@chainpatrol/mcp 1.10.1 → 1.10.2

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @chainpatrol/mcp
 
+## 1.10.2
+
+### Patch Changes
+
+- aa164fd: Fixed the MCP handshake `instructions` to reflect the tools actually exposed
+  when a server is narrowed with `only` (the CLI's `--tools` flag, or a caller
+  like the web app's blocklist-only endpoint). Previously every server —
+  narrowed or not — advertised the full-API instructions and told the client to
+  call `user_orgs` first, even when `user_orgs` wasn't in the exposed tool set.
+  A client following that advice would hit "unknown tool" before ever reaching
+  the tool it wanted. Supporting work in `@chainpatrol/web` (a new
+  blocklist-only MCP route) is a private package and doesn't need a version
+  bump.
+- adce1d5: The MCP server now reports its real version in the initialize handshake.
+
+  `PACKAGE_VERSION` was a hand-maintained literal that changesets does not
+  know about, so it went stale on every release: 1.10.1 shipped announcing
+  itself as `1.10.0`, the same drift #7804 had already corrected once. It is
+  now read from package.json and inlined by tsup at build time, so the
+  published server still does no filesystem lookup and the two cannot
+  disagree again.
+
 ## 1.10.1
 
 ### Patch Changes

package/dist/{chunk-DXVC4YVX.js → chunk-JBDTADFL.js}

@@ -622,7 +622,7 @@ var tools_default = {
           },
           source: {
             type: "string",
-            description: "Detection source key, from `GET /detection/sources`. The source must support the `organization` scope; global-only sources cannot be configured per organization. One of 55 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, instagram_account_search_vetric. Full list: resource chainpatrol://enums/source"
+            description: "Detection source key, from `GET /detection/sources`. The source must support the `organization` scope; global-only sources cannot be configured per organization. One of 57 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, facebook_post_search_vetric. Full list: resource chainpatrol://enums/source"
           },
           status: {
             type: "string",
@@ -1023,7 +1023,7 @@ var tools_default = {
           },
           filters: {
             type: "array",
-            description: "Filters to apply to the results. Each clause filters on one property. Accepted values per property \u2014 `source`: One of 55 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, instagram_account_search_vetric. Full list: resource chainpatrol://enums/source; `confidence`: none, low, medium, high; `liveness`: UNKNOWN, ALIVE, DEAD; `watchlist`: ENABLED, DISABLED; `assetStatus`: UNKNOWN, ALLOWED, BLOCKED; `reported`: reported, not_reported; `assetType`: One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type; `brand`: number values; `deleted`: string values; `countryCode`: string values.",
+            description: "Filters to apply to the results. Each clause filters on one property. Accepted values per property \u2014 `source`: One of 57 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, facebook_post_search_vetric. Full list: resource chainpatrol://enums/source; `confidence`: none, low, medium, high; `liveness`: UNKNOWN, ALIVE, DEAD; `watchlist`: ENABLED, DISABLED; `assetStatus`: UNKNOWN, ALLOWED, BLOCKED; `reported`: reported, not_reported; `assetType`: One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type; `brand`: number values; `deleted`: string values; `countryCode`: string values.",
             items: {
               type: "object",
               properties: {
@@ -3166,7 +3166,7 @@ var tools_default = {
                     properties: {
                       type: {
                         type: "string",
-                        description: "Enrichment type One of 39 values, e.g. content_and_metadata, browser_capture, ownership_and_registration, geolocation_and_ip, dns, tls, tcp, post. Full list: resource chainpatrol://enums/asset_scan_enrichment_type"
+                        description: "Enrichment type One of 40 values, e.g. content_and_metadata, browser_capture, ownership_and_registration, geolocation_and_ip, dns, tls, tcp, post. Full list: resource chainpatrol://enums/asset_scan_enrichment_type"
                       },
                       source: {
                         type: "string",
@@ -3991,6 +3991,7 @@ var tools_default = {
         "linkedin_profile",
         "meta_ad",
         "google_ad",
+        "adlibrary_ad",
         "contract_deployer"
       ],
       usedBy: [
@@ -4116,6 +4117,7 @@ var tools_default = {
         "telegram_user_search_vetric",
         "facebook_page_search_vetric",
         "facebook_user_search_vetric",
+        "facebook_post_search_vetric",
         "instagram_account_search_vetric",
         "twitter_search_vetric",
         "linkedin_people_search_vetric",
@@ -4161,6 +4163,7 @@ var tools_default = {
         "linkedin_company_search",
         "bing_ads_search",
         "tik_tok_ads_search",
+        "adlibrary_ads_search",
         "dnsdb",
         "daily_motion_search",
         "watchlist"
@@ -4221,6 +4224,17 @@ function toErrorResult(error) {
     content: [{ type: "text", text: message }]
   };
 }
+var RESOURCE_HINT = "Where a parameter's description points at a `chainpatrol://` resource, read it before guessing a value.";
+function buildInstructions(tools, isNarrowed) {
+  if (!isNarrowed) {
+    return "ChainPatrol threat intelligence and brand protection. Every public API capability is available here as a tool: checking and searching assets, reports, proposals, detections, takedowns, metrics, healthchecks and organization management.\n\nMost tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\n" + RESOURCE_HINT;
+  }
+  const names = tools.map((tool) => tool.name).sort().join(", ");
+  const orgScoping = tools.some((tool) => tool.name === "user_orgs") ? "Most tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\n" : "These tools resolve their organization from the credential in use \u2014 there is no org slug to pass.\n\n";
+  return `ChainPatrol threat intelligence. This server exposes a narrowed set of tools: ${names}.
+
+${orgScoping}${RESOURCE_HINT}`;
+}
 function createChainPatrolMcpServer(options) {
   const tools = selectTools(options.only);
   const resources = buildResources(manifest, tools);
@@ -4229,6 +4243,7 @@ function createChainPatrolMcpServer(options) {
     tools.map((tool) => tool.name)
   );
   const byName = new Map(tools.map((tool) => [tool.name, tool]));
+  const isNarrowed = Boolean(options.only && options.only.length > 0);
   const server = new Server(
     {
       name: options.serverName ?? "chainpatrol",
@@ -4236,7 +4251,7 @@ function createChainPatrolMcpServer(options) {
     },
     {
       capabilities: { tools: {}, resources: {}, prompts: {} },
-      instructions: "ChainPatrol threat intelligence and brand protection. Every public API capability is available here as a tool: checking and searching assets, reports, proposals, detections, takedowns, metrics, healthchecks and organization management.\n\nMost tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\nWhere a parameter's description points at a `chainpatrol://` resource, read it before guessing a value."
+      instructions: buildInstructions(tools, isNarrowed)
     }
   );
   server.setRequestHandler(ListToolsRequestSchema, () => ({
@@ -4449,8 +4464,73 @@ function toolsFromEnvironment(env = process.env) {
   return names.length > 0 ? names : void 0;
 }
 
+// package.json
+var package_default = {
+  name: "@chainpatrol/mcp",
+  description: "The official ChainPatrol MCP server \u2014 every public API capability as an MCP tool",
+  author: "ChainPatrol <support@chainpatrol.io>",
+  version: "1.10.2",
+  license: "UNLICENSED",
+  homepage: "https://chainpatrol.com/docs/mcp",
+  keywords: [
+    "chainpatrol",
+    "mcp",
+    "model-context-protocol",
+    "agent"
+  ],
+  type: "module",
+  exports: {
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js"
+    },
+    "./config": {
+      types: "./dist/chainpatrol-config.d.ts",
+      import: "./dist/chainpatrol-config.js"
+    }
+  },
+  bin: {
+    "chainpatrol-mcp": "./dist/stdio-bin.js"
+  },
+  files: [
+    "./dist/**"
+  ],
+  publishConfig: {
+    access: "public",
+    provenance: false
+  },
+  scripts: {
+    build: "tsup",
+    dev: "tsup --watch",
+    "tools:generate": "tsx scripts/generate-tools.ts",
+    "tools:check": "tsx scripts/generate-tools.ts --check",
+    typecheck: "tsc --noEmit",
+    test: "vitest run --config vitest.config.unit.ts",
+    "lint:eslint": "eslint . --flag unstable_native_nodejs_ts_config --cache --cache-location .cache/.eslintcache",
+    lint: "npx oxlint ."
+  },
+  dependencies: {
+    "@modelcontextprotocol/sdk": "catalog:",
+    luxon: "catalog:",
+    zod: "catalog:"
+  },
+  devDependencies: {
+    "@chainpatrol/eslint-config": "workspace:*",
+    "@chainpatrol/external-trpc": "workspace:*",
+    "@chainpatrol/tsconfig": "workspace:*",
+    "@types/luxon": "catalog:",
+    "@types/node": "catalog:",
+    eslint: "catalog:",
+    tsup: "^8.5.0",
+    tsx: "catalog:",
+    typescript: "catalog:",
+    vitest: "catalog:",
+    "zod-to-json-schema": "^3.24.5"
+  }
+};
+
 // src/version.ts
-var PACKAGE_VERSION = "1.10.0";
+var PACKAGE_VERSION = package_default.version;
 
 export {
   PROMPTS,
@@ -4466,4 +4546,4 @@ export {
   toolsFromEnvironment,
   PACKAGE_VERSION
 };
-//# sourceMappingURL=chunk-DXVC4YVX.js.map
+//# sourceMappingURL=chunk-JBDTADFL.js.map