@cloudgrid-io/mcp 0.2.8 → 0.3.1

package/README.md

@@ -43,30 +43,57 @@ It speaks MCP over stdio. Point any MCP client at the `cloudgrid-mcp` command.
 
 ## Tools
 
+### Direct-API tools (both editions)
+
 | Tool | Wraps | Notes |
 |---|---|---|
-| `cloudgrid_drop` | `POST /api/v2/drop/auto` | Artifact drop. Anonymous, or owned if signed in. No CLI. Direct API. |
+| `cloudgrid_drop` | `POST /api/v2/drop/auto` | Artifact drop. Anonymous, or owned if signed in. Direct API. |
 | `cloudgrid_claim` | `POST /api/v2/anon-claim` | Claim an anonymous drop into the signed-in account. Direct API. |
-| `cloudgrid_login` | `GET /auth/login` | Start a CLI-free sign-in; returns a URL to open. Calls the API directly. |
+| `cloudgrid_login` | `GET /auth/login` | Start a CLI-free sign-in; returns a URL to open. Direct API. |
 | `cloudgrid_login_status` | `GET /auth/status` | Finish the sign-in; saves the token to the shared CLI credentials. |
 | `cloudgrid_visibility` | `PATCH /api/v2/inspirations/<id>` | Change who can see a drop (private, space, authenticated, org, link). Needs sign-in. Direct API; also in the web edition. |
-| `cloudgrid_init` | `cloudgrid init` | Register an app or agent; optionally seed a web service. |
-| `cloudgrid_plug` | `cloudgrid plug` | Deploy a directory or URL. |
-| `cloudgrid_logs` | `cloudgrid logs` | Snapshot of recent logs. Does not stream. |
-| `cloudgrid_share` | `cloudgrid visibility set` | Set visibility, default link. |
-| `cloudgrid_feedback` | `cloudgrid feedback list` | Read the org feedback feed. |
-| `cloudgrid_brain` | `cloudgrid brain refresh` | Re-run the Grid Brain hooks. |
 
 `cloudgrid_drop`, `cloudgrid_claim`, `cloudgrid_visibility`, and the two
-`cloudgrid_login` tools do not wrap the CLI — they call the API directly, so they
+`cloudgrid_login` tools do not wrap the CLI -- they call the API directly, so they
 also work in the web edition where no CLI exists. `cloudgrid_login` writes the same
 `~/.cloudgrid/credentials` the CLI uses, so the two share one identity.
 
+### CLI-wrapping tools (local edition only)
+
+| Tool | Wraps | Notes |
+|---|---|---|
+| `cloudgrid_init` | `cloudgrid init` | Register an app or agent; optionally seed a web service. |
+| `cloudgrid_plug` | `cloudgrid plug` | Deploy a directory or URL. |
+| `cloudgrid_logs` | `cloudgrid logs` | Snapshot of recent logs. Does not stream. Read-only. |
+| `cloudgrid_share` | `cloudgrid visibility set` | Set visibility, default link. |
+| `cloudgrid_feedback` | `cloudgrid feedback list` | Read the org feedback feed. Read-only. |
+| `cloudgrid_brain` | `cloudgrid brain refresh` | Re-run the Grid Brain hooks. |
+| `cloudgrid_whoami` | `cloudgrid whoami` | Show the signed-in user and active org. Read-only. |
+| `cloudgrid_use` | `cloudgrid use` | Switch the active org. |
+| `cloudgrid_logout` | `cloudgrid logout` | Sign out and clear local credentials. Destructive. |
+| `cloudgrid_status` | `cloudgrid status` | Org dashboard or entity detail. Read-only. |
+| `cloudgrid_info` | `cloudgrid info` | Entity metadata. Read-only. |
+| `cloudgrid_builds` | `cloudgrid builds` | Recent builds and deploys. Read-only. |
+| `cloudgrid_grid` | `cloudgrid grid` | List entities on the hub. Read-only. |
+| `cloudgrid_rename` | `cloudgrid rename` | Rename an entity. |
+| `cloudgrid_unplug` | `cloudgrid unplug` | Take an entity off the grid. Destructive; requires confirm. |
+| `cloudgrid_delete` | `cloudgrid delete` | Archive and delete an entity. Destructive; requires confirm. |
+| `cloudgrid_rollback` | `cloudgrid rollback` | Rollback to a previous version. |
+| `cloudgrid_versions` | `cloudgrid versions` | List published versions. Read-only. |
+| `cloudgrid_env` | `cloudgrid env` | Get, set, or list environment variables. |
+| `cloudgrid_secrets` | `cloudgrid secrets` | Set or list secret names. Never returns secret values. |
+| `cloudgrid_scaffold` | `cloudgrid scaffold` | Generate starter files. |
+| `cloudgrid_doctor` | `cloudgrid doctor` | Run local diagnostics. Read-only. |
+| `cloudgrid_open` | `cloudgrid open` | Return the public URL. Does not open a browser. Read-only. |
+
 `cloudgrid_share` and `cloudgrid_visibility` overlap on purpose: `cloudgrid_share`
 wraps the CLI and defaults to `link`; `cloudgrid_visibility` is direct API, takes an
-explicit scope, and defaults its target to the session's last drop — it is the one
+explicit scope, and defaults its target to the session's last drop -- it is the one
 the web edition gets.
 
+All tools carry MCP annotations (`readOnlyHint`, `destructiveHint`,
+`openWorldHint`) for clients that support them.
+
 ## Test
 
 A smoke test spawns the server with a real MCP client, lists the tools, and calls

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudgrid-io/mcp",
-  "version": "0.2.8",
+  "version": "0.3.1",
   "description": "MCP server for CloudGrid. Two editions: a local stdio server (full toolset) and a hosted web server (light, CLI-free toolset) over MCP Streamable HTTP.",
   "type": "module",
   "bin": {

package/src/index.js

@@ -5,6 +5,7 @@
 // Desktop). Full toolset, including the CLI-wrapping tools. Identity comes from
 // the shared ~/.cloudgrid/credentials file, so it interoperates with the CLI.
 
+import { readFileSync } from "node:fs";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { registerTools } from "./tools.js";
@@ -15,6 +16,8 @@ import {
   credentialsPath,
 } from "./auth.js";
 
+const { version } = JSON.parse(readFileSync(new URL("../package.json", import.meta.url)));
+
 const ctx = {
   edition: "local",
   state: { pendingLoginCode: null, lastAnonClaim: null, lastDrop: null, anonCookie: null },
@@ -25,7 +28,7 @@ const ctx = {
   savedLocationNote: () => `Credentials saved to ${credentialsPath()}.`,
 };
 
-const server = new McpServer({ name: "cloudgrid-mcp", version: "0.2.7" });
+const server = new McpServer({ name: "cloudgrid-mcp", version });
 registerTools(server, ctx);
 
 const transport = new StdioServerTransport();

package/src/tools.js

@@ -316,6 +316,8 @@ async function runVisibility(ctx, { target, visibility, org }) {
 // Registers the tools onto `server`. ctx.edition decides whether the CLI-wrapping
 // tools are included (they need a local machine).
 export function registerTools(server, ctx) {
+  // ── Direct-API tools (both editions) ──────────────────────────────────────
+
   // Drop — both editions.
   server.tool(
     "cloudgrid_drop",
@@ -331,6 +333,7 @@ export function registerTools(server, ctx) {
         .optional()
         .describe("Force a new drop even if you already dropped in this session (default: update in place)."),
     },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     async (input) => {
       try {
         return ok(await runDrop(ctx, input || {}));
@@ -348,6 +351,7 @@ export function registerTools(server, ctx) {
       claim_token: z.string().optional().describe("The claim token from an anonymous drop."),
       claim_url: z.string().optional().describe("The claim_url from an anonymous drop; the token is read from it."),
     },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     async (input) => {
       try {
         return ok(await runClaim(ctx, input || {}));
@@ -363,6 +367,7 @@ export function registerTools(server, ctx) {
     "cloudgrid_login",
     "Start a CLI-free CloudGrid sign-in. Use when the user wants to log in, sign in, or authenticate, or to claim an anonymous drop. Returns a URL to open in the browser; then call cloudgrid_login_status to finish. Uses CloudGrid's existing OAuth.",
     {},
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     async () => {
       const code = newLoginCode();
       ctx.state.pendingLoginCode = code;
@@ -381,6 +386,7 @@ export function registerTools(server, ctx) {
     {
       code: z.string().optional().describe("The sign-in code. Defaults to the most recent cloudgrid_login."),
     },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     async (input) => {
       const code = input?.code || ctx.state.pendingLoginCode;
       if (!code) return fail("No sign-in is in progress. Run cloudgrid_login first.");
@@ -419,6 +425,7 @@ export function registerTools(server, ctx) {
       target: z.string().optional().describe("Entity id. Defaults to this session's last drop."),
       org: z.string().optional().describe("Org of the entity. Defaults to the active org."),
     },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     async (input) => {
       try {
         return ok(await runVisibility(ctx, input || {}));
@@ -430,7 +437,8 @@ export function registerTools(server, ctx) {
 
   if (ctx.edition !== "local") return; // web edition stops here — no CLI tools
 
-  // ── CLI-wrapping tools (local edition only) ──
+  // ── CLI-wrapping tools (local edition only) ───────────────────────────────
+
   server.tool(
     "cloudgrid_init",
     "Register a new CloudGrid app or agent, optionally seeding a web service. Wraps `cloudgrid init`.",
@@ -442,6 +450,7 @@ export function registerTools(server, ctx) {
       dir: z.string().optional().describe("Target directory. Defaults to ./<name>."),
       org: z.string().optional().describe("Override the active org for this init."),
     },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     cliTool(({ kind, name, type, description, dir, org }) => {
       const args = ["init", kind, name];
       if (type) args.push("--type", type);
@@ -460,6 +469,7 @@ export function registerTools(server, ctx) {
       org: z.string().optional().describe("Pick or override the org."),
       no_deploy: z.boolean().optional().describe("Register the entity but do not build or deploy."),
     },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     cliTool(({ target, org, no_deploy }) => {
       const args = ["plug"];
       if (target) args.push(target);
@@ -478,6 +488,7 @@ export function registerTools(server, ctx) {
       tail: z.number().int().positive().optional().describe("Number of recent lines. Default 100."),
       since: z.string().optional().describe("Only logs newer than this, e.g. 5m, 1h, 2d."),
     },
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     cliTool(({ name, tail, since }) => {
       const args = ["logs"];
       if (name) args.push(name);
@@ -494,6 +505,7 @@ export function registerTools(server, ctx) {
       name: z.string().describe("Entity slug."),
       mode: z.enum(["link", "private", "authenticated", "org", "space"]).optional().describe("Visibility mode. Default link."),
     },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     cliTool(({ name, mode }) => ["visibility", "set", name, mode ?? "link"]),
   );
 
@@ -505,6 +517,7 @@ export function registerTools(server, ctx) {
       limit: z.number().int().positive().max(200).optional().describe("Number of events. Default 50, max 200."),
       org: z.string().optional().describe("Read another org's feed where you have access."),
     },
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     cliTool(({ since, limit, org }) => {
       const args = ["feedback", "list"];
       if (since) args.push("--since", since);
@@ -522,6 +535,7 @@ export function registerTools(server, ctx) {
       wait: z.boolean().optional().describe("Wait for the refresh to finish. Default true."),
       org: z.string().optional().describe("Target an entity in another org."),
     },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
     cliTool(({ name, wait, org }) => {
       const args = ["brain", "refresh", name];
       if (wait !== false) args.push("--wait");
@@ -529,6 +543,214 @@ export function registerTools(server, ctx) {
       return args;
     }),
   );
+
+  // ── New CLI-wrapping tools (local edition only) ───────────────────────────
+
+  server.tool(
+    "cloudgrid_whoami",
+    "Show the signed-in user and active org. Wraps `cloudgrid whoami`.",
+    {},
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    cliTool(() => ["whoami"]),
+  );
+
+  server.tool(
+    "cloudgrid_use",
+    "Switch the active org. Wraps `cloudgrid use`.",
+    { org: z.string().describe("Org slug to switch to.") },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    cliTool(({ org }) => ["use", org]),
+  );
+
+  server.tool(
+    "cloudgrid_logout",
+    "Sign out and clear local credentials. Wraps `cloudgrid logout`.",
+    {},
+    { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+    cliTool(() => ["logout"]),
+  );
+
+  server.tool(
+    "cloudgrid_status",
+    "Org dashboard, entity detail, or deploy snapshot. Wraps `cloudgrid status`.",
+    { name: z.string().optional().describe("Entity name or trace id. Omit for the org dashboard.") },
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    cliTool(({ name }) => (name ? ["status", name] : ["status"])),
+  );
+
+  server.tool(
+    "cloudgrid_info",
+    "Show metadata for a CloudGrid entity. Wraps `cloudgrid info`.",
+    { name: z.string().optional().describe("Entity name. Omit for the entity linked to the current directory.") },
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    cliTool(({ name }) => {
+      const args = ["info"];
+      if (name) args.push(name);
+      return args;
+    }),
+  );
+
+  server.tool(
+    "cloudgrid_builds",
+    "List recent builds and deploys for an entity. Wraps `cloudgrid builds`.",
+    {
+      name: z.string().optional().describe("Entity name. Omit for the entity linked to the current directory."),
+      limit: z.number().int().positive().optional().describe("Number of builds to show."),
+    },
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    cliTool(({ name, limit }) => {
+      const args = ["builds"];
+      if (name) args.push(name);
+      if (limit) args.push("--limit", String(limit));
+      return args;
+    }),
+  );
+
+  server.tool(
+    "cloudgrid_grid",
+    "List entities on the hub or org. Wraps `cloudgrid grid`.",
+    { org: z.string().optional().describe("Org slug. Omit for the active org.") },
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    cliTool(({ org }) => (org ? ["grid", "--org", org] : ["grid"])),
+  );
+
+  server.tool(
+    "cloudgrid_rename",
+    "Rename a CloudGrid entity. Wraps `cloudgrid rename`.",
+    {
+      name: z.string().describe("Current entity slug."),
+      new_name: z.string().describe("New slug."),
+    },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    cliTool(({ name, new_name }) => ["rename", name, new_name]),
+  );
+
+  server.tool(
+    "cloudgrid_unplug",
+    "Take an entity off the grid. Destructive. Wraps `cloudgrid unplug`.",
+    {
+      name: z.string().describe("Entity slug to take down (required)."),
+      confirm: z.literal(true).describe("Must be true to proceed."),
+    },
+    { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+    cliTool(({ name }) => ["unplug", name]),
+  );
+
+  server.tool(
+    "cloudgrid_delete",
+    "Archive and delete a CloudGrid entity. Destructive. Wraps `cloudgrid delete`.",
+    {
+      name: z.string().describe("Entity slug to delete (required)."),
+      confirm: z.literal(true).describe("Must be true to proceed."),
+    },
+    { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+    cliTool(({ name }) => ["delete", name]),
+  );
+
+  server.tool(
+    "cloudgrid_rollback",
+    "Rollback an entity to a previous version. Wraps `cloudgrid rollback`.",
+    {
+      name: z.string().describe("Entity slug."),
+      to: z.string().optional().describe("Target version tag or id. Omit to roll back one version."),
+    },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    cliTool(({ name, to }) => {
+      const args = ["rollback", name];
+      if (to) args.push("--to", to);
+      return args;
+    }),
+  );
+
+  server.tool(
+    "cloudgrid_versions",
+    "List published versions for an entity. Wraps `cloudgrid versions`.",
+    { name: z.string().optional().describe("Entity name. Omit for the entity linked to the current directory.") },
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    cliTool(({ name }) => {
+      const args = ["versions"];
+      if (name) args.push(name);
+      return args;
+    }),
+  );
+
+  server.tool(
+    "cloudgrid_env",
+    "Manage environment variables for an entity. Wraps `cloudgrid env`.",
+    {
+      action: z.enum(["get", "set", "list"]).describe("get, set, or list."),
+      name: z.string().describe("Entity slug."),
+      key: z.string().optional().describe("Variable name. Required for get and set."),
+      value: z.string().optional().describe("Variable value. Required for set."),
+    },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    cliTool(({ action, name, key, value }) => {
+      if (action === "set") {
+        if (!key || value === undefined) throw new Error("key and value are required for set");
+        return ["env", "set", name, key, value];
+      }
+      if (action === "get") {
+        if (!key) throw new Error("key is required for get");
+        return ["env", "get", name, key];
+      }
+      return ["env", "list", name];
+    }),
+  );
+
+  server.tool(
+    "cloudgrid_secrets",
+    "Set or list secret names for an entity. Never returns secret values. Wraps `cloudgrid secrets`.",
+    {
+      action: z.enum(["set", "list"]).describe("set or list (names only)."),
+      name: z.string().describe("Entity slug."),
+      key: z.string().optional().describe("Secret name. Required for set."),
+      value: z.string().optional().describe("Secret value. Required for set."),
+    },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    cliTool(({ action, name, key, value }) => {
+      if (action === "set") {
+        if (!key || value === undefined) throw new Error("key and value are required for set");
+        return ["secrets", "set", name, key, value];
+      }
+      return ["secrets", "list", name];
+    }),
+  );
+
+  server.tool(
+    "cloudgrid_scaffold",
+    "Generate starter files for a CloudGrid entity. Wraps `cloudgrid scaffold`.",
+    {
+      template: z.string().optional().describe("Template name."),
+      dir: z.string().optional().describe("Target directory."),
+    },
+    { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    cliTool(({ template, dir }) => {
+      const args = ["scaffold"];
+      if (template) args.push(template);
+      if (dir) args.push("--dir", dir);
+      return args;
+    }),
+  );
+
+  server.tool(
+    "cloudgrid_doctor",
+    "Run CloudGrid diagnostics on the local environment. Wraps `cloudgrid doctor`.",
+    {},
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    cliTool(() => ["doctor"]),
+  );
+
+  server.tool(
+    "cloudgrid_open",
+    "Return the public URL for an entity. Does not open a browser. Wraps `cloudgrid open --url`.",
+    { name: z.string().optional().describe("Entity name. Omit for the entity linked to the current directory.") },
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    cliTool(({ name }) => {
+      const args = ["open", "--url"];
+      if (name) args.push(name);
+      return args;
+    }),
+  );
 }
 
 export { decodeJwt };

package/src/web.js

@@ -14,6 +14,7 @@
 //
 // Run: PORT=8080 node src/web.js     Health: GET /healthz
 
+import { readFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import express from "express";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -22,6 +23,8 @@ import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
 import { registerTools, decodeJwt } from "./tools.js";
 import { mountOAuth, bearerChallenge } from "./oauth.js";
 
+const { version } = JSON.parse(readFileSync(new URL("../package.json", import.meta.url)));
+
 const PORT = Number(process.env.PORT || 8080);
 
 // This server's public origin — used in OAuth metadata and the interstitial.
@@ -128,7 +131,7 @@ app.post("/mcp", async (req, res) => {
       delete sessionAuth[transport.sessionId];
     }
   };
-  const server = new McpServer({ name: "cloudgrid-mcp-web", version: "0.2.7" });
+  const server = new McpServer({ name: "cloudgrid-mcp-web", version });
   registerTools(server, makeWebContext(newSessionId));
   await server.connect(transport);
   await transport.handleRequest(req, res, req.body);