@critical-path/mcp 0.7.0 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # @critical-path/mcp
 
+## 0.8.0
+
+### Minor Changes
+
+- 6dd5529: Add request context, authentication hooks and actor attribution.
+  
+  **@critical-path/core**
+  - New `engine.withActor(actor)` returns a per-request view that attributes every mutation (activity log, comment authors, reactions, time entries, attachment uploaders, task reporters) to the actor and ignores identity fields supplied in payloads. New exported `Actor` type.
+  
+  **@critical-path/server**
+  - New router options, accepted by all adapters as a second argument: `getContext` (resolve the caller per request), `requireAuth` (401 without a user), `basePath` (exact mount path), and `cors` (origin allow-list, credentials, or `false`).
+  - With a resolved user, identity fields in request bodies (`actorId`, `authorId`, `userId`, `uploaderId`) are ignored. Reaction routes no longer require `userId` in the body when a user is resolved.
+  - `createSvelteKitHandler` options take `getContext(event)` so `event.locals` is available; `configOrRouter` is now optional.
+  - New `createUniversalHandler(config, options)` for Workers, Deno, Bun and Hono.
+  - `handleRequest(request, { getContext })` lets custom adapters supply a per-request resolver.
+  
+  **@critical-path/mcp**
+  - CLI `--api` mode reads `CRITICAL_PATH_API_TOKEN` (sent as a Bearer token) and accepts repeatable `--header "Name: value"`, warning when credentials would go over plain http to a remote host.
+
+### Patch Changes
+
+- Updated dependencies [6dd5529]
+  - @critical-path/core@0.23.0
+  - @critical-path/client@0.14.8
+
 ## 0.7.0
 
 ### Minor Changes

package/README.md

@@ -43,6 +43,20 @@ npx @critical-path/mcp --api http://localhost:3000/api/critical-path
 npx @critical-path/mcp
 ```
 
+For APIs protected with `requireAuth`, set `CRITICAL_PATH_API_TOKEN` (sent as `Authorization: Bearer <token>`) or pass `--header "Name: value"` (repeatable). Prefer the environment variable for secrets, since command-line flags are visible in process lists. The CLI warns when credentials would be sent over plain `http` to a non-local host.
+
+```json
+{
+  "mcpServers": {
+    "critical-path": {
+      "command": "npx",
+      "args": ["-y", "@critical-path/mcp", "--api", "https://app.example.com/api/critical-path"],
+      "env": { "CRITICAL_PATH_API_TOKEN": "<token>" }
+    }
+  }
+}
+```
+
 ### Claude Desktop Configuration
 
 Add the following to your `claude_desktop_config.json`:

package/dist/bin/args.d.ts

@@ -0,0 +1,16 @@
+export interface CliOptions {
+    db?: string;
+    api?: string;
+    headers: string[];
+    help?: boolean;
+}
+export declare function parseArgs(args: string[]): CliOptions;
+/**
+ * Builds request headers for `--api` mode from repeated `--header "Name: value"` flags and the
+ * `CRITICAL_PATH_API_TOKEN` environment variable (sent as `Authorization: Bearer <token>`).
+ * Prefer the environment variable for secrets: command-line flags are visible in process lists.
+ */
+export declare function buildApiHeaders(headerFlags: string[], env: Record<string, string | undefined>): Record<string, string>;
+/** True when credentials would be sent in cleartext to a host other than this machine. */
+export declare function isInsecureRemote(apiUrl: string): boolean;
+//# sourceMappingURL=args.d.ts.map

package/dist/bin/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/bin/args.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAepD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAatH;AAED,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIxD"}

package/dist/bin/args.js

@@ -0,0 +1,45 @@
+export function parseArgs(args) {
+    const options = { headers: [] };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '--help' || arg === '-h') {
+            options.help = true;
+        }
+        else if (arg === '--db' && args[i + 1]) {
+            options.db = args[++i];
+        }
+        else if (arg === '--api' && args[i + 1]) {
+            options.api = args[++i];
+        }
+        else if (arg === '--header' && args[i + 1]) {
+            options.headers.push(args[++i]);
+        }
+    }
+    return options;
+}
+/**
+ * Builds request headers for `--api` mode from repeated `--header "Name: value"` flags and the
+ * `CRITICAL_PATH_API_TOKEN` environment variable (sent as `Authorization: Bearer <token>`).
+ * Prefer the environment variable for secrets: command-line flags are visible in process lists.
+ */
+export function buildApiHeaders(headerFlags, env) {
+    const headers = {};
+    if (env.CRITICAL_PATH_API_TOKEN) {
+        headers['Authorization'] = `Bearer ${env.CRITICAL_PATH_API_TOKEN}`;
+    }
+    for (const flag of headerFlags) {
+        const separator = flag.indexOf(':');
+        if (separator <= 0) {
+            throw new Error(`Invalid --header "${flag}". Expected "Name: value".`);
+        }
+        headers[flag.slice(0, separator).trim()] = flag.slice(separator + 1).trim();
+    }
+    return headers;
+}
+/** True when credentials would be sent in cleartext to a host other than this machine. */
+export function isInsecureRemote(apiUrl) {
+    const url = new URL(apiUrl);
+    const localHosts = ['localhost', '127.0.0.1', '[::1]'];
+    return url.protocol === 'http:' && !localHosts.includes(url.hostname) && !url.hostname.endsWith('.localhost');
+}
+//# sourceMappingURL=args.js.map

package/dist/bin/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/bin/args.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,OAAO,GAAe,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,GAAG,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,GAAG,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,WAAqB,EAAE,GAAuC;IAC5F,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,GAAG,CAAC,uBAAuB,EAAE,CAAC;QAChC,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,GAAG,CAAC,uBAAuB,EAAE,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,4BAA4B,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAChH,CAAC"}

package/dist/bin/args.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=args.test.d.ts.map

package/dist/bin/args.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.test.d.ts","sourceRoot":"","sources":["../../src/bin/args.test.ts"],"names":[],"mappings":""}

package/dist/bin/args.test.js

@@ -0,0 +1,24 @@
+import { describe, it, expect } from 'vitest';
+import { parseArgs, buildApiHeaders, isInsecureRemote } from './args.js';
+describe('MCP CLI arguments', () => {
+    it('collects repeated --header flags', () => {
+        const options = parseArgs(['--api', 'https://x.test/api', '--header', 'X-Tenant: acme', '--header', 'X-Trace: 1']);
+        expect(options.api).toBe('https://x.test/api');
+        expect(options.headers).toEqual(['X-Tenant: acme', 'X-Trace: 1']);
+    });
+    it('builds headers from the token env var and flags, with flags taking precedence', () => {
+        expect(buildApiHeaders(['X-Tenant: acme'], { CRITICAL_PATH_API_TOKEN: 'secret' })).toEqual({
+            Authorization: 'Bearer secret',
+            'X-Tenant': 'acme'
+        });
+        expect(buildApiHeaders(['Authorization: Basic abc'], { CRITICAL_PATH_API_TOKEN: 'secret' }).Authorization).toBe('Basic abc');
+        expect(() => buildApiHeaders(['no-colon'], {})).toThrow(/Expected "Name: value"/);
+    });
+    it('flags plain http to remote hosts only', () => {
+        expect(isInsecureRemote('http://api.example.com')).toBe(true);
+        expect(isInsecureRemote('https://api.example.com')).toBe(false);
+        expect(isInsecureRemote('http://localhost:3000/api')).toBe(false);
+        expect(isInsecureRemote('http://127.0.0.1:3000')).toBe(false);
+    });
+});
+//# sourceMappingURL=args.test.js.map

package/dist/bin/args.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.test.js","sourceRoot":"","sources":["../../src/bin/args.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEzE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACnH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CAAC,eAAe,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACzF,aAAa,EAAE,eAAe;YAC9B,UAAU,EAAE,MAAM;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,CAAC,0BAA0B,CAAC,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAC7G,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/bin/cli.js

@@ -2,22 +2,7 @@
 import { CriticalPathEngine, SQLiteStore, InMemoryStore } from '@critical-path/core';
 import { CriticalPathClient } from '@critical-path/client';
 import { createCriticalPathMcpServer, startStdioServer } from '../server/index.js';
-function parseArgs(args) {
-    const options = {};
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        if (arg === '--help' || arg === '-h') {
-            options.help = true;
-        }
-        else if (arg === '--db' && args[i + 1]) {
-            options.db = args[++i];
-        }
-        else if (arg === '--api' && args[i + 1]) {
-            options.api = args[++i];
-        }
-    }
-    return options;
-}
+import { parseArgs, buildApiHeaders, isInsecureRemote } from './args.js';
 function showHelp() {
     console.log(`
 Critical Path MCP Server (Stdio)
@@ -25,9 +10,13 @@ Critical Path MCP Server (Stdio)
 Usage:
   npx @critical-path/mcp [options]
 
+Environment:
+  CRITICAL_PATH_API_TOKEN   Sent as "Authorization: Bearer <token>" in --api mode
+
 Options:
   --db <path>      Path to SQLite database file (uses SQLiteStore)
   --api <url>      Base URL of remote Critical Path server (uses CriticalPathClient)
+  --header <h>     Extra request header for --api, as "Name: value" (repeatable)
   --help, -h       Display this help message
 
 Examples:
@@ -37,6 +26,9 @@ Examples:
   # Run against remote Next.js or SvelteKit route handler
   npx @critical-path/mcp --api http://localhost:3000/api/critical-path
 
+  # Authenticate against a protected API (token read from the environment)
+  CRITICAL_PATH_API_TOKEN=secret npx @critical-path/mcp --api https://app.example.com/api/critical-path
+
   # Run with in-memory store (for testing)
   npx @critical-path/mcp
 `);
@@ -50,7 +42,11 @@ async function main() {
     }
     let server;
     if (options.api) {
-        const client = new CriticalPathClient({ baseUrl: options.api });
+        const headers = buildApiHeaders(options.headers, process.env);
+        if (Object.keys(headers).length > 0 && isInsecureRemote(options.api)) {
+            console.error('[Critical Path MCP] Warning: sending credentials over plain http to a remote host.');
+        }
+        const client = new CriticalPathClient({ baseUrl: options.api, headers });
         server = createCriticalPathMcpServer({ client, name: 'critical-path-api-mcp' });
         console.error(`[Critical Path MCP] Connecting to remote API at ${options.api} over stdio...`);
     }

package/dist/bin/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/bin/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEnF,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAkD,EAAE,CAAC;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,GAAG,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;CAoBb,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC;IAEX,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,GAAG,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,mDAAmD,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAC;IAChG,CAAC;SAAM,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,KAAK,CAAC,oDAAoD,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/bin/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEzE,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2Bb,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC;IAEX,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,OAAO,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,mDAAmD,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAC;IAChG,CAAC;SAAM,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,KAAK,CAAC,oDAAoD,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@critical-path/mcp",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Standard Model Context Protocol (MCP) server and client-side WebMCP support for Critical Path",
   "author": "Jack James",
   "license": "MIT",
@@ -34,8 +34,8 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.6.0",
     "zod": "^3.24.0",
-    "@critical-path/client": "0.14.7",
-    "@critical-path/core": "0.22.0"
+    "@critical-path/client": "0.14.8",
+    "@critical-path/core": "0.23.0"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",

package/src/bin/args.test.ts

@@ -0,0 +1,28 @@
+import { describe, it, expect } from 'vitest';
+import { parseArgs, buildApiHeaders, isInsecureRemote } from './args.js';
+
+describe('MCP CLI arguments', () => {
+  it('collects repeated --header flags', () => {
+    const options = parseArgs(['--api', 'https://x.test/api', '--header', 'X-Tenant: acme', '--header', 'X-Trace: 1']);
+    expect(options.api).toBe('https://x.test/api');
+    expect(options.headers).toEqual(['X-Tenant: acme', 'X-Trace: 1']);
+  });
+
+  it('builds headers from the token env var and flags, with flags taking precedence', () => {
+    expect(buildApiHeaders(['X-Tenant: acme'], { CRITICAL_PATH_API_TOKEN: 'secret' })).toEqual({
+      Authorization: 'Bearer secret',
+      'X-Tenant': 'acme'
+    });
+    expect(buildApiHeaders(['Authorization: Basic abc'], { CRITICAL_PATH_API_TOKEN: 'secret' }).Authorization).toBe(
+      'Basic abc'
+    );
+    expect(() => buildApiHeaders(['no-colon'], {})).toThrow(/Expected "Name: value"/);
+  });
+
+  it('flags plain http to remote hosts only', () => {
+    expect(isInsecureRemote('http://api.example.com')).toBe(true);
+    expect(isInsecureRemote('https://api.example.com')).toBe(false);
+    expect(isInsecureRemote('http://localhost:3000/api')).toBe(false);
+    expect(isInsecureRemote('http://127.0.0.1:3000')).toBe(false);
+  });
+});

package/src/bin/args.ts

@@ -0,0 +1,50 @@
+export interface CliOptions {
+  db?: string;
+  api?: string;
+  headers: string[];
+  help?: boolean;
+}
+
+export function parseArgs(args: string[]): CliOptions {
+  const options: CliOptions = { headers: [] };
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--help' || arg === '-h') {
+      options.help = true;
+    } else if (arg === '--db' && args[i + 1]) {
+      options.db = args[++i];
+    } else if (arg === '--api' && args[i + 1]) {
+      options.api = args[++i];
+    } else if (arg === '--header' && args[i + 1]) {
+      options.headers.push(args[++i]);
+    }
+  }
+  return options;
+}
+
+/**
+ * Builds request headers for `--api` mode from repeated `--header "Name: value"` flags and the
+ * `CRITICAL_PATH_API_TOKEN` environment variable (sent as `Authorization: Bearer <token>`).
+ * Prefer the environment variable for secrets: command-line flags are visible in process lists.
+ */
+export function buildApiHeaders(headerFlags: string[], env: Record<string, string | undefined>): Record<string, string> {
+  const headers: Record<string, string> = {};
+  if (env.CRITICAL_PATH_API_TOKEN) {
+    headers['Authorization'] = `Bearer ${env.CRITICAL_PATH_API_TOKEN}`;
+  }
+  for (const flag of headerFlags) {
+    const separator = flag.indexOf(':');
+    if (separator <= 0) {
+      throw new Error(`Invalid --header "${flag}". Expected "Name: value".`);
+    }
+    headers[flag.slice(0, separator).trim()] = flag.slice(separator + 1).trim();
+  }
+  return headers;
+}
+
+/** True when credentials would be sent in cleartext to a host other than this machine. */
+export function isInsecureRemote(apiUrl: string): boolean {
+  const url = new URL(apiUrl);
+  const localHosts = ['localhost', '127.0.0.1', '[::1]'];
+  return url.protocol === 'http:' && !localHosts.includes(url.hostname) && !url.hostname.endsWith('.localhost');
+}

package/src/bin/cli.ts

@@ -2,21 +2,7 @@
 import { CriticalPathEngine, SQLiteStore, InMemoryStore } from '@critical-path/core';
 import { CriticalPathClient } from '@critical-path/client';
 import { createCriticalPathMcpServer, startStdioServer } from '../server/index.js';
-
-function parseArgs(args: string[]) {
-  const options: { db?: string; api?: string; help?: boolean } = {};
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
-    if (arg === '--help' || arg === '-h') {
-      options.help = true;
-    } else if (arg === '--db' && args[i + 1]) {
-      options.db = args[++i];
-    } else if (arg === '--api' && args[i + 1]) {
-      options.api = args[++i];
-    }
-  }
-  return options;
-}
+import { parseArgs, buildApiHeaders, isInsecureRemote } from './args.js';
 
 function showHelp() {
   console.log(`
@@ -25,9 +11,13 @@ Critical Path MCP Server (Stdio)
 Usage:
   npx @critical-path/mcp [options]
 
+Environment:
+  CRITICAL_PATH_API_TOKEN   Sent as "Authorization: Bearer <token>" in --api mode
+
 Options:
   --db <path>      Path to SQLite database file (uses SQLiteStore)
   --api <url>      Base URL of remote Critical Path server (uses CriticalPathClient)
+  --header <h>     Extra request header for --api, as "Name: value" (repeatable)
   --help, -h       Display this help message
 
 Examples:
@@ -37,6 +27,9 @@ Examples:
   # Run against remote Next.js or SvelteKit route handler
   npx @critical-path/mcp --api http://localhost:3000/api/critical-path
 
+  # Authenticate against a protected API (token read from the environment)
+  CRITICAL_PATH_API_TOKEN=secret npx @critical-path/mcp --api https://app.example.com/api/critical-path
+
   # Run with in-memory store (for testing)
   npx @critical-path/mcp
 `);
@@ -54,7 +47,11 @@ async function main() {
   let server;
 
   if (options.api) {
-    const client = new CriticalPathClient({ baseUrl: options.api });
+    const headers = buildApiHeaders(options.headers, process.env);
+    if (Object.keys(headers).length > 0 && isInsecureRemote(options.api)) {
+      console.error('[Critical Path MCP] Warning: sending credentials over plain http to a remote host.');
+    }
+    const client = new CriticalPathClient({ baseUrl: options.api, headers });
     server = createCriticalPathMcpServer({ client, name: 'critical-path-api-mcp' });
     console.error(`[Critical Path MCP] Connecting to remote API at ${options.api} over stdio...`);
   } else if (options.db) {

package/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["./src/index.test.ts","./src/index.ts","./src/bin/cli.ts","./src/server/index.ts","./src/tools/definitions.test.ts","./src/tools/definitions.ts","./src/web/index.ts"],"version":"5.9.3"}
+{"root":["./src/index.test.ts","./src/index.ts","./src/bin/args.test.ts","./src/bin/args.ts","./src/bin/cli.ts","./src/server/index.ts","./src/tools/definitions.test.ts","./src/tools/definitions.ts","./src/web/index.ts"],"version":"5.9.3"}