@dpesch/mantisbt-mcp-server 1.10.2 → 1.10.3

package/CHANGELOG.md

@@ -11,6 +11,16 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 ---
 
+## [1.10.3] – 2026-05-15
+
+### Fixed
+- `upload_file`: file uploads previously used `multipart/form-data` via a now-removed `postFormData` helper. The MantisBT REST API does not accept `multipart/form-data` for file uploads — it expects a JSON body with Base64-encoded content. The tool now sends `POST issues/{id}/files` with a JSON body containing `{ files: [{ name, type, content }] }`. The caller-facing API is unchanged: `file_path` and `content` continue to work as before; the server handles Base64 encoding internally when `file_path` is used.
+
+### Changed
+- `upload_file` tool and parameter descriptions updated: `file_path` is now explicitly marked as the preferred input mode (use whenever the file exists on disk — the server reads and encodes it automatically); `content` is marked as a fallback to be used only when `file_path` is not available (e.g. in-memory data or files not accessible via the server filesystem).
+
+---
+
 ## [1.10.2] – 2026-05-03
 
 ### Changed

package/README.de.md

@@ -2,6 +2,7 @@
 
 [![npm version](https://img.shields.io/npm/v/@dpesch/mantisbt-mcp-server)](https://www.npmjs.com/package/@dpesch/mantisbt-mcp-server)
 [![license](https://img.shields.io/npm/l/@dpesch/mantisbt-mcp-server)](LICENSE)
+[![MCP compatible](https://img.shields.io/badge/MCP-compatible-green.svg?style=flat-square)](https://modelcontextprotocol.io/)
 [![MCP Badge](https://lobehub.com/badge/mcp/dpesch-mantisbt-mcp-server)](https://lobehub.com/mcp/dpesch-mantisbt-mcp-server)
 [![MantisBT MCP Server](https://glama.ai/mcp/servers/dpesch/mantisbt-mcp-server/badges/card.svg)](https://glama.ai/mcp/servers/dpesch/mantisbt-mcp-server)
 
@@ -106,7 +107,7 @@ npm run build
 | Tool | Beschreibung |
 |---|---|
 | `list_issue_files` | Anhänge eines Issues auflisten |
-| `upload_file` | Datei an ein Issue anhängen – entweder per lokalem `file_path` oder Base64-kodiertem `content` + `filename` |
+| `upload_file` | Datei an ein Issue anhängen – bevorzugt: lokaler `file_path` (der Server liest und kodiert die Datei automatisch); Fallback: Base64-kodiertes `content` + `filename` (nur verwenden, wenn `file_path` nicht verfügbar ist) |
 
 ### Beziehungen
 

package/README.md

@@ -2,6 +2,7 @@
 
 [![npm version](https://img.shields.io/npm/v/@dpesch/mantisbt-mcp-server)](https://www.npmjs.com/package/@dpesch/mantisbt-mcp-server)
 [![license](https://img.shields.io/npm/l/@dpesch/mantisbt-mcp-server)](LICENSE)
+[![MCP compatible](https://img.shields.io/badge/MCP-compatible-green.svg?style=flat-square)](https://modelcontextprotocol.io/)
 [![MCP Badge](https://lobehub.com/badge/mcp/dpesch-mantisbt-mcp-server)](https://lobehub.com/mcp/dpesch-mantisbt-mcp-server)
 [![MantisBT MCP Server](https://glama.ai/mcp/servers/dpesch/mantisbt-mcp-server/badges/card.svg)](https://glama.ai/mcp/servers/dpesch/mantisbt-mcp-server)
 
@@ -106,7 +107,7 @@ npm run build
 | Tool | Description |
 |---|---|
 | `list_issue_files` | List attachments of an issue |
-| `upload_file` | Upload a file to an issue — either by local `file_path` or Base64-encoded `content` + `filename` |
+| `upload_file` | Upload a file to an issue — preferred: local `file_path` (server reads and encodes automatically); fallback: Base64-encoded `content` + `filename` (use only when `file_path` is not available) |
 
 ### Relationships
 

package/dist/client.js

@@ -140,21 +140,6 @@ export class MantisClient {
         });
         return this.handleResponse(response);
     }
-    async postFormData(path, formData) {
-        // Note: Content-Type must NOT be set here — fetch sets it automatically
-        // with the correct multipart/form-data boundary.
-        const { apiKey } = await this.getCredentials();
-        const response = await fetch(await this.buildUrl(path), {
-            method: 'POST',
-            headers: {
-                'Authorization': apiKey,
-                'Accept': 'application/json',
-            },
-            body: formData,
-            signal: AbortSignal.timeout(MantisClient.TIMEOUT_MS),
-        });
-        return this.handleResponse(response);
-    }
     async getVersion() {
         const response = await fetch(await this.buildUrl('users/me'), {
             method: 'GET',

package/dist/tools/files.js

@@ -46,17 +46,17 @@ Use this tool when you need to inspect or enumerate files attached to an issue.
         title: 'Upload File Attachment',
         description: `Upload a file as an attachment to a MantisBT issue. Adds the file to the issue without modifying any issue fields or status. Returns the created attachment metadata on success.
 
-Two input modes — exactly one must be provided:
-- file_path: absolute path to a local file; filename is derived from the path automatically
-- content: Base64-encoded file content; filename must be supplied explicitly via the filename parameter
+Provide exactly one of the two input modes:
+- file_path (preferred): absolute path to a local file — use this whenever the file exists on disk; the server reads and encodes it automatically; filename is derived from the path
+- content: Base64-encoded file content — only use this when the file is not accessible via a path (e.g. in-memory data); filename must be supplied explicitly via the filename parameter
 
 The optional content_type sets the MIME type (e.g. "image/png"); defaults to "application/octet-stream". Use the optional description to annotate the attachment.
 
 Use this tool to attach files such as logs, screenshots, or patches to an existing issue. To list existing attachments, use list_issue_files. To retrieve issue details, use get_issue.`,
         inputSchema: z.object({
             issue_id: z.coerce.number().int().positive().describe('Numeric issue ID'),
-            file_path: z.string().min(1).optional().describe('Absolute path to the local file to upload (mutually exclusive with content)'),
-            content: z.string().min(1).optional().describe('Base64-encoded file content (mutually exclusive with file_path)'),
+            file_path: z.string().min(1).optional().describe('Preferred: absolute path to the local file to upload — use this whenever the file exists on disk (mutually exclusive with content)'),
+            content: z.string().min(1).optional().describe('Fallback: Base64-encoded file content — only use when file_path is not available (mutually exclusive with file_path)'),
             filename: z.string().min(1).optional().describe('File name for the attachment (required when using content; overrides the derived name when using file_path)'),
             content_type: z.string().optional().describe('MIME type of the file, e.g. "image/png" (default: "application/octet-stream")'),
             description: z.string().optional().describe('Optional description for the attachment'),
@@ -74,7 +74,7 @@ Use this tool to attach files such as logs, screenshots, or patches to an existi
             if (file_path && content) {
                 return { content: [{ type: 'text', text: 'Error: Only one of file_path or content may be provided' }], isError: true };
             }
-            let fileBuffer;
+            let base64Content;
             let fileName;
             if (file_path) {
                 if (normalizedUploadDir) {
@@ -83,23 +83,22 @@ Use this tool to attach files such as logs, screenshots, or patches to an existi
                         return { content: [{ type: 'text', text: errorText('file_path is not allowed — access restricted to the designated upload directory') }], isError: true };
                     }
                 }
-                fileBuffer = await readFile(file_path);
+                const fileBuffer = await readFile(file_path);
+                base64Content = fileBuffer.toString('base64');
                 fileName = filename ?? basename(file_path);
             }
             else {
                 if (!filename) {
                     return { content: [{ type: 'text', text: 'Error: filename is required when using content' }], isError: true };
                 }
-                fileBuffer = Buffer.from(content, 'base64');
+                base64Content = content;
                 fileName = filename;
             }
-            const blob = new Blob([new Uint8Array(fileBuffer)], { type: content_type ?? 'application/octet-stream' });
-            const formData = new FormData();
-            formData.append('file', blob, fileName);
-            if (description) {
-                formData.append('description', description);
-            }
-            const result = await client.postFormData(`issues/${issue_id}/files`, formData);
+            const body = {
+                files: [{ name: fileName, type: content_type ?? 'application/octet-stream', content: base64Content }],
+                ...(description && { description }),
+            };
+            const result = await client.post(`issues/${issue_id}/files`, body);
             return {
                 content: [{ type: 'text', text: JSON.stringify(result ?? { success: true }, null, 2) }],
             };

package/docs/cookbook.de.md

@@ -821,7 +821,7 @@ Hängt eine Datei aus dem lokalen Dateisystem an ein Issue an.
 
 ### Dateiinhalt hochladen (Base64)
 
-Hängt eine Datei an, indem ihr base64-kodierter Inhalt direkt übergeben wird. Verwenden, wenn die Datei nicht auf einem lokal zugänglichen Dateisystem liegt.
+Hängt eine Datei an, indem ihr base64-kodierter Inhalt direkt übergeben wird. Nur als **Fallback** verwenden, wenn die Datei nicht über einen Pfad im Server-Dateisystem erreichbar ist (z.B. im Speicher erzeugte Daten oder Dateien, die nur auf der Client-Seite vorliegen). `file_path` bevorzugen, wenn die Datei auf der Festplatte existiert – der Server liest und kodiert sie automatisch.
 
 **Tool:** `upload_file`
 

package/docs/cookbook.md

@@ -821,7 +821,7 @@ Attaches a file from the local filesystem to an issue.
 
 ### Upload file content (base64)
 
-Attaches a file by passing its base64-encoded content directly. Use this when the file is not on a local filesystem accessible to the server.
+Attaches a file by passing its base64-encoded content directly. Use this **only** as a fallback when the file is not accessible via a path on the server filesystem (e.g. in-memory data or files generated on the client side). Prefer `file_path` whenever the file exists on disk — the server reads and encodes it automatically.
 
 **Tool:** `upload_file`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dpesch/mantisbt-mcp-server",
-  "version": "1.10.2",
+  "version": "1.10.3",
   "mcpName": "io.github.dpesch/mantisbt-mcp-server",
   "description": "MCP server for MantisBT REST API – read and manage bug tracker issues",
   "author": "Dominik Pesch",

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.dpesch/mantisbt-mcp-server",
   "title": "MantisBT MCP Server",
   "description": "MantisBT MCP server – manage issues, notes, files, tags, and relationships. With semantic search.",
-  "version": "1.10.2",
+  "version": "1.10.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@dpesch/mantisbt-mcp-server",
-      "version": "1.10.2",
+      "version": "1.10.3",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"

package/tests/tools/files.test.ts

@@ -99,7 +99,7 @@ describe('upload_file', () => {
     expect(calledUrl).toContain('issues/42/files');
   });
 
-  it('sends a POST request with FormData', async () => {
+  it('sends a POST request with a JSON body', async () => {
     vi.mocked(readFile).mockResolvedValue(Buffer.from('content') as never);
     vi.mocked(fetch).mockResolvedValue(makeResponse(200, JSON.stringify({ id: 5 })));
 
@@ -107,10 +107,12 @@ describe('upload_file', () => {
 
     const options = vi.mocked(fetch).mock.calls[0]![1] as RequestInit;
     expect(options.method).toBe('POST');
-    expect(options.body).toBeInstanceOf(FormData);
+    const body = JSON.parse(options.body as string) as { files: Array<{ name: string; type: string; content: string }> };
+    expect(Array.isArray(body.files)).toBe(true);
+    expect(body.files[0]!.name).toBe('test.txt');
   });
 
-  it('does not set Content-Type header (set automatically by fetch)', async () => {
+  it('sets Content-Type header to application/json', async () => {
     vi.mocked(readFile).mockResolvedValue(Buffer.from('content') as never);
     vi.mocked(fetch).mockResolvedValue(makeResponse(200, JSON.stringify({ id: 5 })));
 
@@ -118,18 +120,18 @@ describe('upload_file', () => {
 
     const options = vi.mocked(fetch).mock.calls[0]![1] as RequestInit;
     const headers = options.headers as Record<string, string>;
-    expect(headers['Content-Type']).toBeUndefined();
+    expect(headers['Content-Type']).toBe('application/json');
   });
 
-  it('appends description when provided', async () => {
+  it('includes description in JSON body when provided', async () => {
     vi.mocked(readFile).mockResolvedValue(Buffer.from('content') as never);
     vi.mocked(fetch).mockResolvedValue(makeResponse(200, JSON.stringify({ id: 5 })));
 
     await mockServer.callTool('upload_file', { issue_id: 42, file_path: '/tmp/test.txt', description: 'My attachment' });
 
     const options = vi.mocked(fetch).mock.calls[0]![1] as RequestInit;
-    const formData = options.body as FormData;
-    expect(formData.get('description')).toBe('My attachment');
+    const body = JSON.parse(options.body as string) as { description: string };
+    expect(body.description).toBe('My attachment');
   });
 
   it('returns the API response', async () => {
@@ -170,9 +172,8 @@ describe('upload_file', () => {
     await mockServer.callTool('upload_file', { issue_id: 42, file_path: '/tmp/report.pdf', filename: 'custom-name.pdf' });
 
     const options = vi.mocked(fetch).mock.calls[0]![1] as RequestInit;
-    const formData = options.body as FormData;
-    const fileEntry = formData.get('file') as File;
-    expect(fileEntry.name).toBe('custom-name.pdf');
+    const body = JSON.parse(options.body as string) as { files: Array<{ name: string }> };
+    expect(body.files[0]!.name).toBe('custom-name.pdf');
   });
 });
 
@@ -208,9 +209,8 @@ describe('upload_file (Base64)', () => {
     });
 
     const options = vi.mocked(fetch).mock.calls[0]![1] as RequestInit;
-    const formData = options.body as FormData;
-    const fileEntry = formData.get('file') as File;
-    expect(fileEntry.name).toBe('export.csv');
+    const body = JSON.parse(options.body as string) as { files: Array<{ name: string }> };
+    expect(body.files[0]!.name).toBe('export.csv');
   });
 
   it('sets the content_type when provided', async () => {
@@ -224,9 +224,8 @@ describe('upload_file (Base64)', () => {
     });
 
     const options = vi.mocked(fetch).mock.calls[0]![1] as RequestInit;
-    const formData = options.body as FormData;
-    const fileEntry = formData.get('file') as File;
-    expect(fileEntry.type).toBe('image/png');
+    const body = JSON.parse(options.body as string) as { files: Array<{ type: string }> };
+    expect(body.files[0]!.type).toBe('image/png');
   });
 
   it('returns isError when neither file_path nor content is provided', async () => {