@drawpro/mcp 0.4.0 → 0.5.0

package/README.md

@@ -3,13 +3,24 @@
 Local MCP server for DrawPro. Lets Claude read and create diagrams in your
 account from Claude Code, Claude Desktop, or any MCP client.
 
+Full documentation:
+[setup](https://github.com/deBilla/drawpro/blob/main/docs/connect-claude-code.md) ·
+[tools](https://github.com/deBilla/drawpro/blob/main/docs/mcp-tools.md) ·
+[diagram specs](https://github.com/deBilla/drawpro/blob/main/docs/diagram-specs.md) ·
+[privacy](https://github.com/deBilla/drawpro/blob/main/docs/privacy.md)
+
 ## Setup
 
 ```bash
-claude mcp add drawpro --scope user -e DRAWPRO_TOKEN="dp_live_..." -- npx -y @drawpro/mcp
+claude mcp add drawpro --scope user -- npx -y @drawpro/mcp
+npx -y @drawpro/mcp auth dp_live_...
 ```
 
-Mint the token in DrawPro under **Connect to Claude Code**.
+Mint the token in DrawPro under **Connect to Claude Code**. `auth` verifies it
+against the API before saving, and `auth dp_live_<new>` rotates it later —
+Claude Code can add and remove a server but not edit one, so a token passed with
+`-e DRAWPRO_TOKEN` can only be changed by removing and re-adding the server.
+`DRAWPRO_TOKEN` still works and takes precedence.
 
 `--scope user` registers it for every project on your machine. The scope
 otherwise defaults to `local`, which loads the server only in the directory the
@@ -123,7 +134,21 @@ coordinates.
 
 ## Usage log
 
-Set `DRAWPRO_MCP_LOG` to record every tool call as JSONL:
+Turning telemetry on is enough to start recording:
+
+```bash
+npx -y @drawpro/mcp telemetry      # show the state and the exact payload
+npx -y @drawpro/mcp telemetry on   # records to ~/.drawpro/usage.jsonl and shares an aggregate
+npx -y @drawpro/mcp telemetry off
+npx -y @drawpro/mcp report         # send once, without turning anything on
+```
+
+Consenting to *send* usage implies consent to *record* it — recording is the
+lesser act — so opting in does not also require configuring a log. The
+implication does not run the other way: setting `DRAWPRO_MCP_LOG` records
+locally and shares nothing.
+
+To record without ever sharing, set the path yourself:
 
 ```bash
 claude mcp add drawpro --scope user \
@@ -131,9 +156,14 @@ claude mcp add drawpro --scope user \
   -e DRAWPRO_MCP_LOG="$HOME/.drawpro/usage.jsonl" \
   -- npx -y @drawpro/mcp
 
-drawpro-mcp stats                 # or: npx -y @drawpro/mcp stats
+npx -y @drawpro/mcp stats
 ```
 
+> Run these from anywhere except a checkout of this repository. Inside it, npm
+> resolves `@drawpro/mcp` to the workspace copy, whose bin is not linked, and
+> npx fails with `drawpro-mcp: command not found`. Use
+> `node packages/mcp/dist/server.js <command>` there instead.
+
 ```
 5 calls  2026-08-29 .. 2026-08-29
 

package/dist/server.js

@@ -25,6 +25,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 
 // src/server.ts
 var import_node_fs3 = require("node:fs");
+var import_node_os3 = require("node:os");
 var import_node_path3 = require("node:path");
 var import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
 var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
@@ -429,6 +430,9 @@ function installId() {
 function telemetryEnabled() {
   return readConfig().telemetry === "on";
 }
+function resolveToken() {
+  return process.env.DRAWPRO_TOKEN || readConfig().token;
+}
 
 // ../diagram/src/ids.ts
 var import_fractional_indexing = require("fractional-indexing");
@@ -1395,10 +1399,10 @@ var ConfigError = class extends Error {
 var clientInstance = null;
 function api() {
   if (!clientInstance) {
-    const token = process.env.DRAWPRO_TOKEN;
+    const token = resolveToken();
     if (!token) {
       throw new ConfigError(
-        'DRAWPRO_TOKEN is not set. Create a token in DrawPro under "Connect to Claude Code", then:\n  claude mcp add drawpro --scope user -e DRAWPRO_TOKEN="dp_live_..." -- npx -y @drawpro/mcp'
+        'No API token. Create one in DrawPro under "Connect to Claude Code", then:\n  npx -y @drawpro/mcp auth dp_live_...\n\nOr supply it through the environment when registering the server:\n  claude mcp add drawpro --scope user -e DRAWPRO_TOKEN="dp_live_..." -- npx -y @drawpro/mcp'
       );
     }
     clientInstance = new DrawProClient(BASE_URL, token, (t) => inFlight.push(t));
@@ -1406,7 +1410,7 @@ function api() {
   return clientInstance;
 }
 var SESSION_ID = Math.random().toString(36).slice(2, 10);
-var VERSION = "0.4.0";
+var VERSION = "0.5.0";
 var inFlight = [];
 var cachedUser = null;
 async function currentUser() {
@@ -1432,10 +1436,17 @@ function text(body) {
 function sheetUrl(workspaceId, sheetId) {
   return `${APP_URL}/workspace/${workspaceId}/sheet/${sheetId}`;
 }
+var DEFAULT_LOG = (0, import_node_path3.join)((0, import_node_os3.homedir)(), ".drawpro", "usage.jsonl");
+function logPath() {
+  const explicit = process.env.DRAWPRO_MCP_LOG;
+  if (explicit) return explicit;
+  return telemetryEnabled() ? DEFAULT_LOG : void 0;
+}
 function logCall(entry) {
-  const path = process.env.DRAWPRO_MCP_LOG;
+  const path = logPath();
   if (!path) return;
   try {
+    (0, import_node_fs3.mkdirSync)((0, import_node_path3.join)((0, import_node_os3.homedir)(), ".drawpro"), { recursive: true, mode: 448 });
     (0, import_node_fs3.appendFileSync)(path, JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...entry }) + "\n");
   } catch {
   }
@@ -1843,9 +1854,11 @@ function summariseLog(file) {
   };
 }
 function stats(path, asJson) {
-  const file = path ?? process.env.DRAWPRO_MCP_LOG;
+  const file = path ?? logPath();
   if (!file) {
-    console.error("Set DRAWPRO_MCP_LOG, or pass a path: drawpro-mcp stats <file>");
+    console.error(
+      "No usage is being recorded. Either set DRAWPRO_MCP_LOG, turn on telemetry\n(which records to ~/.drawpro/usage.jsonl), or pass a path: drawpro-mcp stats <file>"
+    );
     process.exit(2);
   }
   const summary = summariseLog(file);
@@ -1874,7 +1887,7 @@ function stats(path, asJson) {
   console.log("  Add --json for a machine-readable copy.");
 }
 function buildReport() {
-  const file = process.env.DRAWPRO_MCP_LOG;
+  const file = logPath();
   if (!file) return null;
   const summary = summariseLog(file);
   if (!summary) return null;
@@ -1907,8 +1920,11 @@ async function telemetry(action) {
   const report = buildReport();
   if (action === "on") {
     writeConfig({ telemetry: "on" });
-    console.log("Telemetry on. Roughly once a day, this is sent:\n");
-    console.log(report ? JSON.stringify(report, null, 2) : "  (nothing yet \u2014 set DRAWPRO_MCP_LOG to record usage)");
+    console.log(`Telemetry on. Usage is recorded to ${logPath()}`);
+    console.log("Roughly once a day, an aggregate of it is sent:\n");
+    console.log(
+      report ? JSON.stringify(report, null, 2) : "  (no calls recorded yet \u2014 the first report goes out once you have used the tools)"
+    );
     console.log("\nTurn it off any time with: drawpro-mcp telemetry off");
     return;
   }
@@ -1916,7 +1932,9 @@ async function telemetry(action) {
 `);
   console.log("If enabled, this is the entire payload \u2014 tool counts and timings,");
   console.log("no account, no token, no workspace or sheet ids, nothing drawn:\n");
-  console.log(report ? JSON.stringify(report, null, 2) : "  (nothing recorded yet \u2014 set DRAWPRO_MCP_LOG first)");
+  console.log(
+    report ? JSON.stringify(report, null, 2) : `  (no calls recorded yet; recording ${logPath() ? `to ${logPath()}` : "is off"})`
+  );
   console.log("\n  drawpro-mcp telemetry on     share it");
   console.log("  drawpro-mcp telemetry off    stop");
   console.log("  drawpro-mcp report           send once now, without turning it on");
@@ -1924,7 +1942,9 @@ async function telemetry(action) {
 async function reportOnce() {
   const report = buildReport();
   if (!report) {
-    console.error("Nothing to report. Set DRAWPRO_MCP_LOG to record usage first.");
+    console.error(
+      "Nothing to report \u2014 no usage has been recorded. Set DRAWPRO_MCP_LOG, or\nturn on telemetry, which records to ~/.drawpro/usage.jsonl."
+    );
     process.exit(2);
   }
   console.log("Sending:\n");
@@ -1943,12 +1963,56 @@ function maybeSendInBackground() {
     if (ok) writeConfig({ lastReportAt: (/* @__PURE__ */ new Date()).toISOString() });
   });
 }
+async function auth(arg) {
+  if (arg === "--forget") {
+    writeConfig({ token: void 0 });
+    console.log("Token cleared.");
+    return;
+  }
+  if (!arg) {
+    const current = readConfig().token;
+    const fromEnv = Boolean(process.env.DRAWPRO_TOKEN);
+    if (fromEnv) {
+      console.log("Using DRAWPRO_TOKEN from the environment, which takes precedence.");
+    } else if (current) {
+      console.log(`Stored token: ${current.slice(0, 16)}\u2026`);
+    } else {
+      console.log("No token stored.");
+    }
+    console.log("\n  drawpro-mcp auth dp_live_...   store or replace it");
+    console.log("  drawpro-mcp auth --forget      clear it");
+    return;
+  }
+  if (!arg.startsWith("dp_live_")) {
+    throw new ConfigError("That does not look like a DrawPro token \u2014 they begin with dp_live_.");
+  }
+  const probe = new DrawProClient(BASE_URL, arg);
+  let email;
+  try {
+    email = (await probe.me()).email;
+  } catch (err) {
+    throw new ConfigError(
+      `That token was rejected, so it has not been saved: ${err.message}`
+    );
+  }
+  writeConfig({ token: arg });
+  console.log(`Token saved for ${email}.`);
+  if (process.env.DRAWPRO_TOKEN) {
+    console.log(
+      "\nNote: DRAWPRO_TOKEN is also set in this environment and takes precedence.\nRemove it from the MCP registration for the stored token to be used."
+    );
+  }
+}
 async function main() {
   const command = process.argv[2];
   if (command === "login") {
     await login(process.argv.includes("--forget"));
     return;
   }
+  if (command === "auth") {
+    await auth(process.argv[3]);
+    return;
+  }
   if (command === "telemetry") {
     await telemetry(process.argv[3]);
     return;
@@ -1964,7 +2028,7 @@ async function main() {
   }
   if (command && command !== "serve") {
     console.error(
-      `Unknown command "${command}". Use: drawpro-mcp [serve|login|stats|telemetry|report]`
+      `Unknown command "${command}". Use: drawpro-mcp [serve|auth|login|stats|telemetry|report]`
     );
     process.exit(2);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drawpro/mcp",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "MCP server for DrawPro \u2014 read and create end-to-end encrypted Excalidraw diagrams from Claude",
   "license": "MIT",
   "repository": {