@coldleads/mcp-server 1.0.0 → 1.0.1

package/CHANGELOG.md

@@ -0,0 +1,11 @@
+# Changelog
+
+## 1.0.1 (2026-10-13)
+
+- `serverInfo.version` and the `User-Agent` header now report the real package version from one constant; a test keeps it equal to `package.json`.
+- Without `COLDLEADS_API_KEY`, the `missing_api_key` error and the server instructions point to the no-key demo server `https://coldleads.app/api/mcp/demo` (sample data, never sends e-mail).
+- Published from GitHub Actions with npm trusted publishing (signed provenance, no stored npm token).
+
+## 1.0.0 (2026-10-13)
+
+- First npm release: stdio proxy for the hosted Cold Leads MCP tools (contacts, imports, verification, templates, campaign drafts and launch with approval, conversations, lead context, next actions, follow-ups, activity log, website capture) plus keyless agent onboarding.

package/dist/api.d.ts

@@ -16,7 +16,7 @@ export declare const DEFAULT_BASE = "https://coldleads.app";
 export declare const VERIFY_SERVER_BUDGET_MS = 4000;
 export declare const VERIFY_CLIENT_TIMEOUT_MS = 4900;
 export declare const DEFAULT_TIMEOUT_MS = 15000;
-export declare const USER_AGENT = "coldleads-mcp-server/1.0.0";
+export declare const USER_AGENT = "coldleads-mcp-server/1.0.1";
 export declare class ColdLeadsClient {
     readonly baseUrl: string;
     private readonly fetchImpl;

package/dist/api.js

@@ -1,8 +1,11 @@
+// Thin client for the Cold Leads REST API v1 (https://coldleads.app/api/v1). No business logic here: limits,
+// credits, verification and search all run on the server.
+import { VERSION } from "./version.js";
 export const DEFAULT_BASE = "https://coldleads.app";
 export const VERIFY_SERVER_BUDGET_MS = 4000;
 export const VERIFY_CLIENT_TIMEOUT_MS = 4900;
 export const DEFAULT_TIMEOUT_MS = 15_000;
-export const USER_AGENT = "coldleads-mcp-server/1.0.0";
+export const USER_AGENT = `coldleads-mcp-server/${VERSION}`;
 export class ColdLeadsClient {
     baseUrl;
     fetchImpl;
@@ -80,7 +83,7 @@ export class ColdLeadsClient {
     }
     async callHostedTool(name, args) {
         if (!this.hasKey())
-            return { content: [{ type: "text", text: JSON.stringify({ status: "error", error: "missing_api_key", message: "Set COLDLEADS_API_KEY to a secret key (sk_…) to use workspace tools." }) }], isError: true };
+            return { content: [{ type: "text", text: JSON.stringify({ status: "error", error: "missing_api_key", message: "Set COLDLEADS_API_KEY to a secret key (sk_…) to use workspace tools. To try the tools without a key first, connect an MCP client to the no-key demo server https://coldleads.app/api/mcp/demo (sample data, never sends e-mail)." }) }], isError: true };
         if (!this.hostedNames && !(await this.hostedTools()).length)
             return { content: [{ type: "text", text: JSON.stringify({ status: "error", error: "unknown_tool", message: `Unknown Cold Leads tool: ${name}` }) }], isError: true };
         if (!this.hostedNames?.has(name))

package/dist/server.js

@@ -1,12 +1,13 @@
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 import { LEADS_DEFAULT, LEADS_MAX, TOOLS } from "./tools.js";
-export const SERVER_INFO = { name: "coldleads", title: "Cold Leads", version: "1.0.0" };
-const INSTRUCTIONS = "Cold Leads tools: search and verify leads; import and manage workspace contacts; read conversations; send one message only after explicit user confirmation; manage templates and campaign drafts; launch campaigns only after human review and confirmation; check non-secret workspace settings; and set up website lead forms. Only authenticated workspace data is accessible. Never e-mail opted-out, bounced or do-not-contact addresses. Verification is not consent; the user needs a lawful basis to contact each person. Website forms create inquiry contacts and do not establish cold-outreach consent. Without an API key, provision_account_and_get_payment_link creates a payment link for the human owner to approve; check_provisioning_status then returns the key once.";
+import { VERSION } from "./version.js";
+export const SERVER_INFO = { name: "coldleads", title: "Cold Leads", version: VERSION };
+const INSTRUCTIONS = "Cold Leads tools: search and verify leads; import and manage workspace contacts; read conversations; send one message only after explicit user confirmation; manage templates and campaign drafts; launch campaigns only after human review and confirmation; check non-secret workspace settings; and set up website lead forms. Only authenticated workspace data is accessible. Never e-mail opted-out, bounced or do-not-contact addresses. Verification is not consent; the user needs a lawful basis to contact each person. Website forms create inquiry contacts and do not establish cold-outreach consent. Without an API key, provision_account_and_get_payment_link creates a payment link for the human owner to approve; check_provisioning_status then returns the key once. To try the tools on sample data without a key, the user can connect the demo server https://coldleads.app/api/mcp/demo (never sends e-mail).";
 const text = (obj, isError = false) => ({ content: [{ type: "text", text: JSON.stringify(obj) }], ...(isError ? { isError: true } : {}) });
 const toolError = (error, message, extra = {}) => text({ status: "error", error, message, ...extra }, true);
 const MESSAGES = {
-    missing_api_key: "COLDLEADS_API_KEY is not set. Create a secret key (sk_…) in Cold Leads → Settings → API keys (Business plan) and add it to the MCP server environment.",
+    missing_api_key: "COLDLEADS_API_KEY is not set. Create a secret key (sk_…) in Cold Leads → Settings → API keys (Business plan) and add it to the MCP server environment. To try the tools without a key first, connect an MCP client to the no-key demo server https://coldleads.app/api/mcp/demo (sample data, never sends e-mail).",
     bad_api_key: "The Cold Leads API key was rejected. Check COLDLEADS_API_KEY (a secret key starting with sk_).",
     publishable_key_not_allowed: "A publishable key (lk_…) cannot call the API; use a secret key (sk_…).",
     api_not_in_plan: "This Cold Leads plan does not include the API (Business plan required).",

package/dist/version.d.ts

@@ -0,0 +1 @@
+export declare const VERSION = "1.0.1";

package/dist/version.js

@@ -0,0 +1,2 @@
+// Version reported to MCP clients (serverInfo) and in the User-Agent; test/version.test.ts keeps it equal to package.json.
+export const VERSION = "1.0.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coldleads/mcp-server",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Model Context Protocol server for Cold Leads (coldleads.app), the B2B outreach CRM: contacts, imports, e-mail verification, templates, campaign drafts, conversations, reply queue and follow-ups in your own workspace; sending needs explicit approval. Includes keyless agent onboarding.",
   "mcpName": "io.github.anttka4cz/mcp-server-coldleads",
   "type": "module",
@@ -11,7 +11,8 @@
   "files": [
     "dist",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "CHANGELOG.md"
   ],
   "engines": {
     "node": ">=20"