@cookiemunch/mcp 0.4.1 → 0.5.0

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 Every published release, newest first. Dates are the day the version was cut. Each release tracks the same-numbered `@cookiemunch/sdk`.
 
+## 0.5.0 (2026-10-23)
+
+- Added: `get_org_controller`, `set_org_controller`, `remove_org_controller`.
+- Added: `get_consent_sync_secret`, `rotate_consent_sync_secret`, `remove_consent_sync_secret`.
+- Added: `mint_preference_center_token`.
+- Changed: built on `@cookiemunch/sdk` 0.5.0.
+
 ## 0.4.1 (2026-10-22)
 
 - Added: `apply_cookie_preset` takes `referally` (`cookieDomain`, `cookieDays`, `category`).

package/dist/bin.cjs

@@ -1515,6 +1515,21 @@ ${JSON.stringify(r, null, 2)}` : r;
     { subjectId: import_zod5.z.string() },
     (a) => client.preferences.get(a.subjectId)
   );
+  tool(
+    "mint_preference_center_token",
+    "Mint a hosted preference-centre token for one visitor (POST /v1/preference-center/tokens), for a page to pass to CookieMunch.setSubjectToken. Give exactly one of email (resolved as the emailed preference link resolves it; an unknown address is subject_not_found) or subjectId. The token is a credential that opens that person\u2019s subscriptions and profile until expiresAt: never paste it into a shared URL, a ticket or a log, and keep ttlSeconds short (default 3600, max 86400). Needs subscriptions:write and profile:write, plus identity:read by email.",
+    {
+      cbid: import_zod5.z.string().describe("A site of your organisation."),
+      email: import_zod5.z.string().optional().describe("The visitor\u2019s address. Give this or subjectId, not both."),
+      subjectId: import_zod5.z.string().optional().describe("The subject id. Give this or email, not both."),
+      ttlSeconds: import_zod5.z.number().int().min(1).max(86400).optional()
+    },
+    (a) => client.preferenceCenter.mintToken({
+      cbid: a.cbid,
+      ...a.email !== void 0 ? { email: a.email } : { subjectId: a.subjectId },
+      ...a.ttlSeconds !== void 0 ? { ttlSeconds: a.ttlSeconds } : {}
+    })
+  );
   tool(
     "issue_api_key",
     "Issue a new API key. The secret is returned once and never again. Prefer the least privilege the job needs: `scopes` limits what it can do, `cbids` locks it to specific sites (it then cannot reach anything org-wide), `expiresInDays` retires it. Omitting all three mints a full-access, org-wide, non-expiring key.",
@@ -1744,6 +1759,37 @@ ${JSON.stringify(r, null, 2)}` : r;
       return { removed: true };
     }
   );
+  tool(
+    "get_org_controller",
+    "The organisation\u2019s own data-controller identity: who every rights notice names, before any site config controller block. `set: false` when there is none. Read-only.",
+    {},
+    () => client.org.controller.get()
+  );
+  tool(
+    "set_org_controller",
+    "Set the organisation\u2019s data-controller identity. Replaces it: a field left out is removed. Needed for a notice on a rights request filed without a cbid when the organisation has several sites. Needs an unscoped key or rights:write. Audited.",
+    {
+      legalName: import_zod5.z.string().describe("Required: the legal name of the data controller."),
+      contactEmail: import_zod5.z.string().optional().describe("Where people reach the controller about their data."),
+      address: import_zod5.z.string().optional(),
+      dpoContact: import_zod5.z.string().optional().describe("The Data Protection Officer: a name, an email address, or both.")
+    },
+    (a) => client.org.controller.set({
+      legalName: a.legalName,
+      ...a.contactEmail !== void 0 ? { contactEmail: a.contactEmail } : {},
+      ...a.address !== void 0 ? { address: a.address } : {},
+      ...a.dpoContact !== void 0 ? { dpoContact: a.dpoContact } : {}
+    })
+  );
+  tool(
+    "remove_org_controller",
+    "Remove the organisation\u2019s data-controller identity. Notices then name the request\u2019s site config controller block; a request without a cbid in an organisation with several sites gets no notice.",
+    {},
+    async () => {
+      await client.org.controller.remove();
+      return { removed: true };
+    }
+  );
   const CAPTCHA_OFF = "Off removes spam protection beyond the hidden spam-trap field, the rate limits and the email code: expect more spam requests. Own keys are recommended.";
   const captchaInput = {
     mode: import_zod5.z.enum(["own", "off"]).describe(`own: your own captcha provider keys (recommended). off: no captcha. ${CAPTCHA_OFF}`),
@@ -1759,6 +1805,24 @@ ${JSON.stringify(r, null, 2)}` : r;
     ...a.secret !== void 0 ? { secret: a.secret } : {},
     ...a.minScore !== void 0 ? { minScore: a.minScore } : {}
   });
+  tool(
+    "get_consent_sync_secret",
+    "Whether hosted consent sync is set up for a site: `configured`, `secretLast4`, `createdAt`. Never returns the secret. Read-only.",
+    { cbid: import_zod5.z.string() },
+    (a) => client.consentSyncSecret.get(a.cbid)
+  );
+  tool(
+    "rotate_consent_sync_secret",
+    "Mint a site\u2019s consent-sync signing secret, or rotate it. The answer carries `secret` this once; the site owner\u2019s server signs consent-sync tokens with it (mintConsentSyncToken in @cookiemunch/sdk). Rotating stops the old secret at once, so every page holding a token signed with it stops syncing until it gets a new token. Never put the secret in a page. Needs sites:write and consent:write.",
+    { cbid: import_zod5.z.string() },
+    (a) => client.consentSyncSecret.rotate(a.cbid)
+  );
+  tool(
+    "remove_consent_sync_secret",
+    "Remove a site\u2019s consent-sync secret: hosted consent sync stops until a new one is minted. Needs sites:write and consent:write.",
+    { cbid: import_zod5.z.string() },
+    (a) => client.consentSyncSecret.remove(a.cbid)
+  );
   tool(
     "get_rights_captcha",
     "The captcha on a site\u2019s hosted rights page: its own setting, else the organisation default, else off (`source` says which). Never returns the secret. Read-only.",
@@ -2000,7 +2064,7 @@ ${JSON.stringify(r, null, 2)}` : r;
 }
 
 // src/index.ts
-var MCP_VERSION = "0.4.1";
+var MCP_VERSION = "0.5.0";
 function createCookieMunchMcp(opts) {
   const client = opts.client ?? (0, import_sdk.createCookieMunch)({ apiKey: opts.apiKey, baseUrl: opts.baseUrl, userAgent: opts.userAgent ?? `cookiemunch-mcp/${MCP_VERSION}` });
   const server = new import_mcp.McpServer({ name: "cookiemunch", version: "1.0.0" });