@clavisagent/mcp-server 0.1.0

package/README.md

@@ -0,0 +1,55 @@
+# Clavis MCP Server
+
+Secure credential management for Claude Desktop and MCP servers.
+
+## Features
+
+- 🔐 Encrypted credential storage (AES-256)
+- 🔄 Automatic OAuth token refresh
+- ⚡ Distributed rate limiting
+- 📊 Full audit logging
+
+## Installation
+
+```bash
+npx @clavisagent/mcp-server
+```
+
+Or install globally:
+
+```bash
+npm install -g @clavisagent/mcp-server
+```
+
+## Usage with Claude Desktop
+
+Add the following to your Claude Desktop configuration file (`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "clavis": {
+      "command": "npx",
+      "args": ["-y", "@clavisagent/mcp-server"]
+    }
+  }
+}
+```
+
+## Usage with Claude Code
+
+```bash
+claude mcp add clavis -- npx -y @clavisagent/mcp-server
+```
+
+## Available Tools
+
+| Tool | Description |
+|---|---|
+| `get_credentials` | Retrieve a valid access token or API key for a named service |
+| `list_services` | List all services with stored credentials |
+| `check_credential_status` | Check the status and expiry of credentials for a service |
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+/**
+ * Clavis MCP Server
+ *
+ * Exposes Clavis credential management to Claude Desktop and other MCP clients.
+ * Configure via environment variable:
+ *   CLAVIS_API_KEY — your Clavis JWT (from POST /v1/auth/login)
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG"}

package/dist/index.js

@@ -0,0 +1,138 @@
+#!/usr/bin/env node
+/**
+ * Clavis MCP Server
+ *
+ * Exposes Clavis credential management to Claude Desktop and other MCP clients.
+ * Configure via environment variable:
+ *   CLAVIS_API_KEY — your Clavis JWT (from POST /v1/auth/login)
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+// ---------------------------------------------------------------------------
+// Config
+// ---------------------------------------------------------------------------
+const BASE_URL = "https://clavisagent.com";
+const apiKey = process.env.CLAVIS_API_KEY;
+if (!apiKey) {
+    console.error("[clavis-mcp] Error: CLAVIS_API_KEY environment variable is not set.");
+    process.exit(1);
+}
+const authHeaders = {
+    Authorization: `Bearer ${apiKey}`,
+    "Content-Type": "application/json",
+};
+async function clavisGet(path) {
+    const url = `${BASE_URL}${path}`;
+    const res = await fetch(url, { headers: authHeaders });
+    if (!res.ok) {
+        let detail = `HTTP ${res.status}`;
+        try {
+            const body = (await res.json());
+            detail = body.detail ?? body.message ?? detail;
+        }
+        catch {
+            // ignore parse error — use status code only
+        }
+        throw new Error(`Clavis API error on ${path}: ${detail}`);
+    }
+    return res.json();
+}
+// ---------------------------------------------------------------------------
+// MCP Server
+// ---------------------------------------------------------------------------
+const server = new McpServer({
+    name: "clavis",
+    version: "0.1.0",
+});
+// ── Tool 1: get_credentials ────────────────────────────────────────────────
+server.tool("get_credentials", "Retrieve a valid access token or API key for a named service from Clavis. " +
+    "Clavis handles token refresh and rotation automatically.", {
+    service_name: z
+        .string()
+        .min(1)
+        .describe("The name of the service to retrieve credentials for (e.g. 'github', 'openai')"),
+}, async ({ service_name }) => {
+    const data = await clavisGet(`/v1/tokens/${service_name}`);
+    return {
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify({
+                    service: service_name,
+                    access_token: data.access_token,
+                    token_type: data.token_type ?? "Bearer",
+                    ...(data.expires_in != null && { expires_in_seconds: data.expires_in }),
+                }, null, 2),
+            },
+        ],
+    };
+});
+// ── Tool 2: list_services ─────────────────────────────────────────────────
+server.tool("list_services", "List all services configured in Clavis for the authenticated developer.", {}, async () => {
+    const data = await clavisGet("/v1/services");
+    // Normalise: API may return an array directly or wrapped in { services: [...] }
+    const services = Array.isArray(data)
+        ? data
+        : data.services ?? [];
+    const active = services.filter((s) => s.is_active);
+    return {
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify({
+                    total: services.length,
+                    active: active.length,
+                    services: services.map((s) => ({
+                        name: s.name,
+                        id: s.id,
+                        is_active: s.is_active,
+                        created_at: s.created_at,
+                    })),
+                }, null, 2),
+            },
+        ],
+    };
+});
+// ── Tool 3: check_credential_status ───────────────────────────────────────
+server.tool("check_credential_status", "Check the validity and rate-limit status of credentials for a service. " +
+    "NOTE: The /v1/credentials/{service}/check endpoint is not yet implemented — " +
+    "returns a stub response until the API endpoint is live.", {
+    service_name: z
+        .string()
+        .min(1)
+        .describe("The name of the service to check (e.g. 'github', 'openai')"),
+}, async ({ service_name }) => {
+    // Stub — endpoint /v1/credentials/{service_name}/check is not yet implemented.
+    // When the endpoint goes live, replace the body below with:
+    //   const data = await clavisGet<CredentialStatus>(`/v1/credentials/${service_name}/check`);
+    //   return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    const stub = {
+        service_name,
+        valid: true,
+        expires_in: undefined,
+        rate_limit_remaining: undefined,
+        note: "check_credential_status is stubbed — /v1/credentials/{service}/check not yet implemented.",
+    };
+    return {
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify(stub, null, 2),
+            },
+        ],
+    };
+});
+// ---------------------------------------------------------------------------
+// Start
+// ---------------------------------------------------------------------------
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("[clavis-mcp] Server running on stdio");
+}
+main().catch((err) => {
+    console.error("[clavis-mcp] Fatal error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAE3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;IACZ,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAA2B;IAC1C,aAAa,EAAE,UAAU,MAAM,EAAE;IACjC,cAAc,EAAE,kBAAkB;CACnC,CAAC;AAWF,KAAK,UAAU,SAAS,CAAI,IAAY;IACtC,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,IAAI,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAEvD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,MAAM,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;YAC/C,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AAgCD,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,4EAA4E;IAC1E,0DAA0D,EAC5D;IACE,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,+EAA+E,CAAC;CAC7F,EACD,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IACzB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAgB,cAAc,YAAY,EAAE,CAAC,CAAC;IAE1E,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,OAAO,EAAE,YAAY;oBACrB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;oBACvC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;iBACxE,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,6EAA6E;AAE7E,MAAM,CAAC,IAAI,CACT,eAAe,EACf,yEAAyE,EACzE,EAAE,EACF,KAAK,IAAI,EAAE;IACT,MAAM,IAAI,GAAG,MAAM,SAAS,CAA+B,cAAc,CAAC,CAAC;IAE3E,gFAAgF;IAChF,MAAM,QAAQ,GAAc,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7C,CAAC,CAAC,IAAI;QACN,CAAC,CAAE,IAAyB,CAAC,QAAQ,IAAI,EAAE,CAAC;IAE9C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEnD,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,KAAK,EAAE,QAAQ,CAAC,MAAM;oBACtB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,UAAU,EAAE,CAAC,CAAC,UAAU;qBACzB,CAAC,CAAC;iBACJ,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,6EAA6E;AAE7E,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,yEAAyE;IACvE,8EAA8E;IAC9E,yDAAyD,EAC3D;IACE,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,4DAA4D,CAAC;CAC1E,EACD,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IACzB,+EAA+E;IAC/E,4DAA4D;IAC5D,6FAA6F;IAC7F,iFAAiF;IAEjF,MAAM,IAAI,GAAqB;QAC7B,YAAY;QACZ,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,SAAS;QACrB,oBAAoB,EAAE,SAAS;QAC/B,IAAI,EAAE,2FAA2F;KAClG,CAAC;IAEF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;aACpC;SACF;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;AACxD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@clavisagent/mcp-server",
+  "version": "0.1.0",
+  "description": "MCP server for secure credential management. Handles encrypted storage, auto token refresh, and rate limiting for Claude Desktop and AI agents.",
+  "type": "module",
+  "author": "Clavis",
+  "license": "MIT",
+  "homepage": "https://clavisagent.com",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "claude",
+    "anthropic",
+    "credentials",
+    "authentication",
+    "api-keys",
+    "oauth",
+    "token-refresh",
+    "rate-limiting",
+    "ai-agents",
+    "security"
+  ],
+  "bin": {
+    "clavis-mcp": "./dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.9.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.5.0"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}