@caravo/mcp 0.1.0 → 0.1.2

package/dist/index.js

@@ -20,8 +20,9 @@ import { z } from "zod";
 import { loadOrCreateWallet } from "./wallet.js";
 import { fetchWithX402 } from "./x402.js";
 const API_BASE = process.env.CARAVO_URL ?? "https://caravo.ai";
-// Optional API key: if set, uses balance auth instead of x402
-const API_KEY = process.env.CARAVO_API_KEY;
+// Optional API key: if it looks like a real key (am_ prefix), uses balance auth; otherwise x402
+const RAW_KEY = process.env.CARAVO_API_KEY;
+const API_KEY = RAW_KEY && RAW_KEY.startsWith("am_") ? RAW_KEY : undefined;
 const wallet = loadOrCreateWallet();
 process.stderr.write(`[caravo] wallet: ${wallet.address}\n`);
 process.stderr.write(API_KEY
@@ -45,9 +46,18 @@ async function apiPost(path, body) {
         headers: baseHeaders(),
         body: JSON.stringify(body),
     };
-    const r = API_KEY
-        ? await fetch(url, opts)
-        : await fetchWithX402(url, opts, wallet);
+    if (!API_KEY)
+        return (await fetchWithX402(url, opts, wallet)).json();
+    const r = await fetch(url, opts);
+    if (r.status === 401 || r.status === 403) {
+        process.stderr.write("[caravo] API key auth failed, falling back to x402\n");
+        const x402Opts = {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+        };
+        return (await fetchWithX402(url, x402Opts, wallet)).json();
+    }
     return r.json();
 }
 async function apiDelete(path, body) {
@@ -305,8 +315,13 @@ function registerAllTools(server) {
             per_page: z.number().optional().describe("Results per page (default 10)"),
         },
     }, async ({ query, tag, provider, page = 1, per_page = 10 }) => {
-        page = Math.max(1, Math.floor(page));
-        per_page = Math.max(1, Math.min(100, Math.floor(per_page)));
+        if (!Number.isInteger(page) || page < 1) {
+            return { content: [{ type: "text", text: "Error: page must be a positive integer" }], isError: true };
+        }
+        if (!Number.isInteger(per_page) || per_page < 1) {
+            return { content: [{ type: "text", text: "Error: per_page must be a positive integer" }], isError: true };
+        }
+        per_page = Math.min(100, per_page);
         const params = new URLSearchParams();
         if (query)
             params.set("query", query);
@@ -527,6 +542,13 @@ function registerAllTools(server) {
             per_page: z.number().optional().describe("Results per page (default 20)"),
         },
     }, async ({ status = "open", page = 1, per_page = 20 }) => {
+        if (!Number.isInteger(page) || page < 1) {
+            return { content: [{ type: "text", text: "Error: page must be a positive integer" }], isError: true };
+        }
+        if (!Number.isInteger(per_page) || per_page < 1) {
+            return { content: [{ type: "text", text: "Error: per_page must be a positive integer" }], isError: true };
+        }
+        per_page = Math.min(100, per_page);
         const params = new URLSearchParams();
         params.set("status", status);
         params.set("page", String(page));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caravo/mcp",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Local stdio MCP server for Caravo with built-in x402 wallet",
   "type": "module",
   "bin": {