@contentful/mcp-server 1.7.19 → 1.9.0

package/README.md

@@ -63,13 +63,14 @@ npm run build
 
 ### Environment Variables
 
-| Environment Variable                 | Required | Default Value        | Description                                          |
-| ------------------------------------ | -------- | -------------------- | ---------------------------------------------------- |
-| `CONTENTFUL_MANAGEMENT_ACCESS_TOKEN` | ✅ Yes   | -                    | Your Contentful Management API personal access token |
-| `SPACE_ID`                           | ✅ Yes   | -                    | Your Contentful Space ID                             |
-| `ENVIRONMENT_ID`                     | ❌ No    | `master`             | Target environment within your space                 |
-| `CONTENTFUL_HOST`                    | ❌ No    | `api.contentful.com` | Contentful API host                                  |
-| `NODE_ENV`                           | ❌ No    | `production`         | Node Environment to run in                           |
+| Environment Variable                 | Required | Default Value        | Description                                                                                                                                                                                              |
+| ------------------------------------ | -------- | -------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `CONTENTFUL_MANAGEMENT_ACCESS_TOKEN` | ✅ Yes   | -                    | Your Contentful Management API personal access token                                                                                                                                                     |
+| `SPACE_ID`                           | ✅ Yes   | -                    | Your Contentful Space ID                                                                                                                                                                                 |
+| `ENVIRONMENT_ID`                     | ❌ No    | `master`             | Target environment within your space                                                                                                                                                                     |
+| `CONTENTFUL_HOST`                    | ❌ No    | `api.contentful.com` | Contentful API host                                                                                                                                                                                      |
+| `NODE_ENV`                           | ❌ No    | `production`         | Node Environment to run in                                                                                                                                                                               |
+| `MAX_BULK_SIZE`                      | ❌ No    | `10`                 | Maximum number of IDs allowed in a single bulk-operation tool call (1–100). Caps publish/unpublish/archive/unarchive on entries and assets. Mitigates accidental mass operations from AI hallucinations. |
 
 ### Configuration
 

package/dist/index.js

@@ -4095,6 +4095,15 @@ var EnvSchema = external_exports.object({
   APP_ID: external_exports.string().optional().describe("Contentful App ID"),
   SPACE_ID: external_exports.string().optional().describe("Contentful Space ID"),
   ENVIRONMENT_ID: external_exports.string().optional().default("master").describe("Contentful environment ID"),
+  PROTECTED_ENVIRONMENTS: external_exports.string().optional().describe(
+    "Comma-separated list of environment IDs protected from write/delete operations (e.g., master,staging)"
+  ),
+  MAX_BULK_SIZE: external_exports.string().optional().refine(
+    (v) => v === void 0 || /^\d+$/.test(v) && Number(v) > 0 && Number(v) <= 100,
+    { message: "MAX_BULK_SIZE must be a positive integer between 1 and 100" }
+  ).describe(
+    "Maximum number of IDs allowed in a single bulk-operation tool call (default: 10, max: 100). Mitigates accidental mass operations from AI hallucinations."
+  ),
   ORGANIZATION_ID: external_exports.string().optional().describe("Contentful organization ID"),
   CONTENTFUL_DELIVERY_TOKEN: external_exports.string().optional().describe(
     "Contentful CDA token (used with export_space to export only published content)"
@@ -4114,7 +4123,7 @@ init_esm_shims();
 
 // src/mcpVersion.ts
 init_esm_shims();
-var MCP_VERSION = "1.7.18";
+var MCP_VERSION = "1.8.1";
 
 // src/getVersion.ts
 var getVersion = () => {
@@ -4126,6 +4135,9 @@ function registerAllTools(server) {
   if (!env.success || !env.data) {
     throw new Error("Environment variables are not properly configured");
   }
+  const parsedProtectedEnvs = env.data.PROTECTED_ENVIRONMENTS ? env.data.PROTECTED_ENVIRONMENTS.split(",").map((e) => e.trim()).filter(Boolean) : void 0;
+  const protectedEnvironments = parsedProtectedEnvs?.length ? parsedProtectedEnvs : void 0;
+  const maxBulkSize = env.data.MAX_BULK_SIZE ? Number(env.data.MAX_BULK_SIZE) : void 0;
   const tools = new ContentfulMcpTools({
     accessToken: env.data.CONTENTFUL_MANAGEMENT_ACCESS_TOKEN,
     host: env.data.CONTENTFUL_HOST,
@@ -4135,7 +4147,9 @@ function registerAllTools(server) {
     appId: env.data.APP_ID,
     mcpVersion: getVersion(),
     deliveryToken: env.data.CONTENTFUL_DELIVERY_TOKEN,
-    hostDelivery: env.data.CONTENTFUL_DELIVERY_HOST
+    hostDelivery: env.data.CONTENTFUL_DELIVERY_HOST,
+    protectedEnvironments,
+    maxBulkSize
   });
   const aiActionTools = tools.getAiActionTools();
   const assetTools = tools.getAssetTools();