@dpesch/mantisbt-mcp-server 1.9.0 → 1.10.0

package/CHANGELOG.md

@@ -7,7 +7,19 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 ---
 
-## [Unreleased]
+## [1.10.0] – 2026-04-11
+
+### Added
+- All issue and note responses now include a `view_url` field with the absolute MantisBT web URL for the respective item. The URL is built by the MCP server from `MANTIS_BASE_URL` — it is not provided by the MantisBT REST API. Pattern: `{baseUrl}/view.php?id={issueId}` for issues; `{baseUrl}/view.php?id={issueId}#bugnoteN` for notes. The field is present in all tools that return issues or notes: `get_issue`, `get_issues`, `list_issues`, `create_issue`, `update_issue`, `list_notes`, `add_note`, and `search_issues`. It is always included regardless of the `select` parameter.
+- `MantisClient` gains a new public `getBaseUrl()` method (returns the resolved, normalised base URL).
+
+---
+
+## [1.9.1] – 2026-03-30
+
+### Fixed
+- Boolean parameters (`dry_run`, `highlight`, `check_latest`, `obsolete`, `inherit`) now accept the strings `"true"` and `"false"` in addition to native booleans. MCP clients that serialize all parameters as JSON strings no longer receive error -32602. Note: `z.coerce.boolean()` was intentionally not used — it would silently convert the string `"false"` to `true` via JavaScript's `Boolean()`.
+- `update_issue`: the `fields` parameter now accepts a JSON-encoded string in addition to a plain object. Invalid JSON is caught and surfaced as a Zod validation error instead of an uncaught `SyntaxError`.
 
 ---
 

package/README.de.md

@@ -87,6 +87,7 @@ npm run build
 | Tool | Beschreibung |
 |---|---|
 | `get_issue` | Ein Issue anhand seiner ID abrufen |
+| `get_issues` | Mehrere Issues per ID in einem Aufruf abrufen (1–50 IDs); nicht zugängliche IDs liefern `null` an ihrer Position, statt den gesamten Aufruf abzubrechen |
 | `list_issues` | Issues nach Projekt, Status, Autor u.v.m. filtern; optionales `select` für Feldprojektion und `status` für clientseitige Statusfilterung — kanonische englische Statusnamen (z.B. `"new"`, `"resolved"`) werden per ID abgeglichen und funktionieren damit sprachunabhängig auf lokalisierten Installationen |
 | `create_issue` | Neues Issue anlegen; `severity` und `priority` müssen kanonische englische Namen sein (z.B. `minor`, `major`, `normal`, `high`) — `get_issue_enums` aufrufen, um alle gültigen Werte und deren lokalisierte Bezeichnungen zu sehen; optionaler `handler`-Parameter akzeptiert einen Benutzernamen als Alternative zu `handler_id` (wird gegen die Projektmitglieder aufgelöst) |
 | `update_issue` | Bestehendes Issue bearbeiten; Enum-Felder (`status`, `priority`, `severity`, `resolution`, `reproducibility`) akzeptieren kanonische englische Namen, lokalisierte Namen oder numerische IDs — der Server löst Namen automatisch zu IDs auf |

package/README.md

@@ -87,6 +87,7 @@ npm run build
 | Tool | Description |
 |---|---|
 | `get_issue` | Retrieve an issue by its numeric ID |
+| `get_issues` | Retrieve multiple issues by ID in one call (1–50 IDs); missing or inaccessible IDs return `null` at their position instead of failing the call |
 | `list_issues` | Filter issues by project, status, author, and more; optional `select` for field projection and `status` for client-side status filtering — canonical English status names (e.g. `"new"`, `"resolved"`) are matched by ID, making the filter language-independent on localized installations |
 | `create_issue` | Create a new issue; `severity` and `priority` must be canonical English names (e.g. `minor`, `major`, `normal`, `high`) — call `get_issue_enums` to see all valid values and their localized labels; optional `handler` parameter accepts a username as alternative to `handler_id` (resolved against project members) |
 | `update_issue` | Update an existing issue; enum fields (`status`, `priority`, `severity`, `resolution`, `reproducibility`) accept canonical English names, localized names, or numeric IDs — the server resolves names to IDs automatically |

package/dist/client.js

@@ -10,6 +10,12 @@
 export function normalizeBaseUrl(url) {
     return url.replace(/\/api\/rest\/?$/, '').replace(/\/$/, '');
 }
+export function buildIssueViewUrl(baseUrl, issueId) {
+    return `${baseUrl}/view.php?id=${issueId}`;
+}
+export function buildNoteViewUrl(baseUrl, issueId, noteId) {
+    return `${baseUrl}/view.php?id=${issueId}#bugnote${noteId}`;
+}
 // ---------------------------------------------------------------------------
 // MantisApiError
 // ---------------------------------------------------------------------------
@@ -45,6 +51,9 @@ export class MantisClient {
         }
         return this.resolvedCredentials;
     }
+    async getBaseUrl() {
+        return (await this.getCredentials()).baseUrl;
+    }
     async buildUrl(path, params) {
         const { baseUrl } = await this.getCredentials();
         const url = new URL(`${baseUrl}/api/rest/${path}`);

package/dist/search/tools.js

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { buildIssueViewUrl } from '../client.js';
 import { SearchSyncService } from './sync.js';
 import { getVersionHint } from '../version-hint.js';
 import { dateFilterSchema, matchesDateFilter, hasDateFilter } from '../date-filter.js';
@@ -24,6 +25,7 @@ function errorText(msg) {
 // ---------------------------------------------------------------------------
 // registerSearchTools
 // ---------------------------------------------------------------------------
+const coerceBool = (val) => val === 'true' ? true : val === 'false' ? false : val;
 export function registerSearchTools(server, client, store, embedder) {
     // ---------------------------------------------------------------------------
     // search_issues
@@ -45,7 +47,7 @@ export function registerSearchTools(server, client, store, embedder) {
                 'When provided, each matching issue is fetched from MantisBT and enriched with the requested fields. ' +
                 'The relevance score is always included. Without this parameter only id and score are returned.'),
             highlight: z
-                .boolean()
+                .preprocess(coerceBool, z.boolean())
                 .default(false)
                 .describe('If true, adds a "highlights" field per result with query terms bolded (**term**) ' +
                 'in the issue summary and a short description snippet. ' +
@@ -74,20 +76,23 @@ export function registerSearchTools(server, client, store, embedder) {
             const dateFilter = { updated_after, updated_before, created_after, created_before };
             const filterActive = hasDateFilter(dateFilter);
             const terms = highlight ? extractTerms(query) : [];
-            const queryVector = await embedder.embed(query);
+            const [queryVector, baseUrl] = await Promise.all([
+                embedder.embed(query),
+                client.getBaseUrl(),
+            ]);
             const results = await store.search(queryVector, top_n);
             if (!select) {
                 // For filtering or highlighting we need store metadata per result
                 if (!filterActive && !terms.length) {
                     return {
-                        content: [{ type: 'text', text: JSON.stringify(results, null, 2) }],
+                        content: [{ type: 'text', text: JSON.stringify(results.map(({ id, score }) => ({ id, score, view_url: buildIssueViewUrl(baseUrl, id) })), null, 2) }],
                     };
                 }
                 const filtered = await Promise.all(results.map(async ({ id, score }) => {
                     const item = await store.getItem(id);
                     if (filterActive && !matchesDateFilter(item?.metadata ?? {}, dateFilter))
                         return null;
-                    const result = { id, score };
+                    const result = { id, score, view_url: buildIssueViewUrl(baseUrl, id) };
                     if (terms.length > 0 && item) {
                         const h = buildHighlights(item.metadata.summary, item.metadata.description, terms);
                         if (h)
@@ -107,7 +112,7 @@ export function registerSearchTools(server, client, store, embedder) {
                     if (filterActive && !matchesDateFilter(issue, dateFilter)) {
                         return null;
                     }
-                    const projected = { id, score };
+                    const projected = { id, score, view_url: buildIssueViewUrl(baseUrl, id) };
                     for (const field of fields) {
                         if (field !== 'id' && field in issue) {
                             projected[field] = issue[field];
@@ -123,7 +128,7 @@ export function registerSearchTools(server, client, store, embedder) {
                     return projected;
                 }
                 catch {
-                    const result = { id, score };
+                    const result = { id, score, view_url: buildIssueViewUrl(baseUrl, id) };
                     if (terms.length > 0) {
                         const item = await store.getItem(id);
                         if (item) {

package/dist/tools/issues.js

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { buildIssueViewUrl, buildNoteViewUrl } from '../client.js';
 import { getVersionHint } from '../version-hint.js';
 import { MANTIS_CANONICAL_ENUM_NAMES, MANTIS_RESOLVED_STATUS_ID, resolveEnumId } from '../constants.js';
 import { dateFilterSchema, matchesDateFilter, hasDateFilter } from '../date-filter.js';
@@ -9,6 +10,16 @@ function errorText(msg) {
     const hint = vh?.getUpdateHint();
     return hint ? `Error: ${msg}\n\n${hint}` : `Error: ${msg}`;
 }
+function enrichIssue(issue, baseUrl) {
+    return {
+        ...issue,
+        view_url: buildIssueViewUrl(baseUrl, issue.id),
+        notes: issue.notes?.map(note => ({
+            ...note,
+            view_url: buildNoteViewUrl(baseUrl, issue.id, note.id),
+        })),
+    };
+}
 const GET_ISSUES_CONCURRENCY = 5;
 // Worker-pool: runs `fn` over all `items` with at most `concurrency` in-flight at once.
 // nextIndex is only incremented inside microtasks, so the ++ is safe without a lock.
@@ -63,8 +74,9 @@ export function registerIssueTools(server, client, cache) {
         try {
             const result = await client.get(`issues/${id}`);
             const issue = result.issues?.[0] ?? result;
+            const baseUrl = await client.getBaseUrl();
             return {
-                content: [{ type: 'text', text: JSON.stringify(issue, null, 2) }],
+                content: [{ type: 'text', text: JSON.stringify(enrichIssue(issue, baseUrl), null, 2) }],
             };
         }
         catch (error) {
@@ -95,15 +107,19 @@ export function registerIssueTools(server, client, cache) {
             idempotentHint: true,
         },
     }, async ({ ids }) => {
-        const results = await runWithConcurrency(ids, GET_ISSUES_CONCURRENCY, async (id) => {
-            try {
-                const result = await client.get(`issues/${id}`);
-                return result.issues?.[0] ?? result;
-            }
-            catch {
-                return null;
-            }
-        });
+        const [rawResults, baseUrl] = await Promise.all([
+            runWithConcurrency(ids, GET_ISSUES_CONCURRENCY, async (id) => {
+                try {
+                    const result = await client.get(`issues/${id}`);
+                    return result.issues?.[0] ?? result;
+                }
+                catch {
+                    return null;
+                }
+            }),
+            client.getBaseUrl(),
+        ]);
+        const results = rawResults.map(issue => issue !== null ? enrichIssue(issue, baseUrl) : null);
         const found = results.filter((r) => r !== null).length;
         return {
             content: [{
@@ -149,11 +165,13 @@ export function registerIssueTools(server, client, cache) {
             };
             const dateFilter = { updated_after, updated_before, created_after, created_before };
             const needsClientFilter = status !== undefined || assigned_to !== undefined || reporter_id !== undefined || hasDateFilter(dateFilter);
+            const baseUrl = await client.getBaseUrl();
             if (!needsClientFilter) {
                 // No client-side filtering — single API call, pass pagination as-is
                 const result = await client.get('issues', { ...baseParams, page, page_size });
+                const enriched = { ...result, issues: result.issues?.map(i => enrichIssue(i, baseUrl)) };
                 return {
-                    content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+                    content: [{ type: 'text', text: JSON.stringify(enriched, null, 2) }],
                 };
             }
             // Client-side filtering active: scan multiple API pages until we have
@@ -214,10 +232,11 @@ export function registerIssueTools(server, client, cache) {
                 serverPage++;
             }
             const start = (page - 1) * page_size;
+            const pageIssues = matching.slice(start, start + page_size).map(i => enrichIssue(i, baseUrl));
             return {
                 content: [{
                         type: 'text',
-                        text: JSON.stringify({ issues: matching.slice(start, start + page_size) }, null, 2),
+                        text: JSON.stringify({ issues: pageIssues }, null, 2),
                     }],
             };
         }
@@ -330,8 +349,9 @@ export function registerIssueTools(server, client, cache) {
                     // unable to fetch details — return minimal object
                 }
             }
+            const baseUrl = await client.getBaseUrl();
             return {
-                content: [{ type: 'text', text: JSON.stringify(issue, null, 2) }],
+                content: [{ type: 'text', text: JSON.stringify(enrichIssue(issue, baseUrl), null, 2) }],
             };
         }
         catch (error) {
@@ -342,6 +362,7 @@ export function registerIssueTools(server, client, cache) {
     // ---------------------------------------------------------------------------
     // update_issue
     // ---------------------------------------------------------------------------
+    const coerceBool = (val) => val === 'true' ? true : val === 'false' ? false : val;
     // MantisBT reference shape: at least one of id or name must be provided
     const ref = z.object({ id: z.number().optional(), name: z.string().optional() })
         .refine(o => o.id !== undefined || o.name !== undefined, { message: "At least one of 'id' or 'name' must be provided" });
@@ -369,8 +390,17 @@ The "fields" object accepts any combination of:
 Important: when resolving an issue, always set BOTH status and resolution to avoid leaving resolution as "open".`,
         inputSchema: z.object({
             id: z.coerce.number().int().positive().describe('Numeric issue ID to update'),
-            dry_run: z.boolean().optional().describe('If true, return the patch payload that would be sent without actually updating the issue. Useful for previewing changes before committing them.'),
-            fields: z.object({
+            dry_run: z.preprocess(coerceBool, z.boolean().optional()).describe('If true, return the patch payload that would be sent without actually updating the issue. Useful for previewing changes before committing them.'),
+            fields: z.preprocess((v) => {
+                if (typeof v !== 'string')
+                    return v;
+                try {
+                    return JSON.parse(v);
+                }
+                catch {
+                    return v;
+                }
+            }, z.object({
                 summary: z.string().optional(),
                 description: z.string().optional(),
                 steps_to_reproduce: z.string().optional(),
@@ -386,7 +416,7 @@ Important: when resolving an issue, always set BOTH status and resolution to avo
                 target_version: ref.optional(),
                 fixed_in_version: ref.optional(),
                 view_state: ref.optional(),
-            }).strict().describe('Fields to update (partial update — only provided fields are changed; unknown keys are rejected)'),
+            }).strict().describe('Fields to update (partial update — only provided fields are changed; unknown keys are rejected)')),
         }),
         annotations: {
             readOnlyHint: false,
@@ -409,9 +439,13 @@ Important: when resolving an issue, always set BOTH status and resolution to avo
                         patch[field] = resolved;
                 }
             }
-            const result = await client.patch(`issues/${id}`, patch);
+            const [result, baseUrl] = await Promise.all([
+                client.patch(`issues/${id}`, patch),
+                client.getBaseUrl(),
+            ]);
+            const issue = result.issue ?? result;
             return {
-                content: [{ type: 'text', text: JSON.stringify(result.issue ?? result, null, 2) }],
+                content: [{ type: 'text', text: JSON.stringify(enrichIssue(issue, baseUrl), null, 2) }],
             };
         }
         catch (error) {

package/dist/tools/notes.js

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { buildNoteViewUrl } from '../client.js';
 import { getVersionHint } from '../version-hint.js';
 function errorText(msg) {
     const vh = getVersionHint();
@@ -23,8 +24,14 @@ export function registerNoteTools(server, client) {
         },
     }, async ({ issue_id }) => {
         try {
-            const result = await client.get(`issues/${issue_id}`);
-            const notes = result.issues?.[0]?.notes ?? [];
+            const [result, baseUrl] = await Promise.all([
+                client.get(`issues/${issue_id}`),
+                client.getBaseUrl(),
+            ]);
+            const notes = (result.issues?.[0]?.notes ?? []).map(note => ({
+                ...note,
+                view_url: buildNoteViewUrl(baseUrl, issue_id, note.id),
+            }));
             return {
                 content: [{ type: 'text', text: JSON.stringify(notes, null, 2) }],
             };
@@ -56,9 +63,13 @@ export function registerNoteTools(server, client) {
                 text,
                 view_state: { name: view_state },
             };
-            const result = await client.post(`issues/${issue_id}/notes`, body);
+            const [result, baseUrl] = await Promise.all([
+                client.post(`issues/${issue_id}/notes`, body),
+                client.getBaseUrl(),
+            ]);
+            const note = result.note ?? result;
             return {
-                content: [{ type: 'text', text: JSON.stringify(result.note ?? result, null, 2) }],
+                content: [{ type: 'text', text: JSON.stringify({ ...note, view_url: buildNoteViewUrl(baseUrl, issue_id, note.id) }, null, 2) }],
             };
         }
         catch (error) {

package/dist/tools/projects.js

@@ -8,6 +8,7 @@ function errorText(msg) {
     const hint = vh?.getUpdateHint();
     return hint ? `Error: ${msg}\n\n${hint}` : `Error: ${msg}`;
 }
+const coerceBool = (val) => val === 'true' ? true : val === 'false' ? false : val;
 export function registerProjectTools(server, client, cache) {
     // ---------------------------------------------------------------------------
     // list_projects
@@ -72,8 +73,8 @@ export function registerProjectTools(server, client, cache) {
         description: 'List all versions defined for a MantisBT project.',
         inputSchema: z.object({
             project_id: z.coerce.number().int().positive().describe('Numeric project ID'),
-            obsolete: z.boolean().default(false).describe('Include obsolete (deprecated) versions (default: false)'),
-            inherit: z.boolean().default(false).describe('Include versions inherited from parent projects (default: false)'),
+            obsolete: z.preprocess(coerceBool, z.boolean()).default(false).describe('Include obsolete (deprecated) versions (default: false)'),
+            inherit: z.preprocess(coerceBool, z.boolean()).default(false).describe('Include versions inherited from parent projects (default: false)'),
         }),
         annotations: {
             readOnlyHint: true,

package/dist/tools/version.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { parseVersion, compareVersions } from '../version-hint.js';
+const coerceBool = (val) => val === 'true' ? true : val === 'false' ? false : val;
 export function registerVersionTools(server, client, versionHint, mcpVersion) {
     // ---------------------------------------------------------------------------
     // get_mcp_version
@@ -26,7 +27,7 @@ export function registerVersionTools(server, client, versionHint, mcpVersion) {
 The version is read from the X-Mantis-Version response header sent by every API call.
 The GitHub comparison requires an outbound HTTPS request to the GitHub API.`,
         inputSchema: z.object({
-            check_latest: z.boolean().default(true).describe('Whether to fetch the latest release from GitHub and compare (default: true)'),
+            check_latest: z.preprocess(coerceBool, z.boolean()).default(true).describe('Whether to fetch the latest release from GitHub and compare (default: true)'),
         }),
         annotations: {
             readOnlyHint: true,

package/docs/cookbook.de.md

@@ -10,6 +10,7 @@ Tool-orientierte Rezepte für den MantisBT MCP Server — jedes Rezept zeigt gen
   - [Gültige Feldnamen für `select` ermitteln](#gültige-feldnamen-für-select-ermitteln)
 - [Issues](#issues)
   - [Einzelnes Issue abrufen](#einzelnes-issue-abrufen)
+  - [Mehrere Issues in einem Aufruf abrufen](#mehrere-issues-in-einem-aufruf-abrufen)
   - [Issues auflisten (paginiert)](#issues-auflisten-paginiert)
   - [Antwortgröße mit `select` reduzieren](#antwortgröße-mit-select-reduzieren)
   - [Nach Status filtern](#nach-status-filtern)
@@ -222,12 +223,59 @@ Ruft ein einzelnes Issue anhand seiner numerischen ID ab, inklusive Notizen, Anh
   "tags": [],
   "notes": [],
   "attachments": [],
-  "relationships": []
+  "relationships": [],
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
 ---
 
+### Mehrere Issues in einem Aufruf abrufen
+
+Ruft bis zu 50 Issues in einem einzigen MCP-Aufruf ab. Die Anfragen laufen parallel (max. 5 gleichzeitig). Nicht zugängliche IDs liefern `null` an ihrer Position — der Aufruf schlägt nie wegen einzelner fehlender IDs fehl.
+
+**Tool:** `get_issues`
+
+**Parameter:**
+- `ids` — Array numerischer Issue-IDs (1–50)
+
+**Request:**
+
+```json
+{
+  "ids": [1042, 1041, 9999]
+}
+```
+
+**Response:**
+
+```json
+{
+  "issues": [
+    {
+      "id": 1042,
+      "summary": "Login-Button auf mobilem Safari reagiert nicht",
+      "status": { "id": 50, "name": "assigned" },
+      "view_url": "https://mantis.example.com/view.php?id=1042"
+    },
+    {
+      "id": 1041,
+      "summary": "Checkout-Gesamtbetrag wird falsch gerundet",
+      "status": { "id": 40, "name": "confirmed" },
+      "view_url": "https://mantis.example.com/view.php?id=1041"
+    },
+    null
+  ],
+  "requested": 3,
+  "found": 2,
+  "failed": 1
+}
+```
+
+> **Hinweis:** `null`-Einträge zeigen IDs an, die nicht gefunden oder nicht zugänglich waren. `failed` gibt an, wie viele IDs nicht abgerufen werden konnten.
+
+---
+
 ### Issues auflisten (paginiert)
 
 Gibt eine paginierte Liste von Issues zurück, optional auf ein Projekt beschränkt.
@@ -258,13 +306,15 @@ Gibt eine paginierte Liste von Issues zurück, optional auf ein Projekt beschrä
       "id": 1042,
       "summary": "Login button unresponsive on mobile Safari",
       "status": { "id": 50, "name": "assigned" },
-      "handler": { "id": 7, "name": "jdoe" }
+      "handler": { "id": 7, "name": "jdoe" },
+      "view_url": "https://mantis.example.com/view.php?id=1042"
     },
     {
       "id": 1041,
       "summary": "Checkout total rounds incorrectly",
       "status": { "id": 40, "name": "confirmed" },
-      "handler": { "id": 4, "name": "jsmith" }
+      "handler": { "id": 4, "name": "jsmith" },
+      "view_url": "https://mantis.example.com/view.php?id=1041"
     }
     // ...
   ]
@@ -301,7 +351,8 @@ Eine kommagetrennte Liste von Feldnamen übergeben, um nur die benötigten Felde
       "id": 1042,
       "summary": "Login button unresponsive on mobile Safari",
       "status": { "id": 50, "name": "assigned" },
-      "handler": { "id": 7, "name": "jdoe" }
+      "handler": { "id": 7, "name": "jdoe" },
+      "view_url": "https://mantis.example.com/view.php?id=1042"
     }
     // ...
   ]
@@ -310,6 +361,8 @@ Eine kommagetrennte Liste von Feldnamen übergeben, um nur die benötigten Felde
 
 > **Hinweis:** Mit `get_issue_fields()` lassen sich alle verfügbaren Feldnamen anzeigen.
 
+> **Hinweis:** `view_url` ist in allen Issue-Responses immer vorhanden — es wird vom MCP-Server injiziert und wird durch den `select`-Parameter nicht beeinflusst.
+
 ---
 
 ### Nach Status filtern
@@ -496,7 +549,8 @@ Legt ein neues Issue in MantisBT an.
   "tags": [],
   "notes": [],
   "attachments": [],
-  "relationships": []
+  "relationships": [],
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
@@ -543,7 +597,8 @@ Löst ein Issue auf und schließt es. **Immer beide Felder** `status` und `resol
   "summary": "Login-Button auf mobilem Safari reagiert nicht",
   "status": { "id": 80, "name": "resolved" },
   "resolution": { "id": 20, "name": "fixed" },
-  "updated_at": "2024-11-06T10:30:00+00:00"
+  "updated_at": "2024-11-06T10:30:00+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
@@ -580,7 +635,8 @@ Löst ein Issue auf und schließt es. **Immer beide Felder** `status` und `resol
   "summary": "Login-Button auf mobilem Safari reagiert nicht",
   "status": { "id": 50, "name": "assigned" },
   "handler": { "id": 7, "name": "jdoe" },
-  "updated_at": "2024-11-06T11:00:00+00:00"
+  "updated_at": "2024-11-06T11:00:00+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
@@ -614,7 +670,8 @@ Setzt das Feld `fixed_in_version` eines Issues.
   "id": 1042,
   "summary": "Login-Button auf mobilem Safari reagiert nicht",
   "fixed_in_version": { "name": "2.1.0" },
-  "updated_at": "2024-11-06T11:15:00+00:00"
+  "updated_at": "2024-11-06T11:15:00+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
@@ -652,7 +709,8 @@ Fügt eine öffentlich sichtbare Notiz zu einem Issue hinzu.
   "reporter": { "id": 7, "name": "jdoe" },
   "text": "In Version 2.0.3 reproduziert. Ursache in der Auth-Middleware identifiziert.",
   "view_state": { "id": 10, "name": "public" },
-  "created_at": "2024-11-05T14:02:11+00:00"
+  "created_at": "2024-11-05T14:02:11+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042#bugnote88"
 }
 ```
 
@@ -687,7 +745,8 @@ Fügt eine Notiz hinzu, die nur für Entwickler und Manager sichtbar ist.
   "reporter": { "id": 7, "name": "jdoe" },
   "text": "Intern: Ursache ist das nicht erneuerte Session-Token.",
   "view_state": { "id": 50, "name": "private" },
-  "created_at": "2024-11-05T14:05:00+00:00"
+  "created_at": "2024-11-05T14:05:00+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042#bugnote89"
 }
 ```
 
@@ -1265,9 +1324,9 @@ Findet Issues, die einem natürlichsprachigen Suchbegriff semantisch ähnlich si
 
 ```json
 [
-  { "id": 1042, "score": 0.91 },
-  { "id": 987,  "score": 0.84 },
-  { "id": 1015, "score": 0.79 }
+  { "id": 1042, "score": 0.91, "view_url": "https://mantis.example.com/view.php?id=1042" },
+  { "id": 987,  "score": 0.84, "view_url": "https://mantis.example.com/view.php?id=987" },
+  { "id": 1015, "score": 0.79, "view_url": "https://mantis.example.com/view.php?id=1015" }
 ]
 ```
 
@@ -1306,7 +1365,8 @@ Reichert Suchergebnisse mit bestimmten Feldern aus MantisBT an. Ohne `select` we
     "score": 0.91,
     "summary": "Login button unresponsive on mobile Safari",
     "status": { "id": 50, "name": "assigned" },
-    "handler": { "id": 7, "name": "jdoe" }
+    "handler": { "id": 7, "name": "jdoe" },
+    "view_url": "https://mantis.example.com/view.php?id=1042"
   }
   // ...
 ]
@@ -1344,6 +1404,7 @@ Zeigt, welcher Teil eines Issues mit der Suchanfrage übereinstimmt. Jedes Ergeb
   {
     "id": 1042,
     "score": 0.91,
+    "view_url": "https://mantis.example.com/view.php?id=1042",
     "highlights": {
       "summary": "**Login**-Button reagiert nach **Passwort**-**Reset** auf Mobile Safari nicht",
       "description": "…Benutzer tippt auf **Login** und es passiert nichts. Reproduzierbar nach einem **Passwort**-**Reset**-Vorgang…"
@@ -1352,13 +1413,15 @@ Zeigt, welcher Teil eines Issues mit der Suchanfrage übereinstimmt. Jedes Ergeb
   {
     "id": 987,
     "score": 0.84,
+    "view_url": "https://mantis.example.com/view.php?id=987",
     "highlights": {
       "summary": "**Login** schlägt mit 401 fehl — Token ungültig"
     }
   },
   {
     "id": 1015,
-    "score": 0.79
+    "score": 0.79,
+    "view_url": "https://mantis.example.com/view.php?id=1015"
   }
 ]
 ```

package/docs/cookbook.md

@@ -10,6 +10,7 @@ Tool-oriented recipes for the MantisBT MCP server — each recipe shows exactly
   - [Discover valid field names for `select`](#discover-valid-field-names-for-select)
 - [Issues](#issues)
   - [Fetch a single issue](#fetch-a-single-issue)
+  - [Fetch multiple issues in one call](#fetch-multiple-issues-in-one-call)
   - [List issues (paginated)](#list-issues-paginated)
   - [Reduce response size with `select`](#reduce-response-size-with-select)
   - [Filter by status](#filter-by-status)
@@ -222,12 +223,59 @@ Retrieves a single issue by its numeric ID including notes, attachments, tags, a
   "tags": [],
   "notes": [],
   "attachments": [],
-  "relationships": []
+  "relationships": [],
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
 ---
 
+### Fetch multiple issues in one call
+
+Fetches up to 50 issues in a single MCP call. Requests run in parallel (max 5 concurrent). Missing or inaccessible IDs return `null` at their position — the call never fails due to individual missing IDs.
+
+**Tool:** `get_issues`
+
+**Parameters:**
+- `ids` — array of numeric issue IDs (1–50)
+
+**Request:**
+
+```json
+{
+  "ids": [1042, 1041, 9999]
+}
+```
+
+**Response:**
+
+```json
+{
+  "issues": [
+    {
+      "id": 1042,
+      "summary": "Login button unresponsive on mobile Safari",
+      "status": { "id": 50, "name": "assigned" },
+      "view_url": "https://mantis.example.com/view.php?id=1042"
+    },
+    {
+      "id": 1041,
+      "summary": "Checkout total rounds incorrectly",
+      "status": { "id": 40, "name": "confirmed" },
+      "view_url": "https://mantis.example.com/view.php?id=1041"
+    },
+    null
+  ],
+  "requested": 3,
+  "found": 2,
+  "failed": 1
+}
+```
+
+> **Note:** `null` entries indicate IDs that were not found or could not be accessed. Check `failed` to see how many IDs could not be retrieved.
+
+---
+
 ### List issues (paginated)
 
 Returns a paginated list of issues, optionally scoped to a project.
@@ -258,13 +306,15 @@ Returns a paginated list of issues, optionally scoped to a project.
       "id": 1042,
       "summary": "Login button unresponsive on mobile Safari",
       "status": { "id": 50, "name": "assigned" },
-      "handler": { "id": 7, "name": "jdoe" }
+      "handler": { "id": 7, "name": "jdoe" },
+      "view_url": "https://mantis.example.com/view.php?id=1042"
     },
     {
       "id": 1041,
       "summary": "Checkout total rounds incorrectly",
       "status": { "id": 40, "name": "confirmed" },
-      "handler": { "id": 4, "name": "jsmith" }
+      "handler": { "id": 4, "name": "jsmith" },
+      "view_url": "https://mantis.example.com/view.php?id=1041"
     }
     // ...
   ]
@@ -301,7 +351,8 @@ Pass a comma-separated list of field names to receive only the fields you need.
       "id": 1042,
       "summary": "Login button unresponsive on mobile Safari",
       "status": { "id": 50, "name": "assigned" },
-      "handler": { "id": 7, "name": "jdoe" }
+      "handler": { "id": 7, "name": "jdoe" },
+      "view_url": "https://mantis.example.com/view.php?id=1042"
     }
     // ...
   ]
@@ -310,6 +361,8 @@ Pass a comma-separated list of field names to receive only the fields you need.
 
 > **Note:** Use `get_issue_fields()` to see all available field names.
 
+> **Note:** `view_url` is always present in all issue responses — it is injected by the MCP server and is not affected by the `select` parameter.
+
 ---
 
 ### Filter by status
@@ -496,7 +549,8 @@ Creates a new issue in MantisBT.
   "tags": [],
   "notes": [],
   "attachments": [],
-  "relationships": []
+  "relationships": [],
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
@@ -543,7 +597,8 @@ Resolves and closes an issue. Always set **both** `status` and `resolution` —
   "summary": "Login button unresponsive on mobile Safari",
   "status": { "id": 80, "name": "resolved" },
   "resolution": { "id": 20, "name": "fixed" },
-  "updated_at": "2024-11-06T10:30:00+00:00"
+  "updated_at": "2024-11-06T10:30:00+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
@@ -580,7 +635,8 @@ Changes the handler (assignee) of an existing issue.
   "summary": "Login button unresponsive on mobile Safari",
   "status": { "id": 50, "name": "assigned" },
   "handler": { "id": 7, "name": "jdoe" },
-  "updated_at": "2024-11-06T11:00:00+00:00"
+  "updated_at": "2024-11-06T11:00:00+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
@@ -614,7 +670,8 @@ Sets the `fixed_in_version` field on an issue.
   "id": 1042,
   "summary": "Login button unresponsive on mobile Safari",
   "fixed_in_version": { "name": "2.1.0" },
-  "updated_at": "2024-11-06T11:15:00+00:00"
+  "updated_at": "2024-11-06T11:15:00+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042"
 }
 ```
 
@@ -652,7 +709,8 @@ Adds a publicly visible note to an issue.
   "reporter": { "id": 7, "name": "jdoe" },
   "text": "Reproduced on version 2.0.3. Root cause identified in the auth middleware.",
   "view_state": { "id": 10, "name": "public" },
-  "created_at": "2024-11-05T14:02:11+00:00"
+  "created_at": "2024-11-05T14:02:11+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042#bugnote88"
 }
 ```
 
@@ -687,7 +745,8 @@ Adds a note visible only to developers and managers.
   "reporter": { "id": 7, "name": "jdoe" },
   "text": "Internal: this is caused by the session token not being refreshed.",
   "view_state": { "id": 50, "name": "private" },
-  "created_at": "2024-11-05T14:05:00+00:00"
+  "created_at": "2024-11-05T14:05:00+00:00",
+  "view_url": "https://mantis.example.com/view.php?id=1042#bugnote89"
 }
 ```
 
@@ -1265,9 +1324,9 @@ Finds issues semantically similar to a natural language query. Returns issue IDs
 
 ```json
 [
-  { "id": 1042, "score": 0.91 },
-  { "id": 987,  "score": 0.84 },
-  { "id": 1015, "score": 0.79 }
+  { "id": 1042, "score": 0.91, "view_url": "https://mantis.example.com/view.php?id=1042" },
+  { "id": 987,  "score": 0.84, "view_url": "https://mantis.example.com/view.php?id=987" },
+  { "id": 1015, "score": 0.79, "view_url": "https://mantis.example.com/view.php?id=1015" }
 ]
 ```
 
@@ -1306,7 +1365,8 @@ Enriches search results with specific fields fetched from MantisBT. Without `sel
     "score": 0.91,
     "summary": "Login button unresponsive on mobile Safari",
     "status": { "id": 50, "name": "assigned" },
-    "handler": { "id": 7, "name": "jdoe" }
+    "handler": { "id": 7, "name": "jdoe" },
+    "view_url": "https://mantis.example.com/view.php?id=1042"
   }
   // ...
 ]
@@ -1344,6 +1404,7 @@ Shows which part of an issue matched the search query. Each result that has keyw
   {
     "id": 1042,
     "score": 0.91,
+    "view_url": "https://mantis.example.com/view.php?id=1042",
     "highlights": {
       "summary": "**Login** button unresponsive after **password** **reset** on mobile Safari",
       "description": "…user taps **login** and nothing happens. Reproducible after a **password** **reset** flow…"
@@ -1352,13 +1413,15 @@ Shows which part of an issue matched the search query. Each result that has keyw
   {
     "id": 987,
     "score": 0.84,
+    "view_url": "https://mantis.example.com/view.php?id=987",
     "highlights": {
       "summary": "**Login** fails with 401 — token invalidated"
     }
   },
   {
     "id": 1015,
-    "score": 0.79
+    "score": 0.79,
+    "view_url": "https://mantis.example.com/view.php?id=1015"
   }
 ]
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dpesch/mantisbt-mcp-server",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "mcpName": "io.github.dpesch/mantisbt-mcp-server",
   "description": "MCP server for MantisBT REST API – read and manage bug tracker issues",
   "author": "Dominik Pesch",

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.dpesch/mantisbt-mcp-server",
   "title": "MantisBT MCP Server",
   "description": "MantisBT MCP server – manage issues, notes, files, tags, and relationships. With semantic search.",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@dpesch/mantisbt-mcp-server",
-      "version": "1.9.0",
+      "version": "1.10.0",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"

package/tests/client.test.ts

@@ -1,5 +1,5 @@
 import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { MantisClient, MantisApiError } from '../src/client.js';
+import { MantisClient, MantisApiError, buildIssueViewUrl, buildNoteViewUrl } from '../src/client.js';
 
 // ---------------------------------------------------------------------------
 // Helpers
@@ -331,3 +331,42 @@ describe('MantisClient – responseObserver', () => {
     expect(observer).not.toHaveBeenCalled();
   });
 });
+
+// ---------------------------------------------------------------------------
+// URL helpers
+// ---------------------------------------------------------------------------
+
+describe('buildIssueViewUrl', () => {
+  it('builds the correct MantisBT issue view URL', () => {
+    expect(buildIssueViewUrl('https://mantis.example.com', 42))
+      .toBe('https://mantis.example.com/view.php?id=42');
+  });
+
+  it('works with base URLs that have a path prefix', () => {
+    expect(buildIssueViewUrl('https://example.com/mantis', 1))
+      .toBe('https://example.com/mantis/view.php?id=1');
+  });
+});
+
+describe('buildNoteViewUrl', () => {
+  it('builds the correct MantisBT note anchor URL', () => {
+    expect(buildNoteViewUrl('https://mantis.example.com', 42, 99))
+      .toBe('https://mantis.example.com/view.php?id=42#bugnote99');
+  });
+});
+
+describe('MantisClient – getBaseUrl', () => {
+  it('returns the normalized base URL (direct constructor)', async () => {
+    const client = new MantisClient('https://mantis.example.com', 'token');
+    expect(await client.getBaseUrl()).toBe('https://mantis.example.com');
+  });
+
+  it('returns the base URL from the credential factory', async () => {
+    const factory = vi.fn().mockResolvedValue({
+      baseUrl: 'https://lazy.example.com',
+      apiKey: 'key',
+    });
+    const client = new MantisClient(factory);
+    expect(await client.getBaseUrl()).toBe('https://lazy.example.com');
+  });
+});

package/tests/search/tools.test.ts

@@ -164,16 +164,17 @@ describe('rebuild_search_index – full: false', () => {
 // ---------------------------------------------------------------------------
 
 describe('search_issues – select parameter', () => {
-  it('returns plain {id, score} array when select is not provided', async () => {
+  it('returns plain {id, score, view_url} array when select is not provided', async () => {
     const store = makeMockStore({ itemCount: 2 });
     registerSearchTools(mockServer as never, client, store, embedder);
 
     const result = await mockServer.callTool('search_issues', { query: 'test', top_n: 2 });
 
     expect(result.isError).toBeUndefined();
-    const parsed = JSON.parse(result.content[0]!.text) as Array<{ id: number; score: number }>;
+    const parsed = JSON.parse(result.content[0]!.text) as Array<{ id: number; score: number; view_url: string }>;
     expect(parsed[0]).toEqual(expect.objectContaining({ id: expect.any(Number), score: expect.any(Number) }));
-    expect(Object.keys(parsed[0]!)).toEqual(['id', 'score']);
+    expect(Object.keys(parsed[0]!)).toEqual(['id', 'score', 'view_url']);
+    expect(parsed[0]!.view_url).toBe(`https://mantis.example.com/view.php?id=${parsed[0]!.id}`);
   });
 
   it('fetches issues and projects requested fields when select is provided', async () => {
@@ -234,8 +235,8 @@ describe('search_issues – select parameter', () => {
     expect(parsed).toHaveLength(2);
     // First item enriched
     expect(parsed[0]).toHaveProperty('summary');
-    // Second item fallback — only id and score
-    expect(Object.keys(parsed[1]!).sort()).toEqual(['id', 'score']);
+    // Second item fallback — id, score, and view_url
+    expect(Object.keys(parsed[1]!).sort()).toEqual(['id', 'score', 'view_url']);
   });
 
   it('omits non-existent fields silently', async () => {
@@ -630,3 +631,31 @@ describe('search_issues – highlight: true combined with date filter', () => {
     expect(parsed[0]!.id).toBe(1);
   });
 });
+
+// ---------------------------------------------------------------------------
+// string-coercion – highlight as string
+// ---------------------------------------------------------------------------
+
+describe('string-coercion – search_issues highlight as string', () => {
+  it('accepts highlight "true" as boolean true', async () => {
+    const store = makeMockStore({
+      items: [{ id: 1, score: 0.9 }],
+    });
+    vi.mocked(store.getItem).mockResolvedValue({
+      id: 1,
+      vector: [],
+      metadata: { summary: 'Login error occurred', description: 'The login fails.' },
+    });
+    registerSearchTools(mockServer as never, client, store, embedder);
+
+    const result = await mockServer.callTool(
+      'search_issues',
+      { query: 'login error', top_n: 1, highlight: 'true' },
+      { validate: true },
+    );
+
+    expect(result.isError).toBeUndefined();
+    const parsed = JSON.parse(result.content[0]!.text) as Array<Record<string, unknown>>;
+    expect(parsed[0]).toHaveProperty('highlights');
+  });
+});

package/tests/tools/string-coercion.test.ts

@@ -19,6 +19,8 @@ import { registerMonitorTools } from '../../src/tools/monitors.js';
 import { registerRelationshipTools } from '../../src/tools/relationships.js';
 import { registerTagTools } from '../../src/tools/tags.js';
 import { registerProjectTools } from '../../src/tools/projects.js';
+import { registerVersionTools } from '../../src/tools/version.js';
+import { VersionHintService } from '../../src/version-hint.js';
 import { MockMcpServer, makeResponse } from '../helpers/mock-server.js';
 
 // ---------------------------------------------------------------------------
@@ -39,6 +41,7 @@ beforeEach(() => {
   registerRelationshipTools(mockServer as never, client);
   registerTagTools(mockServer as never, client);
   registerProjectTools(mockServer as never, client);
+  registerVersionTools(mockServer as never, client, new VersionHintService(), '0.0.0-test');
   vi.stubGlobal('fetch', vi.fn());
 });
 
@@ -251,3 +254,64 @@ describe('string-coercion – get_project_versions', () => {
     expect(result.isError).toBeUndefined();
   });
 });
+
+// ---------------------------------------------------------------------------
+// Boolean-Parameter als String
+// ---------------------------------------------------------------------------
+
+describe('string-coercion – update_issue fields as JSON string', () => {
+  it('accepts fields as JSON string', async () => {
+    vi.mocked(fetch).mockResolvedValue(makeResponse(200, JSON.stringify({ issue: { id: 99, summary: 'Updated' } })));
+    const result = await mockServer.callTool(
+      'update_issue',
+      { id: 99, fields: '{"summary":"Updated"}' },
+      { validate: true },
+    );
+    expect(result.isError).toBeUndefined();
+  });
+
+  it('rejects invalid JSON in fields with a validation error (not an uncaught exception)', async () => {
+    const result = await mockServer.callTool(
+      'update_issue',
+      { id: 99, fields: '{invalid json' },
+      { validate: true },
+    );
+    expect(result.isError).toBe(true);
+  });
+});
+
+describe('string-coercion – update_issue dry_run as string', () => {
+  it('accepts dry_run "true" as boolean true', async () => {
+    const result = await mockServer.callTool(
+      'update_issue',
+      { id: 99, fields: { summary: 'x' }, dry_run: 'true' },
+      { validate: true },
+    );
+    expect(result.isError).toBeUndefined();
+    expect(result.content[0]?.text).toContain('"dry_run": true');
+  });
+});
+
+describe('string-coercion – get_project_versions boolean flags', () => {
+  it('accepts obsolete "true" and inherit "false" as booleans', async () => {
+    vi.mocked(fetch).mockResolvedValue(makeResponse(200, JSON.stringify({ projects: [{ versions: [] }] })));
+    const result = await mockServer.callTool(
+      'get_project_versions',
+      { project_id: 3, obsolete: 'true', inherit: 'false' },
+      { validate: true },
+    );
+    expect(result.isError).toBeUndefined();
+  });
+});
+
+describe('string-coercion – get_mantis_version check_latest as string', () => {
+  it('accepts check_latest "false" as boolean false', async () => {
+    vi.mocked(fetch).mockResolvedValue(makeResponse(200, JSON.stringify({ version: '2.26.0' })));
+    const result = await mockServer.callTool(
+      'get_mantis_version',
+      { check_latest: 'false' },
+      { validate: true },
+    );
+    expect(result.isError).toBeUndefined();
+  });
+});