@attrkit/mcp 0.4.0 → 0.4.2

package/dist/cli.js

@@ -14082,15 +14082,16 @@ function toToolResult(result) {
   const expectedResponse = result.expectedResponse ?? "json";
   const isEmptySuccess = result.status === 204 && (result.rawBody === undefined || result.rawBody === "");
   const isJsonEnvelope = result.json !== null && typeof result.json === "object" && !Array.isArray(result.json) && Object.hasOwn(result.json, "data");
-  const isExpectedText = expectedResponse === "text" && typeof result.json === "string";
+  const contentType = (result.contentType ?? "").toLowerCase();
+  const isExpectedText = expectedResponse === "text" && typeof result.json === "string" && (contentType.includes("text/csv") || contentType.includes("application/csv"));
   if (!isEmptySuccess && !isJsonEnvelope && !isExpectedText) {
-    const contentType = result.contentType ?? "unknown content type";
+    const reportedContentType = result.contentType ?? "unknown content type";
     const received = result.json === null ? "an empty body" : Array.isArray(result.json) ? "a JSON array" : typeof result.json === "object" ? "a JSON object without a data field" : `a ${typeof result.json} body`;
     const body = result.rawBody ?? (typeof result.json === "string" ? result.json : JSON.stringify(result.json, null, 2));
     return {
       content: [{
         type: "text",
-        text: `AttrKit API error (${result.status}): invalid_response: expected a JSON data envelope but received ${received} with Content-Type ${contentType}. Body:
+        text: `AttrKit API error (${result.status}): invalid_response: expected a JSON data envelope but received ${received} with Content-Type ${reportedContentType}. Body:
 ${body}`
       }],
       isError: true
@@ -14102,7 +14103,7 @@ ${body}`
     structuredContent: structured
   };
 }
-var SERVER_VERSION = "0.4.0";
+var SERVER_VERSION = "0.4.2";
 var periodSchema = z4.enum(["7d", "30d", "90d", "all"]).describe("Reporting window. Defaults to 30d.").optional();
 var appIdSchema = z4.string().describe("Optional app id to scope the result to one app.").optional();
 var requiredAppIdSchema = z4.string().describe("The AttrKit app id.");
@@ -14157,16 +14158,19 @@ function createServer(config, fetchImpl) {
   const server = new McpServer({ name: "attrkit", version: SERVER_VERSION });
   const call = (path, options) => callApi(config, path, { fetchImpl, ...options });
   server.registerTool("whoami", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Inspect management-key scope",
     description: "Return the authenticated workspace, plan, app restriction and read/write scopes.",
     inputSchema: {}
   }, async () => toToolResult(await call("/api/v1/whoami")));
   server.registerTool("get_usage_cap", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Get the workspace usage cap",
     description: "Return the workspace's monthly qualified-install cap, alert email, current billing period and usage. Requires a workspace-scoped read key.",
     inputSchema: {}
   }, async () => toToolResult(await call("/api/v1/workspace/usage-cap")));
   server.registerTool("set_usage_cap", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Set the workspace usage cap",
     description: "Set a monthly qualified-install cap of at least 10,000 and its alert email. Pass null for both values to clear the cap. Requires a workspace-scoped write key.",
     inputSchema: {
@@ -14198,11 +14202,13 @@ function createServer(config, fetchImpl) {
     }));
   });
   server.registerTool("list_apps", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List apps",
     description: "List the iOS and Android apps in your AttrKit workspace (id, name, platform, bundle id, store id, status).",
     inputSchema: {}
   }, async () => toToolResult(await call("/api/v1/apps")));
   server.registerTool("create_app", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Create an app",
     description: "Create an iOS or Android app without the web UI. Returns the publishable key and a one-time app-scoped management key.",
     inputSchema: {
@@ -14235,11 +14241,13 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("get_app", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Get an app",
     description: "Return one app's configuration.",
     inputSchema: { app_id: requiredAppIdSchema }
   }, async ({ app_id }) => toToolResult(await call(`/api/v1/apps/${encodeURIComponent(app_id)}`)));
   server.registerTool("update_app", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Update an app",
     description: "Update app metadata, store destination, timezone or device-matching mode.",
     inputSchema: {
@@ -14274,6 +14282,7 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("archive_app", {
+    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
     title: "Archive an app",
     description: "Archive an app and remove it from active customer operations.",
     inputSchema: { app_id: requiredAppIdSchema }
@@ -14281,11 +14290,13 @@ function createServer(config, fetchImpl) {
     method: "DELETE"
   })));
   server.registerTool("get_publishable_key", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Get an app publishable key",
     description: "Reveal the recoverable SDK publishable key for an app.",
     inputSchema: { app_id: requiredAppIdSchema }
   }, async ({ app_id }) => toToolResult(await call(`/api/v1/apps/${encodeURIComponent(app_id)}/publishable-key`)));
   server.registerTool("rotate_publishable_key", {
+    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
     title: "Rotate an app publishable key",
     description: "Issue a new SDK publishable key and return the old-key grace deadline.",
     inputSchema: {
@@ -14294,11 +14305,13 @@ function createServer(config, fetchImpl) {
     }
   }, async ({ app_id, idempotency_key }) => toToolResult(await call(`/api/v1/apps/${encodeURIComponent(app_id)}/publishable-key`, { method: "POST", idempotencyKey: idempotency_key })));
   server.registerTool("list_api_keys", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List management keys",
     description: "List masked workspace and app management keys. Secret plaintext is never returned.",
     inputSchema: {}
   }, async () => toToolResult(await call("/api/v1/api-keys")));
   server.registerTool("create_api_key", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Create a management key",
     description: "Create a read-only or read/write workspace or app key. The secret is returned once.",
     inputSchema: {
@@ -14313,6 +14326,7 @@ function createServer(config, fetchImpl) {
     body: { label, scopes, app_id: app_id ?? null }
   })));
   server.registerTool("revoke_api_key", {
+    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
     title: "Revoke a management key",
     description: "Immediately revoke a management key by id.",
     inputSchema: { key_id: z4.string().uuid() }
@@ -14320,6 +14334,7 @@ function createServer(config, fetchImpl) {
     method: "DELETE"
   })));
   server.registerTool("list_links", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List campaign links",
     description: "List tracking links, optionally for one app.",
     inputSchema: {
@@ -14335,11 +14350,13 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("list_campaigns", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List campaigns",
     description: "List ad campaigns with their honest profit surface: the scale/cut/hold call, profit p05/p50/p95, spend, retention, and payback. Use this to see how campaigns are performing.",
     inputSchema: { app_id: appIdSchema, period: periodSchema }
   }, async ({ app_id, period }) => toToolResult(await call("/api/v1/reports/campaigns", { query: { appId: app_id, period } })));
   server.registerTool("list_ads", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List creative-level ad performance",
     description: "Return ad and ad-set performance, evidence tiers, ROAS, CPA, CPC and modeled remainders.",
     inputSchema: {
@@ -14355,6 +14372,7 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("list_recent_events", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List recent events and installs",
     description: "Return the same recent attribution events and installs visible on the Live dashboard.",
     inputSchema: {
@@ -14368,11 +14386,13 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("get_campaign_decision", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Get campaign decisions (scale / cut / hold)",
     description: "Return AttrKit's profit DECISIONS for your campaigns: the scale/cut/hold call and confidence, computed by the attribution engine. Report the `call` VERBATIM — do not recompute or override it; when it says not_enough_data, say so. This is the tool to drive budget automation.",
     inputSchema: { app_id: appIdSchema }
   }, async ({ app_id }) => toToolResult(await call("/api/v1/decisions", { query: { appId: app_id } })));
   server.registerTool("record_campaign_decision", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Record a campaign decision",
     description: "Freeze a scale/cut/hold decision and its exact model inputs for later maturity evaluation.",
     inputSchema: {
@@ -14438,11 +14458,13 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("get_attribution_rollup", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Get attribution rollup",
     description: "Return the account-level attribution overview: installs accounted-for by evidence class (verified / device-matched / modeled / organic), MER, revenue and data freshness.",
     inputSchema: { app_id: appIdSchema, period: periodSchema }
   }, async ({ app_id, period }) => toToolResult(await call("/api/v1/reports/overview", { query: { appId: app_id, period } })));
   server.registerTool("create_campaign_link", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Create a campaign tracking link",
     description: "Create a web-to-app tracking link for an ad campaign. Requires a write-scoped API key. Returns the link id and url.",
     inputSchema: {
@@ -14450,10 +14472,11 @@ function createServer(config, fetchImpl) {
       network: z4.enum(["meta", "google", "tiktok"]).describe("The ad network delivering the campaign."),
       destination_url: z4.string().url().describe("The App Store URL to send users to."),
       campaign_name: z4.string().max(120).optional().describe("Optional human-readable campaign name."),
-      campaign_id: z4.string().optional().describe("Optional external campaign id."),
+      campaign_id: z4.string().optional().describe("Optional external campaign id. This is the AD NETWORK's own campaign id, not an AttrKit uuid; it is the opposite of import_spend.campaign_id, which requires the AttrKit one."),
+      serve_landing: z4.boolean().optional().describe("Serve the interstitial landing bridge on this link. Defaults to true at the API. The bridge is what captures browser-side context for device matching, so turning it off narrows what can be matched."),
       idempotency_key: idempotencyKeySchema
     }
-  }, async ({ app_id, network, destination_url, campaign_name, campaign_id, idempotency_key }) => toToolResult(await call("/api/v1/links", {
+  }, async ({ app_id, network, destination_url, campaign_name, campaign_id, serve_landing, idempotency_key }) => toToolResult(await call("/api/v1/links", {
     method: "POST",
     idempotencyKey: idempotency_key,
     body: {
@@ -14461,10 +14484,12 @@ function createServer(config, fetchImpl) {
       network,
       destinationUrl: destination_url,
       ...campaign_name ? { campaignName: campaign_name } : {},
-      ...campaign_id ? { campaignId: campaign_id } : {}
+      ...campaign_id ? { campaignId: campaign_id } : {},
+      ...serve_landing === undefined ? {} : { serveLanding: serve_landing }
     }
   })));
   server.registerTool("update_link_status", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Enable or disable a campaign link",
     description: "Change a tracking link between active and disabled.",
     inputSchema: {
@@ -14474,6 +14499,7 @@ function createServer(config, fetchImpl) {
     }
   }, async ({ link_id, status, idempotency_key }) => toToolResult(await call(`/api/v1/links/${encodeURIComponent(link_id)}`, { method: "PATCH", idempotencyKey: idempotency_key, body: { status } })));
   server.registerTool("get_spend", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Get spend and cost models",
     description: "Return imported ad spend, cost models, completeness and spend freshness.",
     inputSchema: { app_id: appIdSchema }
@@ -14481,6 +14507,7 @@ function createServer(config, fetchImpl) {
     query: { appId: app_id }
   })));
   server.registerTool("import_spend", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Import ad spend",
     description: "Import campaign or creative-level spend rows.",
     inputSchema: {
@@ -14529,6 +14556,7 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("set_cost_model", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Set an app cost model",
     description: "Version commission, payment fees and variable COGS used in profit decisions.",
     inputSchema: {
@@ -14564,6 +14592,7 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("pull_network_spend", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Pull spend from an ad network",
     description: "Fetch and import creative-level spend from a configured Meta, Google or TikTok connection.",
     inputSchema: {
@@ -14587,11 +14616,13 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("list_integrations", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List ad-network integrations",
     description: "List redacted ad-network connections and their readiness.",
     inputSchema: {}
   }, async () => toToolResult(await call("/api/v1/integrations")));
   server.registerTool("create_integration", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Create an ad-network integration",
     description: "Store encrypted network credentials and configure event ownership.",
     inputSchema: {
@@ -14608,6 +14639,7 @@ function createServer(config, fetchImpl) {
     body: { network, account_ref, credential, owners, enable: enable ?? false }
   })));
   server.registerTool("update_integration", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Update an ad-network integration",
     description: "Rotate credentials or enable/disable an integration.",
     inputSchema: {
@@ -14627,16 +14659,19 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("delete_integration", {
+    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
     title: "Delete an ad-network integration",
     description: "Delete a disabled integration. Enabled integrations must be disabled first.",
     inputSchema: { connection_id: z4.string() }
   }, async ({ connection_id }) => toToolResult(await call(`/api/v1/integrations/${encodeURIComponent(connection_id)}`, { method: "DELETE" })));
   server.registerTool("get_revenuecat", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Get RevenueCat configuration",
     description: "Return redacted RevenueCat status and the AttrKit webhook URL.",
     inputSchema: { app_id: requiredAppIdSchema }
   }, async ({ app_id }) => toToolResult(await call(`/api/v1/apps/${encodeURIComponent(app_id)}/revenuecat`)));
   server.registerTool("configure_revenuecat", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Configure RevenueCat",
     description: "Store the RevenueCat provider app id and encrypted authorization secret for an app.",
     inputSchema: {
@@ -14651,11 +14686,13 @@ function createServer(config, fetchImpl) {
     body: { provider_app_id, authorization_secret }
   })));
   server.registerTool("list_webhooks", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List outbound webhooks",
     description: "List redacted outbound webhook subscriptions.",
     inputSchema: {}
   }, async () => toToolResult(await call("/api/v1/webhooks")));
   server.registerTool("create_webhook", {
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Create an outbound webhook",
     description: "Create an SSRF-checked webhook subscription. Returns the signing secret once.",
     inputSchema: {
@@ -14676,11 +14713,13 @@ function createServer(config, fetchImpl) {
     }
   })));
   server.registerTool("delete_webhook", {
+    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
     title: "Delete an outbound webhook",
     description: "Delete a webhook subscription.",
     inputSchema: { subscription_id: z4.string().uuid() }
   }, async ({ subscription_id }) => toToolResult(await call(`/api/v1/webhooks/${encodeURIComponent(subscription_id)}`, { method: "DELETE" })));
   server.registerTool("export_events", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Export events and installs",
     description: "Export one app's events and installs as CSV for an inclusive date range.",
     inputSchema: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attrkit/mcp",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "AttrKit's stdio MCP server for its public Management API",
   "keywords": [
     "attrkit",