@confluentinc/mcp-confluent 1.3.0 → 1.5.0

package/README.md

@@ -6,9 +6,15 @@
 An open-source [MCP server](https://modelcontextprotocol.io/) that enables AI assistants to interact with Confluent Cloud, Confluent Platform, and standalone Apache Kafka deployments through natural language.
 It provides 50+ tools across Kafka, Flink SQL, Schema Registry, Connectors, Tableflow, and more -- usable from any MCP-compatible client including Claude Desktop, Claude Code, Cursor, VS Code, Goose, and Gemini CLI.
 
+> [!TIP]
+> **Already a Confluent Cloud customer?**
+> Confluent offers a [fully managed MCP server](https://docs.confluent.io/cloud/current/ai/ai-tools/managed-mcp-server.html) with no local server to run and no dependencies to install.
+> It provides access to your Confluent Cloud resources with AI-powered connector diagnostics, governed by your existing RBAC permissions.
+> Use this open-source server if you need Confluent Platform / self-managed Kafka support, or want to customize and extend the toolset.
+
 ## Quick Start
 
-> **Prerequisites:** [Node.js 22+](https://nodejs.org/).
+> **Prerequisites:** [Node.js 22.19.0+](https://nodejs.org/).
 > If you want to interact with [Confluent Cloud](https://confluent.cloud/), you need to create an account first.
 
 1. Generate a quick `config.yaml` file in your project root:
@@ -32,6 +38,7 @@ See [Getting Started](#getting-started) for full setup instructions and [Configu
   - [Always Available](#always-available-tools)
   - [Confluent Cloud](#available-tools-for-confluent-cloud)
   - [Local deployments](#available-tools-for-local-deployments)
+- [Using with Confluent Platform](#using-with-confluent-platform)
 - [Getting Started](#getting-started)
 - [Configuration](#configuration)
 - [OAuth Authentication for Confluent Cloud](#oauth-authentication-for-confluent-cloud)
@@ -55,10 +62,10 @@ npx -y @confluentinc/mcp-confluent --list-tools
 
 These tools need no service blocks or authentication — they're enabled even on a bare config, regardless of which deployment the rest of your config targets.
 
-| Category          | Tools                                         | Description                                               |
-| ----------------- | --------------------------------------------- | --------------------------------------------------------- |
-| **Documentation** | `search-product-docs`, `get-product-doc-page` | Search Confluent product docs and fetch full page content |
-| **Diagnostics**   | `explain-disabled-tools`                      | Explain why specific tools are absent from `tools/list`   |
+| Category          | Tools                                                                                                    | Description                                                                                                                                                                                     |
+| ----------------- | -------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **Documentation** | `search-product-docs`, `get-product-doc-page`                                                            | Search Confluent product docs and fetch full page content                                                                                                                                       |
+| **Diagnostics**   | `explain-disabled-tools`, `list-configured-connections`, `config-help`, `describe-configured-connection` | Explain why tools are absent, list configured connections and the tools enabled on each, suggest the YAML to enable a specific tool, and describe one connection's config and tool availability |
 
 ### Available Tools for Confluent Cloud
 
@@ -66,24 +73,26 @@ These tools require endpoints and authentication against specific Confluent Clou
 Refer to [`config.example.yaml`](config.example.yaml) for the full set of configuration variables.
 Categories marked with ¹ also work with [OAuth authentication](#oauth-authentication-for-confluent-cloud) — sign in via your browser instead of provisioning API keys.
 
-| Category                                     | Tools                                                                                                                                                                                               | Description                                                       |
-| -------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------- |
-| **Kafka** ¹                                  | `list-topics`, `create-topics`, `delete-topics`, `produce-message`, `consume-messages`, `alter-topic-config`, `get-topic-config`                                                                    | Manage topics, produce/consume messages, configure topic settings |
-| **Flink SQL**                                | `create-flink-statement`, `list-flink-statements`, `read-flink-statement`, `delete-flink-statements`, `get-flink-statement-exceptions`                                                              | Create and manage Flink SQL statements                            |
-| **Flink Catalog**                            | `list-flink-catalogs`, `list-flink-databases`, `list-flink-tables`, `describe-flink-table`, `get-flink-table-info`                                                                                  | Explore Flink catalogs, databases, and table schemas              |
-| **Flink Diagnostics**                        | `check-flink-statement-health`, `detect-flink-statement-issues`, `get-flink-statement-profile`                                                                                                      | Health checks, issue detection, and query profiling               |
-| **Connectors**                               | `list-connectors`, `read-connector`, `create-connector`, `delete-connector`                                                                                                                         | Manage Kafka Connect connectors                                   |
-| **Schema Registry** ¹                        | `list-schemas`, `delete-schema`                                                                                                                                                                     | List, inspect, and delete data schemas                            |
-| **Catalog & Tags**                           | `search-topics-by-tag`, `search-topics-by-name`, `create-topic-tags`, `delete-tag`, `remove-tag-from-entity`, `add-tags-to-topic`, `list-tags`                                                      | Organize and search topics using tags                             |
-| **Organizations, Environments & Clusters** ¹ | `list-organizations`, `list-environments`, `read-environment`, `list-clusters`                                                                                                                      | Discover Confluent Cloud resources                                |
-| **Tableflow**                                | `create-tableflow-topic`, `list-tableflow-topics`, `read-tableflow-topic`, `update-tableflow-topic`, `delete-tableflow-topic`, `list-tableflow-regions`                                             | Manage Tableflow-enabled topics                                   |
-| **Tableflow Catalog**                        | `create-tableflow-catalog-integration`, `list-tableflow-catalog-integrations`, `read-tableflow-catalog-integration`, `update-tableflow-catalog-integration`, `delete-tableflow-catalog-integration` | Manage Tableflow catalog integrations (e.g., AWS Glue)            |
-| **Metrics**                                  | `list-available-metrics`, `query-metrics`                                                                                                                                                           | Discover and query Confluent Cloud operational metrics            |
-| **Billing** ¹                                | `list-billing-costs`                                                                                                                                                                                | Query billing and cost data                                       |
+| Category                                     | Tools                                                                                                                                                                                                                                                                                                                                          | Description                                                                                |
+| -------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ |
+| **Kafka** ¹                                  | `list-topics`, `create-topics`, `delete-topics`, `produce-message`, `consume-messages`, `list-consumer-groups`, `describe-consumer-group`, `get-consumer-group-lag`, `alter-topic-config`, `get-topic-config`                                                                                                                                  | Manage topics, produce/consume messages, inspect consumer groups, configure topic settings |
+| **Flink SQL** ¹                              | `create-flink-statement`, `list-flink-statements`, `get-flink-statement-results`, `delete-flink-statements`, `get-flink-statement-exceptions`, `list-compute-pools`                                                                                                                                                                            | Create and manage Flink SQL statements; discover Flink compute pools                       |
+| **Flink Catalog** ¹                          | `list-flink-catalogs`, `list-flink-databases`, `list-flink-tables`, `describe-flink-table`, `get-flink-table-info`                                                                                                                                                                                                                             | Explore Flink catalogs, databases, and table schemas                                       |
+| **Flink Diagnostics** ¹                      | `check-flink-statement-health`, `detect-flink-statement-issues`, `get-flink-statement-profile`                                                                                                                                                                                                                                                 | Health checks, issue detection, and query profiling                                        |
+| **Connectors** ¹                             | `list-connectors`, `get-connector-config`, `get-connector-offsets`, `get-connector-status`, `get-connector-tasks`, `get-connector-error-summary`, `get-connector-error-recommendations`, `get-connector-logs`, `create-connector` ², `delete-connector`, `pause-connector`, `resume-connector`, `restart-connector`, `update-connector-config` | Inspect and manage Kafka Connect connectors                                                |
+| **Schema Registry** ¹                        | `list-schemas`, `create-schema`, `delete-schema`                                                                                                                                                                                                                                                                                               | List, inspect, create, and delete data schemas                                             |
+| **Catalog & Tags** ¹                         | `search-topics-by-tag`, `search-topics-by-name`, `create-topic-tags`, `delete-tag`, `remove-tag-from-entity`, `add-tags-to-topic`, `list-tags`                                                                                                                                                                                                 | Organize and search topics using tags                                                      |
+| **Organizations, Environments & Clusters** ¹ | `list-organizations`, `list-environments`, `read-environment`, `list-clusters`                                                                                                                                                                                                                                                                 | Discover Confluent Cloud resources                                                         |
+| **Tableflow** ¹                              | `create-tableflow-topic`, `list-tableflow-topics`, `read-tableflow-topic`, `update-tableflow-topic`, `delete-tableflow-topic`, `list-tableflow-regions`                                                                                                                                                                                        | Manage Tableflow-enabled topics                                                            |
+| **Tableflow Catalog** ¹                      | `create-tableflow-catalog-integration`, `list-tableflow-catalog-integrations`, `read-tableflow-catalog-integration`, `update-tableflow-catalog-integration`, `delete-tableflow-catalog-integration`                                                                                                                                            | Manage Tableflow catalog integrations (e.g., AWS Glue)                                     |
+| **Metrics** ¹                                | `list-available-metrics`, `query-metrics`                                                                                                                                                                                                                                                                                                      | Discover and query Confluent Cloud operational metrics                                     |
+| **Billing** ¹                                | `list-billing-costs`                                                                                                                                                                                                                                                                                                                           | Query billing and cost data                                                                |
 
 ¹ Also available under OAuth — see [OAuth Authentication for Confluent Cloud](#oauth-authentication-for-confluent-cloud) for setup and caveats.
 Categories not marked currently require a `direct` connection with static API keys; OAuth migration is in progress.
 
+² Individual tool not available under OAuth; requires a `direct` connection with static API keys.
+
 ### Available Tools for local deployments
 
 These tools only require Kafka or Schema Registry endpoints - no Confluent Cloud API key/secret is needed.
@@ -102,20 +111,67 @@ connections:
 
 Ready-to-use variants live in [`sample_configs/`](sample_configs/).
 
-| Category            | Tools                                                                                  | Description                             |
-| ------------------- | -------------------------------------------------------------------------------------- | --------------------------------------- |
-| **Kafka**           | `list-topics`, `create-topics`, `delete-topics`, `produce-message`, `consume-messages` | Manage topics, produce/consume messages |
-| **Schema Registry** | `list-schemas`, `delete-schema`                                                        | List, inspect, and delete data schemas  |
+| Category            | Tools                                                                                                                                                               | Description                                                      |
+| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------- |
+| **Kafka**           | `list-topics`, `create-topics`, `delete-topics`, `produce-message`, `consume-messages`, `list-consumer-groups`, `describe-consumer-group`, `get-consumer-group-lag` | Manage topics, produce/consume messages, inspect consumer groups |
+| **Schema Registry** | `list-schemas`, `create-schema`, `delete-schema`                                                                                                                    | List, inspect, create, and delete data schemas                   |
+
+## Using with Confluent Platform
+
+`mcp-confluent` runs against a self-managed Confluent Platform (CP) cluster the same way it runs against any local Kafka + Schema Registry deployment: point a `direct` connection at your brokers and Schema Registry.
+A CP connection exposes the same tools as any other local deployment — see [Available Tools for local deployments](#available-tools-for-local-deployments).
+The Confluent Cloud tools (Flink, Tableflow, Billing, Metrics, and the rest) require a Confluent Cloud account and stay disabled on CP.
+The only differences from a `localhost:9092` setup are authentication and TLS.
+
+### Sample YAML config
+
+[`sample_configs/confluent-platform.yaml`](sample_configs/confluent-platform.yaml) is a copy-pasteable starter.
+It assumes PLAIN over SASL_SSL for Kafka and HTTP Basic Auth for Schema Registry.
+Customize the broker and Schema Registry URLs, and inject credentials via the `${KAFKA_API_KEY}` / `${KAFKA_API_SECRET}` / `${SCHEMA_REGISTRY_API_KEY}` / `${SCHEMA_REGISTRY_API_SECRET}` environment variables.
+If your cluster uses SCRAM or another SASL mechanism, override `security.protocol` and `sasl.mechanisms` through the `kafka.extra_properties` map in that file.
+
+### TLS trust (internal CAs)
+
+CP clusters frequently sit behind an internal CA.
+If you see TLS handshake failures against the broker or Schema Registry, point Node at your CA bundle when starting the server:
+
+```bash
+NODE_EXTRA_CA_CERTS=/path/to/internal-ca.pem pnpm run start -- --config path/to/config.yaml
+```
+
+### End-to-end smoke test
+
+A docker-compose stack ([`docker-compose.cp-test.yml`](docker-compose.cp-test.yml)) brings up a local CP Kafka (KRaft, SASL_PLAINTEXT/PLAIN) plus an unauthenticated Schema Registry.
+The matching integration tests are tagged `@cp` and live next to their handlers as `*.cp.integration.test.ts`:
+
+```bash
+docker compose -f docker-compose.cp-test.yml up -d
+# Wait ~30s for Kafka + SR to become ready, then:
+CP_KAFKA_USERNAME=mcp CP_KAFKA_PASSWORD=mcp-secret \
+  pnpm run test:integration --tags-filter=@cp
+docker compose -f docker-compose.cp-test.yml down -v
+```
+
+The tests skip cleanly when those env vars are unset, so `pnpm run test:unit` and a default `pnpm run test:integration` against your real Confluent Cloud account are unaffected if you don't have the docker stack running.
 
 ## Getting Started
 
 ### Prerequisites
 
-- **Node.js 22 or later** -- we recommend using [NVM](https://github.com/nvm-sh/nvm) to manage versions:
+- **Node.js 22.19.0 or later** -- we recommend using [NVM](https://github.com/nvm-sh/nvm) to manage versions:
   ```bash
   nvm install 22
   nvm use 22
   ```
+- **[pnpm](https://pnpm.io/installation)** -- only needed to build from source (the `npx` quick start above does not require it).
+  On macOS the simplest install is Homebrew; `npm` works cross-platform:
+  ```bash
+  brew install pnpm        # macOS
+  # or, cross-platform:
+  npm install -g pnpm
+  ```
+  See pnpm's [installation guide](https://pnpm.io/installation) for other options.
+  The exact pnpm version is pinned in the `packageManager` field of `package.json`, and pnpm automatically runs that pinned version (via its built-in package-manager version management), so a recent pnpm install is all you need -- no separate Corepack setup required.
 - A local environment with Kafka or Schema Registry running, or a **Confluent Cloud** account with appropriate API keys or login credentials if [using OAuth to authenticate](#oauth-authentication-for-confluent-cloud).
 
 ### General Setup Steps
@@ -140,9 +196,9 @@ npx @confluentinc/mcp-confluent --init-config
 
 3. **Start the Server:** You can run the MCP server in one of two ways:
    - **From source:** Follow the instructions in the [Contributing Guide](CONTRIBUTING.md) to build and run the server from source.
-        This typically involves:
-     - Installing dependencies (`npm install`)
-     - Building the project (`npm run build` or `npm run dev`)
+     This typically involves:
+     - Installing dependencies (`pnpm install`)
+     - Building the project (`pnpm run build` or `pnpm run dev`)
    - **With npx:** You can start the server directly using npx, no build required:
 
      ```bash
@@ -165,8 +221,8 @@ The full configuration reference — YAML schema, every service block, env-var i
 
 > **Compatibility note.** This release ships full parity between YAML (`-c config.yaml`) and the legacy env-var path (`-e config.env`) for a single connection.
 > The env-var-only path will emit a startup warning in a near-future release and be removed a release or two later.
-> Multi-connection support (next release) will be YAML-only.
-> See [CONFIGURATION.md → Two paths, one configuration](CONFIGURATION.md#two-paths-one-configuration).
+> Defining multiple connections (or none) is YAML-only — the env-var path can express only a single connection.
+> See [CONFIGURATION.md → Two paths, one configuration](CONFIGURATION.md#two-paths-one-configuration) and [CONFIGURATION.md → Multiple connections (and zero connections)](CONFIGURATION.md#multiple-connections-and-zero-connections).
 
 ### Prerequisites & setup for Tableflow commands
 
@@ -298,54 +354,99 @@ npx -y @confluentinc/mcp-confluent --list-tools
 <summary>Show output</summary>
 
 ```text
-add-tags-to-topic: Assign existing tags to Kafka topics in Confluent Cloud.
-alter-topic-config: Alter topic configuration in Confluent Cloud.
-consume-messages: Consumes messages from one or more Kafka topics. Supports automatic deserialization of Schema Registry encoded messag...
-create-connector: Create a new connector. Returns the new connector information if successful.
-create-flink-statement: Make a request to create a statement.
-create-topic-tags: Create new tag definitions in Confluent Cloud.
-create-topics: Create one or more Kafka topics.
-delete-connector: Delete an existing connector. Returns success message if deletion was successful.
-delete-flink-statements: Make a request to delete a statement.
-delete-tag: Delete a tag definition from Confluent Cloud.
-delete-topics: Delete the topic with the given names.
-check-flink-statement-health: Perform an aggregate health check for a Flink SQL statement.
-describe-flink-table: Get full schema details for a Flink table via INFORMATION_SCHEMA.COLUMNS.
-detect-flink-statement-issues: Detect issues for a Flink SQL statement by analyzing status, exceptions, and metrics.
-get-flink-statement-profile: Get Query Profiler data with task graph, metrics, and automated issue detection.
-get-flink-table-info: Get table metadata via INFORMATION_SCHEMA.TABLES.
-list-flink-catalogs: List all catalogs in the Flink environment.
-list-flink-databases: List all databases (schemas) in a Flink catalog via INFORMATION_SCHEMA.SCHEMATA.
-list-flink-tables: List all tables in a Flink database.
-get-flink-statement-exceptions: Retrieve the 10 most recent exceptions for a Flink SQL statement.
-get-topic-config: Retrieve configuration details for a specific Kafka topic.
-list-clusters: Get all clusters in the Confluent Cloud environment
-list-connectors: Retrieve a list of "names" of the active connectors. You can then make a read request for a specific connector by name.
-list-environments: Get all environments in Confluent Cloud with pagination support
-list-flink-statements: Retrieve a sorted, filtered, paginated list of all statements.
-list-schemas: List all schemas in the Schema Registry.
-list-tags: Retrieve all tags with definitions from Confluent Cloud Schema Registry.
-list-topics: List all topics in the Kafka cluster.
-produce-message: Produce records to a Kafka topic. Supports Confluent Schema Registry serialization (AVRO, JSON, PROTOBUF) for both ke...
-read-connector: Get information about the connector.
-read-environment: Get details of a specific environment by ID
-read-flink-statement: Make a request to read a statement and its results
-remove-tag-from-entity: Remove tag from an entity in Confluent Cloud.
-search-topics-by-name: List all topics in the Kafka cluster matching the specified name.
-search-topics-by-tag: List all topics in the Kafka cluster with the specified tag.
-create-tableflow-topic: Make a request to create a tableflow topic.
-list-tableflow-regions: Retrieve a sorted, filtered, paginated list of all tableflow regions.
-list-tableflow-topics: Retrieve a sorted, filtered, paginated list of all tableflow topics.
-read-tableflow-topic: Make a request to read a tableflow topic.
-update-tableflow-topic: Make a request to update a tableflow topic.
-delete-tableflow-topic: Make a request to delete a tableflow topic.
-create-tableflow-catalog-integration: Make a request to create a catalog integration.
-list-tableflow-catalog-integrations: Retrieve a sorted, filtered, paginated list of all catalog integrations.
-read-tableflow-catalog-integration: Make a request to read a catalog integration.
-update-tableflow-catalog-integration: Make a request to update a catalog integration.
-delete-tableflow-catalog-integration: Make a request to delete a tableflow catalog integration.
-list-organizations: List Confluent Cloud organizations the current credentials can see. Paginated; if the response includes a nextPageToken, pass it back as pageToken to fetch additional pages.
-explain-disabled-tools: Call when the user asks why a tool is missing or unavailable (e.g., "why can't I list Kafka topics?", "where are the Flink tools?"). Returns disabled tools grouped by the config gap each one is waiting on, so you can tell the user the exact YAML block or field to add. Prefer this over guessing about credentials, network, or auth.
+billing:
+  list-billing-costs: Retrieve billing cost data for a Confluent Cloud organization within a specified date range with pagination support
+
+catalog:
+  add-tags-to-topic: Assign existing tags to Kafka topics in Confluent Cloud.
+  create-topic-tags: Create new tag definitions in Confluent Cloud.
+  delete-tag: Delete a tag definition from Confluent Cloud.
+  list-tags: Retrieve all tags with definitions from Confluent Cloud Schema Registry.
+  remove-tag-from-entity: Remove tag from an entity in Confluent Cloud.
+  search-topics-by-name: List all topics in the Kafka cluster matching the specified name.
+  search-topics-by-tag: List all topics in the Kafka cluster with the specified tag.
+
+confluent-cloud:
+  list-clusters: Get all clusters in the Confluent Cloud environment
+  list-environments: Get all environments in Confluent Cloud with pagination support
+  list-organizations: List Confluent Cloud organizations the current credentials can see. Paginated; if the response includes a nextPageTok...
+  read-environment: Get details of a specific environment by ID
+
+connect:
+  create-connector: Create a new connector. Returns the new connector information if successful.
+  delete-connector: Delete an existing connector. Returns success message if deletion was successful.
+  get-connector-config: Retrieve the full configuration map for a connector. Returns the flat config object the connector was created/updated...
+  get-connector-error-recommendations: Get suggested remediation steps for a connector that has failed or is in an error state. Returns a one-liner when no recommendations are available.
+  get-connector-error-summary: Summarize a connector's current errors. Projects Confluent Cloud's /status diagnostics into a compact, agent-friendly form. Returns a one-liner when the connector is healthy.
+  get-connector-logs: Retrieve recent log entries for a Confluent Cloud connector from the Cloud logging API. Defaults to the last hour of ERROR-level entries. Paginated via nextPageToken.
+  get-connector-offsets: Retrieve current offsets for a connector's tasks. Useful for detecting lag, stalled tasks, or assisting recovery.
+  get-connector-status: Get the current state of a connector and its tasks (RUNNING, FAILED, PAUSED, UNASSIGNED) including failure traces if ...
+  get-connector-tasks: List the tasks of a connector along with their configurations.
+  list-connectors: Retrieve a list of "names" of the active connectors. You can then make a read request for a specific connector by name.
+  pause-connector: Pause a running connector and its tasks. Idempotent.
+  restart-connector: Restart a connector and its tasks. Asynchronous; the connector will not transition state synchronously.
+  resume-connector: Resume a paused connector and its tasks. Idempotent.
+  update-connector-config: Update the configuration of an existing connector. Full-replace: omitted keys are removed and the connector is reconf...
+
+docs:
+  get-product-doc-page: Fetch the full markdown content of a Confluent product documentation page. Accepts URLs under https://docs.confluent....
+  search-product-docs: Search Confluent product documentation (docs.confluent.io, developer.confluent.io, support.confluent.io) by keyword.
+
+flink:
+  check-flink-statement-health: Perform an aggregate health check for a Flink SQL statement. Returns status (healthy/warning/critical), current phase...
+  create-flink-statement: Make a request to create a statement.
+  delete-flink-statements: Make a request to delete a statement.
+  describe-flink-table: Get full schema details for a Flink table via INFORMATION_SCHEMA.COLUMNS. Returns column names, data types (including...
+  detect-flink-statement-issues: Detect issues for a Flink SQL statement by analyzing status, exceptions, and performance metrics. Identifies problems...
+  get-flink-statement-exceptions: Retrieve the 10 most recent exceptions for a Flink SQL statement. Useful for diagnosing failed or failing statements.
+  get-flink-statement-profile: Get Query Profiler data for a Flink SQL statement. Returns the task graph with human-readable task/operator names, pe...
+  get-flink-statement-results: Fetch the result rows produced by a Flink SQL statement.
+  get-flink-table-info: Get table metadata via INFORMATION_SCHEMA.TABLES. Returns watermark configuration, distribution info, and table type.
+  list-compute-pools: Get the Flink compute pools in the Confluent Cloud environment. Paginated; if the response includes a nextPageToken, pas...
+  list-flink-catalogs: List all catalogs available in the Flink environment via INFORMATION_SCHEMA.CATALOGS.
+  list-flink-databases: List all databases (schemas) in a Flink catalog via INFORMATION_SCHEMA.SCHEMATA. Returns catalog and database names.
+  list-flink-statements: Retrieve a sorted, filtered, paginated list of all statements.
+  list-flink-tables: List all tables in a Flink database via INFORMATION_SCHEMA.TABLES. Returns table names and types.
+
+kafka:
+  alter-topic-config: Alter topic configuration in Confluent Cloud.
+  consume-messages: Consume messages from Kafka topics. Optionally restrict to a partition, start from an offset, timestamp, earliest, la...
+  create-topics: Create one or more Kafka topics with an optional partition count and replication factor.
+  delete-topics: Delete the topic with the given names.
+  describe-consumer-group: Describe a single consumer group on a Kafka cluster. Returns the group's state, type, protocol, partition assignor, c...
+  get-consumer-group-lag: Compute live offset lag for a single Kafka consumer group. Returns per-(topic, partition) {committedOffset, highWater...
+  get-partition-offsets: Return per-partition low/high watermarks and message counts for a Kafka topic. Use this to size a backfill, measure l...
+  get-topic-config: Retrieve configuration details for a specific Kafka topic.
+  list-consumer-groups: List consumer groups on a Kafka cluster — wraps the broker's listGroups admin call. Optional filters narrow the resul...
+  list-topics: List all topics in the Kafka cluster.
+  produce-message: Produce records to a Kafka topic. Supports Confluent Schema Registry serialization (AVRO, JSON, PROTOBUF) for both ke...
+
+mcp-server-diagnostics:
+  config-help: Call when the user wants to enable or unlock a specific tool (e.g. "how do I enable the tableflow tools?", "what config does cr...
+  explain-disabled-tools: Call when the user asks why a tool is missing or unavailable (e.g., "why can't I list Kafka topics?", "where are the ...
+  list-configured-connections: List every configured connection and the connection-routable tools you can invoke against each. The connection id (th...
+
+metrics:
+  list-available-metrics: List available Confluent Cloud metrics and their filter fields from the Telemetry API. Use this tool BEFORE query-met...
+  query-metrics: Query Confluent Cloud metrics from the Telemetry API. IMPORTANT: Use the list-available-metrics tool first to discove...
+
+schema-registry:
+  create-schema: Register a new schema (or a new version of an existing schema) under a subject in the Schema Registry.
+  delete-schema: Delete a schema subject or a specific version from the Schema Registry. If version is omitted, all versions of the su...
+  list-schemas: List all schemas in the Schema Registry.
+
+tableflow:
+  create-tableflow-catalog-integration: Make a request to create a catalog integration.
+  create-tableflow-topic: Make a request to create a tableflow topic.
+  delete-tableflow-catalog-integration: Make a request to delete a tableflow catalog integration.
+  delete-tableflow-topic: Make a request to delete a tableflow topic.
+  list-tableflow-catalog-integrations: Retrieve a sorted, filtered, paginated list of all catalog integrations.
+  list-tableflow-regions: Retrieve a sorted, filtered, paginated list of all tableflow regions.
+  list-tableflow-topics: Retrieve a sorted, filtered, paginated list of all tableflow topics.
+  read-tableflow-catalog-integration: Make a request to read a catalog integration.
+  read-tableflow-topic: Make a request to read a tableflow topic.
+  update-tableflow-catalog-integration: Make a request to update a catalog integration.
+  update-tableflow-topic: Make a request to update a tableflow topic.
 ```
 
 </details>
@@ -362,6 +463,7 @@ Please refer to the following guides for step-by-step instructions on setting up
 - [Cursor](docs/configuring-cursor.md)
 - [Gemini CLI](docs/configuring-gemini-cli.md)
 - [Goose CLI](docs/configuring-goose-cli.md)
+- [IBM Bob](docs/configuring-ibm-bob.md)
 - [VS Code](docs/configuring-vs-code.md)
 - [Windsurf](docs/configuring-windsurf.md)
 
@@ -373,7 +475,7 @@ See [telemetry.md](telemetry.md) for full details on what is collected.
 
 ## Troubleshooting
 
-**"Node.js version not supported"** -- This project requires Node.js 22 or later.
+**"Node.js version not supported"** -- This project requires Node.js 22.19.0 or later.
 Check your version with `node -v` and upgrade if needed.
 
 **Tools not appearing** -- Each tool requires specific service blocks in your `config.yaml`.

package/assets/oauth-templates/callback-success.html

@@ -15,5 +15,85 @@
       <p>You have successfully authenticated with Confluent Cloud.</p>
       <p>You may close this page and return to your terminal.</p>
     </div>
+
+    <div class="install-hint">
+      <h2>Next: install the Confluent agent skills</h2>
+      <div class="install-hint__cmd-row">
+        <code id="install-cmd" class="install-hint__cmd"
+          >npx skills add confluentinc/agent-skills</code
+        >
+        <button
+          type="button"
+          id="install-cmd-copy"
+          class="install-hint__copy"
+          aria-label="Copy install command"
+        >
+          Copy
+        </button>
+      </div>
+      <p class="install-hint__docs">
+        Learn more in the
+        <a
+          href="https://docs.confluent.io/cloud/current/ai/ai-tools/agent-skills.html"
+          target="_blank"
+          rel="noopener noreferrer"
+          >Confluent agent skills documentation</a
+        >.
+      </p>
+    </div>
+
+    <script>
+      (function () {
+        // Open an EventSource so the local CLI's callback server knows the
+        // user is still on this page. The server keeps its listener bound
+        // while at least one stream is connected, and closes it as soon as
+        // this stream disconnects (tab close / refresh / navigation away) —
+        // so beacons from the Copy button below are guaranteed to land on
+        // a live listener.
+        try {
+          var stream = new EventSource("{{streamPath}}");
+          // The CLI only writes a comment frame and never sends events; if it
+          // does close the stream we don't want EventSource's auto-reconnect
+          // to keep hammering the now-dead port.
+          stream.onerror = function () {
+            stream.close();
+          };
+        } catch (e) {}
+
+        var btn = document.getElementById("install-cmd-copy");
+        var cmdEl = document.getElementById("install-cmd");
+        if (!btn || !cmdEl) return;
+        btn.addEventListener("click", function () {
+          var cmd = cmdEl.textContent || "";
+          var done = function (label) {
+            btn.textContent = label;
+            setTimeout(function () {
+              btn.textContent = "Copy";
+            }, 2000);
+          };
+          var afterCopy = function (ok) {
+            done(ok ? "Copied!" : "Copy failed");
+            try {
+              fetch("{{copiedPath}}", {
+                method: "POST",
+                keepalive: true,
+              }).catch(function () {});
+            } catch (e) {}
+          };
+          if (navigator.clipboard && navigator.clipboard.writeText) {
+            navigator.clipboard.writeText(cmd).then(
+              function () {
+                afterCopy(true);
+              },
+              function () {
+                afterCopy(false);
+              },
+            );
+          } else {
+            afterCopy(false);
+          }
+        });
+      })();
+    </script>
   </body>
 </html>

package/assets/oauth-templates/styles.html

@@ -1,49 +1,110 @@
 <style>
-    /* Axon theme design tokens partial */
+  /* Axon theme design tokens partial */
+  :root {
+    --background: #f5f4f4;
+    --text-primary: #131316;
+    --link-primary: #4933d7;
+    --link-primary-hover: #30228b;
+    --support-failure: #c43b42;
+    --logo: #040531;
+  }
+  @media (prefers-color-scheme: dark) {
     :root {
-        --background: #F5F4F4;
-        --text-primary: #131316;
-        --link-primary: #4933D7;
-        --link-primary-hover: #30228B;
-        --support-failure: #C43B42;
-        --logo: #040531;
-    }
-    @media (prefers-color-scheme: dark) {
-        :root {
-            --background: #131316;
-            --text-primary: #F5F4F4;
-            --link-primary: #BDB3FF;
-            --link-primary-hover: #B4A8FF;
-            --support-failure: #F07A80;
-            --logo: #FFFFFF;
-        }
+      --background: #131316;
+      --text-primary: #f5f4f4;
+      --link-primary: #bdb3ff;
+      --link-primary-hover: #b4a8ff;
+      --support-failure: #f07a80;
+      --logo: #ffffff;
     }
+  }
 
-    /* Page styling */
-    a, a:active { color: var(--link-primary); }
-    a:hover { color: var(--link-primary-hover); }
+  /* Page styling */
+  a,
+  a:active {
+    color: var(--link-primary);
+  }
+  a:hover {
+    color: var(--link-primary-hover);
+  }
 
-    body {
-        margin: 0;
-        overflow: hidden;
-        background-color: var(--background);
-        color: var(--text-primary);
-    }
+  body {
+    margin: 0;
+    overflow: hidden;
+    background-color: var(--background);
+    color: var(--text-primary);
+  }
 
-    /* Logo styling */
-    div.logo {
-        width: 320px;
-    }
-    .logo .st0{ fill: none; }
-    .logo .st1{ fill: var(--logo); }
+  /* Logo styling */
+  div.logo {
+    width: 320px;
+  }
+  .logo .st0 {
+    fill: none;
+  }
+  .logo .st1 {
+    fill: var(--logo);
+  }
 
-    /* Content styling */
-    div.banner {
-        margin: 80px 32px;
-        font-family: 'MarkPro-NarrowBook', 'Arial', sans-serif;
-        text-align: center;
-    }
+  /* Content styling */
+  div.banner {
+    margin: 80px 32px;
+    font-family: "MarkPro-NarrowBook", "Arial", sans-serif;
+    text-align: center;
+  }
+
+  /* Install hint styling */
+  div.install-hint {
+    max-width: 560px;
+    margin: 0 auto 80px;
+    padding: 0 32px;
+    font-family: "MarkPro-NarrowBook", "Arial", sans-serif;
+    text-align: center;
+  }
+  div.install-hint h2 {
+    font-size: 1.1rem;
+    margin-bottom: 8px;
+  }
+  .install-hint__cmd-row {
+    display: flex;
+    align-items: stretch;
+    gap: 8px;
+    margin-top: 16px;
+    border: 1px solid color-mix(in srgb, var(--text-primary) 20%, transparent);
+    border-radius: 6px;
+    padding: 4px;
+    background: color-mix(in srgb, var(--text-primary) 4%, transparent);
+  }
+  code.install-hint__cmd {
+    flex: 1;
+    font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+    font-size: 0.95rem;
+    text-align: left;
+    padding: 8px 12px;
+    white-space: nowrap;
+    overflow-x: auto;
+    user-select: all;
+  }
+  button.install-hint__copy {
+    font-family: inherit;
+    font-size: 0.9rem;
+    padding: 0 16px;
+    border: none;
+    border-radius: 4px;
+    background: var(--link-primary);
+    color: #ffffff;
+    cursor: pointer;
+  }
+  button.install-hint__copy:hover {
+    background: var(--link-primary-hover);
+  }
+  p.install-hint__docs {
+    margin-top: 12px;
+    font-size: 0.9rem;
+  }
 
-    /* Util styling */
-    .failure { color: var(--support-failure); }
+  /* Util styling */
+  .failure {
+    color: var(--support-failure);
+  }
 </style>