@chainpatrol/mcp 1.10.1 → 1.11.0

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @chainpatrol/mcp
 
+## 1.11.0
+
+### Minor Changes
+
+- 3895c2f: `/asset/list` no longer requires `type`. Omitting it returns assets of every
+  type on a single pagination cursor, so mirroring the whole blocklist no longer
+  means looping the `AssetType` enum. Supplying `type` behaves exactly as before.
+
+  - `@chainpatrol/sdk`: `listAssets` accepts an input without `type`.
+  - `@chainpatrol/mcp`: the generated `asset_list` tool drops `type` from its
+    required fields.
+
+  Server-side work lives in @chainpatrol/validation and @chainpatrol/external-trpc;
+  both are private packages and don't need version bumps.
+
+- 264c4f7: Expose the new `hasAttachments` filter on both report-list tools, `organization_reports_list` and `get_organization_reports`, so a report search can be narrowed to reports that carry evidence files. Supporting work lives in the private packages @chainpatrol/core, @chainpatrol/external-trpc and @chainpatrol/trpc, which do not need version bumps.
+
+## 1.10.2
+
+### Patch Changes
+
+- aa164fd: Fixed the MCP handshake `instructions` to reflect the tools actually exposed
+  when a server is narrowed with `only` (the CLI's `--tools` flag, or a caller
+  like the web app's blocklist-only endpoint). Previously every server —
+  narrowed or not — advertised the full-API instructions and told the client to
+  call `user_orgs` first, even when `user_orgs` wasn't in the exposed tool set.
+  A client following that advice would hit "unknown tool" before ever reaching
+  the tool it wanted. Supporting work in `@chainpatrol/web` (a new
+  blocklist-only MCP route) is a private package and doesn't need a version
+  bump.
+- adce1d5: The MCP server now reports its real version in the initialize handshake.
+
+  `PACKAGE_VERSION` was a hand-maintained literal that changesets does not
+  know about, so it went stale on every release: 1.10.1 shipped announcing
+  itself as `1.10.0`, the same drift #7804 had already corrected once. It is
+  now read from package.json and inlined by tsup at build time, so the
+  published server still does no filesystem lookup and the two cannot
+  disagree again.
+
 ## 1.10.1
 
 ### Patch Changes

package/dist/{chunk-DXVC4YVX.js → chunk-7U4RIDQZ.js}

@@ -195,7 +195,7 @@ var tools_default = {
         properties: {
           type: {
             type: "string",
-            description: "Asset type One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+            description: "Asset type One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
           },
           content: {
             type: "string",
@@ -310,7 +310,7 @@ var tools_default = {
       path: "/asset/list",
       pathParams: [],
       title: "List assets",
-      description: "Answers 'which assets of this type does ChainPatrol hold at this status?'. Returns a paginated list for one asset type, defaulting to `BLOCKED`, optionally narrowed to a date range. Built for bulk export and sync \u2014 pass `next_page` from the previous response to continue. To check one specific asset, use `/asset/check` instead; for an organization's own monitored assets, use `/organization/assets`.",
+      description: "Answers 'which assets does ChainPatrol hold at this status?'. Returns a paginated list defaulting to `BLOCKED`, optionally narrowed to a single `type` and to a date range. Omit `type` to sweep every asset type on one cursor, which is the cheapest way to mirror the whole blocklist. Built for bulk export and sync \u2014 pass `next_page` from the previous response to continue. To check one specific asset, use `/asset/check` instead; for an organization's own monitored assets, use `/organization/assets`.",
       tags: [
         "asset"
       ],
@@ -321,7 +321,7 @@ var tools_default = {
         properties: {
           type: {
             type: "string",
-            description: "Asset type One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+            description: "Asset type to retrieve. Omit the field entirely to retrieve assets of every type in a single paginated sweep; an explicit null is rejected. One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
           },
           status: {
             type: "string",
@@ -367,10 +367,7 @@ var tools_default = {
             description: "Cursor for fetching the next page of results"
           }
         },
-        required: [
-          "type"
-        ],
-        description: "List asset request body\n\nDefaults to getting all the updates in the last 1 day.\n\nYou can also choose a `startDate` and `endDate` for the range of asset updates, most \ntimestamp formats should work, we use [Luxon](https://moment.github.io/luxon/#/parsing) \nfor parsing the dates."
+        description: "List asset request body\n\nWith no `startDate`, this returns every matching asset regardless of age \u2014 there\nis no implicit one-day window. Pass `startDate` to get a delta instead.\n\nYou can also choose a `startDate` and `endDate` for the range of asset updates, most \ntimestamp formats should work, we use [Luxon](https://moment.github.io/luxon/#/parsing) \nfor parsing the dates."
       }
     },
     {
@@ -622,7 +619,7 @@ var tools_default = {
           },
           source: {
             type: "string",
-            description: "Detection source key, from `GET /detection/sources`. The source must support the `organization` scope; global-only sources cannot be configured per organization. One of 55 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, instagram_account_search_vetric. Full list: resource chainpatrol://enums/source"
+            description: "Detection source key, from `GET /detection/sources`. The source must support the `organization` scope; global-only sources cannot be configured per organization. One of 58 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, facebook_post_search_vetric. Full list: resource chainpatrol://enums/source"
           },
           status: {
             type: "string",
@@ -1023,7 +1020,7 @@ var tools_default = {
           },
           filters: {
             type: "array",
-            description: "Filters to apply to the results. Each clause filters on one property. Accepted values per property \u2014 `source`: One of 55 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, instagram_account_search_vetric. Full list: resource chainpatrol://enums/source; `confidence`: none, low, medium, high; `liveness`: UNKNOWN, ALIVE, DEAD; `watchlist`: ENABLED, DISABLED; `assetStatus`: UNKNOWN, ALLOWED, BLOCKED; `reported`: reported, not_reported; `assetType`: One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type; `brand`: number values; `deleted`: string values; `countryCode`: string values.",
+            description: "Filters to apply to the results. Each clause filters on one property. Accepted values per property \u2014 `source`: One of 58 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, facebook_post_search_vetric. Full list: resource chainpatrol://enums/source; `confidence`: none, low, medium, high; `liveness`: UNKNOWN, ALIVE, DEAD; `watchlist`: ENABLED, DISABLED; `assetStatus`: UNKNOWN, ALLOWED, BLOCKED; `reported`: reported, not_reported; `assetType`: One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type; `brand`: number values; `deleted`: string values; `countryCode`: string values.",
             items: {
               type: "object",
               properties: {
@@ -1239,7 +1236,7 @@ var tools_default = {
             type: "array",
             items: {
               type: "string",
-              description: "One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+              description: "One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
             }
           },
           reviewedByUserId: {
@@ -1300,6 +1297,10 @@ var tools_default = {
           hasMxRecords: {
             type: "boolean"
           },
+          hasAttachments: {
+            type: "boolean",
+            description: "Filter on evidence files uploaded with the report. `true` returns only reports with at least one attachment that has not been removed; `false` returns only reports with none. Useful for finding phone number or email reports that came with supporting evidence."
+          },
           sources: {
             type: "array",
             items: {
@@ -1814,6 +1815,60 @@ var tools_default = {
         ]
       }
     },
+    {
+      name: "metrics_false_positive_rate",
+      procedure: "metricsFalsePositiveRate",
+      method: "POST",
+      path: "/metrics/false-positive-rate",
+      pathParams: [],
+      title: "Get organization false positive rate by asset type",
+      description: "Get the share of blocks that were later reversed, broken down by asset type, for a date range. Every asset type blocked in the range is returned, including ones with no false positives. The range bounds when the asset was blocked; whether the block still stands is read as of now, so a recent range reads low simply because its reversals have not happened yet.",
+      tags: [
+        "metrics"
+      ],
+      readOnly: true,
+      deprecated: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          slug: {
+            type: "string",
+            minLength: 1,
+            description: "Organization slug"
+          },
+          startDate: {
+            type: "string",
+            format: "date-time",
+            description: "Only include assets blocked on or after this date. A date-only value (YYYY-MM-DD) starts at midnight UTC"
+          },
+          endDate: {
+            type: "string",
+            format: "date-time",
+            description: "Only include assets blocked on or before this date. A date-only value (YYYY-MM-DD) covers the whole day in UTC; pass a full timestamp for a precise cut-off"
+          },
+          brandIds: {
+            type: "array",
+            items: {
+              type: "integer",
+              exclusiveMinimum: 0
+            },
+            description: "Only include assets belonging to these brands"
+          },
+          countryCodes: {
+            type: "array",
+            items: {
+              type: "string",
+              minLength: 2,
+              maxLength: 2
+            },
+            description: "Only include assets scanned from these ISO 3166-1 alpha-2 countries"
+          }
+        },
+        required: [
+          "slug"
+        ]
+      }
+    },
     {
       name: "metrics_found",
       procedure: "metricsFound",
@@ -2190,7 +2245,7 @@ var tools_default = {
             type: "array",
             items: {
               type: "string",
-              description: "One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+              description: "One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
             },
             maxItems: 5,
             description: "Break the trend down by these asset types, one series each. Omit for a single series pooled across every asset type"
@@ -2484,7 +2539,7 @@ var tools_default = {
           },
           type: {
             type: "string",
-            description: "Filter by asset type (URL, ADDRESS, etc.) One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+            description: "Filter by asset type (URL, ADDRESS, etc.) One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
           },
           groupId: {
             type: "integer",
@@ -3002,6 +3057,10 @@ var tools_default = {
           reportedByCustomer: {
             type: "boolean"
           },
+          hasAttachments: {
+            type: "boolean",
+            description: "Filter on evidence files uploaded with the report. `true` returns only reports with at least one attachment that has not been removed; `false` returns only reports with none."
+          },
           needsCustomerReview: {
             type: "boolean",
             description: "Filter to reports waiting on your organization's own approval \u2014 the same queue your Review page shows. `true` returns only reports with at least one pending proposal that is yours to action; `false` returns only reports that are not. A pending proposal counts when ChainPatrol staff escalated it to you and you have not answered yet. Answering means approving, rejecting, or escalating it back to ChainPatrol. Two things do not put a report here: reports your organization sourced itself (ChainPatrol triages those and staff approval blocks the asset without you, though you still see them in the unfiltered list), and Obligatory Organization Admin Approval (a proposal ChainPatrol has not triaged yet is still waiting on our review, and reaches you only once staff escalate it)."
@@ -3023,7 +3082,7 @@ var tools_default = {
             type: "array",
             items: {
               type: "string",
-              description: "One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+              description: "One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
             }
           },
           brandIds: {
@@ -3166,7 +3225,7 @@ var tools_default = {
                     properties: {
                       type: {
                         type: "string",
-                        description: "Enrichment type One of 39 values, e.g. content_and_metadata, browser_capture, ownership_and_registration, geolocation_and_ip, dns, tls, tcp, post. Full list: resource chainpatrol://enums/asset_scan_enrichment_type"
+                        description: "Enrichment type One of 45 values, e.g. content_and_metadata, browser_capture, ownership_and_registration, geolocation_and_ip, dns, tls, tcp, hostname_first_seen. Full list: resource chainpatrol://enums/asset_scan_enrichment_type"
                       },
                       source: {
                         type: "string",
@@ -3337,7 +3396,7 @@ var tools_default = {
             type: "array",
             items: {
               type: "string",
-              description: "One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+              description: "One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
             },
             description: "Filter by asset types"
           },
@@ -3497,7 +3556,7 @@ var tools_default = {
             type: "array",
             items: {
               type: "string",
-              description: "One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+              description: "One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
             },
             description: "Filter by asset types"
           },
@@ -3753,7 +3812,7 @@ var tools_default = {
                 type: "array",
                 items: {
                   type: "string",
-                  description: "One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
+                  description: "One of 94 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type"
                 },
                 minItems: 1
               }
@@ -3960,6 +4019,7 @@ var tools_default = {
         "dns",
         "tls",
         "tcp",
+        "hostname_first_seen",
         "post",
         "profile",
         "twitter_followers",
@@ -3985,12 +4045,17 @@ var tools_default = {
         "vimeo_profile",
         "stackblitz_page",
         "leetcode_page",
+        "tumblr_blog",
+        "tumblr_post",
+        "tumblr_community",
         "npm_package",
         "pypi_package",
         "rust_package",
         "linkedin_profile",
+        "pump_fun_token",
         "meta_ad",
         "google_ad",
+        "adlibrary_ad",
         "contract_deployer"
       ],
       usedBy: [
@@ -4091,7 +4156,9 @@ var tools_default = {
         "FIVE_HUNDRED_PX",
         "LUMA",
         "SMARTMONEYMATCH",
-        "APK_GOLD"
+        "APK_GOLD",
+        "GLASSDOOR",
+        "PUMP_FUN"
       ],
       usedBy: [
         "asset_changelog.type",
@@ -4116,6 +4183,7 @@ var tools_default = {
         "telegram_user_search_vetric",
         "facebook_page_search_vetric",
         "facebook_user_search_vetric",
+        "facebook_post_search_vetric",
         "instagram_account_search_vetric",
         "twitter_search_vetric",
         "linkedin_people_search_vetric",
@@ -4161,9 +4229,11 @@ var tools_default = {
         "linkedin_company_search",
         "bing_ads_search",
         "tik_tok_ads_search",
+        "adlibrary_ads_search",
         "dnsdb",
         "daily_motion_search",
-        "watchlist"
+        "watchlist",
+        "github_search"
       ],
       usedBy: [
         "detection_configs_create.source",
@@ -4221,6 +4291,17 @@ function toErrorResult(error) {
     content: [{ type: "text", text: message }]
   };
 }
+var RESOURCE_HINT = "Where a parameter's description points at a `chainpatrol://` resource, read it before guessing a value.";
+function buildInstructions(tools, isNarrowed) {
+  if (!isNarrowed) {
+    return "ChainPatrol threat intelligence and brand protection. Every public API capability is available here as a tool: checking and searching assets, reports, proposals, detections, takedowns, metrics, healthchecks and organization management.\n\nMost tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\n" + RESOURCE_HINT;
+  }
+  const names = tools.map((tool) => tool.name).sort().join(", ");
+  const orgScoping = tools.some((tool) => tool.name === "user_orgs") ? "Most tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\n" : "These tools resolve their organization from the credential in use \u2014 there is no org slug to pass.\n\n";
+  return `ChainPatrol threat intelligence. This server exposes a narrowed set of tools: ${names}.
+
+${orgScoping}${RESOURCE_HINT}`;
+}
 function createChainPatrolMcpServer(options) {
   const tools = selectTools(options.only);
   const resources = buildResources(manifest, tools);
@@ -4229,6 +4310,7 @@ function createChainPatrolMcpServer(options) {
     tools.map((tool) => tool.name)
   );
   const byName = new Map(tools.map((tool) => [tool.name, tool]));
+  const isNarrowed = Boolean(options.only && options.only.length > 0);
   const server = new Server(
     {
       name: options.serverName ?? "chainpatrol",
@@ -4236,7 +4318,7 @@ function createChainPatrolMcpServer(options) {
     },
     {
       capabilities: { tools: {}, resources: {}, prompts: {} },
-      instructions: "ChainPatrol threat intelligence and brand protection. Every public API capability is available here as a tool: checking and searching assets, reports, proposals, detections, takedowns, metrics, healthchecks and organization management.\n\nMost tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\nWhere a parameter's description points at a `chainpatrol://` resource, read it before guessing a value."
+      instructions: buildInstructions(tools, isNarrowed)
     }
   );
   server.setRequestHandler(ListToolsRequestSchema, () => ({
@@ -4449,8 +4531,73 @@ function toolsFromEnvironment(env = process.env) {
   return names.length > 0 ? names : void 0;
 }
 
+// package.json
+var package_default = {
+  name: "@chainpatrol/mcp",
+  description: "The official ChainPatrol MCP server \u2014 every public API capability as an MCP tool",
+  author: "ChainPatrol <support@chainpatrol.io>",
+  version: "1.11.0",
+  license: "UNLICENSED",
+  homepage: "https://chainpatrol.com/docs/mcp",
+  keywords: [
+    "chainpatrol",
+    "mcp",
+    "model-context-protocol",
+    "agent"
+  ],
+  type: "module",
+  exports: {
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js"
+    },
+    "./config": {
+      types: "./dist/chainpatrol-config.d.ts",
+      import: "./dist/chainpatrol-config.js"
+    }
+  },
+  bin: {
+    "chainpatrol-mcp": "./dist/stdio-bin.js"
+  },
+  files: [
+    "./dist/**"
+  ],
+  publishConfig: {
+    access: "public",
+    provenance: false
+  },
+  scripts: {
+    build: "tsup",
+    dev: "tsup --watch",
+    "tools:generate": "tsx scripts/generate-tools.ts",
+    "tools:check": "tsx scripts/generate-tools.ts --check",
+    typecheck: "tsc --noEmit",
+    test: "vitest run --config vitest.config.unit.ts",
+    "lint:eslint": "eslint . --flag unstable_native_nodejs_ts_config --cache --cache-location .cache/.eslintcache",
+    lint: "npx oxlint ."
+  },
+  dependencies: {
+    "@modelcontextprotocol/sdk": "catalog:",
+    luxon: "catalog:",
+    zod: "catalog:"
+  },
+  devDependencies: {
+    "@chainpatrol/eslint-config": "workspace:*",
+    "@chainpatrol/external-trpc": "workspace:*",
+    "@chainpatrol/tsconfig": "workspace:*",
+    "@types/luxon": "catalog:",
+    "@types/node": "catalog:",
+    eslint: "catalog:",
+    tsup: "^8.5.0",
+    tsx: "catalog:",
+    typescript: "catalog:",
+    vitest: "catalog:",
+    "zod-to-json-schema": "^3.24.5"
+  }
+};
+
 // src/version.ts
-var PACKAGE_VERSION = "1.10.0";
+var PACKAGE_VERSION = package_default.version;
 
 export {
   PROMPTS,
@@ -4466,4 +4613,4 @@ export {
   toolsFromEnvironment,
   PACKAGE_VERSION
 };
-//# sourceMappingURL=chunk-DXVC4YVX.js.map
+//# sourceMappingURL=chunk-7U4RIDQZ.js.map