@apicity/mcp-server 0.2.7 → 0.2.9

package/README.md

@@ -14,8 +14,6 @@ in lockstep with the providers.
 npm install @apicity/mcp-server
 # or
 pnpm add @apicity/mcp-server
-# plus whichever providers you want exposed:
-pnpm add @apicity/openai @apicity/anthropic @apicity/xai @apicity/fal
 ```
 
 ## Run
@@ -23,14 +21,31 @@ pnpm add @apicity/openai @apicity/anthropic @apicity/xai @apicity/fal
 ```bash
 # Stdio server. Logs to stderr; stdout is reserved for MCP framing.
 OPENAI_API_KEY=sk-... ANTHROPIC_API_KEY=sk-... \
-  npx apicity-mcp --output-dir ./apicity-out
+  npx apicity-mcp
+```
+
+With 1Password, put each provider secret in an item named after the env var
+(`OPENAI_API_KEY`, `ANTHROPIC_API_KEY`, etc.) with the value in the `password`
+field, then pass the vault name:
+
+```bash
+npx -y @apicity/mcp-server --op-vault Apicity
+```
+
+Claude Code setup:
+
+```bash
+claude mcp add --scope user apicity -- \
+  npx -y @apicity/mcp-server \
+  --op-vault Apicity
 ```
 
 ### Flags
 
 | Flag                           | Description                                                                                                    |
 | ------------------------------ | -------------------------------------------------------------------------------------------------------------- |
-| `--output-dir <path>`          | Where binary results and downloaded media URLs land.                                                           |
+| `--op-vault <vault>`           | Resolve missing provider credentials from `op://<vault>/<ENV_VAR>/password` (or use `APICITY_OP_VAULT`).       |
+| `--output-dir <path>`          | Override where binary results and downloaded media URLs land. Defaults to `CLAUDE_PROJECT_DIR`, then cwd.       |
 | `--providers <csv>`            | Allow-list of providers (default: every one with its env var set).                                             |
 | `--paygate-secret-file <path>` | File holding the shared HMAC secret used to verify paid-endpoint OTPs (see [Paid endpoints](#paid-endpoints)). |
 | `--help`                       | Print usage.                                                                                                   |
@@ -48,11 +63,17 @@ OPENAI_API_KEY=sk-... ANTHROPIC_API_KEY=sk-... \
 | `kimicoding` | `KIMI_CODING_API_KEY`  |
 | `alibaba`    | `DASHSCOPE_API_KEY`    |
 | `elevenlabs` | `ELEVENLABS_API_KEY`   |
+| `google`     | `GOOGLE_API_KEY`       |
 | `x`          | `X_ACCESS_TOKEN`       |
 | `ig`         | `IG_ACCESS_TOKEN`      |
+| `youtube`    | `YOUTUBE_ACCESS_TOKEN` |
+| `telegram`   | `TELEGRAM_BOT_KEY`     |
 | `free`       | _(none — public APIs)_ |
 
-Providers without their env var set are silently skipped.
+Providers without their env var set are silently skipped. With `--op-vault`,
+missing env vars are read from 1Password before the MCP server starts. If
+`--providers` is set, a missing requested provider secret is a startup error;
+without `--providers`, missing vault items are skipped.
 
 ## Tool naming
 
@@ -68,7 +89,9 @@ The tool description always includes the upstream URL and docs URL.
 
 ## Output handling
 
-When `--output-dir` is set:
+The CLI saves binary responses and downloaded media URLs to
+`CLAUDE_PROJECT_DIR` when Claude Code provides it, otherwise to the current
+directory. Pass `--output-dir` to override that location.
 
 - **Binary responses** (`ArrayBuffer` / `Uint8Array`, e.g. `openai_v1_audio_speech`)
   are written to the directory; the tool result is `{ savedTo, bytes }`.
@@ -79,9 +102,6 @@ When `--output-dir` is set:
   `*_savedTo: "error: ..."` and don't break the response.
 - Streaming endpoints (anthropic streams, etc.) are buffered into an array.
 
-Without `--output-dir`, binary results are summarized as a byte count and URLs
-pass through untouched.
-
 ## Paid endpoints
 
 A few endpoints incur direct marginal cost (e.g. `kie_post_api_v1_jobs_create_task`
@@ -124,13 +144,10 @@ embed the registry into your own MCP server.
       "args": [
         "-y",
         "@apicity/mcp-server",
-        "--output-dir",
-        "/Users/me/apicity-out"
+        "--op-vault",
+        "Apicity"
       ],
-      "env": {
-        "OPENAI_API_KEY": "sk-...",
-        "ANTHROPIC_API_KEY": "sk-..."
-      }
+      "env": {}
     }
   }
 }

package/dist/src/bin.js

@@ -1,69 +1,6 @@
 #!/usr/bin/env node
-import { readFileSync } from "node:fs";
-import { startServer } from "./server.js";
-function parseArgs(argv) {
-    const out = { help: false };
-    for (let i = 0; i < argv.length; i++) {
-        const a = argv[i];
-        if (a === "--help" || a === "-h")
-            out.help = true;
-        else if (a === "--output-dir")
-            out.outputDir = argv[++i];
-        else if (a.startsWith("--output-dir="))
-            out.outputDir = a.slice(13);
-        else if (a === "--providers") {
-            out.enabledProviders = (argv[++i] ?? "").split(",").filter(Boolean);
-        }
-        else if (a.startsWith("--providers=")) {
-            out.enabledProviders = a.slice(12).split(",").filter(Boolean);
-        }
-        else if (a === "--paygate-secret-file") {
-            out.paygateSecretFile = argv[++i];
-        }
-        else if (a.startsWith("--paygate-secret-file=")) {
-            out.paygateSecretFile = a.slice(22);
-        }
-        else {
-            console.error(`[apicity-mcp] unknown arg: ${a}`);
-        }
-    }
-    return out;
-}
-function printHelp() {
-    console.error([
-        "apicity-mcp — MCP server exposing every @apicity provider endpoint as a tool.",
-        "",
-        "Usage:",
-        "  apicity-mcp [--output-dir <path>] [--providers <csv>]",
-        "",
-        "Options:",
-        "  --output-dir <path>   Directory to write binary results and downloaded media URLs.",
-        "                        If omitted, binaries are summarized and URLs are returned as-is.",
-        "  --providers <csv>     Comma-separated provider allow-list (e.g. openai,xai,anthropic).",
-        "                        Defaults to every provider with its env var set.",
-        "  --paygate-secret-file <path>  File holding the shared HMAC secret used to verify",
-        "                        OTPs for paid endpoints (e.g. kie createTask). The server only",
-        "                        verifies OTPs; operators mint them out-of-band with apicity-paygate.",
-        "",
-        "Credentials are read from env vars: OPENAI_API_KEY, XAI_API_KEY, ANTHROPIC_API_KEY,",
-        "FIREWORKS_API_KEY, FAL_API_KEY, KIE_API_KEY, KIMI_CODING_API_KEY, DASHSCOPE_API_KEY,",
-        "ELEVENLABS_API_KEY, X_ACCESS_TOKEN, IG_ACCESS_TOKEN, TELEGRAM_BOT_KEY.",
-        "The 'free-media-upload' provider needs none.",
-    ].join("\n"));
-}
-const args = parseArgs(process.argv.slice(2));
-if (args.help) {
-    printHelp();
-    process.exit(0);
-}
-const paygateSecret = args.paygateSecretFile
-    ? readFileSync(args.paygateSecretFile, "utf8").trim()
-    : undefined;
-startServer({
-    outputDir: args.outputDir,
-    enabledProviders: args.enabledProviders,
-    paygateSecret,
-}).catch((err) => {
+import { runCli } from "./cli.js";
+runCli().catch((err) => {
     console.error("[apicity-mcp] fatal:", err);
     process.exit(1);
 });

package/dist/src/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS1C,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,GAAG,GAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;aAC7C,IAAI,CAAC,KAAK,cAAc;YAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACpD,IAAI,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aAC/D,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;YAC7B,GAAG,CAAC,gBAAgB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;aAAM,IAAI,CAAC,KAAK,uBAAuB,EAAE,CAAC;YACzC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,KAAK,CACX;QACE,+EAA+E;QAC/E,EAAE;QACF,QAAQ;QACR,yDAAyD;QACzD,EAAE;QACF,UAAU;QACV,sFAAsF;QACtF,0FAA0F;QAC1F,0FAA0F;QAC1F,0EAA0E;QAC1E,oFAAoF;QACpF,wFAAwF;QACxF,8FAA8F;QAC9F,EAAE;QACF,qFAAqF;QACrF,sFAAsF;QACtF,wEAAwE;QACxE,8CAA8C;KAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB;IAC1C,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;IACrD,CAAC,CAAC,SAAS,CAAC;AAEd,WAAW,CAAC;IACV,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;IACvC,aAAa;CACd,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACf,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/cli.d.ts

@@ -0,0 +1,13 @@
+export interface ParsedArgs {
+    outputDir?: string;
+    enabledProviders?: string[];
+    paygateSecretFile?: string;
+    opVault?: string;
+    help: boolean;
+}
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function resolveOutputDir(explicitOutputDir?: string, env?: NodeJS.ProcessEnv, cwd?: string): string;
+export declare function resolveOpVault(explicitOpVault?: string, env?: NodeJS.ProcessEnv): string | undefined;
+export declare function printHelp(): void;
+export declare function runCli(argv?: string[]): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/src/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAwBpD;AAED,wBAAgB,gBAAgB,CAC9B,iBAAiB,CAAC,EAAE,MAAM,EAC1B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,GAAG,SAAgB,GAClB,MAAM,CAER;AAED,wBAAgB,cAAc,CAC5B,eAAe,CAAC,EAAE,MAAM,EACxB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,SAAS,IAAI,IAAI,CA2BhC;AAED,wBAAsB,MAAM,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBxE"}

package/dist/src/cli.js

@@ -0,0 +1,98 @@
+import { readFileSync } from "node:fs";
+import { startServer } from "./server.js";
+import { fillOnePasswordEnv } from "./one-password.js";
+export function parseArgs(argv) {
+    const out = { help: false };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "--help" || a === "-h")
+            out.help = true;
+        else if (a === "--output-dir")
+            out.outputDir = argv[++i];
+        else if (a.startsWith("--output-dir="))
+            out.outputDir = a.slice(13);
+        else if (a === "--providers") {
+            out.enabledProviders = parseProviderCsv(argv[++i]);
+        }
+        else if (a.startsWith("--providers=")) {
+            out.enabledProviders = parseProviderCsv(a.slice(12));
+        }
+        else if (a === "--paygate-secret-file") {
+            out.paygateSecretFile = argv[++i];
+        }
+        else if (a.startsWith("--paygate-secret-file=")) {
+            out.paygateSecretFile = a.slice(22);
+        }
+        else if (a === "--op-vault") {
+            out.opVault = argv[++i];
+        }
+        else if (a.startsWith("--op-vault=")) {
+            out.opVault = a.slice(11);
+        }
+        else {
+            console.error(`[apicity-mcp] unknown arg: ${a}`);
+        }
+    }
+    return out;
+}
+export function resolveOutputDir(explicitOutputDir, env = process.env, cwd = process.cwd()) {
+    return explicitOutputDir ?? env.CLAUDE_PROJECT_DIR ?? cwd;
+}
+export function resolveOpVault(explicitOpVault, env = process.env) {
+    return explicitOpVault ?? env.APICITY_OP_VAULT;
+}
+export function printHelp() {
+    console.error([
+        "apicity-mcp — MCP server exposing every @apicity provider endpoint as a tool.",
+        "",
+        "Usage:",
+        "  apicity-mcp [--op-vault <vault>] [--output-dir <path>] [--providers <csv>]",
+        "",
+        "Options:",
+        "  --op-vault <vault>   Resolve missing provider credentials from 1Password.",
+        "                       Looks for op://<vault>/<ENV_VAR>/password.",
+        "                       Can also be set with APICITY_OP_VAULT.",
+        "  --output-dir <path>  Directory to write binary results and downloaded media URLs.",
+        "                       Defaults to CLAUDE_PROJECT_DIR, then the current directory.",
+        "  --providers <csv>    Comma-separated provider allow-list (e.g. openai,xai,anthropic).",
+        "                       Defaults to every provider with its env var set.",
+        "  --paygate-secret-file <path>  File holding the shared HMAC secret used to verify",
+        "                       OTPs for paid endpoints (e.g. kie createTask). The server only",
+        "                       verifies OTPs; operators mint them out-of-band with apicity-paygate.",
+        "",
+        "Credentials are read from env vars: OPENAI_API_KEY, XAI_API_KEY, ANTHROPIC_API_KEY,",
+        "FIREWORKS_API_KEY, FAL_API_KEY, GOOGLE_API_KEY, KIE_API_KEY,",
+        "KIMI_CODING_API_KEY, DASHSCOPE_API_KEY, ELEVENLABS_API_KEY,",
+        "X_ACCESS_TOKEN, IG_ACCESS_TOKEN, YOUTUBE_ACCESS_TOKEN, TELEGRAM_BOT_KEY.",
+        "The 'free-media-upload' provider needs none.",
+    ].join("\n"));
+}
+export async function runCli(argv = process.argv.slice(2)) {
+    const args = parseArgs(argv);
+    if (args.help) {
+        printHelp();
+        return;
+    }
+    const opVault = resolveOpVault(args.opVault);
+    if (opVault) {
+        await fillOnePasswordEnv({
+            vault: opVault,
+            enabledProviders: args.enabledProviders,
+        });
+    }
+    const paygateSecret = args.paygateSecretFile
+        ? readFileSync(args.paygateSecretFile, "utf8").trim()
+        : undefined;
+    await startServer({
+        outputDir: resolveOutputDir(args.outputDir),
+        enabledProviders: args.enabledProviders,
+        paygateSecret,
+    });
+}
+function parseProviderCsv(value) {
+    return (value ?? "")
+        .split(",")
+        .map((provider) => provider.trim())
+        .filter(Boolean);
+}
+//# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAUvD,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,GAAG,GAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;aAC7C,IAAI,CAAC,KAAK,cAAc;YAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACpD,IAAI,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aAC/D,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;YAC7B,GAAG,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,CAAC,KAAK,uBAAuB,EAAE,CAAC;YACzC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;YAC9B,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,iBAA0B,EAC1B,MAAyB,OAAO,CAAC,GAAG,EACpC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,OAAO,iBAAiB,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,eAAwB,EACxB,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,eAAe,IAAI,GAAG,CAAC,gBAAgB,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,CAAC,KAAK,CACX;QACE,+EAA+E;QAC/E,EAAE;QACF,QAAQ;QACR,8EAA8E;QAC9E,EAAE;QACF,UAAU;QACV,6EAA6E;QAC7E,mEAAmE;QACnE,+DAA+D;QAC/D,qFAAqF;QACrF,oFAAoF;QACpF,yFAAyF;QACzF,yEAAyE;QACzE,oFAAoF;QACpF,uFAAuF;QACvF,6FAA6F;QAC7F,EAAE;QACF,qFAAqF;QACrF,8DAA8D;QAC9D,6DAA6D;QAC7D,0EAA0E;QAC1E,8CAA8C;KAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,kBAAkB,CAAC;YACvB,KAAK,EAAE,OAAO;YACd,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB;QAC1C,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;QACrD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,WAAW,CAAC;QAChB,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;SAClC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC"}

package/dist/src/index.d.ts

@@ -1,4 +1,6 @@
 export { startServer, type StartServerOptions } from "./server.js";
+export { parseArgs, resolveOpVault, resolveOutputDir, type ParsedArgs, } from "./cli.js";
+export { fillOnePasswordEnv, getProviderEnvVars, onePasswordRef, readOnePasswordSecret, type OnePasswordEnvOptions, type OpRead, } from "./one-password.js";
 export { buildRegistry, loadTsv, makeToolName, toSnakeCase, type Endpoint, type EndpointTsvRow, type BuildRegistryOptions, } from "./registry.js";
 export { PROVIDERS, type ProviderSpec } from "./providers.js";
 export { zodToJsonSchema, type JsonSchema } from "./schema.js";

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,aAAa,EACb,OAAO,EACP,YAAY,EACZ,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,QAAQ,GACT,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,MAAM,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,EACb,OAAO,EACP,YAAY,EACZ,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,QAAQ,GACT,MAAM,aAAa,CAAC"}

package/dist/src/index.js

@@ -1,4 +1,6 @@
 export { startServer } from "./server.js";
+export { parseArgs, resolveOpVault, resolveOutputDir, } from "./cli.js";
+export { fillOnePasswordEnv, getProviderEnvVars, onePasswordRef, readOnePasswordSecret, } from "./one-password.js";
 export { buildRegistry, loadTsv, makeToolName, toSnakeCase, } from "./registry.js";
 export { PROVIDERS } from "./providers.js";
 export { zodToJsonSchema } from "./schema.js";

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA2B,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,aAAa,EACb,OAAO,EACP,YAAY,EACZ,WAAW,GAIZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAqB,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,QAAQ,GACT,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA2B,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,SAAS,EACT,cAAc,EACd,gBAAgB,GAEjB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,GAGtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,EACb,OAAO,EACP,YAAY,EACZ,WAAW,GAIZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAqB,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,QAAQ,GACT,MAAM,aAAa,CAAC"}

package/dist/src/one-password.d.ts

@@ -0,0 +1,12 @@
+export type OpRead = (ref: string) => Promise<string>;
+export interface OnePasswordEnvOptions {
+    vault: string;
+    enabledProviders?: string[];
+    env?: NodeJS.ProcessEnv;
+    readSecret?: OpRead;
+}
+export declare function fillOnePasswordEnv(opts: OnePasswordEnvOptions): Promise<void>;
+export declare function getProviderEnvVars(enabledProviders?: string[]): string[];
+export declare function onePasswordRef(vault: string, envVar: string): string;
+export declare function readOnePasswordSecret(ref: string): Promise<string>;
+//# sourceMappingURL=one-password.d.ts.map

package/dist/src/one-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-password.d.ts","sourceRoot":"","sources":["../../src/one-password.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAgB,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAexE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUxE"}

package/dist/src/one-password.js

@@ -0,0 +1,74 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { PROVIDERS } from "./providers.js";
+const execFileAsync = promisify(execFile);
+export async function fillOnePasswordEnv(opts) {
+    const env = opts.env ?? process.env;
+    const readSecret = opts.readSecret ?? readOnePasswordSecret;
+    const providerEnvVars = getProviderEnvVars(opts.enabledProviders);
+    const required = opts.enabledProviders !== undefined;
+    for (const envVar of providerEnvVars) {
+        if (hasResolvedEnvValue(env[envVar]))
+            continue;
+        const ref = onePasswordRef(opts.vault, envVar);
+        try {
+            env[envVar] = await readSecret(ref);
+        }
+        catch (err) {
+            if (!required && isMissingOnePasswordItem(err))
+                continue;
+            throw new Error(`Missing 1Password secret for ${envVar}. Expected ${ref}. ` +
+                `${errorMessage(err)}`);
+        }
+    }
+}
+export function getProviderEnvVars(enabledProviders) {
+    const envVars = [];
+    const providers = enabledProviders ?? Object.keys(PROVIDERS);
+    for (const provider of providers) {
+        const spec = PROVIDERS[provider];
+        if (!spec) {
+            throw new Error(`Unknown provider in --providers: ${provider}`);
+        }
+        if (spec.envVar && !envVars.includes(spec.envVar)) {
+            envVars.push(spec.envVar);
+        }
+    }
+    return envVars;
+}
+export function onePasswordRef(vault, envVar) {
+    return `op://${vault}/${envVar}/password`;
+}
+export async function readOnePasswordSecret(ref) {
+    try {
+        const { stdout } = await execFileAsync("op", ["read", "--no-newline", ref]);
+        return stdout.trim();
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            throw new Error("1Password CLI `op` was not found in PATH.");
+        }
+        throw err;
+    }
+}
+function hasResolvedEnvValue(value) {
+    return value !== undefined && value !== "" && !value.startsWith("op://");
+}
+function isMissingOnePasswordItem(err) {
+    const msg = errorMessage(err).toLowerCase();
+    return (msg.includes("isn't an item") ||
+        msg.includes("is not an item") ||
+        msg.includes("could not be found") ||
+        msg.includes("not found") ||
+        msg.includes("does not exist"));
+}
+function errorMessage(err) {
+    if (err instanceof Error) {
+        const stderr = err.stderr;
+        if (typeof stderr === "string" && stderr.trim())
+            return stderr.trim();
+        return err.message;
+    }
+    return String(err);
+}
+//# sourceMappingURL=one-password.js.map

package/dist/src/one-password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-password.js","sourceRoot":"","sources":["../../src/one-password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAW1C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,qBAAqB,CAAC;IAC5D,MAAM,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC;IAErD,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QAE/C,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,IAAI,wBAAwB,CAAC,GAAG,CAAC;gBAAE,SAAS;YACzD,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,cAAc,GAAG,IAAI;gBACzD,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,gBAA2B;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE7D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,MAAc;IAC1D,OAAO,QAAQ,KAAK,IAAI,MAAM,WAAW,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAY;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC7B,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC9B,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAI,GAAoC,CAAC,MAAM,CAAC;QAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACtE,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apicity/mcp-server",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "description": "Optional MCP (Model Context Protocol) server that exposes every @apicity provider endpoint as a tool.",
   "license": "MIT",
   "repository": {
@@ -47,83 +47,22 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@apicity/cost": "0.2.7"
-  },
-  "peerDependencies": {
-    "@apicity/alibaba": "0.2.7",
-    "@apicity/elevenlabs": "0.2.7",
-    "@apicity/fireworks": "0.2.7",
-    "@apicity/anthropic": "0.2.7",
-    "@apicity/fal": "0.2.7",
-    "@apicity/free-media-upload": "0.2.7",
-    "@apicity/google": "0.2.7",
-    "@apicity/meta": "0.2.7",
-    "@apicity/kie": "0.2.7",
-    "@apicity/kimicoding": "0.2.7",
-    "@apicity/openai": "0.2.7",
-    "@apicity/telegram": "0.2.7",
-    "@apicity/x": "0.2.7",
-    "@apicity/xai": "0.2.7"
-  },
-  "peerDependenciesMeta": {
-    "@apicity/alibaba": {
-      "optional": true
-    },
-    "@apicity/anthropic": {
-      "optional": true
-    },
-    "@apicity/elevenlabs": {
-      "optional": true
-    },
-    "@apicity/fal": {
-      "optional": true
-    },
-    "@apicity/fireworks": {
-      "optional": true
-    },
-    "@apicity/free-media-upload": {
-      "optional": true
-    },
-    "@apicity/google": {
-      "optional": true
-    },
-    "@apicity/meta": {
-      "optional": true
-    },
-    "@apicity/kie": {
-      "optional": true
-    },
-    "@apicity/kimicoding": {
-      "optional": true
-    },
-    "@apicity/openai": {
-      "optional": true
-    },
-    "@apicity/telegram": {
-      "optional": true
-    },
-    "@apicity/x": {
-      "optional": true
-    },
-    "@apicity/xai": {
-      "optional": true
-    }
-  },
-  "devDependencies": {
-    "@apicity/anthropic": "0.2.7",
-    "@apicity/alibaba": "0.2.7",
-    "@apicity/elevenlabs": "0.2.7",
-    "@apicity/fireworks": "0.2.7",
-    "@apicity/fal": "0.2.7",
-    "@apicity/free-media-upload": "0.2.7",
-    "@apicity/google": "0.2.7",
-    "@apicity/meta": "0.2.7",
-    "@apicity/kie": "0.2.7",
-    "@apicity/kimicoding": "0.2.7",
-    "@apicity/telegram": "0.2.7",
-    "@apicity/openai": "0.2.7",
-    "@apicity/x": "0.2.7",
-    "@apicity/xai": "0.2.7"
+    "@apicity/alibaba": "0.2.9",
+    "@apicity/cost": "0.2.9",
+    "@apicity/fal": "0.2.9",
+    "@apicity/elevenlabs": "0.2.9",
+    "@apicity/fireworks": "0.2.9",
+    "@apicity/anthropic": "0.2.9",
+    "@apicity/google": "0.2.9",
+    "@apicity/meta": "0.2.9",
+    "@apicity/openai": "0.2.9",
+    "@apicity/free-media-upload": "0.2.9",
+    "@apicity/kie": "0.2.9",
+    "@apicity/kimicoding": "0.2.9",
+    "@apicity/telegram": "0.2.9",
+    "@apicity/youtube": "0.2.9",
+    "@apicity/x": "0.2.9",
+    "@apicity/xai": "0.2.9"
   },
   "homepage": "https://github.com/justintanner/apicity#readme",
   "bugs": {