@convisoappsec/mcp 0.6.0 → 0.6.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@convisoappsec/mcp",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "MCP Server for Conviso Platform integration",
   "type": "module",
   "main": "src/conviso_mcp/server.js",

package/src/conviso_mcp/graphql_client.js

@@ -60,6 +60,9 @@ export function buildCreateProjectInput(a = {}) {
       scope: a.scope,
       startDate: a.start_date,
       endDate: a.end_date,
+      // Platform quirk: requirement/checklist IDs are called "playbooks" on this input.
+      playbooksIds: a.requirement_ids,
+      assetsIds: a.asset_ids,
       ...(a.extra || {}),
     }),
   };
@@ -557,6 +560,29 @@ class GraphQLClient {
     return this.execute(PROJECTS_QUERY, variables);
   }
 
+  async get_project_types(search = null) {
+    const query = `
+      query GetProjectTypes($page: Int, $limit: Int, $params: ProjectTypeSearch) {
+        projectTypes(page: $page, limit: $limit, params: $params) {
+          collection { id code label description defaultDuration }
+          metadata { totalCount totalPages currentPage limitValue }
+        }
+      }`;
+    const params = search ? { labelCont: search } : undefined;
+    return this.execute(query, { page: 1, limit: 100, params });
+  }
+
+  async get_project_statuses() {
+    const query = `
+      query GetProjectStatuses($page: Int, $limit: Int) {
+        projectStatuses(page: $page, limit: $limit) {
+          collection { id label isInitial }
+          metadata { totalCount }
+        }
+      }`;
+    return this.execute(query, { page: 1, limit: 100 });
+  }
+
   async get_project_by_id(project_id) {
     const query = `
         query GetProject($id: ID!) {
@@ -767,7 +793,8 @@ class GraphQLClient {
     return this.execute(query, { companyId: company_id, id: ticket_id });
   }
 
-  async get_requirements(scope_id, { page = 1, limit = 25, filters } = {}) {
+  async get_requirements(scope_id, { page = 1, limit = 25, search, filters } = {}) {
+    if (search) filters = { ...(filters || {}), label: search };
     const query = `
       query GetRequirements($scopeId: Int!, $pagination: BasePaginationInput!, $filters: RequirementsFilterInput) {
         requirements(scopeId: $scopeId, pagination: $pagination, filters: $filters) {

package/src/conviso_mcp/server.js

@@ -231,6 +231,18 @@ function buildServer() {
     schema: z.object({ project_id: z.number() }),
   }, ({ project_id }) => gql.get_project_by_id(project_id));
 
+  tool('get_project_types', {
+    title: 'List Project Types',
+    desc: 'List the available project types (id, code, label, description). Use this to find the type_id required by create_project. Optional: search (label substring).',
+    schema: z.object({ search: z.string().optional() }),
+  }, ({ search }) => gql.get_project_types(search));
+
+  tool('get_project_statuses', {
+    title: 'List Project Statuses',
+    desc: 'List the available project statuses (id, label, isInitial). Use to find valid status values for project status updates.',
+    schema: z.object({}),
+  }, () => gql.get_project_statuses());
+
   tool('get_asset', {
     title: 'Asset Details',
     desc: 'Get an asset by ID.',
@@ -349,14 +361,19 @@ function buildServer() {
 
   tool('get_requirements', {
     title: 'List Requirements',
-    desc: 'List security requirements/checklists for a scope (company) id, paginated. Optional: filters (raw RequirementsFilterInput).',
+    desc: 'List security requirements/checklists (also called playbooks) for a scope (company) id, paginated. Optional: search (label substring — use to find a requirement by name), only_from_company (exclude global requirements), filters (raw RequirementsFilterInput). To attach requirements to a NEW project, pass their ids as requirement_ids in create_project.',
     schema: z.object({
       scope_id: z.number(),
       page: z.number().optional(),
       limit: z.number().optional(),
+      search: z.string().optional(),
+      only_from_company: z.boolean().optional(),
       filters: z.record(z.string(), z.any()).optional(),
     }),
-  }, ({ scope_id, page, limit, filters }) => gql.get_requirements(scope_id, { page, limit, filters }));
+  }, ({ scope_id, page, limit, search, only_from_company, filters }) => {
+    if (only_from_company !== undefined) filters = { ...(filters || {}), onlyFromCompany: only_from_company };
+    return gql.get_requirements(scope_id, { page, limit, search, filters });
+  });
 
   tool('get_requirement', {
     title: 'Requirement Details',
@@ -547,7 +564,7 @@ function buildServer() {
 
   tool('create_project', {
     title: 'Create Project',
-    desc: 'Create a project. Required: company_id, type_id (project type id), label, goal, scope, start_date (YYYY-MM-DD). Optional: end_date; extra = advanced CreateProjectInput fields (assetsIds, tags, allocatedPortalUserEmails...).',
+    desc: 'Create a project. Required: company_id, type_id (call get_project_types to find it), label, goal, scope, start_date (YYYY-MM-DD). Optional: end_date; requirement_ids = requirement/checklist ids to associate (find them with get_requirements — the platform calls these playbooks); asset_ids = asset ids to link; extra = advanced CreateProjectInput fields (tags, allocatedPortalUserEmails...).',
     schema: z.object({
       company_id: z.number(),
       type_id: z.number(),
@@ -556,6 +573,8 @@ function buildServer() {
       scope: z.string(),
       start_date: z.string(),
       end_date: z.string().optional(),
+      requirement_ids: z.array(z.number()).optional(),
+      asset_ids: z.array(z.number()).optional(),
       extra: z.record(z.string(), z.any()).optional(),
     }),
     write: true,