@dayplayai/mcp-server 1.3.3 → 2.0.0

package/.cursor/mcp.json

@@ -1,7 +1,7 @@
 {
   "mcpServers": {
     "dayplay": {
-      "url": "https://www.dayplay.io/api/mcp"
+      "url": "https://api.dayplay.io/mcp"
     }
   }
 }

package/README.md

@@ -1,6 +1,6 @@
 # DayPlay MCP — SF Bay Area Events, Places & Itineraries for AI Agents
 
-**`@dayplayai/mcp-server`** · v1.3.2 · MIT
+**`@dayplayai/mcp-server`** · v2.0.0 · MIT
 
 [![Run on Apify](https://img.shields.io/badge/Apify_Store-DayPlay%20Actor-orange?logo=apify)](https://apify.com/dayplay/dayplay-local-intelligence)
 
@@ -8,11 +8,13 @@
 
 [![dayplayTeam/dayplay-mcp MCP server](https://glama.ai/mcp/servers/dayplayTeam/dayplay-mcp/badges/score.svg)](https://glama.ai/mcp/servers/dayplayTeam/dayplay-mcp)
 
+[![Listed on mcpservers.org](https://mcpservers.org/badge.svg)](https://mcpservers.org/servers/dayplayteam/dayplay-mcp)
+
 A zero-configuration MCP server that gives any AI agent a *locally grounded* concierge for the **San Francisco Bay Area only** — curated places, verified real-time events, and neighborhood binding that eliminates cross-bay drift.
 
 > 🔒 **Scope: SF Bay Area only.** This server serves **strictly San Francisco, Oakland, and Berkeley — 35 neighborhood centroids**. It does **not** serve New York, Los Angeles, Chicago, Austin, Seattle, Miami, London, Tokyo, or any other city, region, or country. **Out-of-market locations are not served.** If a user asks about any location outside the SF Bay Area, the agent must state *"Dayplay is strictly San Francisco Bay Area only (San Francisco, Oakland, Berkeley); it does not cover \<location\>"* and must **not** call a tool or fabricate venues, events, dates, hours, or neighborhoods for that location. Zero results for a valid SF Bay Area query are reported honestly, never filled with invented places.
 
-**Remote endpoint:** `https://www.dayplay.io/api/mcp` (Streamable HTTP / MCP)
+**Remote endpoint:** `https://api.dayplay.io/mcp` (Streamable HTTP / MCP)
 
 ---
 
@@ -26,7 +28,7 @@ A zero-configuration MCP server that gives any AI agent a *locally grounded* con
 {
   "mcpServers": {
     "dayplay": {
-      "url": "https://www.dayplay.io/api/mcp"
+      "url": "https://api.dayplay.io/mcp"
     }
   }
 }
@@ -70,7 +72,7 @@ Restart Claude Desktop, then ask: *"What's happening in the Mission tonight?"*
 Add the Dayplay remote connector:
 
 ```
-https://www.dayplay.io/api/mcp
+https://api.dayplay.io/mcp
 ```
 
 Or bridge it over stdio in Grok's MCP config:
@@ -100,56 +102,48 @@ Prints the live endpoint and available tool names. Exits non-zero on failure.
 
 ## Tools
 
-Every tool is bound to the SF Bay Area (San Francisco, Oakland, Berkeley — 35 centroids). Out-of-market locations are declined, never fabricated.
-
-### `get_places`
+The catalog covers the SF Bay Area (San Francisco, Oakland, Berkeley — 35 centroids). Out-of-market locations are declined, never fabricated.
 
-Query curated places filtered by neighborhood, open-now status, ratings, or newly opened window.
+**Open tools** run immediately — no account needed. **Gated tools** 🔒 return `401` on first call; your host opens Google sign-in and a free DayPlay account unlocks them. Through the npm stdio bridge, gated calls fail instead of opening sign-in — prefer the direct remote URL for gated tools.
 
-**SCOPE:** San Francisco Bay Area only (San Francisco, Oakland, Berkeley). Out-of-market locations (e.g. Austin, New York, Tokyo) are declined — never fabricate venues. Spatially verified to eliminate cross-bay and geographic drift.
+### Discovery (open)
 
-| Parameter | Type | Description |
-| --- | --- | --- |
-| `neighborhood` | string | SF Bay Area neighborhood name (SF, Oakland, Berkeley only) |
-| `open_now` | boolean | Filter strictly for places open right now |
-| `sort` | `"rating"` \| `"distance"` | Sort order |
-| `newly_opened_days` | integer | Filter for places opened in the last N days |
-| `limit` | integer | Max places to return (default 20) |
+- `get_happening_today` — events + places happening today, by location and radius
+- `get_live_now` — what is happening right now
+- `get_weekend` — Saturday/Sunday feed (`weekend_day: "sat" | "sun"`)
+- `get_decision_feed` — ranked decision feed (send `user_lat` / `user_lng`)
+- `browse_places` — places inside a radius, sorted by distance
+- `get_listing` — full detail for one place or venue by `id`
+- `get_top_restaurants` / `get_top_venues` — ranked lists, optional city
+- `get_local_gems` — curated local gems
+- `get_locals_favorites` — locals' favorites
+- `get_venue_events` — upcoming events at one venue (`id`)
+- `get_subcategories` / `get_genres` / `get_event_bridge` — taxonomy feeds
 
-Example prompt: *"Find a place open right now in North Beach with a 4.5+ rating."*
+### Marketing feeds (open, X-API-Key)
 
-### `plan_outing` 🔒 *free account*
+- `get_marketing_events` / `get_marketing_places` / `get_marketing_neighborhoods` — catalog feeds; forward an `X-API-Key` header. `get_marketing_neighborhoods` returns the **35 SF Bay Area neighborhood centroids with coordinates and radii**.
 
-Builds a complete multi-stop outing itinerary (dinner, drinks, events) with walkable legs and timings, matched to vibe, interests, and budget. First call returns a free 2-stop preview plus a one-time connect code (`DP-XXXXXX`) and `https://www.dayplay.io/link`; a free DayPlay account unlocks the full plan, saved to your account and visible in the DayPlay app.
+### Search 🔒 *free account*
 
-### `manage_saved_plans` 🔒 *free account*
+- `search_smart`, `search_query_router`, `search_embed`, `search_parse_intent`, `search_rerank`, `search_web` — model-backed semantic search. Requires the user token via Google connect.
 
-Save itineraries, list saved plans, and set alerts (sellouts, closures, weather) via `action: "save" | "list" | "set_alert" | "cancel_alert"`. Requires the same free-account connect. Saved plans appear in your DayPlay account across web and app.
+### Saves & Outings 🔒 *free account*
 
+- `save_outing` — save a dated, neighborhood-bound outing plan to the signed-in user's Saved tab
+- `get_my_itinerary` — retrieve the signed-in user's saved itineraries
+- `list_saves`, `save_listing`, `unsave_listing`, `list_going`, `mark_going`, `unmark_going` — saved places and event RSVPs
+- `upvote_listing`, `share_local_favorite`, `share_gem` — community signals
 
-### `get_events`
+Requires the free-account connect. A host connected to the remote URL opens Google sign-in on the first gated call; the npm stdio package opens a browser for the same connect step. Saved plans appear on the DayPlay Saved tab across web and app.
 
-Query verified, real-time event occurrences strictly filtered by date, neighborhood, and category.
+Requires the free-account connect (`https://www.dayplay.io/link`). Saved plans appear on the DayPlay Saved tab across web and app.
 
-**SCOPE:** San Francisco Bay Area only (San Francisco, Oakland, Berkeley). Out-of-market locations are declined — never fabricate events. Spatially verified to eliminate cross-bay and geographic drift.
-
-| Parameter | Type | Description |
-| --- | --- | --- |
-| `date` | string (`YYYY-MM-DD`) | Target date |
-| `neighborhood` | string | SF Bay Area neighborhood name (e.g. Mission, North Beach, Oakland, Berkeley) |
-| `category` | string | Category filter (e.g. music, art, food) |
-| `source` | string | Data source filter |
-| `limit` | integer | Max events to return (default 20) |
+Example prompts: *"What's happening in the Mission tonight?"* · *"Build me a Saturday itinerary that never leaves Bernal Heights."* · *"Save this outing to my DayPlay account."*
 
-Example prompt: *"Which Berkeley music events are on this Saturday?"*
+### Legacy compatibility
 
-### `get_neighborhoods`
-
-Returns the complete and exclusive list of **35 San Francisco Bay Area neighborhood centroids with coordinates and radii** (San Francisco, Oakland, Berkeley only). No other market is covered. Use to strictly bind itineraries to a specific neighborhood and to detect out-of-market queries.
-
-Example prompt: *"Give me the neighborhood list, then build a Saturday itinerary that never leaves Bernal Heights."*
-
----
+The five 1.x tool names (`get_neighborhoods`, `get_events`, `get_places`, `plan_outing`, `manage_saved_plans`) remain temporarily served for transition. They are deprecated — migrate to the catalog above; a future release removes them.
 
 ## The Anti-Drift Guarantee
 
@@ -174,7 +168,7 @@ That is the product: the answer stays where you are.
 
 | Env var | Default | Purpose |
 | --- | --- | --- |
-| `DAYPLAY_MCP_URL` | `https://www.dayplay.io/api/mcp` | Override the remote endpoint (staging, self-hosted, local dev) |
+| `DAYPLAY_MCP_URL` | `https://api.dayplay.io/mcp` | Override the remote endpoint (staging, self-hosted, local dev) |
 
 No API key is required for the public endpoint. Optional auth tokens, if your deployment needs them, are passed through as standard `Authorization` headers by the MCP client — never commit them to config files.
 
@@ -183,7 +177,7 @@ No API key is required for the public endpoint. Optional auth tokens, if your de
 ## How the proxy works
 
 ```
-MCP client (stdio)  ⇄  bin/dayplay-mcp.js  ⇄  https://www.dayplay.io/api/mcp (Streamable HTTP)
+MCP client (stdio)  ⇄  bin/dayplay-mcp.js  ⇄  https://api.dayplay.io/mcp (Streamable HTTP)
 ```
 
 The shim lists tools and forwards `tools/call` verbatim to the remote endpoint, so new Dayplay tools appear automatically without an npm update. It is a transport bridge, not a reimplementation — every schema, filter, and verification rule is served by Dayplay itself.
@@ -211,7 +205,7 @@ dayplay-mcp/
 │   └── e2e.mjs
 ├── smithery.yaml             # Smithery.ai registry manifest
 ├── plugin.json               # Agent Plugins standard manifest
-├── package.json              # npm metadata (@dayplayai/mcp-server v1.3.2, MIT)
+├── package.json              # npm metadata (@dayplayai/mcp-server v1.3.4, MIT)
 ├── README.md                 # This file
 └── LICENSE                   # MIT (Dayplay Team)
 ```

package/bin/dayplay-mcp.js

@@ -16,17 +16,19 @@ import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { UnauthorizedError } from "@modelcontextprotocol/sdk/client/auth.js";
 import {
   CallToolRequestSchema,
   ListToolsRequestSchema,
 } from "@modelcontextprotocol/sdk/types.js";
+import { createAuthProvider } from "./oauth.js";
 
-const DEFAULT_ENDPOINT = "https://www.dayplay.io/api/mcp";
+const DEFAULT_ENDPOINT = "https://api.dayplay.io/mcp";
 const ENDPOINT = process.env.DAYPLAY_MCP_URL || DEFAULT_ENDPOINT;
 
 const SERVER_INFO = {
   name: "dayplay",
-  version: "1.3.1",
+  version: "2.0.0",
 };
 
 const log = (...args) => console.error("[dayplay-mcp]", ...args);
@@ -34,14 +36,30 @@ const log = (...args) => console.error("[dayplay-mcp]", ...args);
 /** Build a connected remote client. */
 async function connectRemote() {
   const client = new Client(
-    { name: "dayplay-mcp-proxy", version: "1.3.1" },
+    { name: "dayplay-mcp-proxy", version: "2.0.0" },
     { capabilities: {} },
   );
-  const transport = new StreamableHTTPClientTransport(new URL(ENDPOINT));
+  const authProvider = await createAuthProvider(ENDPOINT, log);
+  const transport = new StreamableHTTPClientTransport(new URL(ENDPOINT), { authProvider });
   await client.connect(transport);
   return client;
 }
 
+async function callRemote(remote, request) {
+  const params = {
+    name: request.params.name,
+    arguments: request.params.arguments ?? {},
+  };
+  try {
+    return await remote.callTool(params);
+  } catch (error) {
+    if (error instanceof UnauthorizedError || error?.name === "UnauthorizedError") {
+      return remote.callTool(params);
+    }
+    throw error;
+  }
+}
+
 /** `--smoke`: verify the remote endpoint and exit non-zero on failure. */
 async function smoke() {
   const client = await connectRemote();
@@ -75,10 +93,7 @@ async function main() {
   });
 
   server.setRequestHandler(CallToolRequestSchema, async (request) => {
-    return remote.callTool({
-      name: request.params.name,
-      arguments: request.params.arguments ?? {},
-    });
+    return callRemote(remote, request);
   });
 
   const shutdown = async () => {

package/bin/oauth.js

@@ -0,0 +1,133 @@
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import http from "node:http";
+import os from "node:os";
+import path from "node:path";
+
+const AUTH_PATH = path.join(os.homedir(), ".dayplay", "mcp-auth.json");
+
+function readState() {
+  try {
+    return JSON.parse(fs.readFileSync(AUTH_PATH, "utf8"));
+  } catch {
+    return {};
+  }
+}
+
+function writeState(state) {
+  fs.mkdirSync(path.dirname(AUTH_PATH), { recursive: true });
+  fs.writeFileSync(AUTH_PATH, JSON.stringify(state), { mode: 0o600 });
+}
+
+function openBrowser(target) {
+  const url = String(target);
+  if (process.platform === "win32") {
+    spawn("cmd", ["/c", "start", "", url], { detached: true, stdio: "ignore" }).unref();
+    return;
+  }
+  const command = process.platform === "darwin" ? "open" : "xdg-open";
+  spawn(command, [url], { detached: true, stdio: "ignore" }).unref();
+}
+
+export async function createAuthProvider(endpoint, log) {
+  const origin = new URL(endpoint).origin;
+  let state = readState();
+  let waitForCode = () => Promise.reject(new Error("Dayplay connect is not waiting"));
+
+  const callback = http.createServer((req, res) => {
+    const url = new URL(req.url ?? "/", "http://127.0.0.1");
+    if (url.pathname !== "/callback") {
+      res.writeHead(404);
+      res.end();
+      return;
+    }
+    res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+    res.end("<p>Dayplay is connected. You can close this tab.</p>");
+    const code = url.searchParams.get("code");
+    const error = url.searchParams.get("error");
+    waitForCode(code, error);
+  });
+  await new Promise((resolve, reject) => {
+    callback.once("error", reject);
+    callback.listen(0, "127.0.0.1", resolve);
+  });
+  const { port } = callback.address();
+  const redirectUrl = `http://127.0.0.1:${port}/callback`;
+
+  return {
+    get redirectUrl() {
+      return redirectUrl;
+    },
+    get clientMetadata() {
+      return {
+        client_name: "Dayplay MCP",
+        redirect_uris: [redirectUrl],
+        grant_types: ["authorization_code", "refresh_token"],
+        response_types: ["code"],
+        token_endpoint_auth_method: "none",
+      };
+    },
+    clientInformation() {
+      return state.client;
+    },
+    saveClientInformation(client) {
+      state = { ...state, client };
+      writeState(state);
+    },
+    tokens() {
+      return state.tokens;
+    },
+    saveTokens(tokens) {
+      state = { ...state, tokens };
+      writeState(state);
+    },
+    saveCodeVerifier(verifier) {
+      state = { ...state, verifier };
+      writeState(state);
+    },
+    codeVerifier() {
+      if (!state.verifier) {
+        throw new Error("Dayplay connect is missing its PKCE verifier");
+      }
+      return state.verifier;
+    },
+    async redirectToAuthorization(authorizationUrl) {
+      log("Opening a browser to connect Dayplay. Sign in with Google, then retry the tool if it does not finish.");
+      const code = await new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+          reject(new Error("Dayplay connect timed out. Sign in with Google and call the tool again."));
+        }, 3 * 60 * 1000);
+        waitForCode = (nextCode, error) => {
+          clearTimeout(timer);
+          if (error || !nextCode) {
+            reject(new Error(error || "Dayplay connect did not return a code"));
+            return;
+          }
+          resolve(nextCode);
+        };
+        openBrowser(authorizationUrl);
+      });
+      const clientId = state.client?.client_id;
+      if (!clientId) {
+        throw new Error("Dayplay connect is missing its client id");
+      }
+      const body = new URLSearchParams({
+        grant_type: "authorization_code",
+        code,
+        code_verifier: state.verifier,
+        redirect_uri: redirectUrl,
+        client_id: clientId,
+      });
+      const response = await fetch(`${origin}/oauth/token`, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body,
+      });
+      if (!response.ok) {
+        throw new Error("Dayplay connect could not finish sign-in");
+      }
+      state = { ...state, tokens: await response.json() };
+      writeState(state);
+    },
+  };
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dayplayai/mcp-server",
-  "version": "1.3.3",
-  "description": "DayPlay MCP — verified real-time SF Bay Area places, events & walkable itineraries for AI agents. 3 free discovery tools + AI outing planning with a free account. Remote endpoint: https://www.dayplay.io/api/mcp",
+  "version": "2.0.0",
+  "description": "DayPlay MCP \u2014 verified real-time SF Bay Area places, events & itineraries for AI agents. 35-tool catalog: feeds, search, saves & outing planning (gated tools need a free account via Google connect). Remote endpoint: https://api.dayplay.io/mcp",
   "keywords": [
     "mcp",
     "model-context-protocol",

package/plugin.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "dayplay-local-concierge",
-  "description": "Verified real-time SF Bay Area places, events & walkable itineraries for AI agents. 3 free discovery tools; a free DayPlay account unlocks plan_outing (full multi-stop outing plans, saved to the user's account) and manage_saved_plans (saved plans + alerts). Strictly San Francisco, Oakland, Berkeley \u2014 out-of-market requests refused by protocol (Anti-Drift Guarantee).",
-  "version": "1.3.2",
+  "description": "Verified real-time SF Bay Area places, events & itineraries for AI agents. 40-tool catalog: open feeds (today/weekend/live-now, browse, venues, gems) + gated search, saves & outing planning via free Google connect. Strictly San Francisco, Oakland, Berkeley (Anti-Drift Guarantee).",
+  "version": "2.0.0",
   "author": {
     "name": "Dayplay Team",
     "email": "hello@dayplay.io",
@@ -32,7 +32,7 @@
   "mcp": {
     "servers": {
       "dayplay": {
-        "url": "https://www.dayplay.io/api/mcp"
+        "url": "https://api.dayplay.io/mcp"
       }
     }
   },

package/skills/vibe-scout/SKILL.md

@@ -27,8 +27,8 @@ Dayplay serves **strictly the San Francisco Bay Area: San Francisco, Oakland, an
 
 ## Instructions
 
-1. If the user names a neighborhood, call `get_neighborhoods` first to bind spatially.
-2. Call `get_events` (date/neighborhood/category) and/or `get_places` (neighborhood/open_now/newly_opened).
+1. If the user names a neighborhood, bind spatially: use `get_marketing_neighborhoods` (35 centroids) or pass lat/lng + radius to the feed tools.
+2. For places/events use `get_happening_today`, `get_weekend`, or `get_live_now` (open tools) and `browse_places`; use `search_smart` for semantic queries (gated — a 401 means the host opens Google connect).
 3. **Enforce boundaries:** East Bay stays in the East Bay. Never cross-bridge drift. Never drift outside San Francisco, Oakland, or Berkeley.
 4. Verify open status — never send someone to a closed door.
 5. Return 2–3 sequenced stops, why each is the move, and hours/walk time.

package/smithery.yaml

@@ -1,15 +1,14 @@
 name: dayplay
 displayName: DayPlay — SF Bay Area Local Intelligence for AI Agents
 description: >-
-  Verified real-time places, events & walkable itineraries for AI agents.
+  Verified real-time SF Bay Area places, events & itineraries for AI agents.
   Geo-locked to San Francisco, Oakland & Berkeley (35 neighborhood centroids).
-  3 free discovery tools; a free account unlocks plan_outing — full multi-stop
-  evening plans with walk times, saved to the user's DayPlay account — plus
-  saved plans and sellout/closure/weather alerts. Honest zero-results protocol:
+  40-tool catalog: open feeds (today/weekend/live-now, browse, venues, gems)
+  plus gated search, saves & outing planning via free Google connect (browser
+  open now supported through the stdio bridge). Honest zero-results protocol:
   agents never fabricate venues, events, dates, or hours (Anti-Drift Guarantee).
-  One remote URL, no API key. NOT AVAILABLE outside the SF Bay Area — out-of-market
-  requests are refused by protocol, never invented.
-version: 1.3.3
+  One remote URL.
+version: 2.0.0
 license: MIT
 homepage: https://www.dayplay.io
 repository: https://github.com/dayplayTeam/dayplay-mcp
@@ -36,27 +35,21 @@ examples:
   - "What's on in Austin tonight? (out of market - Dayplay is strictly SF Bay Area only, so no results are returned)"
 startCommand:
   type: http
-  url: https://www.dayplay.io/api/mcp
+  url: https://api.dayplay.io/mcp
   configSchema:
     type: object
     properties: {}
     required: []
 tools:
-  - name: get_places
-    description: >-
-      Query curated places filtered by neighborhood, open-now status, ratings, or
-      newly opened window. SCOPE: San Francisco Bay Area only (San Francisco,
-      Oakland, Berkeley, 35 neighborhood centroids). Out-of-market locations
-      (e.g. Austin, New York, Tokyo) are declined - never fabricate venues.
-  - name: get_events
-    description: >-
-      Query verified, real-time event occurrences strictly filtered by date,
-      neighborhood, and category. SCOPE: San Francisco Bay Area only (San
-      Francisco, Oakland, Berkeley, 35 neighborhood centroids). Out-of-market
-      locations are declined - never fabricate events.
-  - name: get_neighborhoods
-    description: >-
-      Returns the complete and exclusive list of 35 San Francisco Bay Area
-      neighborhood centroids (San Francisco, Oakland, Berkeley only) with
-      coordinates and radii. No other market is covered. Use to strictly bind
-      itineraries to a specific neighborhood and to detect out-of-market queries.
+  - name: get_happening_today
+    description: Events and places happening today (lat/lng/radius).
+  - name: get_weekend
+    description: Saturday or Sunday feed.
+  - name: get_live_now
+    description: What is happening right now.
+  - name: search_smart
+    description: Smart search (gated - requires free DayPlay account via Google connect).
+  - name: save_outing
+    description: Save a multi-stop outing plan (gated - free account).
+  - name: get_my_itinerary
+    description: Retrieve saved itineraries (gated - free account).