@casys/mcp-erpnext 3.1.0-beta.4 → 3.1.0-beta.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/README.md +5 -3
  2. package/mcp-erpnext.mjs +2469 -1345
  3. package/package.json +1 -1
  4. package/ui-dist/chart-viewer/index.html +56 -56
  5. package/ui-dist/doc-viewer/index.html +40 -40
  6. package/ui-dist/doclist-viewer/index.html +42 -42
  7. package/ui-dist/funnel-viewer/index.html +40 -40
  8. package/ui-dist/invoice-viewer/index.html +40 -40
  9. package/ui-dist/kanban-viewer/index.html +41 -41
  10. package/ui-dist/kpi-viewer/index.html +41 -41
  11. package/ui-dist/stock-viewer/index.html +40 -40
package/README.md CHANGED
@@ -6,6 +6,7 @@ English | [繁體中文](README.zh-TW.md)
6
6
  [![npm](https://img.shields.io/npm/v/@casys/mcp-erpnext?logo=npm&color=cb3837)](https://www.npmjs.com/package/@casys/mcp-erpnext)
7
7
  [![CI](https://github.com/Casys-AI/mcp-erpnext/actions/workflows/test.yml/badge.svg)](https://github.com/Casys-AI/mcp-erpnext/actions/workflows/test.yml)
8
8
  [![MCP](https://img.shields.io/badge/MCP-server-1f6feb?logo=modelcontextprotocol&logoColor=white)](https://modelcontextprotocol.io)
9
+ [![M8ven Score](https://m8ven.ai/badge/mcp/casys-ai-mcp-erpnext-1kev4k)](https://m8ven.ai/mcp/casys-ai-mcp-erpnext-1kev4k)
9
10
  [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
10
11
 
11
12
  > [!IMPORTANT]
@@ -266,9 +267,9 @@ Quotation, which retain the specialized invoice surface.
266
267
  - **Manufacturing** — BOMs, Work Orders, and Job Cards.
267
268
  - **CRM** — Leads, Opportunities, Contacts, and Campaigns.
268
269
  - **Assets** — Assets, Movements, Maintenance records, and Categories.
269
- - **Operations** — Generic CRUD, native assignment, and attachment listing,
270
- upload, or host-mediated download for any DocType (`erpnext_doc_*`,
271
- `erpnext_file_*`).
270
+ - **Operations** — Generic CRUD, native assignment, attachment listing, upload,
271
+ host-mediated download, and deny-by-default Frappe method calls
272
+ (`erpnext_doc_*`, `erpnext_file_*`, `erpnext_method_call`).
272
273
  - **Kanban** — Read-write boards for Task, Opportunity, and Issue with
273
274
  drag-and-drop.
274
275
  - **Analytics** — Charts (bar, area, treemap, radar, scatter, P&L…), KPIs with
@@ -286,6 +287,7 @@ Full per-tool reference with parameters: [`docs/tools.md`](docs/tools.md).
286
287
  | `ERPNEXT_API_SECRET` | Yes | API Secret from User Settings |
287
288
  | `ERPNEXT_MAX_UPLOAD_BYTES` | No | Maximum decoded file-upload size in bytes (positive integer; default: 10 MiB) |
288
289
  | `ERPNEXT_MAX_DOWNLOAD_BYTES` | No | Maximum attachment-download size in bytes (positive integer; default: 10 MiB) |
290
+ | `ERPNEXT_METHOD_ALLOWLIST` | No | Comma-separated exact method paths or `prefix.*`; unset means `erpnext_method_call` denies every method, while `*` allows all |
289
291
  | `MCP_MRTR_SIGNING_KEY` | No | Exactly 64 lowercase hex characters; enables signed ambiguous-link elicitation. **Single-instance deployments only** — see below |
290
292
 
291
293
  MRTR is opt-in. Without this key, or when the client does not advertise