@cloudgrid-io/mcp 0.9.1 → 0.10.0

package/README.md

@@ -66,44 +66,44 @@ It speaks MCP over stdio. Point any MCP client at the `cloudgrid-mcp` command.
 | `gridctl_claim` | `POST /api/v2/entities/:id/pickup` | Claim an anonymous drop into the signed-in account (the claim token IS the drop's owner token). Direct API. |
 | `gridctl_fork` | `POST /api/v2/runtimes/:id/fork` | Start a new entity from an existing runtime (lineage recorded). Needs sign-in. |
 | `gridctl_download` | `GET /api/v2/runtimes/:id/source` | Signed 15-minute source-bundle URLs. Needs sign-in. |
-| `cloudgrid_login` | `GET /auth/login` | Start a CLI-free sign-in; returns a URL to open. Direct API. |
-| `cloudgrid_login_status` | `GET /auth/status` | Finish the sign-in; saves the token to the shared CLI credentials. |
-| `cloudgrid_visibility` | `PATCH /api/v2/inspirations/<id>` | Change who can see a drop (private, space, authenticated, org, link). Needs sign-in. Direct API; also in the web edition. |
+| `gridctl_login` | `GET /auth/login` | Start a CLI-free sign-in; returns a URL to open. Direct API. |
+| `gridctl_login_status` | `GET /auth/status` | Finish the sign-in; saves the token to the shared CLI credentials. |
+| `gridctl_visibility` | `PATCH /api/v2/inspirations/<id>` | Change who can see a drop (private, space, authenticated, org, link). Needs sign-in. Direct API; also in the web edition. |
 
-`cloudgrid_drop`, `cloudgrid_claim`, `cloudgrid_visibility`, and the two
-`cloudgrid_login` tools do not wrap the CLI -- they call the API directly, so they
-also work in the web edition where no CLI exists. `cloudgrid_login` writes the same
+`gridctl_drop`, `gridctl_claim`, `gridctl_visibility`, and the two
+`gridctl_login` tools do not wrap the CLI -- they call the API directly, so they
+also work in the web edition where no CLI exists. `gridctl_login` writes the same
 `~/.cloudgrid/credentials` the CLI uses, so the two share one identity.
 
 ### CLI-wrapping tools (local edition only)
 
 | Tool | Wraps | Notes |
 |---|---|---|
-| `cloudgrid_init` | `cloudgrid init` | Register an app or agent; optionally seed a web service. |
-| `cloudgrid_logs` | `cloudgrid logs` | Snapshot of recent logs. Does not stream. Read-only. |
-| `cloudgrid_share` | `cloudgrid visibility set` | Set visibility, default link. |
-| `cloudgrid_feedback` | `cloudgrid feedback list` | Read the org feedback feed. Read-only. |
-| `cloudgrid_whoami` | `cloudgrid whoami` | Show the signed-in user and active org. Read-only. |
-| `cloudgrid_use` | `cloudgrid use` | Switch the active org. |
-| `cloudgrid_logout` | `cloudgrid logout` | Sign out and clear local credentials. Destructive. |
-| `cloudgrid_status` | `cloudgrid status` | Org dashboard or entity detail. Read-only. |
-| `cloudgrid_info` | `cloudgrid info` | Entity metadata. Read-only. |
-| `cloudgrid_get` | `cloudgrid get grids\|entities\|spaces` | List grids, entities, or spaces. Read-only. |
-| `cloudgrid_describe_grid` | `cloudgrid describe grid <slug>` | Grid detail. Read-only. |
-| `cloudgrid_pickup` | `cloudgrid pickup <name>` | Download an entity's source and bind the folder. |
-| `cloudgrid_rename` | `cloudgrid rename` | Rename an entity's display name. |
-| `cloudgrid_unplug` | `cloudgrid unplug` | Take an entity off the grid. Destructive; requires confirm. |
-| `cloudgrid_delete` | `cloudgrid delete entity` | Archive an inspiration. Destructive; requires confirm. |
-| `cloudgrid_rollback` | `cloudgrid rollback` | Rollback to a previous version. |
-| `cloudgrid_versions` | `cloudgrid versions` | List published versions. Read-only. |
-| `cloudgrid_env` | `cloudgrid env` | Get, set, or list environment variables. |
-| `cloudgrid_secrets` | `cloudgrid secrets` | Set or list secret names. Never returns secret values. |
-| `cloudgrid_scaffold` | `cloudgrid scaffold` | Generate starter files. |
-| `cloudgrid_doctor` | `cloudgrid doctor` | Run local diagnostics. Read-only. |
-| `cloudgrid_open` | `cloudgrid open --print` | Return the public URL. Does not open a browser. Read-only. |
-
-`cloudgrid_share` and `cloudgrid_visibility` overlap on purpose: `cloudgrid_share`
-wraps the CLI and defaults to `link`; `cloudgrid_visibility` is direct API, takes an
+| `gridctl_init` | `cloudgrid init` | Register an app or agent; optionally seed a web service. |
+| `gridctl_logs` | `cloudgrid logs` | Snapshot of recent logs. Does not stream. Read-only. |
+| `gridctl_share` | `cloudgrid visibility set` | Set visibility, default link. |
+| `gridctl_feedback` | `cloudgrid feedback list` | Read the org feedback feed. Read-only. |
+| `gridctl_whoami` | `cloudgrid whoami` | Show the signed-in user and active org. Read-only. |
+| `gridctl_use` | `cloudgrid use` | Switch the active org. |
+| `gridctl_logout` | `cloudgrid logout` | Sign out and clear local credentials. Destructive. |
+| `gridctl_status` | `cloudgrid status` | Org dashboard or entity detail. Read-only. |
+| `gridctl_info` | `cloudgrid info` | Entity metadata. Read-only. |
+| `gridctl_get` | `cloudgrid get grids\|entities\|spaces` | List grids, entities, or spaces. Read-only. |
+| `gridctl_describe_grid` | `cloudgrid describe grid <slug>` | Grid detail. Read-only. |
+| `gridctl_pickup` | `cloudgrid pickup <name>` | Download an entity's source and bind the folder. |
+| `gridctl_rename` | `cloudgrid rename` | Rename an entity's display name. |
+| `gridctl_unplug` | `cloudgrid unplug` | Take an entity off the grid. Destructive; requires confirm. |
+| `gridctl_delete` | `cloudgrid delete entity` | Archive an inspiration. Destructive; requires confirm. |
+| `gridctl_rollback` | `cloudgrid rollback` | Rollback to a previous version. |
+| `gridctl_versions` | `cloudgrid versions` | List published versions. Read-only. |
+| `gridctl_env` | `cloudgrid env` | Get, set, or list environment variables. |
+| `gridctl_secrets` | `cloudgrid secrets` | Set or list secret names. Never returns secret values. |
+| `gridctl_scaffold` | `cloudgrid scaffold` | Generate starter files. |
+| `gridctl_doctor` | `cloudgrid doctor` | Run local diagnostics. Read-only. |
+| `gridctl_open` | `cloudgrid open --print` | Return the public URL. Does not open a browser. Read-only. |
+
+`gridctl_share` and `gridctl_visibility` overlap on purpose: `gridctl_share`
+wraps the CLI and defaults to `link`; `gridctl_visibility` is direct API, takes an
 explicit scope, and defaults its target to the session's last drop -- it is the one
 the web edition gets.
 
@@ -113,7 +113,7 @@ All tools carry MCP annotations (`readOnlyHint`, `destructiveHint`,
 ## Test
 
 A smoke test spawns the server with a real MCP client, lists the tools, and calls
-the read-only `cloudgrid_feedback` tool end to end:
+the read-only `gridctl_feedback` tool end to end:
 
 ```
 cd mcp-server
@@ -127,5 +127,5 @@ It needs a logged-in CLI on `$PATH`.
 
 - Shells out with `execFile` and an argument array, so there is no shell and no
   injection surface.
-- `cloudgrid_logs` never uses `--follow`; a streaming call would never return.
+- `gridctl_logs` never uses `--follow`; a streaming call would never return.
 - Stateless. Each call is one CLI invocation.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudgrid-io/mcp",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "MCP server for CloudGrid. Three editions: a local stdio server (full toolset), a hosted web server (light, CLI-free toolset), and a public docs server (search_cloudgrid_documentation) over MCP Streamable HTTP.",
   "type": "module",
   "bin": {

package/src/corpus/cookbook.md

@@ -74,7 +74,7 @@ curl -sS -X POST https://api.cloudgrid.io/api/v2/plug \
 The response includes `url` (the live link — use it verbatim), `entity_id`,
 `owner_token` (keep both to update the drop later), and `claim_url` (sign in
 before it expires to keep it). This is what the `cloudgrid-drop` skill and the
-`cloudgrid_drop` MCP tool do for you. It is anonymous and serves inspirations
+`gridctl_drop` MCP tool do for you. It is anonymous and serves inspirations
 only; a full app needs the signed-in `plug` flow above.
 
 ## Update your drop in place

package/src/corpus/install.md

@@ -113,7 +113,7 @@ https://github.com/cloudgrid-io/mcp/releases/latest/download/cloudgrid.mcpb
 
 The bundle carries the full local toolset (including the `cloudgrid` CLI), so deploy
 and secrets tools work without a separate install. Sign in from chat with the
-`cloudgrid_login` tool on first use.
+`gridctl_login` tool on first use.
 
 ## For agents
 

package/src/corpus/skill-claim.md

@@ -69,5 +69,5 @@ new_expires_at, role_granted: "owner", ... }`.
 ## Notes
 
 - One pickup claims one entity. To claim several, repeat with each entity id + token.
-- The MCP `cloudgrid_claim` tool does this for you, and remembers the entity id +
+- The MCP `gridctl_claim` tool does this for you, and remembers the entity id +
   token from the last anonymous drop so you can claim with no arguments.

package/src/corpus/skill-drop.md

@@ -78,7 +78,7 @@ A signed-in drop returns HTTP 202 with `entity_id`, `url`, `slug` + `grid` and n
 not compose it. The org is taken from the `X-CloudGrid-Org` header — there is no
 `org_slug` form field. If the user is a member of several orgs and the header is
 missing, the API replies with the list of orgs to choose from. The MCP
-`cloudgrid_drop` tool does this automatically when credentials are present.
+`gridctl_drop` tool does this automatically when credentials are present.
 
 ## Re-plug: update the same URL in place
 
@@ -120,7 +120,7 @@ Rules that matter:
 - An anonymous edit without a valid `owner_token` returns **401**.
 - Anonymous edits count against the same daily anonymous cap as creates.
 - Only re-plug when the user is iterating on an existing artifact. If they want a
-  separate new link, omit `target_entity_id` (the MCP `cloudgrid_drop` tool's
+  separate new link, omit `target_entity_id` (the MCP `gridctl_drop` tool's
   `fresh` flag does the same: it forces a new entity instead of updating).
 
 ## After the drop

package/src/corpus/skill-login.md

@@ -81,6 +81,6 @@ made an anonymous drop earlier, this is the moment to offer to claim it.
 
 - Enterprise single sign-on is not supported in this flow yet; those users sign in
   through the Console for now.
-- The MCP server exposes the same flow as `cloudgrid_login` and
-  `cloudgrid_login_status`, which handle the polling and the credentials write for
+- The MCP server exposes the same flow as `gridctl_login` and
+  `gridctl_login_status`, which handle the polling and the credentials write for
   you.

package/src/corpus/usage.md

@@ -16,7 +16,7 @@ Which one you use depends on the client. Pick your client below.
 - **Node 18+** (for `npx`).
 - **No login needed to try it** — anonymous drop works out of the box. For owned
   drops (into your org), run `cloudgrid login` once, or use the `login` skill / the
-  `cloudgrid_login` MCP tool.
+  `gridctl_login` MCP tool.
 
 ---
 
@@ -45,7 +45,7 @@ npx skills add cloudgrid-io/skills
 ```
 claude mcp add cloudgrid -- npx -y @cloudgrid-io/mcp
 ```
-- **Find it under `/mcp`.** Exposes tools `cloudgrid_drop`, `cloudgrid_login`, …
+- **Find it under `/mcp`.** Exposes tools `gridctl_drop`, `gridctl_login`, …
 - Invoke by describing the task; the model calls the tool.
 
 > Where did my install go? `/skills` (skills), `/plugin` (plugin), `/mcp` (MCP).

package/src/tools.js

@@ -226,30 +226,30 @@ const MIN_CLI_VERSION = "0.12.0";
 // Verb map for the drift guard: each CLI-wrapping tool's top-level verb(s).
 // The drift-guard test imports this and asserts every verb exists in `cloudgrid --help`.
 export const CLI_TOOL_VERBS = {
-  cloudgrid_init:     ["init"],
-  // cloudgrid_plug is NOT here: gridctl_plug is now a direct-API tool
+  gridctl_init:     ["init"],
+  // gridctl_plug is NOT here: gridctl_plug is now a direct-API tool
   // (POST /api/v2/plug, spec v2 §3), not a CLI wrapper.
-  cloudgrid_logs:     ["logs"],
-  cloudgrid_share:    ["visibility"],
-  cloudgrid_feedback: ["feedback"],
-  cloudgrid_whoami:   ["whoami"],
-  cloudgrid_use:      ["use"],
-  cloudgrid_logout:   ["logout"],
-  cloudgrid_status:   ["status"],
-  cloudgrid_info:     ["info"],
-  cloudgrid_get:          ["get"],
-  cloudgrid_describe_grid: ["describe"],
-  cloudgrid_pickup:        ["pickup"],
-  cloudgrid_rename:   ["rename"],
-  cloudgrid_unplug:   ["unplug"],
-  cloudgrid_delete:   ["delete"],
-  cloudgrid_rollback: ["rollback"],
-  cloudgrid_versions: ["versions"],
-  cloudgrid_env:      ["env"],
-  cloudgrid_secrets:  ["secrets"],
-  cloudgrid_scaffold: ["scaffold"],
-  cloudgrid_doctor:   ["doctor"],
-  cloudgrid_open:     ["open"],
+  gridctl_logs:     ["logs"],
+  gridctl_share:    ["visibility"],
+  gridctl_feedback: ["feedback"],
+  gridctl_whoami:   ["whoami"],
+  gridctl_use:      ["use"],
+  gridctl_logout:   ["logout"],
+  gridctl_status:   ["status"],
+  gridctl_info:     ["info"],
+  gridctl_get:          ["get"],
+  gridctl_describe_grid: ["describe"],
+  gridctl_pickup:        ["pickup"],
+  gridctl_rename:   ["rename"],
+  gridctl_unplug:   ["unplug"],
+  gridctl_delete:   ["delete"],
+  gridctl_rollback: ["rollback"],
+  gridctl_versions: ["versions"],
+  gridctl_env:      ["env"],
+  gridctl_secrets:  ["secrets"],
+  gridctl_scaffold: ["scaffold"],
+  gridctl_doctor:   ["doctor"],
+  gridctl_open:     ["open"],
 };
 
 // Simple semver comparison: true when `version` >= MIN_CLI_VERSION.
@@ -2356,34 +2356,19 @@ export async function runSource(ctx, { entity_id, url, grid, slug } = {}) {
 // Registers the tools onto `server`. ctx.edition decides whether the CLI-wrapping
 // tools are included (they need a local machine).
 export function registerTools(server, ctx) {
-  // ── Tool naming: gridctl_* with deprecated cloudgrid_* aliases ────────────
-  // Every tool is registered under its new `gridctl_*` name AND its legacy
-  // `cloudgrid_*` alias (same handler), so nothing breaks mid-migration. The
-  // alias is marked deprecated in its description; both names resolve to the
-  // same handler. Aliases are removed in a later major. `reg` wraps the
+  // ── Tool naming: gridctl_* only ───────────────────────────────────────────
+  // Every tool is registered under its `gridctl_*` name only. The legacy
+  // deprecated `cloudgrid_*` aliases were removed in 0.10.0 — they doubled the
+  // connector tool list and de-duplicated poorly in permission UIs. Clients
+  // enumerate tools dynamically, so discovery is unaffected. `reg` wraps the
   // object-config `server.registerTool`; `regTool` wraps the positional
-  // `server.tool` shorthand. Both take the new gridctl_* name and derive the
-  // alias by swapping the prefix.
-  const aliasOf = (name) => name.replace(/^gridctl_/, "cloudgrid_");
-
+  // `server.tool` shorthand.
   const reg = (name, config, handler) => {
     server.registerTool(name, config, handler);
-    const alias = aliasOf(name);
-    if (alias !== name) {
-      server.registerTool(
-        alias,
-        { ...config, description: `(deprecated: use ${name}) ${config.description}` },
-        handler,
-      );
-    }
   };
 
   const regTool = (name, description, schema, annotations, handler) => {
     server.tool(name, description, schema, annotations, handler);
-    const alias = aliasOf(name);
-    if (alias !== name) {
-      server.tool(alias, `(deprecated: use ${name}) ${description}`, schema, annotations, handler);
-    }
   };
 
   // ── Widget resources (web edition, ChatGPT Apps SDK) ──────────────────────

package/src/widgets/live-result.html

@@ -124,7 +124,7 @@ body{font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;b
           var statusEl = document.getElementById("vis-status");
           if (statusEl) statusEl.textContent = "Updating\u2026";
           if (!window.openai || !window.openai.callTool) return;
-          window.openai.callTool("cloudgrid_visibility", { visibility: vis }).then(function (res) {
+          window.openai.callTool("gridctl_visibility", { visibility: vis }).then(function (res) {
             var newVis = res && res.structuredContent && res.structuredContent.visibility;
             if (newVis) {
               data.current_visibility = newVis;

package/src/widgets/org-picker.html

@@ -75,7 +75,7 @@ body{font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;b
           if (input.fresh !== undefined) args.fresh = input.fresh;
           args.grid = slug;
           args.org = slug; // alias kept for compatibility
-          window.openai.callTool("cloudgrid_drop", args).then(function () {
+          window.openai.callTool("gridctl_drop", args).then(function () {
             // The host will render the new result with the live-result card.
           }).catch(function () {
             for (var m = 0; m < all.length; m++) all[m].classList.remove("loading");