@attrkit/mcp 0.4.3 → 0.4.5

package/README.md

@@ -33,7 +33,7 @@ Install Node.js 18 or newer. The `npx -y @attrkit/mcp` command downloads and
 starts the server automatically, so no global install is required.
 
 Create the first workspace management key under
-[Dashboard → Settings → API keys](https://attrikit.io/en/dashboard/settings/api-keys).
+[Dashboard → Settings → API keys & MCP](https://attrikit.io/en/dashboard/settings/api-keys).
 This one-time bootstrap requires the dashboard.
 
 After that first key exists, a workspace-scoped read/write key can manage every

package/dist/cli.js

@@ -14076,7 +14076,8 @@ function toToolResult(result) {
     const code = envelope?.error?.code ?? `http_${result.status}`;
     const message = envelope?.error?.message ? `: ${envelope.error.message}` : "";
     const retryAfter = result.status === 429 && result.retryAfter ? ` (Retry-After: ${result.retryAfter})` : "";
-    const excerpt = !envelope?.error?.message && result.rawBody ? ` — body: ${result.rawBody.replace(/\s+/g, " ").trim().slice(0, 300)}` : "";
+    const redact = (text) => text.replace(/\b(?:mk|pk|sk|rk)_[A-Za-z0-9_-]{8,}/g, "[redacted-key]").replace(/\b[Bb]earer\s+[A-Za-z0-9._-]{8,}/g, "Bearer [redacted]").replace(/\bAttriKit-(?:Management|Publishable)\s+\S+/g, "AttriKit-$1 [redacted]").replace(/([?&](?:token|secret|key|password|code|signature)=)[^&\s]+/gi, "$1[redacted]");
+    const excerpt = !envelope?.error?.message && result.rawBody ? ` — body: ${redact(result.rawBody.replace(/\s+/g, " ").trim()).slice(0, 300)}` : "";
     const hint = result.status === 401 ? " Check ATTRKIT_API_KEY: this is the same error for a missing, wrong, revoked or expired key." : "";
     return {
       content: [{
@@ -14090,7 +14091,8 @@ function toToolResult(result) {
   const isEmptySuccess = result.status === 204 && (result.rawBody === undefined || result.rawBody === "");
   const isJsonEnvelope = result.json !== null && typeof result.json === "object" && !Array.isArray(result.json) && Object.hasOwn(result.json, "data");
   const contentType = (result.contentType ?? "").toLowerCase();
-  const isExpectedText = expectedResponse === "text" && typeof result.json === "string" && (contentType.includes("text/csv") || contentType.includes("application/csv"));
+  const looksLikeMarkup = typeof result.json === "string" && /^\s*<(?:!doctype|html|head|body)\b/i.test(result.json);
+  const isExpectedText = expectedResponse === "text" && typeof result.json === "string" && !contentType.includes("text/html") && !looksLikeMarkup;
   if (!isEmptySuccess && !isJsonEnvelope && !isExpectedText) {
     const reportedContentType = result.contentType ?? "unknown content type";
     const received = result.json === null ? "an empty body" : Array.isArray(result.json) ? "a JSON array" : typeof result.json === "object" ? "a JSON object without a data field" : `a ${typeof result.json} body`;
@@ -14110,12 +14112,14 @@ ${body}`
     structuredContent: structured
   };
 }
-var SERVER_VERSION = "0.4.3";
+var SERVER_VERSION = "0.4.5";
 var periodSchema = z4.enum(["7d", "30d", "90d", "all"]).describe("Reporting window. Defaults to 30d.").optional();
 var appIdSchema = z4.string().describe("Optional app id to scope the result to one app.").optional();
 var requiredAppIdSchema = z4.string().describe("The AttrKit app id.");
 var idempotencyKeySchema = z4.string().max(255).describe("Stable retry key for this exact mutation.").optional();
 var ownersSchema = z4.record(z4.string(), z4.enum(["attrkit", "revenuecat", "customer"]));
+var cursorSchema = z4.string().optional().describe("Pass the next_cursor from the previous response to fetch the following page. Omit for the first page.");
+var listLimitSchema = z4.number().int().min(1).max(200).optional().describe("Rows per page, 1-200. The API defaults to 50, so a workspace with more than that needs paging.");
 var spendRowSchema = z4.object({
   campaign_id: z4.string().optional().describe("The AttrKit campaign UUID, NOT the ad network's own campaign id. It is the opposite of create_campaign_link.campaign_id and is the most common mistake here: read it from list_campaigns. The API rejects a network id by name. Preferred snake_case spelling."),
   campaignId: z4.string().optional().describe("Accepted camelCase alias for campaign_id."),
@@ -14212,8 +14216,10 @@ function createServer(config, fetchImpl) {
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List apps",
     description: "List the iOS and Android apps in your AttrKit workspace (id, name, platform, bundle id, store id, status).",
-    inputSchema: {}
-  }, async () => toToolResult(await call("/api/v1/apps")));
+    inputSchema: { cursor: cursorSchema, limit: listLimitSchema }
+  }, async ({ cursor, limit }) => toToolResult(await call("/api/v1/apps", {
+    query: { ...cursor ? { cursor } : {}, ...limit === undefined ? {} : { limit: String(limit) } }
+  })));
   server.registerTool("create_app", {
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Create an app",
@@ -14360,8 +14366,15 @@ function createServer(config, fetchImpl) {
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List campaigns",
     description: "List ad campaigns with their honest profit surface: the scale/cut/hold call, profit p05/p50/p95, spend, retention, and payback. Use this to see how campaigns are performing.",
-    inputSchema: { app_id: appIdSchema, period: periodSchema }
-  }, async ({ app_id, period }) => toToolResult(await call("/api/v1/reports/campaigns", { query: { appId: app_id, period } })));
+    inputSchema: { app_id: appIdSchema, period: periodSchema, cursor: cursorSchema, limit: listLimitSchema }
+  }, async ({ app_id, period, cursor, limit }) => toToolResult(await call("/api/v1/reports/campaigns", {
+    query: {
+      appId: app_id,
+      period,
+      ...cursor ? { cursor } : {},
+      ...limit === undefined ? {} : { limit: String(limit) }
+    }
+  })));
   server.registerTool("list_ads", {
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List creative-level ad performance",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attrkit/mcp",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "AttrKit's stdio MCP server for its public Management API",
   "keywords": [
     "attrkit",