 10);
+                if (isNaN(args.daily)) {
+                    process.stderr.write("Error: --daily requires a number\n");
+                    process.exit(1);
+                }
+                break;
+            case "--monthly":
+                i++;
+                args.monthly = parseInt(argv[i], 10);
+                if (isNaN(args.monthly)) {
+                    process.stderr.write("Error: --monthly requires a number\n");
+                    process.exit(1);
+                }
+                break;
             case "init":
                 args.command = "init";
                 break;
@@ -114,6 +131,12 @@ function parseArgs(argv) {
             case "update":
                 args.command = "update";
                 break;
+            case "usage":
+                args.command = "usage";
+                break;
+            case "limit":
+                args.command = "limit";
+                break;
             case "auth":
                 args.command = "auth";
                 // Consume subcommand
@@ -152,6 +175,9 @@ Usage:
   mcp-bridge catalog [--offline]    List available servers
   mcp-bridge servers                List configured servers
   mcp-bridge search <query>         Search catalog by keyword
+  mcp-bridge usage                  Show current per-server call usage
+  mcp-bridge limit <server> [--daily N] [--monthly N]
+                                    Set per-server rate limits (0 = unlimited)
   mcp-bridge update [--check]       Check for / install updates
   mcp-bridge auth login <server>    Authenticate with an OAuth2 server
   mcp-bridge auth logout <server>   Remove stored token for a server
@@ -235,6 +261,118 @@ function cmdSearch(query, logger) {
     });
     process.stdout.write("\n");
 }
+function resolveConfigPath(configPath) {
+    if (!configPath) {
+        return join(homedir(), ".mcp-bridge", "config.json");
+    }
+    if (configPath.endsWith("/") || configPath.endsWith("\\") || !extname(configPath)) {
+        return join(configPath, "config.json");
+    }
+    return configPath;
+}
+function cmdUsage(configPath, logger) {
+    try {
+        const limiter = new RateLimiter();
+        const usage = limiter.getAllUsage();
+        let configServers = {};
+        try {
+            const config = loadConfig({ configPath, logger });
+            configServers = config.servers ?? {};
+        }
+        catch {
+            // Show usage files even when config is missing/unreadable.
+        }
+        const names = new Set([...Object.keys(usage), ...Object.keys(configServers)]);
+        if (names.size === 0) {
+            process.stdout.write("No usage data found.\n");
+            return;
+        }
+        process.stdout.write("\nRate limit usage (note: cached calls are not counted):\n\n");
+        process.stdout.write("  Server          Daily        Monthly      Limits\n");
+        process.stdout.write("  " + "─".repeat(78) + "\n");
+        for (const server of [...names].sort((a, b) => a.localeCompare(b))) {
+            const counts = usage[server] ?? { daily: 0, monthly: 0 };
+            const limit = configServers[server]?.rateLimit;
+            const dailyLimit = typeof limit?.maxCallsPerDay === "number" && limit.maxCallsPerDay > 0
+                ? limit.maxCallsPerDay
+                : "-";
+            const monthlyLimit = typeof limit?.maxCallsPerMonth === "number" && limit.maxCallsPerMonth > 0
+                ? limit.maxCallsPerMonth
+                : "-";
+            process.stdout.write(`  ${server.padEnd(16)}${`${counts.daily}`.padEnd(13)}${`${counts.monthly}`.padEnd(13)}daily=${dailyLimit} monthly=${monthlyLimit}\n`);
+        }
+        process.stdout.write("\n");
+    }
+    catch (err) {
+        logger.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
+function cmdLimit(args, logger) {
+    const server = args.positional[0];
+    if (!server) {
+        process.stderr.write("Usage: mcp-bridge limit <server> --daily <n> --monthly <n>\n");
+        process.exit(1);
+    }
+    const hasDaily = typeof args.daily === "number";
+    const hasMonthly = typeof args.monthly === "number";
+    if (!hasDaily && !hasMonthly) {
+        process.stderr.write("Error: provide at least one limit flag (--daily or --monthly)\n");
+        process.exit(1);
+    }
+    if (hasDaily && args.daily < 0) {
+        process.stderr.write("Error: --daily must be >= 0\n");
+        process.exit(1);
+    }
+    if (hasMonthly && args.monthly < 0) {
+        process.stderr.write("Error: --monthly must be >= 0\n");
+        process.exit(1);
+    }
+    const resolvedPath = resolveConfigPath(args.configPath);
+    if (!existsSync(resolvedPath)) {
+        logger.error(`Config file not found: ${resolvedPath}`);
+        process.exit(1);
+    }
+    try {
+        const raw = JSON.parse(readFileSync(resolvedPath, "utf-8"));
+        if (!raw.servers || typeof raw.servers !== "object" || !raw.servers[server]) {
+            logger.error(`Server "${server}" not found in config`);
+            process.exit(1);
+        }
+        if (!raw.servers[server].rateLimit || typeof raw.servers[server].rateLimit !== "object") {
+            raw.servers[server].rateLimit = {};
+        }
+        if (hasDaily) {
+            if (args.daily === 0) {
+                delete raw.servers[server].rateLimit.maxCallsPerDay;
+            }
+            else {
+                raw.servers[server].rateLimit.maxCallsPerDay = args.daily;
+            }
+        }
+        if (hasMonthly) {
+            if (args.monthly === 0) {
+                delete raw.servers[server].rateLimit.maxCallsPerMonth;
+            }
+            else {
+                raw.servers[server].rateLimit.maxCallsPerMonth = args.monthly;
+            }
+        }
+        if (raw.servers[server].rateLimit.maxCallsPerDay === undefined &&
+            raw.servers[server].rateLimit.maxCallsPerMonth === undefined) {
+            delete raw.servers[server].rateLimit;
+        }
+        writeFileSync(resolvedPath, JSON.stringify(raw, null, 2) + "\n", "utf-8");
+        const effectiveDaily = raw.servers[server].rateLimit?.maxCallsPerDay ?? "unlimited";
+        const effectiveMonthly = raw.servers[server].rateLimit?.maxCallsPerMonth ?? "unlimited";
+        process.stdout.write(`Updated limits for ${server}: daily=${effectiveDaily}, monthly=${effectiveMonthly}\n` +
+            `Check usage with: mcp-bridge usage\n`);
+    }
+    catch (err) {
+        logger.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
 function cmdInstall(serverName, logger) {
     const scriptDir = join(PACKAGE_ROOT, "scripts");
     try {
@@ -460,6 +598,12 @@ async function main() {
             }
             cmdSearch(args.positional[0], logger);
             break;
+        case "usage":
+            cmdUsage(args.configPath, logger);
+            break;
+        case "limit":
+            cmdLimit(args, logger);
+            break;
         case "install":
             if (args.positional.length === 0) {
                 process.stderr.write("Usage: mcp-bridge install <server>\n");

package/dist/src/index.d.ts

@@ -12,6 +12,8 @@ export { McpRouter } from "./mcp-router.js";
 export type { RouterToolHint, RouterServerStatus, RouterDispatchResponse, RouterTransportRefs } from "./mcp-router.js";
 export { ResultCache, createResultCacheKey, stableStringify } from "./result-cache.js";
 export type { ResultCacheConfig, ResultCacheStats } from "./result-cache.js";
+export { RateLimiter } from "./rate-limiter.js";
+export type { RateLimitConfig, RateLimitResult } from "./rate-limiter.js";
 export { ToolResolver } from "./tool-resolution.js";
 export type { ToolResolutionResult, ToolResolutionCandidate } from "./tool-resolution.js";
 export { convertJsonSchemaToTypeBox, createToolParameters, setTypeBoxLoader, setSchemaLogger } from "./schema-convert.js";

package/dist/src/index.js

@@ -13,6 +13,7 @@ export { performAuthCodeLogin, generateCodeVerifier, computeCodeChallenge } from
 export { McpRouter } from "./mcp-router.js";
 // Result cache
 export { ResultCache, createResultCacheKey, stableStringify } from "./result-cache.js";
+export { RateLimiter } from "./rate-limiter.js";
 export { ToolResolver } from "./tool-resolution.js";
 // Schema conversion
 export { convertJsonSchemaToTypeBox, createToolParameters, setTypeBoxLoader, setSchemaLogger } from "./schema-convert.js";

package/dist/src/mcp-router.d.ts

@@ -39,6 +39,7 @@ export type RouterDispatchResponse = {
     tool: string;
     result: any;
     retries?: number;
+    warning?: string;
 } | {
     server: string;
     action: "schema";
@@ -110,6 +111,7 @@ export declare class McpRouter {
     private readonly states;
     private readonly toolResolver;
     private readonly tokenManager;
+    private readonly rateLimiter;
     private readonly requestIdState;
     private intentRouter;
     private promotion;

package/dist/src/mcp-router.js

@@ -12,6 +12,7 @@ import { ResultCache, createResultCacheKey } from "./result-cache.js";
 import { ToolResolver } from "./tool-resolution.js";
 import { OAuth2TokenManager } from "./oauth2-token-manager.js";
 import { FileTokenStore } from "./token-store.js";
+import { RateLimiter } from "./rate-limiter.js";
 const DEFAULT_IDLE_TIMEOUT_MS = 10 * 60 * 1000;
 const DEFAULT_CONNECT_ERROR_COOLDOWN_MS = 10 * 1000;
 const DEFAULT_MAX_CONCURRENT = 5;
@@ -30,6 +31,7 @@ export class McpRouter {
     states = new Map();
     toolResolver;
     tokenManager;
+    rateLimiter;
     requestIdState = { value: 0 };
     intentRouter = null;
     promotion = null;
@@ -55,6 +57,7 @@ export class McpRouter {
         this.maxBatchSize = clientConfig.maxBatchSize ?? DEFAULT_MAX_BATCH_SIZE;
         this.toolResolver = new ToolResolver(Object.keys(servers));
         this.tokenManager = new OAuth2TokenManager(logger, new FileTokenStore());
+        this.rateLimiter = new RateLimiter();
         if (clientConfig.adaptivePromotion?.enabled) {
             this.promotion = new AdaptivePromotion(clientConfig.adaptivePromotion, logger);
         }
@@ -249,6 +252,11 @@ export class McpRouter {
                     return { server, action: "call", tool, result: cachedResult };
                 }
             }
+            // Rate limit check BEFORE markUsed — rejected calls should not keep connection alive
+            const rateLimitResult = this.rateLimiter.checkAndIncrement(server, serverConfig.rateLimit);
+            if (!rateLimitResult.allowed) {
+                return this.error("mcp_error", rateLimitResult.error || "Rate limit reached");
+            }
             this.markUsed(server);
             const callOutcome = await this.callToolWithRetry(server, tool, params ?? {}, state.transport);
             const response = callOutcome.response;
@@ -270,6 +278,7 @@ export class McpRouter {
                 action: "call",
                 tool,
                 result,
+                ...(rateLimitResult.warning ? { warning: rateLimitResult.warning } : {}),
                 ...(callOutcome.retries > 0 ? { retries: callOutcome.retries } : {})
             };
         }

package/dist/src/rate-limiter.d.ts

@@ -0,0 +1,29 @@
+export interface RateLimitConfig {
+    maxCallsPerDay?: number;
+    maxCallsPerMonth?: number;
+}
+export interface RateLimitResult {
+    allowed: boolean;
+    warning?: string;
+    error?: string;
+}
+export declare class RateLimiter {
+    private readonly usageDir;
+    constructor(usageDir?: string);
+    checkLimit(serverId: string, config?: RateLimitConfig): RateLimitResult;
+    checkAndIncrement(serverId: string, config?: RateLimitConfig): RateLimitResult;
+    getUsage(serverId: string): {
+        daily: number;
+        monthly: number;
+    };
+    getAllUsage(): Record<string, {
+        daily: number;
+        monthly: number;
+        dailyLimit?: number;
+        monthlyLimit?: number;
+    }>;
+    reset(serverId: string): void;
+    private loadUsage;
+    private saveUsage;
+    private serverFilePath;
+}

package/dist/src/rate-limiter.js

@@ -0,0 +1,178 @@
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+function utcDate(now) {
+    return now.toISOString().slice(0, 10);
+}
+function utcMonth(now) {
+    return now.toISOString().slice(0, 7);
+}
+function isPositiveLimit(value) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0;
+}
+function warningThreshold(limit) {
+    return Math.max(1, Math.ceil(limit * 0.8));
+}
+function nextSuggestedLimit(limit) {
+    return Math.ceil(limit * 1.5);
+}
+export class RateLimiter {
+    usageDir;
+    constructor(usageDir) {
+        this.usageDir = usageDir ?? join(homedir(), ".mcp-bridge", "usage");
+    }
+    checkLimit(serverId, config) {
+        const dailyLimit = isPositiveLimit(config?.maxCallsPerDay) ? config.maxCallsPerDay : undefined;
+        const monthlyLimit = isPositiveLimit(config?.maxCallsPerMonth) ? config.maxCallsPerMonth : undefined;
+        if (!dailyLimit && !monthlyLimit) {
+            return { allowed: true };
+        }
+        const { usage, changed } = this.loadUsage(serverId);
+        if (changed) {
+            this.saveUsage(serverId, usage);
+        }
+        if (dailyLimit && usage.daily.count >= dailyLimit) {
+            return {
+                allowed: false,
+                error: `❌ Rate limit reached for ${serverId}: ${usage.daily.count}/${dailyLimit} daily calls used. Resets at midnight UTC. To adjust: mcp-bridge limit ${serverId} --daily ${nextSuggestedLimit(dailyLimit)}. To check usage: mcp-bridge usage. To disable limit: mcp-bridge limit ${serverId} --daily 0`
+            };
+        }
+        if (monthlyLimit && usage.monthly.count >= monthlyLimit) {
+            return {
+                allowed: false,
+                error: `❌ Rate limit reached for ${serverId}: ${usage.monthly.count}/${monthlyLimit} monthly calls used. Resets on the 1st of each month at midnight UTC. To adjust: mcp-bridge limit ${serverId} --monthly ${nextSuggestedLimit(monthlyLimit)}. To check usage: mcp-bridge usage. To disable limit: mcp-bridge limit ${serverId} --monthly 0`
+            };
+        }
+        return { allowed: true };
+    }
+    checkAndIncrement(serverId, config) {
+        const dailyLimit = isPositiveLimit(config?.maxCallsPerDay) ? config.maxCallsPerDay : undefined;
+        const monthlyLimit = isPositiveLimit(config?.maxCallsPerMonth) ? config.maxCallsPerMonth : undefined;
+        if (!dailyLimit && !monthlyLimit) {
+            return { allowed: true };
+        }
+        // Single loadUsage call — check + increment in one pass (avoids double file read)
+        const { usage, changed } = this.loadUsage(serverId);
+        if (changed) {
+            this.saveUsage(serverId, usage);
+        }
+        if (dailyLimit && usage.daily.count >= dailyLimit) {
+            return {
+                allowed: false,
+                error: `❌ Rate limit reached for ${serverId}: ${usage.daily.count}/${dailyLimit} daily calls used. Resets at midnight UTC. To adjust: mcp-bridge limit ${serverId} --daily ${nextSuggestedLimit(dailyLimit)}. To check usage: mcp-bridge usage. To disable limit: mcp-bridge limit ${serverId} --daily 0`
+            };
+        }
+        if (monthlyLimit && usage.monthly.count >= monthlyLimit) {
+            return {
+                allowed: false,
+                error: `❌ Rate limit reached for ${serverId}: ${usage.monthly.count}/${monthlyLimit} monthly calls used. Resets on the 1st of each month at midnight UTC. To adjust: mcp-bridge limit ${serverId} --monthly ${nextSuggestedLimit(monthlyLimit)}. To check usage: mcp-bridge usage. To disable limit: mcp-bridge limit ${serverId} --monthly 0`
+            };
+        }
+        usage.daily.count += 1;
+        usage.monthly.count += 1;
+        this.saveUsage(serverId, usage);
+        if (dailyLimit && usage.daily.count >= warningThreshold(dailyLimit) && usage.daily.count < dailyLimit) {
+            return {
+                allowed: true,
+                warning: `⚠️ ${serverId}: 80% of daily limit used (${usage.daily.count}/${dailyLimit}). Adjust with: mcp-bridge limit ${serverId} --daily <number>`
+            };
+        }
+        if (monthlyLimit && usage.monthly.count >= warningThreshold(monthlyLimit) && usage.monthly.count < monthlyLimit) {
+            return {
+                allowed: true,
+                warning: `⚠️ ${serverId}: 80% of monthly limit used (${usage.monthly.count}/${monthlyLimit}). Adjust with: mcp-bridge limit ${serverId} --monthly <number>`
+            };
+        }
+        return { allowed: true };
+    }
+    getUsage(serverId) {
+        const { usage, changed } = this.loadUsage(serverId);
+        if (changed) {
+            this.saveUsage(serverId, usage);
+        }
+        return { daily: usage.daily.count, monthly: usage.monthly.count };
+    }
+    getAllUsage() {
+        const all = {};
+        if (!existsSync(this.usageDir)) {
+            return all;
+        }
+        for (const fileName of readdirSync(this.usageDir)) {
+            if (!fileName.endsWith(".json"))
+                continue;
+            const encodedId = fileName.slice(0, -5);
+            let serverId;
+            try {
+                serverId = decodeURIComponent(encodedId);
+            }
+            catch {
+                serverId = encodedId;
+            }
+            const { usage, changed } = this.loadUsage(serverId);
+            if (changed) {
+                this.saveUsage(serverId, usage);
+            }
+            all[serverId] = {
+                daily: usage.daily.count,
+                monthly: usage.monthly.count
+            };
+        }
+        return all;
+    }
+    reset(serverId) {
+        const now = new Date();
+        this.saveUsage(serverId, {
+            daily: { date: utcDate(now), count: 0 },
+            monthly: { month: utcMonth(now), count: 0 }
+        });
+    }
+    loadUsage(serverId) {
+        const now = new Date();
+        const expectedDate = utcDate(now);
+        const expectedMonth = utcMonth(now);
+        const filePath = this.serverFilePath(serverId);
+        const fallback = {
+            daily: { date: expectedDate, count: 0 },
+            monthly: { month: expectedMonth, count: 0 }
+        };
+        if (!existsSync(filePath)) {
+            return { usage: fallback, changed: false };
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(readFileSync(filePath, "utf-8"));
+        }
+        catch {
+            return { usage: fallback, changed: true };
+        }
+        const dailyRaw = typeof parsed === "object" && parsed !== null ? parsed.daily : undefined;
+        const monthlyRaw = typeof parsed === "object" && parsed !== null ? parsed.monthly : undefined;
+        let changed = false;
+        const dailyDate = typeof dailyRaw?.date === "string" ? dailyRaw.date : expectedDate;
+        const dailyCount = typeof dailyRaw?.count === "number" && dailyRaw.count >= 0 ? dailyRaw.count : 0;
+        const monthlyMonth = typeof monthlyRaw?.month === "string" ? monthlyRaw.month : expectedMonth;
+        const monthlyCount = typeof monthlyRaw?.count === "number" && monthlyRaw.count >= 0 ? monthlyRaw.count : 0;
+        const usage = {
+            daily: { date: dailyDate, count: dailyCount },
+            monthly: { month: monthlyMonth, count: monthlyCount }
+        };
+        if (usage.daily.date !== expectedDate) {
+            usage.daily.date = expectedDate;
+            usage.daily.count = 0;
+            changed = true;
+        }
+        if (usage.monthly.month !== expectedMonth) {
+            usage.monthly.month = expectedMonth;
+            usage.monthly.count = 0;
+            changed = true;
+        }
+        return { usage, changed };
+    }
+    saveUsage(serverId, usage) {
+        mkdirSync(this.usageDir, { recursive: true });
+        writeFileSync(this.serverFilePath(serverId), JSON.stringify(usage, null, 2) + "\n", "utf-8");
+    }
+    serverFilePath(serverId) {
+        return join(this.usageDir, `${encodeURIComponent(serverId)}.json`);
+    }
+}

package/dist/src/types.d.ts

@@ -59,6 +59,10 @@ export interface McpServerConfig {
     };
     maxResultChars?: number;
     retry?: RetryConfig;
+    rateLimit?: {
+        maxCallsPerDay?: number;
+        maxCallsPerMonth?: number;
+    };
 }
 export interface McpClientConfig {
     servers: Record<string, McpServerConfig>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwerk/mcp-bridge",
-  "version": "2.6.7",
+  "version": "2.7.0",
   "description": "Standalone MCP server that multiplexes multiple MCP servers into one interface",
   "type": "module",
   "main": "./dist/src/index.js",

package/servers/apify/recipe.json

@@ -50,5 +50,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "2eHbBy6v0MMBTdnIusU9oNReuNjg1CKKA7iknkS7FxQNTuisjZFAW2x5DFjUgN9FqjWmlwwhSLnk/qhwfV42Cw==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:24:25.196Z"
   }
 }

package/servers/atlassian/recipe.json

@@ -9,7 +9,7 @@
       "type": "stdio",
       "command": "uvx",
       "args": [
-        "mcp-atlassian"
+        "mcp-atlassian@2.1.0"
       ],
       "env": {
         "CONFLUENCE_URL": "${CONFLUENCE_URL}",
@@ -38,7 +38,7 @@
   "install": {
     "method": "uvx",
     "package": "mcp-atlassian",
-    "version": "latest"
+    "version": "2.1.0"
   },
   "metadata": {
     "homepage": "https://github.com/sooperset/mcp-atlassian",
@@ -68,5 +68,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "ysHKVAb4IwPRJF3XtEEtumZC2xjt32ouGu5Dt3VrMl7DIp6PWb56JzewqLe4zJ14lVlksIgmDVrFCrVnVJ1QDw==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:24:29.672Z"
   }
 }

package/servers/chrome-devtools/recipe.json

@@ -55,5 +55,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "fo/w/oYgd8T4ecaOnSUq3vE5nl82RVB31Mj+2v5W/j6qM+wK17xstVMdiZuiqH+a6YDQXXe30S9enRjLK0y/CA==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:24:32.876Z"
   }
 }

package/servers/firecrawl/recipe.json

@@ -0,0 +1,79 @@
+{
+  "schemaVersion": 2,
+  "id": "firecrawl",
+  "name": "Firecrawl",
+  "description": "Web scraping, crawling, search, and structured data extraction — turn any website into clean markdown or structured data for AI agents",
+  "repository": "https://github.com/firecrawl/firecrawl-mcp-server",
+  "transports": [
+    {
+      "type": "stdio",
+      "command": "npx",
+      "args": [
+        "-y",
+        "firecrawl-mcp@3.12.1"
+      ],
+      "env": {
+        "FIRECRAWL_API_KEY": "${FIRECRAWL_API_KEY}"
+      }
+    }
+  ],
+  "auth": {
+    "required": true,
+    "type": "api-key",
+    "envVars": [
+      "FIRECRAWL_API_KEY"
+    ],
+    "credentialsUrl": "https://www.firecrawl.dev/app/api-keys",
+    "instructions": "Sign up at firecrawl.dev and copy your API key from the dashboard."
+  },
+  "install": {
+    "method": "npx",
+    "package": "firecrawl-mcp",
+    "version": "3.12.1"
+  },
+  "metadata": {
+    "homepage": "https://www.firecrawl.dev/",
+    "author": "Firecrawl (Mendable)",
+    "tags": [
+      "scraping",
+      "crawling",
+      "web",
+      "extraction",
+      "search",
+      "markdown"
+    ],
+    "category": "data",
+    "pricing": "byok",
+    "maturity": "stable",
+    "subcategory": "web-scraping",
+    "origin": "official",
+    "countries": [
+      "global"
+    ],
+    "audience": "developer",
+    "selfHosted": true,
+    "sideEffects": "read-only",
+    "authSummary": "api-key"
+  },
+  "capabilities": {
+    "tools": true,
+    "resources": false,
+    "prompts": false,
+    "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "s2daVrlfMhaE5+Tk/Y0CnXtG/S6qIVzP0/iHobQ4edC2RmfZFOfiaBUfOL+p6745VSoiiO8nMLDhuiRrUGQrDQ==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:24:35.540Z"
+  }
+}

package/servers/github/recipe.json

@@ -63,5 +63,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "PWJf2aV7iYDLZA9IXJilKO3tO7noz5yqw3U4Nghe/bIyflshLG3tAq0UqSMbN4L/J+c4CdAHiqAGLCm/eLTXBg==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:24:38.175Z"
   }
 }

package/servers/google-maps/recipe.json

@@ -10,7 +10,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@modelcontextprotocol/server-google-maps"
+        "@modelcontextprotocol/server-google-maps@0.6.2"
       ],
       "env": {
         "GOOGLE_MAPS_API_KEY": "${GOOGLE_MAPS_API_KEY}"
@@ -29,7 +29,7 @@
   "install": {
     "method": "npx",
     "package": "@modelcontextprotocol/server-google-maps",
-    "version": "latest"
+    "version": "0.6.2"
   },
   "metadata": {
     "homepage": "https://developers.google.com/maps",
@@ -59,5 +59,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "nc+tSwZmwP+MHs9z8VtyL5ZNf/iAsItoHdlygRezoZ5TjR2H++3nOlMmvp5JKC+Fq61P3iYFDRXTM0/VO6a3DA==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:24:43.129Z"
   }
 }

package/servers/hetzner/recipe.json

@@ -59,5 +59,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "WX6LE6XzBdkVW/uDv7MsUBT6GBE0JYNkfzNFoQqL59KFtivMXq5LmNvxL2JmyF0PlhulmQl0NGf09cSp8QagAw==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:24:45.822Z"
   }
 }

package/servers/hostinger/recipe.json

@@ -9,7 +9,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@anthropic-pb/hostinger-mcp-server"
+        "hostinger-api-mcp@0.1.28"
       ],
       "env": {
         "HOSTINGER_API_TOKEN": "${HOSTINGER_API_TOKEN}"
@@ -27,8 +27,8 @@
   },
   "install": {
     "method": "npx",
-    "package": "@anthropic-pb/hostinger-mcp-server",
-    "version": "latest"
+    "package": "hostinger-api-mcp",
+    "version": "0.1.28"
   },
   "metadata": {
     "homepage": "https://www.hostinger.com/",
@@ -58,5 +58,21 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "repository": "https://github.com/hostinger/api-mcp-server",
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "Btxn49bVCENtq5hgKDhSvYjU8KtbcxFKIAjclBfxl2W87YDFH68q2vkXzkqd1B9QHE74P0djp8KWt5hR0m7lBA==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:25:53.457Z"
   }
 }

package/servers/imap-email/recipe.json

@@ -34,7 +34,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@aiwerk/mcp-server-imap"
+        "@aiwerk/mcp-server-imap@1.1.8"
       ],
       "env": {
         "IMAP_HOST": "${IMAP_HOST}",
@@ -65,7 +65,8 @@
   "install": {
     "method": "npx",
     "package": "@aiwerk/mcp-server-imap",
-    "version": "latest"
+    "version": "1.1.8",
+    "toolsHash": "sha256-6ae071b777345740e7edaf319c71b57e65c657c145b68b96e6f6bcd6c0c1730a"
   },
   "capabilities": {
     "toolCount": 10,
@@ -82,5 +83,21 @@
       "email_attachment"
     ],
     "sideEffects": "external-write"
+  },
+  "repository": "https://github.com/AIWerk/mcp-server-imap",
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "IJQAle97X6wb3x+b6tPne74fwOUhif34GLkd4QII9ziwPyYI7r4Tv6eiV8gBc06d+H2mxMcqn/LE7qxMrxpDDg==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T15:15:39.408Z"
   }
 }

package/servers/linear/recipe.json

@@ -59,5 +59,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "Q3yXbOmJTN7V2+fUmXbxjtxv4ScPMGsQRbffDYYzsAjQGYllz8DwmuvZeHpLSGtP1Fl6g2X0iVnzlxfTzl3FCg==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:24:58.098Z"
   }
 }

package/servers/miro/recipe.json

@@ -10,7 +10,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@llmindset/mcp-miro",
+        "@llmindset/mcp-miro@0.1.1",
         "--token",
         "${MIRO_API_TOKEN}"
       ],
@@ -31,7 +31,7 @@
   "install": {
     "method": "npx",
     "package": "@llmindset/mcp-miro",
-    "version": "latest"
+    "version": "0.1.1"
   },
   "metadata": {
     "homepage": "https://miro.com/",
@@ -61,5 +61,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "ekptOzlrjh4EmGVDQMBPpCJNchPEsRIEqFOSkMH2lM4cbMtpqVy9jWvErRTZwkLIFi4nQx2T3SGapmpBDjxhDA==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:25:02.500Z"
   }
 }

package/servers/notion/recipe.json

@@ -10,7 +10,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@notionhq/notion-mcp-server"
+        "@notionhq/notion-mcp-server@2.2.1"
       ],
       "env": {
         "NOTION_TOKEN": "${NOTION_API_KEY}"
@@ -29,7 +29,7 @@
   "install": {
     "method": "npx",
     "package": "@notionhq/notion-mcp-server",
-    "version": "latest"
+    "version": "2.2.1"
   },
   "metadata": {
     "homepage": "https://www.notion.so/",
@@ -59,5 +59,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "d1UG7xnQ3ZR5qWqjMYrgDf7mju2etp6otv7RJgXsBMWw/Ia4ARwLXCDg7NTBpWL3QPlJGD+231bZx6yOhIY5AQ==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:25:07.431Z"
   }
 }

package/servers/stripe/recipe.json

@@ -10,7 +10,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@stripe/mcp",
+        "@stripe/mcp@0.3.1",
         "--tools=all",
         "--api-key=${STRIPE_API_KEY}"
       ],
@@ -31,7 +31,7 @@
   "install": {
     "method": "npx",
     "package": "@stripe/mcp",
-    "version": "latest"
+    "version": "0.3.1"
   },
   "metadata": {
     "homepage": "https://stripe.com/",
@@ -61,5 +61,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "K+265McBYk3Y8RHHEXDSUILier1i2G5MVCcXFRGjTGJjvj/rjKSPAb9yB0BkCNhEbo3Lf6+wwpfrcdNBUyXSAg==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:25:11.866Z"
   }
 }

package/servers/tavily/recipe.json

@@ -59,5 +59,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "a4nc94mlhdcxxQ38NKJ3ez++KBp5KyoPsS05uyzCfoR1YaIpejFRKYJ/5D3YlgI/BKQrOo6uzcBfWXMtxHGuBA==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:25:14.930Z"
   }
 }

package/servers/todoist/recipe.json

@@ -10,7 +10,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@doist/todoist-ai"
+        "@doist/todoist-ai@8.4.0"
       ],
       "env": {
         "TODOIST_API_KEY": "${TODOIST_API_TOKEN}"
@@ -29,7 +29,7 @@
   "install": {
     "method": "npx",
     "package": "@doist/todoist-ai",
-    "version": "latest"
+    "version": "8.4.0"
   },
   "metadata": {
     "homepage": "https://todoist.com/",
@@ -59,5 +59,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "soScAYYYd+k/xETeH6kSytJGW5dLW7qkPUL8ulYP0VvOwmCXlvntW0uS4TvtoJC3+FvjE7DhPUhHmW7CUfDbAw==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:25:19.646Z"
   }
 }

package/servers/wise/recipe.json

@@ -59,5 +59,20 @@
     "resources": false,
     "prompts": false,
     "sampling": false
+  },
+  "signature": {
+    "algorithm": "ed25519",
+    "publisherId": "aiwerk",
+    "value": "GNdSmM2mKmejTTHTt8RwfVl4QzM/Y9f582OAuE1EUvPFS53BBze5wZQInkuRNlc3GtwsFJrR61lLZfP5Dn/QCQ==",
+    "signedFields": [
+      "id",
+      "name",
+      "description",
+      "transports",
+      "auth",
+      "install",
+      "metadata"
+    ],
+    "signedAt": "2026-03-20T14:25:22.915Z"
   }
 }