@chrischall/eventbrite-mcp 0.1.1 → 0.1.3

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Eventbrite — your tickets and orders, organizer data, and public event discovery",
-    "version": "0.1.1"
+    "version": "0.1.3"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Eventbrite",
       "source": "./",
       "description": "MCP server for Eventbrite — tickets, orders, organizer data, and public event search. Account tools use a personal API token; discovery search routes through the user's signed-in eventbrite.com tab via the fetchproxy bridge, reusing their authenticated session.",
-      "version": "0.1.1",
+      "version": "0.1.3",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "eventbrite-mcp",
   "displayName": "Eventbrite",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "MCP server for Eventbrite — your tickets and orders, organizer data, and public event discovery",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -79,20 +79,12 @@ Search flow: `eb_resolve_place {location: "Charlotte, NC"}` →
 `eb_resolve_place` also accepts a raw slug (`nc--charlotte`). A bare city with
 no state or country is rejected rather than guessed.
 
-## Hosted connector
-
-`src/worker.ts` deploys the token-API tools as a Cloudflare Worker remote
-connector for claude.ai (OAuth login collects your Eventbrite token). The
-discovery tools are **excluded** there — the browser bridge doesn't exist in a
-Worker. See `docs/DEPLOY-CONNECTOR.md`.
-
 ## Development
 
 ```sh
 npm install
 npm test          # node suite
 npm run build     # tsc + esbuild bundle
-npm run worker:test
 ```
 
 API shape notes (captured + verified): `docs/EVENTBRITE-API.md`. A

package/dist/bundle.js

@@ -12836,6 +12836,17 @@ var init_classify_bridge_error = __esm({
 });
 
 // node_modules/@fetchproxy/server/dist/ws-server.js
+function envWsPort() {
+  const raw = process.env.FETCHPROXY_WS_PORT;
+  if (raw === void 0 || raw.trim() === "")
+    return void 0;
+  if (!/^\d+$/.test(raw.trim()))
+    return void 0;
+  const port = Number(raw.trim());
+  if (!Number.isInteger(port) || port < 1 || port > 65535)
+    return void 0;
+  return port;
+}
 function protocolErrorFrom(error51) {
   if (SCOPE_REJECTION.test(error51))
     return new FetchproxyScopeError(error51);
@@ -13094,7 +13105,7 @@ var init_ws_server = __esm({
           }
         }
         this.opts = {
-          port: opts.port ?? 37149,
+          port: opts.port ?? envWsPort() ?? 37149,
           host: opts.host ?? "127.0.0.1",
           serverName: opts.serverName,
           version: opts.version,
@@ -39396,8 +39407,47 @@ var StdioServerTransport = class {
 };
 
 // node_modules/@chrischall/mcp-utils/dist/server/index.js
+init_errors();
+
+// node_modules/@chrischall/mcp-utils/dist/response/index.js
+init_errors();
+function textResult(data) {
+  return {
+    content: [{ type: "text", text: JSON.stringify(data, null, 2) }]
+  };
+}
+function errorResult(message) {
+  return {
+    content: [{ type: "text", text: redactSecrets(message) }],
+    isError: true
+  };
+}
+
+// node_modules/@chrischall/mcp-utils/dist/server/index.js
+function hintResultOrRethrow(err) {
+  if (err instanceof McpToolError && err.hint) {
+    return errorResult(`${err.message}
+
+Hint: ${err.hint}`);
+  }
+  throw err;
+}
+function surfaceToolHints(server) {
+  const register = server.registerTool.bind(server);
+  server.registerTool = (name, config2, cb) => register(name, config2, (...args) => {
+    let result;
+    try {
+      result = cb(...args);
+    } catch (err) {
+      return hintResultOrRethrow(err);
+    }
+    return result instanceof Promise ? result.catch(hintResultOrRethrow) : result;
+  });
+}
 async function createMcpServer(opts) {
   const server = new McpServer({ name: opts.name, version: opts.version });
+  if (opts.surfaceHints !== false)
+    surfaceToolHints(server);
   if (opts.banner !== void 0) {
     console.error(opts.banner);
   }
@@ -39442,14 +39492,6 @@ async function runMcp(opts) {
   return server;
 }
 
-// node_modules/@chrischall/mcp-utils/dist/response/index.js
-init_errors();
-function textResult(data) {
-  return {
-    content: [{ type: "text", text: JSON.stringify(data, null, 2) }]
-  };
-}
-
 // node_modules/@chrischall/mcp-utils/dist/index.js
 init_errors();
 
@@ -39725,7 +39767,7 @@ var pageSchema = {
 init_errors();
 
 // src/version.ts
-var VERSION = "0.1.1";
+var VERSION = "0.1.3";
 
 // src/client.ts
 import { dirname, join } from "path";
@@ -39746,10 +39788,10 @@ var EventbriteClient = class {
    * host's install-time smoke test) when EVENTBRITE_TOKEN isn't set yet.
    * Tool calls re-raise the error at request time.
    *
-   * Optional constructor seam: the hosted Cloudflare connector builds one
+   * Optional constructor seam: a hosted per-user deployment builds one
    * client per request with that user's `token` injected. The stdio path
    * passes no options, so the token resolves from the environment.
-   * The constructor is PURE (no I/O, no randomness) — it is run in Worker
+   * The constructor is PURE (no I/O, no randomness) — it may run in module
    * global scope via the module singleton below.
    */
   constructor(opts) {
@@ -39970,7 +40012,7 @@ var DiscoveryClient = class {
    * 1. `api` — `POST eventbriteapi.com/v3/destination/search/` with a bearer
    *    token. Verified live 2026-07-30: works with a private OR public token,
    *    no WAF, no CSRF, no cookies. This is the default because it needs no
-   *    browser and therefore works inside a Worker.
+   *    browser and therefore works without the bridge.
    * 2. `transport` — the fetchproxy bridge through a signed-in tab. Retained as
    *    a fallback for when no token is configured, or the API route refuses.
    *

package/dist/client.js

@@ -4,9 +4,9 @@ import { loadDotenvSafely, readEnvVar, createApiClient } from '@chrischall/mcp-u
 // Load .env for local dev; silently skip if dotenv is unavailable (e.g. mcpb
 // bundle). `loadDotenvSafely` swallows a missing dotenv module and never lets
 // .env override a host-provided value.
-// The try/catch guards the Cloudflare Worker runtime, where `import.meta.url`
+// The try/catch guards a non-Node runtime, where `import.meta.url`
 // is undefined and `fileURLToPath(undefined)` would throw at module init
-// (Worker startup validation) — there is no filesystem / .env to load there.
+// startup validation in such a runtime — and there is no .env to load there.
 try {
     const dir = dirname(fileURLToPath(import.meta.url));
     await loadDotenvSafely({ path: join(dir, '..', '.env'), override: false });
@@ -32,10 +32,10 @@ export class EventbriteClient {
      * host's install-time smoke test) when EVENTBRITE_TOKEN isn't set yet.
      * Tool calls re-raise the error at request time.
      *
-     * Optional constructor seam: the hosted Cloudflare connector builds one
+     * Optional constructor seam: a hosted per-user deployment builds one
      * client per request with that user's `token` injected. The stdio path
      * passes no options, so the token resolves from the environment.
-     * The constructor is PURE (no I/O, no randomness) — it is run in Worker
+     * The constructor is PURE (no I/O, no randomness) — it may run in module
      * global scope via the module singleton below.
      */
     constructor(opts) {

package/dist/discovery.js

@@ -19,7 +19,7 @@ function isUsableBrowsePage(result) {
         return false;
     return typeof result.body === 'string' && PLACE_ID_RE.test(result.body);
 }
-/** `fetch` with an AbortController deadline; called directly for workerd. */
+/** `fetch` with an AbortController deadline. */
 async function fetchWithTimeout(url, ms) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), ms);
@@ -219,7 +219,7 @@ export class DiscoveryClient {
      * 1. `api` — `POST eventbriteapi.com/v3/destination/search/` with a bearer
      *    token. Verified live 2026-07-30: works with a private OR public token,
      *    no WAF, no CSRF, no cookies. This is the default because it needs no
-     *    browser and therefore works inside a Worker.
+     *    browser and therefore works without the bridge.
      * 2. `transport` — the fetchproxy bridge through a signed-in tab. Retained as
      *    a fallback for when no token is configured, or the API route refuses.
      *

package/dist/index.js

@@ -15,7 +15,7 @@ import { registerDiscoveryTools } from './tools/discovery.js';
 //    documented host serves the consumer search at
 //    POST /destination/search/ with a plain bearer token — no WAF, no CSRF,
 //    no browser. That is now the primary route, so discovery works in a
-//    Worker too. The fetchproxy bridge (port 37149, bound lazily) is kept as
+//    a bridge-less deployment too. The bridge (port 37149, bound lazily) is kept as
 //    a FALLBACK for when no token is configured or the API route refuses.
 const transport = new FetchproxyTransport({
     version: VERSION,

package/dist/tools/account.js

@@ -3,7 +3,7 @@ import { textResult } from '@chrischall/mcp-utils';
 import { enc, qs, schemaContinuation } from './params.js';
 /**
  * Account-side tools on the documented API (`eventbriteapi.com/v3`, bearer
- * token). Transport-neutral: the hosted connector registers these with a
+ * token). Transport-neutral: a hosted deployment registers these with a
  * per-user client.
  */
 export function registerAccountTools(server, deps) {

package/dist/tools/discovery.js

@@ -5,7 +5,7 @@ import { toCompactEvent } from '../discovery.js';
  * Public event discovery. Verified live 2026-07-30: the documented host serves
  * the consumer search at POST /destination/search/ with a plain bearer token —
  * no WAF, no CSRF, no cookies — so these tools no longer require a browser and
- * ARE registered by the hosted connector. The fetchproxy bridge remains a
+ * ARE registered without a bridge. The fetchproxy bridge remains a
  * fallback on the stdio path.
  */
 export async function registerDiscoveryTools(server, deps) {
@@ -99,13 +99,13 @@ export async function registerDiscoveryTools(server, deps) {
         const data = await discovery.eventsByIds(event_ids, expand ? expand.split(',').map((s) => s.trim()) : undefined);
         return textResult(data);
     });
-    // eb_healthcheck diagnoses the BRIDGE. With no bridge (the Worker connector)
+    // eb_healthcheck diagnoses the BRIDGE. With no bridge
     // there is nothing for it to report on, so it is not registered at all —
     // better than a tool that always answers "no transport".
     if (!transport)
         return;
     // Imported lazily, AFTER the guard: a static import would drag the fetchproxy
-    // helper into the Worker bundle where it can never run.
+    // helper into a bundle where it can never run.
     const { registerBridgeHealthcheckTool } = await import('@chrischall/mcp-utils/fetchproxy');
     // The categories endpoint answers 200 JSON on the www host regardless of
     // login state, so it isolates bridge problems from Eventbrite-side problems.

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = '0.1.1'; // x-release-please-version
+export const VERSION = '0.1.3'; // x-release-please-version

package/mint.yaml

@@ -0,0 +1,47 @@
+version: 1
+name: Eventbrite
+slug: eventbrite
+summary: >-
+  Eventbrite for Claude — your tickets and orders, organizer data, and
+  public event discovery BROWSER-BRIDGE MCP: it reaches its site through the
+  user's signed-in tab via the fetchproxy bridge, so a registration also
+  needs runtime fly-shared, bridge: true and a bridgePortEnv — registration
+  fields this manifest has no schema for. state.dataDir below is required
+  for bridge and is why it is declared.
+env:
+  - name: EVENTBRITE_TOKEN
+    secret: true
+    required: false
+    help: >-
+      Personal OAuth token (eventbrite.com/platform/api-keys); needed for
+      account tools
+  - name: EVENTBRITE_WS_PORT
+    required: false
+    help: >-
+      Concentrator port for the fetchproxy browser bridge (defaults to the
+      fleet-shared 37149). The runner injects a per-registration port for a
+      hosted bridged child, so this is the name to give bridgePortEnv at
+      registration.
+state:
+  dataDir: true
+  reason: >-
+    The fetchproxy identity lives at $HOME/.fetchproxy/identity/<name>.json
+    and the pair code derives from it. Without a persistent $HOME every cold
+    start mints a fresh identity and re-prompts pairing in the browser; the
+    API refuses bridge without it.
+egress:
+  allow:
+    # Only hosts the SERVER process actually fetches; hosts that appear
+    # solely in a URL this server builds and returns are excluded. Matching
+    # is exact (an apex entry does not cover subdomains), and the proxy
+    # follows no redirects — neither host below redirects (checked 2026-08-28).
+    # Token API (src/client.ts): every account/organizer/lookup tool is a
+    # direct server-side fetch of the documented API.
+    - www.eventbriteapi.com
+    # SSR browse pages (src/discovery.ts fetchBrowsePage): resolvePlace GETs
+    # `/d/<slug>/events/` directly first and only falls back to the bridge
+    # when the WAF blocks. The destination-search API on the same host is
+    # bridge-only — dialled by the user's tab, not by this process — so it
+    # adds no host; the bare apex `eventbrite.com` is the bridge's declared
+    # domain / cookie scope, never a dial, and is deliberately absent.
+    - www.eventbrite.com

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrischall/eventbrite-mcp",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "mcpName": "io.github.chrischall/eventbrite-mcp",
   "description": "Eventbrite MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -32,41 +32,33 @@
     ".claude-plugin",
     "skills/",
     ".mcp.json",
-    "server.json"
+    "server.json",
+    "mint.yaml"
   ],
   "scripts": {
     "build": "tsc && npm run bundle",
     "bundle": "esbuild src/index.ts --bundle --platform=node --format=esm --external:dotenv --banner:js='import { createRequire as __createRequire } from \"module\"; const require = __createRequire(import.meta.url);' --outfile=dist/bundle.js",
     "dev": "node dist/index.js",
-    "test": "vitest run",
+    "test": "npm run typecheck && vitest run",
     "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "worker:dev": "wrangler dev",
-    "worker:deploy": "wrangler deploy",
-    "worker:test": "vitest run --config vitest.workers.config.ts"
+    "test:coverage": "npm run typecheck && vitest run --coverage",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^0.14.0",
+    "@chrischall/mcp-utils": "^0.15.0",
     "@fetchproxy/server": "^2.0.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "dotenv": "^17.4.0",
     "zod": "^4.4.2"
   },
   "devDependencies": {
-    "@chrischall/mcp-connector": "^1.1.1",
-    "@cloudflare/vitest-pool-workers": "^0.19.0",
-    "@cloudflare/workers-oauth-provider": "^0.8.1",
-    "@cloudflare/workers-types": "^5.20260708.1",
     "@types/node": "^26.0.0",
     "@vitest/coverage-v8": "^4.1.2",
-    "agents": "^0.19.0",
     "esbuild": "^0.28.0",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.2",
-    "wrangler": "^4.110.0"
+    "vitest": "^4.1.2"
   },
   "allowScripts": {
-    "esbuild@0.28.1": true,
-    "workerd@1.20260722.1": true
+    "esbuild@0.28.1": true
   }
 }

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/eventbrite-mcp",
     "source": "github"
   },
-  "version": "0.1.1",
+  "version": "0.1.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@chrischall/eventbrite-mcp",
-      "version": "0.1.1",
+      "version": "0.1.3",
       "transport": {
         "type": "stdio"
       },

package/dist/eventbrite-auth.js

@@ -1,18 +0,0 @@
-import { EventbriteClient } from './client.js';
-/**
- * `ConnectorAuth` for the Eventbrite remote connector: the login page collects
- * the user's personal Eventbrite token (eventbrite.com/platform/api-keys),
- * verifies it against the current-user endpoint (a bad token throws, which
- * the connector surfaces back on the login page), and stores `{ token }`.
- */
-export const eventbriteAuth = {
-    service: 'Eventbrite',
-    accent: '#F05537',
-    privacyNote: 'Your Eventbrite private token is stored encrypted and used only to call the Eventbrite API on your behalf.',
-    fields: [{ name: 'token', label: 'Eventbrite private token', type: 'password' }],
-    async login(fields) {
-        const client = new EventbriteClient({ token: fields.token });
-        await client.request('GET', '/users/me/');
-        return { token: fields.token };
-    },
-};