@basicbit/vrchat-mcp 0.1.5 → 0.1.7

package/docs/vrcx.md

@@ -1,6 +1,6 @@
 # VRCX Integration Notes
 
-This repo includes optional read-only tooling to pull _local_ context from the VRCX SQLite database.
+This repo includes read-only tooling to pull _local_ context from the VRCX SQLite database. VRCX integration is enabled by default for local full-capability use and can be disabled with `vrcx.enabled = false`.
 
 The goal is to expose information that VRChat's public API does not provide (e.g. local memos, your join/leave history, and time-spent estimates), while avoiding sensitive material (cookies, stored credentials).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@basicbit/vrchat-mcp",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "mcpName": "io.github.BASIC-BIT/vrchat-mcp",
   "description": "MCP server for VRChat friends, worlds, groups, events, notifications, and VRCX history.",
   "type": "module",
@@ -18,9 +18,12 @@
     "docs/curated-tools.md",
     "docs/design-notes.md",
     "docs/evals.md",
+    "docs/privacy.md",
+    "docs/robust-notes.md",
     "docs/tools-guide.md",
     "docs/tools.md",
     "docs/vrcx.md",
+    "skills/vrchat-mcp/SKILL.md",
     "README.md",
     "CHANGELOG.md",
     "server.json",
@@ -50,11 +53,14 @@
     "generate:schemas": "openapi-zod-client specs/vrchat-openapi.yaml -o src/generated/vrchat-schemas.ts -t scripts/templates/openapi-schemas.hbs --export-schemas -p .prettierrc.json && tsx scripts/postprocess-schemas.ts src/generated/vrchat-schemas.ts",
     "generate:test-schemas": "openapi-zod-client test/fixtures/spec.yaml -o test/generated/mock-schemas.ts -t scripts/templates/openapi-schemas.hbs --export-schemas -p .prettierrc.json && tsx scripts/postprocess-schemas.ts test/generated/mock-schemas.ts",
     "generate:tools-docs": "tsx scripts/generate-tools-docs.ts",
+    "mcpb:build": "npm run build && tsx scripts/build-mcpb.ts",
+    "release:verify": "npm run check && npm run build && npm pack --dry-run",
     "mcpo": "uvx mcpo --port 8000 --api-key \"top-secret\" -- npx tsx src/index.ts",
     "start": "node dist/bin/cli.js",
     "metrics:scc": "tsx scripts/metrics/scc.ts",
     "metrics:lizard": "tsx scripts/metrics/lizard.ts",
-    "metrics": "npm run metrics:scc && npm run metrics:lizard"
+    "metrics:tool-budget": "tsx scripts/metrics/tool-budget.ts",
+    "metrics": "npm run metrics:tool-budget && npm run metrics:scc && npm run metrics:lizard"
   },
   "engines": {
     "node": ">=24.15.0"
@@ -82,7 +88,7 @@
     "@apidevtools/json-schema-ref-parser": "^15.3.5",
     "@eslint/js": "^10.0.1",
     "@types/better-sqlite3": "^7.6.13",
-    "@types/node": "^25.0.3",
+    "@types/node": "^25.9.2",
     "@typescript-eslint/eslint-plugin": "^8.50.0",
     "@typescript-eslint/parser": "^8.50.0",
     "@vitest/coverage-v8": "^4.0.16",
@@ -104,7 +110,7 @@
     "better-sqlite3": "^12.6.2",
     "keytar": "^7.9.0",
     "tough-cookie": "^6.0.0",
-    "undici": "^8.2.0",
+    "undici": "^8.4.0",
     "yaml": "^2.8.4",
     "zod": "^4.2.1"
   }

package/server.json

@@ -8,12 +8,12 @@
     "source": "github",
     "id": "1122295987"
   },
-  "version": "0.1.5",
+  "version": "0.1.7",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@basicbit/vrchat-mcp",
-      "version": "0.1.5",
+      "version": "0.1.7",
       "transport": {
         "type": "stdio"
       },
@@ -59,7 +59,7 @@
         },
         {
           "name": "VRCHAT_MCP_ALLOW_WRITES",
-          "description": "Allow non-GET VRChat API write operations. Set to false for read-only mode.",
+          "description": "Allow non-GET VRChat API write operations. Defaults to true for local full-capability use; set to false for read-only mode.",
           "format": "boolean",
           "default": "true",
           "isRequired": false,

package/skills/vrchat-mcp/SKILL.md

@@ -0,0 +1,16 @@
+---
+name: vrchat-mcp
+description: Use when operating VRChat MCP tools, especially auth, privacy-sensitive results, writes, stale cache, or resolving names to IDs.
+---
+
+# VRChat MCP
+
+Use tool schemas and descriptions for normal tool selection. This skill only covers product-specific sharp edges.
+
+- VRChat MCP is designed for local use with user-managed authentication. Normal operation uses the server's auth tools and local auth storage; agents should not need to handle raw VRChat cookies or session tokens.
+- If authentication is missing, use the auth tool flow and verify with a current-user or profile read before continuing.
+- Prefer overview or search tools before detail tools. Use IDs returned by tools for follow-up calls; do not infer IDs from names or URLs.
+- If direct friend lookup by name fails, use the explicit friend search tool before concluding the friend is unavailable.
+- For write tools, keep the target and side effect visible to the user. If a tool returns `confirm_required`, rerun only with the returned `confirmId` and unchanged arguments.
+- If results look stale, invalidate the relevant cache once and retry before treating the result as unavailable.
+- VRCX tools read local VRCX history rather than live VRChat API state.