@coldiq/mcp 0.3.27 → 0.3.31

package/dist/tools/enrich-person-bulk.d.ts

@@ -10,15 +10,15 @@ export declare const enrichPersonBulkSchema: {
         company_name: z.ZodOptional<z.ZodString>;
         domain: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        linkedin_url?: string | undefined;
         domain?: string | undefined;
+        linkedin_url?: string | undefined;
         first_name?: string | undefined;
         company_name?: string | undefined;
         last_name?: string | undefined;
         email?: string | undefined;
     }, {
-        linkedin_url?: string | undefined;
         domain?: string | undefined;
+        linkedin_url?: string | undefined;
         first_name?: string | undefined;
         company_name?: string | undefined;
         last_name?: string | undefined;

package/dist/tools/find-emails-bulk.d.ts

@@ -9,15 +9,15 @@ export declare const findEmailsBulkSchema: {
         domain: z.ZodOptional<z.ZodString>;
         linkedin_url: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
+        domain?: string | undefined;
         id?: string | undefined;
         linkedin_url?: string | undefined;
-        domain?: string | undefined;
         first_name?: string | undefined;
         last_name?: string | undefined;
     }, {
+        domain?: string | undefined;
         id?: string | undefined;
         linkedin_url?: string | undefined;
-        domain?: string | undefined;
         first_name?: string | undefined;
         last_name?: string | undefined;
     }>, "many">;

package/dist/tools/find-emails.d.ts

@@ -10,14 +10,14 @@ export declare const findEmailsSchema: {
         linkedin_url: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         id: string;
-        linkedin_url?: string | undefined;
         domain?: string | undefined;
+        linkedin_url?: string | undefined;
         first_name?: string | undefined;
         last_name?: string | undefined;
     }, {
         id: string;
-        linkedin_url?: string | undefined;
         domain?: string | undefined;
+        linkedin_url?: string | undefined;
         first_name?: string | undefined;
         last_name?: string | undefined;
     }>, "many">;

package/dist/tools/search-companies.d.ts

@@ -3,6 +3,7 @@ export declare const searchCompaniesName = "search_companies";
 export declare const searchCompaniesDescription: string;
 export declare const searchCompaniesSchema: {
     keywords: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    similar_to_domains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     countries: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     locations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     industries: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -34,5 +35,11 @@ export declare function searchCompaniesHandler(input: Record<string, unknown>):
         text: string;
     }];
     isError?: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
 }>;
 //# sourceMappingURL=search-companies.d.ts.map

package/dist/tools/search-companies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-companies.d.ts","sourceRoot":"","sources":["../../src/tools/search-companies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,mBAAmB,qBAAqB,CAAA;AAErD,eAAO,MAAM,0BAA0B,QAEkV,CAAA;AAEzX,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BjC,CAAA;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;GAE1E"}
+{"version":3,"file":"search-companies.d.ts","sourceRoot":"","sources":["../../src/tools/search-companies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,mBAAmB,qBAAqB,CAAA;AAErD,eAAO,MAAM,0BAA0B,QAEkV,CAAA;AAEzX,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BjC,CAAA;AAkCD,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;GAgB1E"}

package/dist/tools/search-companies.js

@@ -2,10 +2,11 @@ import { z } from 'zod';
 import { callVerb } from '../verb-client.js';
 import { getProvidersForCapability } from '../utils/provider-resolver.js';
 export const searchCompaniesName = 'search_companies';
-export const searchCompaniesDescription = 'Search B2B companies by industry, size, geography, founding year, tech stack, funding, revenue, exclusion lists, and hiring signals. Routing is automatic: strict firmographic filters (revenue, employee bands, exclusion lists) get high-precision providers first; tech-stack and funding-stage filters route to specialized providers; loose keyword/geo searches fall back to broad providers; a LinkedIn Sales Navigator search URL enables URL-based discovery as a final fallback. For buying-intent topic discovery (find companies associated with intent keywords like "sales automation" or "lead generation"), pass `keywords` with `use_providers: ["theirstack"]` — this routes to TheirStack\'s intent-keyword index instead of the default full-text match. For "fast-growing" companies there is no exact workforce-growth % filter anywhere — pass min_workforce_growth_pct (and/or is_hiring / a recent-funding filter) and ColdIQ routes to active-hiring and recently-funded providers, the practical proxies for growth. ColdIQ automatically picks the best provider — pass use_providers only if you need a specific tool. Default limit: 25. ' +
+export const searchCompaniesDescription = 'Search B2B companies by industry, size, geography, founding year, tech stack, funding, revenue, exclusion lists, and hiring signals. To build a lookalike TAM from example accounts, pass `similar_to_domains` (seed company domains) — the request routes to DiscoLike\'s lookalike discovery over 70M companies, optionally narrowed by keywords/geo/size. Routing is otherwise automatic: strict firmographic filters (revenue, employee bands, exclusion lists) get high-precision providers first; tech-stack and funding-stage filters route to specialized providers; loose keyword/geo searches fall back to broad providers; a LinkedIn Sales Navigator search URL enables URL-based discovery as a final fallback. For buying-intent topic discovery (find companies associated with intent keywords like "sales automation" or "lead generation"), pass `keywords` with `use_providers: ["theirstack"]` — this routes to TheirStack\'s intent-keyword index instead of the default full-text match. For "fast-growing" companies there is no exact workforce-growth % filter anywhere — pass min_workforce_growth_pct (and/or is_hiring / a recent-funding filter) and ColdIQ routes to active-hiring and recently-funded providers, the practical proxies for growth. ColdIQ automatically picks the best provider — pass use_providers only if you need a specific tool. Default limit: 25. ' +
     'Response is compact by default (name, domain, website, linkedin_url, employees, revenue, industry, country, city, founded_year, categories) — everything needed to act on a company or feed it into find_people. Set fields="verbose" only when you specifically need the full firmographic record (funding history, technologies, keywords, NAICS codes, all socials, descriptions).';
 export const searchCompaniesSchema = {
     keywords: z.array(z.string()).optional().describe('Free-text topics, business models, or themes — e.g. ["SaaS", "fintech", "cybersecurity"]. Best for most discovery: matched broadly across company name, description, and tags. Prefer this over `industries` for terms like "SaaS" that are business models rather than formal industry categories.'),
+    similar_to_domains: z.array(z.string()).max(10).optional().describe('Seed company domains to find lookalikes of (up to 10) — e.g. ["stripe.com", "lemlist.com"]. Routes to DiscoLike\'s lookalike discovery over 70M companies; the best way to build a net-new TAM from example accounts. Optionally narrow with keywords / industries / countries / employee range. Not compatible with tech-stack, funding, revenue, founded-year, or hiring/growth filters.'),
     countries: z.array(z.string()).optional().describe('2-letter ISO country codes (e.g. ["FR", "US"])'),
     locations: z.array(z.string()).optional().describe('City/region filters as free-text strings (e.g. ["Paris, France", "San Francisco, California"]). Narrows results beyond country-level.'),
     industries: z.array(z.string()).optional().describe('Formal industry-taxonomy categories — e.g. ["Financial Services", "Hospitals and Health Care"]. Use only for strict industry classification; for business models or themes like "SaaS" or "fintech", use `keywords` instead. Both fields are searched together when set.'),
@@ -31,7 +32,54 @@ export const searchCompaniesSchema = {
     fields: z.enum(['compact', 'verbose']).default('compact').describe('Response shape. "compact" (default) returns a small per-company record: name, domain, website, linkedin_url, employees, revenue, industry, country, city, founded_year, categories — plus total. "verbose" returns the raw provider passthrough (funding-round history, technologies, keyword arrays, NAICS codes, all socials, descriptions) — only use when you specifically need those fields.'),
     use_providers: z.array(z.string()).optional().describe(`Optional ordered list of providers to use. Leave empty to let ColdIQ automatically pick the best tool for your inputs — recommended for most use cases. Available providers: ${getProvidersForCapability('search_companies').join(', ')}. Provider names are matched fuzzily, so minor typos are tolerated.`),
 };
+// A call must carry at least one filter that actually NARROWS the result set,
+// otherwise it forwards an unbounded query upstream and bills for arbitrary
+// companies. This is an explicit allowlist of narrowing keys, not a denylist of
+// response-shaping ones, on purpose: a future response-shaping field (e.g. a
+// `sort` or `page` knob) added to the schema must never silently count as a
+// filter and reopen the billing hole. Exclusion fields (`exclude_*`) are
+// deliberately absent — excluding a domain narrows nothing on its own. Kept in
+// sync with the server-side guard in src/router/verb-handler.ts.
+const NARROWING_FILTER_KEYS = [
+    'keywords', 'countries', 'locations', 'industries', 'technologies',
+    'min_employees', 'max_employees', 'min_founded_year', 'max_founded_year',
+    'funding_stages', 'min_funding_amount', 'max_funding_amount',
+    'min_funding_year', 'max_funding_year', 'min_revenue', 'max_revenue',
+    'is_hiring', 'min_workforce_growth_pct', 'linkedin_search_url',
+];
+// A value narrows only when it actually constrains: a non-blank string, an array
+// with at least one non-blank element, a non-zero finite number (a `min_*` of 0
+// is a no-op bound), or boolean `true` (is_hiring is ignored upstream unless true).
+function isNarrowingValue(value) {
+    if (value === undefined || value === null)
+        return false;
+    if (typeof value === 'string')
+        return value.trim().length > 0;
+    if (typeof value === 'number')
+        return Number.isFinite(value) && value !== 0;
+    if (typeof value === 'boolean')
+        return value === true;
+    if (Array.isArray(value))
+        return value.some((el) => (typeof el === 'string' ? el.trim().length > 0 : el != null));
+    return true;
+}
+function hasDiscriminatingFilter(input) {
+    return NARROWING_FILTER_KEYS.some((key) => isNarrowingValue(input[key]));
+}
 export async function searchCompaniesHandler(input) {
+    if (!hasDiscriminatingFilter(input)) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        error: 'search_companies needs at least one filter (keywords, countries, industries, employee range, technologies, funding, …). An unfiltered search would return arbitrary companies and still consume credits.',
+                    }),
+                },
+            ],
+            isError: true,
+        };
+    }
     return callVerb('/companies/search', input);
 }
 //# sourceMappingURL=search-companies.js.map

package/dist/tools/search-companies.js.map

@@ -1 +1 @@
-{"version":3,"file":"search-companies.js","sourceRoot":"","sources":["../../src/tools/search-companies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAA;AAEzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAA;AAErD,MAAM,CAAC,MAAM,0BAA0B,GACrC,ymCAAymC;IACzmC,uXAAuX,CAAA;AAEzX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qSAAqS,CAAC;IACxV,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACpG,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uIAAuI,CAAC;IAC3L,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0QAA0Q,CAAC;IAC/T,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qHAAqH,CAAC;IAC5K,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC1E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACxE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gGAAgG,CAAC;IACzJ,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxF,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACvF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrF,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACnG,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrG,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAChH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACxF,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6LAA6L,CAAC;IACvP,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4JAA4J,CAAC;IACjN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,6LAA6L,CAAC;IACrP,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,mYAAmY,CAAC;IACvc,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gLAAgL,yBAAyB,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qEAAqE,CAAC;CACtW,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAA8B;IACzE,OAAO,QAAQ,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAA;AAC7C,CAAC"}
+{"version":3,"file":"search-companies.js","sourceRoot":"","sources":["../../src/tools/search-companies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAA;AAEzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAA;AAErD,MAAM,CAAC,MAAM,0BAA0B,GACrC,20CAA20C;IAC30C,uXAAuX,CAAA;AAEzX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qSAAqS,CAAC;IACxV,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4XAA4X,CAAC;IACjc,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACpG,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uIAAuI,CAAC;IAC3L,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0QAA0Q,CAAC;IAC/T,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qHAAqH,CAAC;IAC5K,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC1E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACxE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gGAAgG,CAAC;IACzJ,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxF,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACvF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrF,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACnG,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrG,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAChH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACxF,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6LAA6L,CAAC;IACvP,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4JAA4J,CAAC;IACjN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,6LAA6L,CAAC;IACrP,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,mYAAmY,CAAC;IACvc,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gLAAgL,yBAAyB,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qEAAqE,CAAC;CACtW,CAAA;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,+EAA+E;AAC/E,iEAAiE;AACjE,MAAM,qBAAqB,GAAG;IAC5B,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc;IAClE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,kBAAkB;IACxE,gBAAgB,EAAE,oBAAoB,EAAE,oBAAoB;IAC5D,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa;IACpE,WAAW,EAAE,0BAA0B,EAAE,qBAAqB;CACtD,CAAA;AAEV,iFAAiF;AACjF,gFAAgF;AAChF,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAA;IAC3E,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,KAAK,IAAI,CAAA;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAA;IACjH,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA8B;IAC7D,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAA8B;IACzE,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,KAAK,EACH,0MAA0M;qBAC7M,CAAC;iBACH;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAA;AAC7C,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The MCP server reports its own npm version to the client at init. package.json
+ * sits outside tsconfig rootDir, so it can't be imported — read it at runtime.
+ * The built entry (dist/index.js) sits exactly one directory below the package
+ * root, so '../package.json' resolves in both `tsx src/…` dev and the published
+ * dist layout. Falls back to '0.0.0' rather than throwing, so a packaging change
+ * that moves the file can never crash server startup over a cosmetic version string.
+ */
+export declare function readPackageVersion(fromUrl: string): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQ1D"}

package/dist/version.js

@@ -0,0 +1,20 @@
+import { createRequire } from 'node:module';
+/**
+ * The MCP server reports its own npm version to the client at init. package.json
+ * sits outside tsconfig rootDir, so it can't be imported — read it at runtime.
+ * The built entry (dist/index.js) sits exactly one directory below the package
+ * root, so '../package.json' resolves in both `tsx src/…` dev and the published
+ * dist layout. Falls back to '0.0.0' rather than throwing, so a packaging change
+ * that moves the file can never crash server startup over a cosmetic version string.
+ */
+export function readPackageVersion(fromUrl) {
+    try {
+        const require = createRequire(fromUrl);
+        const { version } = require('../package.json');
+        return typeof version === 'string' && version.length > 0 ? version : '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;QACtC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAyB,CAAA;QACtE,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coldiq/mcp",
-  "version": "0.3.27",
+  "version": "0.3.31",
   "type": "module",
   "main": "dist/index.js",
   "bin": {

package/src/index.ts

@@ -3,6 +3,7 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { initClient } from './client.js'
+import { readPackageVersion } from './version.js'
 
 import {
   searchCompaniesName,
@@ -182,13 +183,21 @@ import {
   loadSkillHandler,
 } from './tools/load-skill.js'
 
-// Initialize HTTP client (reads env vars)
-initClient()
+// Initialize HTTP client (reads env vars). A missing/empty COLDIQ_API_KEY is a
+// user-config error, not a bug — print the message without a stack trace.
+try {
+  initClient()
+} catch (err) {
+  console.error(err instanceof Error ? err.message : String(err))
+  process.exit(1)
+}
+
+const packageVersion = readPackageVersion(import.meta.url)
 
 const server = new McpServer(
   {
     name: 'coldiq',
-    version: '0.1.0',
+    version: packageVersion,
   },
   {
     // Surfaced to the model at init. Enforces batching on the multi-company

package/src/registry.ts

@@ -1061,6 +1061,48 @@ const searchCompaniesProviders: ProviderEntry[] = [
       return isNonEmptyArray(d.content)
     },
   },
+  {
+    // Tail fallback — semantic/ICP-text discovery (11 credits/query + 0.21/result).
+    id: 'discolike',
+    endpoint: '/discolike/discover',
+    method: 'GET',
+    priority: 19,
+    isApplicable: (input) => {
+      if (!isNonEmptyArray(input.similar_to_domains) && !isNonEmptyArray(input.keywords) && !isNonEmptyArray(input.industries)) return false
+      if (isNonEmptyArray(input.locations)) return false
+      if (input.linkedin_search_url) return false
+      if (isNonEmptyArray(input.technologies)) return false
+      if (isNonEmptyArray(input.funding_stages)) return false
+      if (input.min_funding_amount !== undefined || input.max_funding_amount !== undefined) return false
+      if (input.min_funding_year !== undefined || input.max_funding_year !== undefined) return false
+      if (input.min_revenue !== undefined || input.max_revenue !== undefined) return false
+      if (input.min_founded_year !== undefined || input.max_founded_year !== undefined) return false
+      if (isNonEmptyArray(input.exclude_industries) || isNonEmptyArray(input.exclude_countries)) return false
+      if (typeof input.min_workforce_growth_pct === 'number' || input.is_hiring === true) return false
+      return true
+    },
+    mapParams: (input) => {
+      const icpParts = [
+        ...((input.keywords as string[] | undefined) ?? []),
+        ...((input.industries as string[] | undefined) ?? []),
+      ]
+      const limit = (input.limit as number | undefined) ?? 25
+      return {
+        queryParams: {
+          // Seed domains drive lookalike discovery; icp_text narrows semantically.
+          ...(isNonEmptyArray(input.similar_to_domains) ? { domain: (input.similar_to_domains as string[]).join(',') } : {}),
+          ...(icpParts.length > 0 ? { icp_text: icpParts.join(' ') } : {}),
+          ...(isNonEmptyArray(input.countries) ? { country: (input.countries as string[]).join(',') } : {}),
+          ...(input.min_employees !== undefined || input.max_employees !== undefined
+            ? { employee_range: `${(input.min_employees as number) ?? 1},${(input.max_employees as number) ?? 1000000}` }
+            : {}),
+          ...(isNonEmptyArray(input.exclude_domains) ? { exclude_domain: (input.exclude_domains as string[]).join(',') } : {}),
+          max_records: String(Math.min(Math.max(limit, 5), 1000)),
+        },
+      }
+    },
+    hasResult: (data) => Array.isArray(data) && data.length > 0,
+  },
 ]
 
 // ---------------------------------------------------------------------------
@@ -2074,6 +2116,19 @@ const enrichCompanyProviders: ProviderEntry[] = [
     mapParams: (input) => ({ body: { company_url: input.linkedin_url } }),
     hasResult: (data) => hasAnyKey(data, ['name', 'domain', 'website', 'company']),
   },
+  {
+    // Last-resort fallback (12 credits flat): SSL-derived firmographics.
+    id: 'discolike',
+    endpoint: '/discolike/bizdata',
+    method: 'GET',
+    priority: 15,
+    isApplicable: (input) => !!input.domain,
+    mapParams: (input) => ({ queryParams: { domain: input.domain as string } }),
+    hasResult: (data) => {
+      const d = data as Record<string, unknown>
+      return typeof d?.name === 'string' && d.name.length > 0
+    },
+  },
 ]
 
 // ---------------------------------------------------------------------------

package/src/tools/search-companies.ts

@@ -5,11 +5,12 @@ import { getProvidersForCapability } from '../utils/provider-resolver.js'
 export const searchCompaniesName = 'search_companies'
 
 export const searchCompaniesDescription =
-  'Search B2B companies by industry, size, geography, founding year, tech stack, funding, revenue, exclusion lists, and hiring signals. Routing is automatic: strict firmographic filters (revenue, employee bands, exclusion lists) get high-precision providers first; tech-stack and funding-stage filters route to specialized providers; loose keyword/geo searches fall back to broad providers; a LinkedIn Sales Navigator search URL enables URL-based discovery as a final fallback. For buying-intent topic discovery (find companies associated with intent keywords like "sales automation" or "lead generation"), pass `keywords` with `use_providers: ["theirstack"]` — this routes to TheirStack\'s intent-keyword index instead of the default full-text match. For "fast-growing" companies there is no exact workforce-growth % filter anywhere — pass min_workforce_growth_pct (and/or is_hiring / a recent-funding filter) and ColdIQ routes to active-hiring and recently-funded providers, the practical proxies for growth. ColdIQ automatically picks the best provider — pass use_providers only if you need a specific tool. Default limit: 25. ' +
+  'Search B2B companies by industry, size, geography, founding year, tech stack, funding, revenue, exclusion lists, and hiring signals. To build a lookalike TAM from example accounts, pass `similar_to_domains` (seed company domains) — the request routes to DiscoLike\'s lookalike discovery over 70M companies, optionally narrowed by keywords/geo/size. Routing is otherwise automatic: strict firmographic filters (revenue, employee bands, exclusion lists) get high-precision providers first; tech-stack and funding-stage filters route to specialized providers; loose keyword/geo searches fall back to broad providers; a LinkedIn Sales Navigator search URL enables URL-based discovery as a final fallback. For buying-intent topic discovery (find companies associated with intent keywords like "sales automation" or "lead generation"), pass `keywords` with `use_providers: ["theirstack"]` — this routes to TheirStack\'s intent-keyword index instead of the default full-text match. For "fast-growing" companies there is no exact workforce-growth % filter anywhere — pass min_workforce_growth_pct (and/or is_hiring / a recent-funding filter) and ColdIQ routes to active-hiring and recently-funded providers, the practical proxies for growth. ColdIQ automatically picks the best provider — pass use_providers only if you need a specific tool. Default limit: 25. ' +
   'Response is compact by default (name, domain, website, linkedin_url, employees, revenue, industry, country, city, founded_year, categories) — everything needed to act on a company or feed it into find_people. Set fields="verbose" only when you specifically need the full firmographic record (funding history, technologies, keywords, NAICS codes, all socials, descriptions).'
 
 export const searchCompaniesSchema = {
   keywords: z.array(z.string()).optional().describe('Free-text topics, business models, or themes — e.g. ["SaaS", "fintech", "cybersecurity"]. Best for most discovery: matched broadly across company name, description, and tags. Prefer this over `industries` for terms like "SaaS" that are business models rather than formal industry categories.'),
+  similar_to_domains: z.array(z.string()).max(10).optional().describe('Seed company domains to find lookalikes of (up to 10) — e.g. ["stripe.com", "lemlist.com"]. Routes to DiscoLike\'s lookalike discovery over 70M companies; the best way to build a net-new TAM from example accounts. Optionally narrow with keywords / industries / countries / employee range. Not compatible with tech-stack, funding, revenue, founded-year, or hiring/growth filters.'),
   countries: z.array(z.string()).optional().describe('2-letter ISO country codes (e.g. ["FR", "US"])'),
   locations: z.array(z.string()).optional().describe('City/region filters as free-text strings (e.g. ["Paris, France", "San Francisco, California"]). Narrows results beyond country-level.'),
   industries: z.array(z.string()).optional().describe('Formal industry-taxonomy categories — e.g. ["Financial Services", "Hospitals and Health Care"]. Use only for strict industry classification; for business models or themes like "SaaS" or "fintech", use `keywords` instead. Both fields are searched together when set.'),
@@ -36,6 +37,52 @@ export const searchCompaniesSchema = {
   use_providers: z.array(z.string()).optional().describe(`Optional ordered list of providers to use. Leave empty to let ColdIQ automatically pick the best tool for your inputs — recommended for most use cases. Available providers: ${getProvidersForCapability('search_companies').join(', ')}. Provider names are matched fuzzily, so minor typos are tolerated.`),
 }
 
+// A call must carry at least one filter that actually NARROWS the result set,
+// otherwise it forwards an unbounded query upstream and bills for arbitrary
+// companies. This is an explicit allowlist of narrowing keys, not a denylist of
+// response-shaping ones, on purpose: a future response-shaping field (e.g. a
+// `sort` or `page` knob) added to the schema must never silently count as a
+// filter and reopen the billing hole. Exclusion fields (`exclude_*`) are
+// deliberately absent — excluding a domain narrows nothing on its own. Kept in
+// sync with the server-side guard in src/router/verb-handler.ts.
+const NARROWING_FILTER_KEYS = [
+  'keywords', 'countries', 'locations', 'industries', 'technologies',
+  'min_employees', 'max_employees', 'min_founded_year', 'max_founded_year',
+  'funding_stages', 'min_funding_amount', 'max_funding_amount',
+  'min_funding_year', 'max_funding_year', 'min_revenue', 'max_revenue',
+  'is_hiring', 'min_workforce_growth_pct', 'linkedin_search_url',
+] as const
+
+// A value narrows only when it actually constrains: a non-blank string, an array
+// with at least one non-blank element, a non-zero finite number (a `min_*` of 0
+// is a no-op bound), or boolean `true` (is_hiring is ignored upstream unless true).
+function isNarrowingValue(value: unknown): boolean {
+  if (value === undefined || value === null) return false
+  if (typeof value === 'string') return value.trim().length > 0
+  if (typeof value === 'number') return Number.isFinite(value) && value !== 0
+  if (typeof value === 'boolean') return value === true
+  if (Array.isArray(value)) return value.some((el) => (typeof el === 'string' ? el.trim().length > 0 : el != null))
+  return true
+}
+
+function hasDiscriminatingFilter(input: Record<string, unknown>): boolean {
+  return NARROWING_FILTER_KEYS.some((key) => isNarrowingValue(input[key]))
+}
+
 export async function searchCompaniesHandler(input: Record<string, unknown>) {
+  if (!hasDiscriminatingFilter(input)) {
+    return {
+      content: [
+        {
+          type: 'text' as const,
+          text: JSON.stringify({
+            error:
+              'search_companies needs at least one filter (keywords, countries, industries, employee range, technologies, funding, …). An unfiltered search would return arbitrary companies and still consume credits.',
+          }),
+        },
+      ],
+      isError: true,
+    }
+  }
   return callVerb('/companies/search', input)
 }

package/src/version.ts

@@ -0,0 +1,19 @@
+import { createRequire } from 'node:module'
+
+/**
+ * The MCP server reports its own npm version to the client at init. package.json
+ * sits outside tsconfig rootDir, so it can't be imported — read it at runtime.
+ * The built entry (dist/index.js) sits exactly one directory below the package
+ * root, so '../package.json' resolves in both `tsx src/…` dev and the published
+ * dist layout. Falls back to '0.0.0' rather than throwing, so a packaging change
+ * that moves the file can never crash server startup over a cosmetic version string.
+ */
+export function readPackageVersion(fromUrl: string): string {
+  try {
+    const require = createRequire(fromUrl)
+    const { version } = require('../package.json') as { version?: string }
+    return typeof version === 'string' && version.length > 0 ? version : '0.0.0'
+  } catch {
+    return '0.0.0'
+  }
+}

package/tests/registry-search-companies.test.ts

@@ -391,8 +391,9 @@ describe('search_companies priority ordering', () => {
     }
   })
 
-  it('ai-ark-companies is last (priority 18)', () => {
+  it('discolike is last (priority 19), after ai-ark-companies (18)', () => {
     const ps = providers()
-    expect(ps[ps.length - 1].id).toBe('ai-ark-companies')
+    expect(ps[ps.length - 1].id).toBe('discolike')
+    expect(ps[ps.length - 2].id).toBe('ai-ark-companies')
   })
 })

package/tests/registry.test.ts

@@ -459,7 +459,7 @@ describe('registry', () => {
       expect(ld.isApplicable!({ linkedin_search_url: 'https://...' })).toBe(true)
     })
 
-    it('search_companies has 17 providers in priority order', () => {
+    it('search_companies has 18 providers in priority order', () => {
       const providers = getProviders('search_companies')
       expect(providers.map((p) => p.id)).toEqual([
         'companyenrich',
@@ -479,6 +479,7 @@ describe('registry', () => {
         'linkupapi-hiring',
         'prospeo-search-company',
         'ai-ark-companies',
+        'discolike',
       ])
     })
 
@@ -833,12 +834,12 @@ describe('registry', () => {
   })
 
   describe('enrich_company', () => {
-    it('providers are ordered companyenrich → pdl → apollo → limadata → prospeo → companyenrich_props → blitzapi → wiza → findymail → icypeas → builtwith → openmart → linkupapi-by-domain → linkupapi-by-url', () => {
+    it('providers are ordered companyenrich → pdl → apollo → limadata → prospeo → companyenrich_props → blitzapi → wiza → findymail → icypeas → builtwith → openmart → linkupapi-by-domain → linkupapi-by-url → discolike', () => {
       const ids = getProviders('enrich_company').map((p) => p.id)
       expect(ids).toEqual([
         'companyenrich', 'pdl', 'apollo', 'limadata', 'prospeo',
         'companyenrich_props', 'blitzapi', 'wiza', 'findymail', 'icypeas',
-        'builtwith', 'openmart', 'linkupapi-by-domain', 'linkupapi-by-url',
+        'builtwith', 'openmart', 'linkupapi-by-domain', 'linkupapi-by-url', 'discolike',
       ])
     })
 

package/tests/tools/search-companies.test.ts

@@ -0,0 +1,94 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
+import { initClient } from '../../src/client.js'
+import { searchCompaniesHandler } from '../../src/tools/search-companies.js'
+
+describe('search_companies handler', () => {
+  const originalFetch = globalThis.fetch
+  let fetchSpy: ReturnType<typeof vi.fn>
+
+  beforeEach(() => {
+    initClient('http://test-api.local', 'test-key')
+    // Default: a spy that records calls but must NOT be invoked by rejection paths.
+    // Forwarding tests override globalThis.fetch with a real Response mock.
+    fetchSpy = vi.fn()
+    globalThis.fetch = fetchSpy as typeof fetch
+  })
+
+  afterEach(() => {
+    globalThis.fetch = originalFetch
+  })
+
+  const okFetch = () =>
+    vi.fn(async () => new Response(JSON.stringify({ companies: [], total: 0 }), { status: 200 })) as typeof fetch
+
+  it('rejects a call with no discriminating filter without hitting the API', async () => {
+    const result = await searchCompaniesHandler({})
+
+    expect(result.isError).toBe(true)
+    expect(JSON.parse(result.content[0].text).error).toMatch(/at least one filter/)
+    expect(fetchSpy).not.toHaveBeenCalled()
+  })
+
+  it('rejects when only response-shaping fields are set', async () => {
+    const result = await searchCompaniesHandler({ limit: 200, fields: 'compact', use_providers: ['apollo'] })
+
+    expect(result.isError).toBe(true)
+    expect(fetchSpy).not.toHaveBeenCalled()
+  })
+
+  it('rejects when filters are present but empty', async () => {
+    const result = await searchCompaniesHandler({ keywords: [], countries: [], linkedin_search_url: '  ' })
+
+    expect(result.isError).toBe(true)
+    expect(fetchSpy).not.toHaveBeenCalled()
+  })
+
+  it('rejects arrays that contain only blank strings', async () => {
+    const result = await searchCompaniesHandler({ keywords: ['', '  '] })
+
+    expect(result.isError).toBe(true)
+    expect(fetchSpy).not.toHaveBeenCalled()
+  })
+
+  it('rejects is_hiring:false (upstream ignores it unless true)', async () => {
+    const result = await searchCompaniesHandler({ is_hiring: false, limit: 200 })
+
+    expect(result.isError).toBe(true)
+    expect(fetchSpy).not.toHaveBeenCalled()
+  })
+
+  it('rejects no-op zero min-bounds', async () => {
+    const result = await searchCompaniesHandler({ min_employees: 0, min_funding_amount: 0 })
+
+    expect(result.isError).toBe(true)
+    expect(fetchSpy).not.toHaveBeenCalled()
+  })
+
+  it('rejects an exclusion-only search (excludes narrow nothing on their own)', async () => {
+    const result = await searchCompaniesHandler({ exclude_domains: ['coldiq.com'] })
+
+    expect(result.isError).toBe(true)
+    expect(fetchSpy).not.toHaveBeenCalled()
+  })
+
+  it('forwards to the verb when at least one real filter is set', async () => {
+    globalThis.fetch = vi.fn(async () => {
+      return new Response(JSON.stringify({ companies: [], total: 0, _meta: { provider: 'apollo' } }), { status: 200 })
+    }) as typeof fetch
+
+    const result = await searchCompaniesHandler({ keywords: ['sales automation'], limit: 5 })
+
+    expect(result.isError).toBeFalsy()
+    expect(globalThis.fetch).toHaveBeenCalledOnce()
+  })
+
+  it('treats boolean true and non-zero numeric filters as discriminating', async () => {
+    globalThis.fetch = okFetch()
+
+    const hiring = await searchCompaniesHandler({ is_hiring: true })
+    const sized = await searchCompaniesHandler({ min_employees: 11 })
+
+    expect(hiring.isError).toBeFalsy()
+    expect(sized.isError).toBeFalsy()
+  })
+})

package/tests/version.test.ts

@@ -0,0 +1,16 @@
+import { describe, it, expect } from 'vitest'
+import { readPackageVersion } from '../src/version.js'
+
+describe('readPackageVersion', () => {
+  it('reports the real package.json version relative to the caller URL', () => {
+    // This test file sits at mcp/tests/, so '../package.json' from here is mcp/package.json.
+    const version = readPackageVersion(import.meta.url)
+    expect(version).toMatch(/^\d+\.\d+\.\d+/)
+    expect(version).not.toBe('0.1.0') // the old hardcoded placeholder
+  })
+
+  it('falls back to 0.0.0 instead of throwing when package.json cannot be resolved', () => {
+    const version = readPackageVersion('file:///nonexistent/deeply/nested/module.js')
+    expect(version).toBe('0.0.0')
+  })
+})