@casys/mcp-erpnext 3.0.2 → 3.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +5 -2
  2. package/mcp-erpnext.mjs +3391 -2228
  3. package/package.json +1 -1
  4. package/ui-dist/invoice-viewer/index.html +54 -48
package/README.md CHANGED
@@ -6,6 +6,7 @@ English | [繁體中文](README.zh-TW.md)
6
6
  [![npm](https://img.shields.io/npm/v/@casys/mcp-erpnext?logo=npm&color=cb3837)](https://www.npmjs.com/package/@casys/mcp-erpnext)
7
7
  [![CI](https://github.com/Casys-AI/mcp-erpnext/actions/workflows/test.yml/badge.svg)](https://github.com/Casys-AI/mcp-erpnext/actions/workflows/test.yml)
8
8
  [![MCP](https://img.shields.io/badge/MCP-server-1f6feb?logo=modelcontextprotocol&logoColor=white)](https://modelcontextprotocol.io)
9
+ [![M8ven Score](https://m8ven.ai/badge/mcp/casys-ai-mcp-erpnext-1kev4k)](https://m8ven.ai/mcp/casys-ai-mcp-erpnext-1kev4k)
9
10
  [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
10
11
 
11
12
  Let any MCP-compatible AI agent operate your [ERPNext](https://erpnext.com) /
@@ -237,8 +238,9 @@ click, inline detail, and cross-viewer navigation.
237
238
  - **Manufacturing** — BOMs, Work Orders, and Job Cards.
238
239
  - **CRM** — Leads, Opportunities, Contacts, and Campaigns.
239
240
  - **Assets** — Assets, Movements, Maintenance records, and Categories.
240
- - **Operations** — Generic CRUD, native assignment, and file upload for any
241
- DocType (`erpnext_doc_*`, `erpnext_file_upload`).
241
+ - **Operations** — Generic CRUD, native assignment, file upload, and
242
+ deny-by-default Frappe method calls (`erpnext_doc_*`, `erpnext_file_upload`,
243
+ `erpnext_method_call`).
242
244
  - **Kanban** — Read-write boards for Task, Opportunity, and Issue with
243
245
  drag-and-drop.
244
246
  - **Analytics** — Charts (bar, area, treemap, radar, scatter, P&L…), KPIs with
@@ -255,6 +257,7 @@ Full per-tool reference with parameters: [`docs/tools.md`](docs/tools.md).
255
257
  | `ERPNEXT_API_KEY` | Yes | API Key from User Settings |
256
258
  | `ERPNEXT_API_SECRET` | Yes | API Secret from User Settings |
257
259
  | `ERPNEXT_MAX_UPLOAD_BYTES` | No | Maximum decoded file-upload size in bytes (positive integer; default: 10 MiB) |
260
+ | `ERPNEXT_METHOD_ALLOWLIST` | No | Comma-separated exact method paths or `prefix.*`; unset means `erpnext_method_call` denies every method, while `*` allows all |
258
261
  | `MCP_MRTR_SIGNING_KEY` | No | Exactly 64 lowercase hex characters; enables signed ambiguous-link elicitation. **Single-instance deployments only** — see below |
259
262
 
260
263
  MRTR is opt-in. Without this key, or when the client does not advertise