@dataville/dataville-mcp 0.1.0 → 0.1.2

package/README.md

@@ -43,5 +43,13 @@ npm run build
 ## Development
 
 ```bash
-npm run dev   # tsx watch
+npm run dev    # tsx watch
+npm test       # node test runner
+npm run build  # tsc
 ```
+
+## Releasing
+
+Publishes run from CI via npm trusted publishing (OIDC) — no tokens are stored.
+To cut a release: bump the version, update `CHANGELOG.md`, then publish a GitHub
+Release for the new tag. The `Publish` workflow builds, tests, and publishes to npm.

package/dist/client.js

@@ -1,4 +1,7 @@
 const DEFAULT_BASE_URL = "https://api.dataville.com";
+// Keep in sync with package.json version (enforced by a test).
+export const VERSION = "0.1.2";
+const USER_AGENT = `dataville-mcp/${VERSION}`;
 export class DatavilleApiError extends Error {
     status;
     constructor(status, message) {
@@ -7,6 +10,21 @@ export class DatavilleApiError extends Error {
         this.name = "DatavilleApiError";
     }
 }
+/**
+ * Raised when the API accepted the request but did not recognise our API key.
+ *
+ * Dataville's auth middleware never rejects outright — an unrecognised key
+ * falls through to anonymous access, which still returns data but under the
+ * much lower anonymous rate limit and without attributing usage to the
+ * account. Left unchecked that failure is invisible inside an MCP client, so
+ * we surface it explicitly instead of returning results that look fine.
+ */
+export class DatavilleAuthError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DatavilleAuthError";
+    }
+}
 function getConfig() {
     const apiKey = process.env.DATAVILLE_API_KEY;
     if (!apiKey) {
@@ -24,7 +42,10 @@ export async function searchDataSource(source, keywords, params) {
         }
     }
     const response = await fetch(url, {
-        headers: { Authorization: `Bearer ${apiKey}` },
+        headers: {
+            Authorization: `Bearer ${apiKey}`,
+            "User-Agent": USER_AGENT,
+        },
     });
     const body = await response.json().catch(() => undefined);
     if (!response.ok) {
@@ -32,5 +53,15 @@ export async function searchDataSource(source, keywords, params) {
             `Dataville API request failed with status ${response.status}`;
         throw new DatavilleApiError(response.status, message);
     }
+    // We always send an API key, so an "anonymous" account state means the key
+    // was not accepted. Fail loudly rather than silently serving anonymous-tier
+    // results that are neither attributed nor billed to the user's account.
+    if (body &&
+        typeof body === "object" &&
+        body.account_state === "anonymous") {
+        throw new DatavilleAuthError("Your DATAVILLE_API_KEY was not recognised, so this request fell back to anonymous access " +
+            "(much lower rate limits, and usage is not attributed to your account). " +
+            "Check the key in your MCP client config, or generate a new one at https://app.dataville.com/api-keys.");
+    }
     return body;
 }

package/dist/index.js

@@ -2,11 +2,11 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-import { searchDataSource, DatavilleApiError } from "./client.js";
+import { searchDataSource, VERSION } from "./client.js";
 import { DATAVILLE_SOURCES } from "./sources.js";
 const server = new McpServer({
     name: "dataville-mcp-server",
-    version: "0.1.0",
+    version: VERSION,
 });
 server.registerTool("list_dataville_sources", {
     title: "List Dataville data sources",
@@ -32,7 +32,7 @@ server.registerTool("search_dataville", {
         return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
     }
     catch (error) {
-        const message = error instanceof DatavilleApiError ? error.message : String(error);
+        const message = error instanceof Error ? error.message : String(error);
         return { content: [{ type: "text", text: message }], isError: true };
     }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dataville/dataville-mcp",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "MCP server exposing Dataville's data source API as tools for MCP clients",
   "private": false,
   "license": "MIT",
@@ -12,12 +12,17 @@
   "bin": {
     "dataville-mcp": "dist/index.js"
   },
-  "files": ["dist", "README.md", "LICENSE"],
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
   "scripts": {
     "build": "tsc",
     "prepublishOnly": "npm run build",
     "dev": "tsx watch src/index.ts",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "test": "tsx --test src/__tests__/*.test.ts"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",