@capivv/mcp-server 0.1.3 → 0.2.0

package/dist/tools/whoami.js

@@ -0,0 +1,31 @@
+// Introduced in V6 Phase A to address the cross-org API key mismatch from the
+// 2026-04-12 customer audit (Defect 3d). Users holding an API key for one org
+// while viewing a different org in the dashboard now have an immediate way to
+// confirm which org and apps their MCP integration reaches.
+export function registerWhoamiTool(server, client) {
+    server.tool('capivv_whoami', 'Show which Capivv workspace (organization) and apps the current API key is connected to. Use this first when something looks wrong — e.g., products or entitlements appear missing — to confirm the MCP is pointed at the right workspace.', async () => {
+        const me = await client.whoami();
+        const lines = [
+            `Workspace: ${me.org_name} (${me.tenant_id})`,
+            `Key type: ${me.key_type ?? 'jwt-session'}`,
+        ];
+        if (me.app_id) {
+            lines.push(`Scoped to app: ${me.app_id}`);
+        }
+        if (me.apps.length === 0) {
+            lines.push('Apps: (none yet — connect a store in the Capivv dashboard to import apps)');
+        }
+        else {
+            lines.push(`Apps (${me.apps.length}):`);
+            for (const app of me.apps) {
+                lines.push(`  • ${app.name} — ${app.bundle_id} (${app.platform})`);
+            }
+        }
+        return {
+            content: [
+                { type: 'text', text: lines.join('\n') },
+                { type: 'text', text: JSON.stringify(me, null, 2) },
+            ],
+        };
+    });
+}

package/dist/types.d.ts

@@ -1,8 +1,42 @@
+export interface ApiKeyUsageSample {
+    bucket_start: string;
+    client_ip: string | null;
+    sdk_version: string | null;
+    country_code: string | null;
+    request_count: number;
+    error_count: number;
+}
+export interface ApiKeyUsageSummary {
+    total_requests: number;
+    total_errors: number;
+    distinct_ips: number;
+    distinct_countries: number;
+    distinct_sdk_versions: number;
+}
+export interface ApiKeyUsageResponse {
+    hours: number;
+    summary: ApiKeyUsageSummary;
+    samples: ApiKeyUsageSample[];
+}
+export interface WhoamiResponse {
+    tenant_id: string;
+    org_name: string;
+    key_type?: 'public' | 'secret';
+    app_id?: string;
+    apps: WhoamiApp[];
+}
+export interface WhoamiApp {
+    id: string;
+    name: string;
+    bundle_id: string;
+    platform: string;
+}
 export interface App {
     id: string;
     name: string;
     platform: string;
-    bundle_id: string;
+    bundle_id: string | null;
+    settings: Record<string, unknown>;
     archived_at: string | null;
     created_at: string;
     updated_at: string;
@@ -15,6 +49,7 @@ export interface Product {
     display_name: string;
     description: string | null;
     entitlement_ids: string[];
+    metadata: Record<string, unknown>;
     created_at: string;
     updated_at: string;
 }
@@ -26,66 +61,66 @@ export interface Entitlement {
     created_at: string;
     updated_at: string;
 }
-export interface Package {
+export interface OfferingPackage {
     identifier: string;
     product_id: string;
     display_name: string;
+    description: string | null;
     package_type: string;
     position: number;
 }
 export interface Offering {
     id: string;
-    app_id: string;
     identifier: string;
     display_name: string;
     description: string | null;
     is_default: boolean;
-    packages: Package[];
+    packages: OfferingPackage[];
+    /** V7 autopilot provenance, omitted for user-created. */
+    generated_by?: string | null;
+    app_id?: string;
     created_at: string;
     updated_at: string;
 }
 export interface Rule {
     id: string;
+    identifier: string;
     name: string;
-    content: string;
+    description: string | null;
     priority: number;
-    is_enabled: boolean;
+    status: string;
+    conditions: unknown;
+    actions: unknown;
+    guardrails: unknown;
+    schedule: unknown | null;
+    metadata: unknown;
+    version: number;
+    /** V7 autopilot provenance. */
+    generated_by?: string | null;
+    created_at: string;
     updated_at: string;
+    activated_at: string | null;
 }
 export interface ExperimentVariant {
     id: string;
     name: string;
     is_control: boolean;
     traffic_percent: number;
-    sample_size: number;
-    conversion_count: number;
-    conversion_rate: number | null;
-    uplift_percent: number | null;
+    [key: string]: unknown;
 }
 export interface Experiment {
     id: string;
     name: string;
     description: string | null;
     status: string;
-    target_metric: string | null;
-    start_date: string | null;
-    end_date: string | null;
-    confidence_level: number;
     variants: ExperimentVariant[];
+    [key: string]: unknown;
 }
 export interface ExperimentSummary {
-    experiment_id: string;
-    experiment_name: string;
+    id: string;
+    name: string;
     status: string;
-    total_participants: number;
-    leading_variant: string | null;
-    uplift: number | null;
-    confidence: number | null;
-    days_running: number;
-}
-export interface PeriodComparison {
-    mrr_change_percent: number;
-    subscriptions_change_percent: number;
+    [key: string]: unknown;
 }
 export interface AnalyticsOverview {
     mrr: number;
@@ -97,65 +132,29 @@ export interface AnalyticsOverview {
     churn_rate: number;
     arpu: number;
     arpu_formatted: string;
-    period_comparison: PeriodComparison | null;
-}
-export interface OnboardingProgress {
-    onboarding_mode: string;
-    welcome_seen: boolean;
-    app_created: boolean;
-    entitlement_created: boolean;
-    store_credentials_configured: boolean;
-    product_created: boolean;
-    offering_created: boolean;
-    sdk_key_viewed: boolean;
-    store_connected: boolean;
-    import_reviewed: boolean;
-    import_completed: boolean;
+    period_comparison: {
+        mrr_change: string;
+        mrr_change_percent: number;
+        subscriptions_change: string;
+        subscriptions_change_percent: number;
+    };
+    [key: string]: unknown;
+}
+export interface OnboardingStep {
+    key: string;
+    label: string;
+    completed: boolean;
 }
 export interface OnboardingResponse {
-    progress: OnboardingProgress;
     is_complete: boolean;
     completed_steps: number;
     total_steps: number;
+    steps: OnboardingStep[];
     next_step: string | null;
-}
-export interface SuggestedProduct {
-    external_id: string;
-    product_type: string;
-    display_name: string;
-    source: string;
-    already_exists: boolean;
-}
-export interface SuggestedEntitlement {
-    identifier: string;
-    display_name: string;
-    already_exists: boolean;
-}
-export interface SuggestedOffering {
-    identifier: string;
-    display_name: string;
-    is_default: boolean;
-}
-export interface ImportSuggestion {
-    products: SuggestedProduct[];
-    entitlements: SuggestedEntitlement[];
-    offerings: SuggestedOffering[];
-    warnings: string[];
-}
-export interface ExistingEntityCounts {
-    apps: number;
-    products: number;
-    entitlements: number;
-    offerings: number;
-}
-export interface StoreError {
-    source: string;
-    message: string;
+    [key: string]: unknown;
 }
 export interface ImportPreviewResponse {
-    suggestion: ImportSuggestion;
-    existing_counts: ExistingEntityCounts;
-    store_errors: StoreError[];
+    [key: string]: unknown;
 }
 export interface CreateOfferingRequest {
     app_id: string;
@@ -172,13 +171,50 @@ export interface CreateOfferingRequest {
     }>;
 }
 export interface CreateRuleRequest {
+    identifier: string;
     name: string;
-    content: string;
-    priority: number;
-    is_enabled: boolean;
+    description?: string;
+    priority?: number;
+    conditions: unknown;
+    actions: unknown;
+    guardrails?: unknown[] | undefined;
+    schedule?: unknown;
+    metadata?: unknown;
+}
+export interface ValidateRuleRequest {
+    conditions: unknown;
+    actions: unknown;
+    guardrails?: unknown[] | undefined;
 }
 export interface ValidateRuleResponse {
     is_valid: boolean;
     errors: string[];
     warnings: string[];
 }
+export interface CreateAppRequest {
+    name: string;
+    platform: string;
+    bundle_id: string;
+}
+export interface CreateEntitlementRequest {
+    identifier: string;
+    display_name: string;
+    description?: string;
+}
+export interface CreateProductRequest {
+    app_id: string;
+    external_id: string;
+    product_type: string;
+    display_name: string;
+    description?: string;
+    entitlement_ids?: string[];
+    subscription?: {
+        billing_period: string;
+        grace_period_enabled?: boolean;
+    };
+    prices?: Array<{
+        currency: string;
+        amount_cents: number;
+        is_default?: boolean;
+    }>;
+}

package/dist/types.js

@@ -1,3 +1 @@
-// API response types mirrored from crates/capivv-cli/src/client.rs
-// and dashboard/src/types/api.ts
 export {};

package/mcp.json

@@ -20,6 +20,77 @@
     }
   },
   "tools": [
+    {
+      "name": "capivv_whoami",
+      "description": "Show which Capivv workspace (organization) and apps the current API key is connected to. Use this first when something looks wrong — e.g., products appear missing — to confirm the MCP is pointed at the right workspace."
+    },
+    {
+      "name": "capivv_autopilot_status",
+      "description": "Show everything autopilot generated for a specific app — offerings, entitlement rules, and experiments. Use after capivv_setup_wizard or product imports to confirm what was auto-created.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "app_id": {
+            "type": "string",
+            "description": "The Capivv app ID to inspect"
+          }
+        },
+        "required": ["app_id"]
+      }
+    },
+    {
+      "name": "capivv_api_key_usage",
+      "description": "Fetch SDK request telemetry for a publishable API key (hourly buckets, distinct IPs, countries, SDK versions). Use to investigate a suspected leaked key.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "api_key_id": {
+            "type": "string",
+            "description": "UUID of the api_keys row to inspect"
+          },
+          "hours": {
+            "type": "number",
+            "description": "Window in hours to summarize over (default 24, max 168)"
+          }
+        },
+        "required": ["api_key_id"]
+      }
+    },
+    {
+      "name": "capivv_next_step",
+      "description": "Analyze your current Capivv setup and tell you exactly what to do next. Returns a prioritized checklist with clear instructions for each step."
+    },
+    {
+      "name": "capivv_setup_wizard",
+      "description": "One-shot setup for an EXISTING app: creates entitlement, products, and offering on an app you imported from App Store Connect or Google Play via the dashboard. Output includes tenant_id + org_name so you can verify which workspace was written to.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "bundle_id": { "type": "string", "description": "Bundle ID of an already-imported app. Omit if the workspace has exactly one app." },
+          "entitlement_id": { "type": "string", "description": "Entitlement identifier (e.g., pro, premium)" },
+          "products": {
+            "type": "array",
+            "description": "Subscription products to create",
+            "items": {
+              "type": "object",
+              "properties": {
+                "name": { "type": "string" },
+                "external_id": { "type": "string", "description": "Store product ID — must match App Store / Google Play exactly" },
+                "billing_period": { "type": "string", "description": "week, month, three_months, six_months, or year" },
+                "price_cents": { "type": "number", "description": "Price in USD cents (e.g., 799 for $7.99)" }
+              },
+              "required": ["name", "external_id", "billing_period", "price_cents"]
+            }
+          },
+          "offering_id": { "type": "string", "description": "Offering identifier (default: 'default')" }
+        },
+        "required": ["entitlement_id", "products"]
+      }
+    },
+    {
+      "name": "capivv_verify_setup",
+      "description": "Verify your Capivv setup is complete and correctly configured. Returns a pass/fail checklist with fix instructions for any issues."
+    },
     {
       "name": "capivv_status",
       "description": "Get the current status of your Capivv subscription platform including setup progress, resource counts, and key metrics."
@@ -127,6 +198,12 @@
     }
   ],
   "resources": [
+    {
+      "uri": "capivv://docs/quickstart",
+      "name": "quickstart",
+      "description": "Step-by-step quickstart guide: register app, create entitlements, create products, create offering, integrate SDK. Start here.",
+      "mimeType": "text/markdown"
+    },
     {
       "uri": "capivv://status",
       "name": "status",
@@ -144,6 +221,18 @@
       "name": "concepts",
       "description": "Glossary of Capivv subscription platform concepts (15 terms).",
       "mimeType": "application/json"
+    },
+    {
+      "uri": "capivv://docs/guides/ios",
+      "name": "guide-ios",
+      "description": "Complete iOS integration guide: App Store Connect setup, SDK installation, purchases, entitlements, testing, troubleshooting.",
+      "mimeType": "text/markdown"
+    },
+    {
+      "uri": "capivv://docs/guides/ai-prompts",
+      "name": "guide-ai-prompts",
+      "description": "Ready-to-use prompts for AI code generators (Lovable, Bolt, Cursor) to integrate Capivv on iOS, Android, Flutter, Web, Ionic.",
+      "mimeType": "text/markdown"
     }
   ]
 }

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "@capivv/mcp-server",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "description": "MCP server for managing Capivv subscription platform via AI assistants",
   "type": "module",
   "bin": {
-    "capivv-mcp": "./dist/index.js"
+    "capivv-mcp": "./dist/index.js",
+    "capivv-mcp-http": "./dist/http.js"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -34,6 +35,8 @@
   "scripts": {
     "build": "tsc",
     "dev": "tsx src/index.ts",
+    "dev:http": "tsx src/http.ts",
+    "start:http": "node dist/http.js",
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
@@ -41,9 +44,12 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",
+    "express": "^4.21.0",
+    "yaml": "^2.8.2",
     "zod": "^4.0.0"
   },
   "devDependencies": {
+    "@types/express": "^4.17.21",
     "@types/node": "^20.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.0.0",