@blanketbyte/wise-mcp 1.0.1 → 1.0.3

package/README.md

@@ -143,6 +143,7 @@ transfers only:                                    you pay it in the Wise app
 | 🧹 **Minimal retention** | A Wise token is deleted as soon as no live session uses it: after revocation, session expiry, or when Wise rejects it. |
 | 🔁 **OAuth hardening** | PKCE (S256), single-use login and authorization codes, rotating refresh tokens, redirect hosts limited to `claude.ai`, `claude.com`, `chatgpt.com` and localhost, so authorization codes can only reach apps you trust. |
 | 🚦 **Rate limiting** | The token forms (`/login`, `/sessions/login`) allow 20 attempts per IP every 15 minutes; OAuth endpoints use the MCP SDK's limits. |
+| 🔐 **HTTPS only** | The server refuses to start with a non-HTTPS `PUBLIC_URL`, and every page shows a red warning if it's opened over plain HTTP, so nobody pastes a Wise token on an unencrypted page. |
 | 🛡️ **Pages** | Strict CSP (`default-src 'none'`, `form-action` limited to the server and the client's own redirect origin), `X-Frame-Options: DENY`, `no-store`, no referrer. |
 
 > [!WARNING]
@@ -200,6 +201,8 @@ Optional env: `WRITES_ENABLED=false` for read-only, `MAX_TRANSFER_AMOUNT` for a
 
 The container serves plain HTTP on port **3000**; put it behind anything that terminates HTTPS. State (sealed tokens, sessions) lives in **`/data`**.
 
+A prebuilt image is published with every release: **`ghcr.io/blanketbyte/wise-mcp:<version>`** (or `:latest`), for `linux/amd64` and `linux/arm64`. Use it instead of building from source wherever your platform accepts an image.
+
 ### Dokploy
 
 1. **DNS**: point a hostname (e.g. `wise.example.com`) at your Dokploy server.
@@ -303,7 +306,7 @@ The remote end-to-end test boots the server next to a mock Wise API and drives e
 
 ### Releasing
 
-Push a tag matching `package.json` (e.g. `v1.1.0`). The release workflow runs the tests, publishes `@blanketbyte/wise-mcp` to npm with provenance (trusted publishing over GitHub OIDC, no npm token stored anywhere), lists it in the [official MCP Registry](https://registry.modelcontextprotocol.io) from `server.json`, and attaches the `.mcpb` to a GitHub release. Before the first release, remove `"private": true` from `package.json`.
+Push a tag matching `package.json` (e.g. `v1.1.0`). The release workflow runs the tests, publishes `@blanketbyte/wise-mcp` to npm with provenance (trusted publishing over GitHub OIDC, no npm token stored anywhere), lists it in the [official MCP Registry](https://registry.modelcontextprotocol.io) from `server.json`, attaches the `.mcpb` to a GitHub release, and pushes the Docker image to `ghcr.io/blanketbyte/wise-mcp`. Before the first release, remove `"private": true` from `package.json`.
 
 <details>
 <summary>Project layout</summary>

package/dist/auth/pages.js

@@ -104,6 +104,10 @@ function layout(title, body) {
   .sub { color:var(--muted); font-size:13.5px; margin:0; }
   .sub b, .sub a.brand { color:var(--fg); font-weight:600; text-decoration:none; }
   .sub a.brand:hover { text-decoration:underline; }
+  .insecure { display:flex; gap:12px; align-items:flex-start; margin:0 0 24px; padding:14px 16px; border-radius:16px;
+              background:#b42318; color:#fff; font-size:14px; line-height:1.5; box-shadow:0 0 0 4px rgba(180,35,24,.18); }
+  .insecure .ic { width:22px; height:22px; flex:none; margin-top:1px; }
+  .insecure strong { display:block; font-size:15px; }
   .notice { display:inline-flex; align-items:center; gap:6px; margin-top:10px; padding:5px 12px 5px 10px; border-radius:999px;
             background:var(--warn-bg); color:var(--warn); border:1px solid var(--warn-line); font-size:12.5px; font-weight:600; }
   .notice .ic { width:15px; height:15px; }
@@ -201,6 +205,8 @@ function card(inner, opts) {
   <footer>${icon("lock")}<span>Token encrypted at rest</span><span class="dot">·</span><a href="/sessions">Manage sessions</a><span class="dot">·</span><a class="gh" href="${REPO_URL}" target="_blank" rel="noopener">${icon("github")}Source</a></footer>
 </main>`;
 }
+/** Red banner shown on every page served over plain HTTP (except localhost). */
+export const INSECURE_BANNER = `<div class="insecure" role="alert">${icon("alert")}<div><strong>Not secure: this page uses HTTP, not HTTPS</strong>Don't paste your Wise token here: anyone on the network could read it. Turn on HTTPS for this domain (e.g. Let's Encrypt in Dokploy or Easypanel), then reload over https://.</div></div>`;
 const alert = (kind, html) => `<div class="alert ${kind}" role="${kind === "err" ? "alert" : "status"}">${icon(kind === "err" ? "alert" : "check")}<div>${html}</div></div>`;
 const TOKEN_STEPS = `<details>
   <summary>Where do I find my token?</summary>

package/dist/auth/provider.js

@@ -2,7 +2,7 @@ import { InvalidClientMetadataError, InvalidGrantError, InvalidTargetError, Inva
 import { randomToken } from "../crypto.js";
 import { wiseClient } from "../wise/connections.js";
 import { WiseAccessRevokedError, WiseApiError } from "../wise/client.js";
-import { loginPage, messagePage, pageCsp, SESSION_CHOICES } from "./pages.js";
+import { INSECURE_BANNER, loginPage, messagePage, pageCsp, SESSION_CHOICES } from "./pages.js";
 const ACCESS_TTL_MS = 60 * 60 * 1000; // 1 hour
 const DAY_MS = 24 * 60 * 60 * 1000;
 const LOGIN_TTL_MS = 15 * 60 * 1000; // the login page must be submitted within 15 minutes
@@ -208,7 +208,17 @@ export class WiseOAuthProvider {
                 this.codes.delete(k);
     }
 }
+const LOCAL_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
+/** True when the browser reached us over plain HTTP on a real hostname (behind the proxy, via X-Forwarded-Proto). */
+export function isInsecure(req) {
+    return req.protocol !== "https" && !LOCAL_HOSTS.has(req.hostname);
+}
 export function page(res, status = 200, formTargets = []) {
+    if (isInsecure(res.req)) {
+        // Put a red warning at the top of the card on every page that's served over HTTP.
+        const send = res.send.bind(res);
+        res.send = ((body) => send(typeof body === "string" ? body.replace('<div class="inner">', `<div class="inner">${INSECURE_BANNER}`) : body));
+    }
     res.status(status);
     res.setHeader("Cache-Control", "no-store");
     res.setHeader("Content-Security-Policy", pageCsp(formTargets));

package/dist/index.js

@@ -14,6 +14,10 @@ import { WiseOAuthProvider, identify, page } from "./auth/provider.js";
 import { homePage, messagePage, sessionsLoginPage, sessionsPage } from "./auth/pages.js";
 const config = loadServerConfig();
 const publicUrl = new URL(config.PUBLIC_URL);
+if (publicUrl.protocol !== "https:" && !["localhost", "127.0.0.1", "[::1]"].includes(publicUrl.hostname)) {
+    console.error(`❌ PUBLIC_URL must be https:// (got ${publicUrl.origin}). Wise tokens must never travel unencrypted: enable HTTPS for the domain and set PUBLIC_URL=https://…`);
+    process.exit(1);
+}
 const mcpUrl = new URL("/mcp", publicUrl);
 const iconUrl = new URL("/icon.png", publicUrl).href;
 const iconSvgUrl = new URL("/logo.svg", publicUrl).href;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blanketbyte/wise-mcp",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "MCP server for Wise: read balances, card payments, transfers and recipients, and prepare transfers you approve twice. Runs locally (npx, for Claude, Codex, Cursor…) or as a remote connector for Claude and ChatGPT.",
   "mcpName": "io.github.BlanketByte/wise-mcp",
   "keywords": [