@caravo/mcp 0.1.2 → 0.1.4

package/README.md

@@ -8,7 +8,7 @@ Local stdio MCP server for [Caravo](https://caravo.ai) with built-in x402 wallet
 # Claude Code
 claude mcp add caravo -- npx -y @caravo/mcp@latest
 
-# Optional: with API key for balance auth + favorites
+# Optional: with API key for balance auth (favorites work either way)
 claude mcp add caravo -e CARAVO_API_KEY=am_xxx -- npx -y @caravo/mcp@latest
 ```
 
@@ -30,9 +30,9 @@ claude mcp add caravo -e CARAVO_API_KEY=am_xxx -- npx -y @caravo/mcp@latest
 | `list_tags` | List all categories |
 | `list_providers` | List all providers |
 | `get_wallet_info` | Get wallet address and USDC balance |
-| `favorite_tool` | Bookmark a tool (requires API key) |
-| `unfavorite_tool` | Remove bookmark (requires API key) |
-| `list_favorites` | List bookmarked tools (requires API key) |
+| `favorite_tool` | Bookmark a tool (server with API key, local without) |
+| `unfavorite_tool` | Remove bookmark (server with API key, local without) |
+| `list_favorites` | List bookmarked tools (server with API key, local without) |
 | `list_tool_requests` | Browse tool requests |
 | `request_tool` | Request a new tool |
 | `upvote_tool_request` | Upvote a tool request |

package/dist/index.js

@@ -17,12 +17,33 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
 import { loadOrCreateWallet } from "./wallet.js";
 import { fetchWithX402 } from "./x402.js";
 const API_BASE = process.env.CARAVO_URL ?? "https://caravo.ai";
-// Optional API key: if it looks like a real key (am_ prefix), uses balance auth; otherwise x402
-const RAW_KEY = process.env.CARAVO_API_KEY;
-const API_KEY = RAW_KEY && RAW_KEY.startsWith("am_") ? RAW_KEY : undefined;
+// Config file: ~/.caravo/config.json — stores API key set via `login` tool
+const CONFIG_DIR = join(homedir(), ".caravo");
+const CONFIG_FILE = join(CONFIG_DIR, "config.json");
+function loadConfig() {
+    try {
+        if (!existsSync(CONFIG_FILE))
+            return {};
+        return JSON.parse(readFileSync(CONFIG_FILE, "utf-8"));
+    }
+    catch {
+        return {};
+    }
+}
+function saveConfig(data) {
+    mkdirSync(CONFIG_DIR, { recursive: true });
+    writeFileSync(CONFIG_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
+}
+// Optional API key: env takes priority, then config file; must have am_ prefix
+const RAW_KEY = process.env.CARAVO_API_KEY || loadConfig().api_key;
+// Mutable so the `login` tool can update it mid-session
+let API_KEY = RAW_KEY && RAW_KEY.startsWith("am_") ? RAW_KEY : undefined;
 const wallet = loadOrCreateWallet();
 process.stderr.write(`[caravo] wallet: ${wallet.address}\n`);
 process.stderr.write(API_KEY
@@ -282,6 +303,80 @@ function registerAllTools(server) {
             ],
         };
     });
+    // ── Login (browser-based account connect) ────────────────────────────────────
+    server.registerTool("login", {
+        description: "Connect your Caravo account to enable balance payments and favorites sync. " +
+            "Opens caravo.ai in your browser — sign in once and the API key is saved automatically. " +
+            "Run this if you started with x402 payments and now want to use your account balance.",
+        inputSchema: {},
+    }, async () => {
+        try {
+            // 1. Create one-time session
+            const initRes = await fetch(`${API_BASE}/api/auth/mcp-session`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+            });
+            const { token, url } = (await initRes.json());
+            // 2. Open browser
+            const { exec } = await import("child_process");
+            const opener = process.platform === "darwin"
+                ? `open "${url}"`
+                : process.platform === "win32"
+                    ? `start "" "${url}"`
+                    : `xdg-open "${url}"`;
+            exec(opener);
+            process.stderr.write(`[caravo] login: opened ${url}\n`);
+            // 3. Poll every 2s for up to 5 minutes
+            const deadline = Date.now() + 5 * 60 * 1000;
+            while (Date.now() < deadline) {
+                await new Promise((r) => setTimeout(r, 2000));
+                const pollRes = await fetch(`${API_BASE}/api/auth/mcp-session?token=${encodeURIComponent(token)}`);
+                const poll = (await pollRes.json());
+                if (poll.status === "completed" && poll.api_key) {
+                    // 4. Save to config + activate for this session
+                    API_KEY = poll.api_key;
+                    saveConfig({ api_key: poll.api_key });
+                    process.stderr.write(`[caravo] login: API key saved to ${CONFIG_FILE}\n`);
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: [
+                                    `✓ Logged in to Caravo!`,
+                                    ``,
+                                    `API key saved to ${CONFIG_FILE}`,
+                                    `Balance payments are now active for this session.`,
+                                    `Restart the MCP server to also load your favorited tools.`,
+                                ].join("\n"),
+                            },
+                        ],
+                    };
+                }
+                if (poll.status === "expired") {
+                    return {
+                        content: [{ type: "text", text: "Login expired. Run login again to retry." }],
+                        isError: true,
+                    };
+                }
+                // status === "pending" — keep polling
+            }
+            return {
+                content: [{ type: "text", text: "Login timed out after 5 minutes. Run login again." }],
+                isError: true,
+            };
+        }
+        catch (err) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Login failed: ${err instanceof Error ? err.message : String(err)}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
     // ── List tags ────────────────────────────────────────────────────────────────
     server.registerTool("list_tags", {
         description: "List all available tags/categories in the marketplace. Returns tag names, slugs, and tool counts.",
@@ -321,7 +416,9 @@ function registerAllTools(server) {
         if (!Number.isInteger(per_page) || per_page < 1) {
             return { content: [{ type: "text", text: "Error: per_page must be a positive integer" }], isError: true };
         }
-        per_page = Math.min(100, per_page);
+        if (per_page > 100) {
+            return { content: [{ type: "text", text: "Error: per_page must be at most 100" }], isError: true };
+        }
         const params = new URLSearchParams();
         if (query)
             params.set("query", query);
@@ -548,7 +645,9 @@ function registerAllTools(server) {
         if (!Number.isInteger(per_page) || per_page < 1) {
             return { content: [{ type: "text", text: "Error: per_page must be a positive integer" }], isError: true };
         }
-        per_page = Math.min(100, per_page);
+        if (per_page > 100) {
+            return { content: [{ type: "text", text: "Error: per_page must be at most 100" }], isError: true };
+        }
         const params = new URLSearchParams();
         params.set("status", status);
         params.set("page", String(page));
@@ -755,7 +854,7 @@ function registerAllTools(server) {
 // ─── Main ─────────────────────────────────────────────────────────────────────
 const server = new McpServer({
     name: "caravo",
-    version: "1.0.0",
+    version: "0.1.4",
 }, {
     instructions: [
         `You have access to Caravo — a comprehensive platform with a wide variety of ready-to-use tools, APIs, and digital assets at very competitive prices.`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caravo/mcp",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Local stdio MCP server for Caravo with built-in x402 wallet",
   "type": "module",
   "bin": {