@ekkos/mcp-server 1.2.2 → 1.2.3

package/CHANGELOG.md

@@ -131,6 +131,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 
 
+
+
 
 
 

package/PUBLISH.md

@@ -123,3 +123,5 @@ Should NOT include:
 
 **Status:** Ready to publish  
 **Waiting for:** npm login completion
+
+

package/README.md

@@ -23,7 +23,22 @@ npm install -g @ekkos/mcp-server
 
 **For Windsurf:** Add to `~/.codeium/windsurf/mcp_config.json`
 
-**For Claude Code:** Add to `~/.claude_code/mcp.json`
+```json
+{
+  "mcpServers": {
+    "ekkos-memory": {
+      "url": "https://mcp.ekkos.dev/api/v1/mcp/sse?api_key=your-api-key-here",
+      "transport": "sse",
+      "headers": {
+        "Authorization": "Bearer your-api-key-here",
+        "X-User-ID": "your-user-id-here"
+      }
+    }
+  }
+}
+```
+
+**For Claude Code:** Add to `~/.claude/settings.json`
 
 ```json
 {

package/build/index.js

@@ -14,14 +14,24 @@
  */
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { CallToolRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { createClient } from '@supabase/supabase-js';
 import http from 'http';
 import https from 'https';
 // Server configuration - USE DIRECT SUPABASE CONNECTION
 // Bypass broken production API, query database directly
-const SUPABASE_URL = process.env.NEXT_PUBLIC_SUPABASE_URL || 'https://gqizlqwwytybfqpetwip.supabase.co';
-const SUPABASE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.MEMORY_API_TOKEN || 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImdxaXpscXd3eXR5YmZxcGV0d2lwIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImlhdCI6MTc1ODU5NDMwMCwiZXhwIjoyMDc0MTcwMzAwfQ.QWY9gsWoF28bD6_PoZ5Nz3F58S5trsprOPHaAjIESe8';
+// SECURITY: Never hardcode credentials - require environment variables
+const SUPABASE_URL = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL;
+const SUPABASE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.MEMORY_API_TOKEN;
+// Fail fast if credentials are missing (prevents accidental exposure)
+if (!SUPABASE_URL) {
+    console.error('[MCP:ekkos-memory] ERROR: SUPABASE_URL or NEXT_PUBLIC_SUPABASE_URL environment variable is required');
+    process.exit(1);
+}
+if (!SUPABASE_KEY) {
+    console.error('[MCP:ekkos-memory] ERROR: SUPABASE_SERVICE_ROLE_KEY or MEMORY_API_TOKEN environment variable is required');
+    process.exit(1);
+}
 // Create Supabase client for direct database access
 const supabase = createClient(SUPABASE_URL, SUPABASE_KEY);
 // Keep legacy Memory API config for non-pattern queries
@@ -976,10 +986,11 @@ This is essential for:
 // Server implementation
 const server = new Server({
     name: 'ekkos-memory',
-    version: '1.0.0',
+    version: '1.2.3',
 }, {
     capabilities: {
         tools: {},
+        resources: {}, // Support resources listing (even if empty)
     },
 });
 // List available tools
@@ -988,6 +999,12 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
         tools: TOOLS,
     };
 });
+// List available resources (ekkOS uses tools, not resources, but we support the request)
+server.setRequestHandler(ListResourcesRequestSchema, async () => {
+    return {
+        resources: [], // ekkOS uses tools for all operations, not resources
+    };
+});
 // User-friendly tool names for display
 const toolDisplayNames = {
     'search_memory': '🔍 Search Memory',
@@ -1655,14 +1672,15 @@ The ingestion worker will pick this up within 1-5 minutes.`,
                 const contentHash = createHash('sha256').update(content).digest('hex');
                 try {
                     // Insert directly into patterns table via Supabase
-                    const SUPABASE_URL = process.env.NEXT_PUBLIC_SUPABASE_URL || 'https://gqizlqwwytybfqpetwip.supabase.co';
-                    const SUPABASE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY || MEMORY_API_TOKEN;
-                    const insertResponse = await fetch(`${SUPABASE_URL}/rest/v1/patterns`, {
+                    // Use the same SUPABASE_URL and SUPABASE_KEY from top-level config
+                    const localSupabaseUrl = SUPABASE_URL;
+                    const localSupabaseKey = SUPABASE_KEY;
+                    const insertResponse = await fetch(`${localSupabaseUrl}/rest/v1/patterns`, {
                         method: 'POST',
                         headers: {
                             'Content-Type': 'application/json',
-                            'apikey': SUPABASE_KEY,
-                            'Authorization': `Bearer ${SUPABASE_KEY}`,
+                            'apikey': localSupabaseKey,
+                            'Authorization': `Bearer ${localSupabaseKey}`,
                             'Prefer': 'return=representation',
                         },
                         body: JSON.stringify({

package/index.ts

@@ -17,6 +17,7 @@ import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import {
     CallToolRequestSchema,
+    ListResourcesRequestSchema,
     ListToolsRequestSchema,
     Tool,
 } from '@modelcontextprotocol/sdk/types.js';
@@ -26,8 +27,19 @@ import https from 'https';
 
 // Server configuration - USE DIRECT SUPABASE CONNECTION
 // Bypass broken production API, query database directly
-const SUPABASE_URL = process.env.NEXT_PUBLIC_SUPABASE_URL || 'https://gqizlqwwytybfqpetwip.supabase.co';
-const SUPABASE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.MEMORY_API_TOKEN || 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImdxaXpscXd3eXR5YmZxcGV0d2lwIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImlhdCI6MTc1ODU5NDMwMCwiZXhwIjoyMDc0MTcwMzAwfQ.QWY9gsWoF28bD6_PoZ5Nz3F58S5trsprOPHaAjIESe8';
+// SECURITY: Never hardcode credentials - require environment variables
+const SUPABASE_URL = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL;
+const SUPABASE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.MEMORY_API_TOKEN;
+
+// Fail fast if credentials are missing (prevents accidental exposure)
+if (!SUPABASE_URL) {
+  console.error('[MCP:ekkos-memory] ERROR: SUPABASE_URL or NEXT_PUBLIC_SUPABASE_URL environment variable is required');
+  process.exit(1);
+}
+if (!SUPABASE_KEY) {
+  console.error('[MCP:ekkos-memory] ERROR: SUPABASE_SERVICE_ROLE_KEY or MEMORY_API_TOKEN environment variable is required');
+  process.exit(1);
+}
 
 // Create Supabase client for direct database access
 const supabase = createClient(SUPABASE_URL, SUPABASE_KEY);
@@ -1023,11 +1035,12 @@ This is essential for:
 const server = new Server(
   {
     name: 'ekkos-memory',
-    version: '1.0.0',
+    version: '1.2.3',
   },
   {
     capabilities: {
       tools: {},
+      resources: {}, // Support resources listing (even if empty)
     },
   }
 );
@@ -1039,6 +1052,13 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
   };
 });
 
+// List available resources (ekkOS uses tools, not resources, but we support the request)
+server.setRequestHandler(ListResourcesRequestSchema, async () => {
+  return {
+    resources: [], // ekkOS uses tools for all operations, not resources
+  };
+});
+
 // User-friendly tool names for display
 const toolDisplayNames: Record<string, string> = {
   'search_memory': '🔍 Search Memory',
@@ -1772,15 +1792,16 @@ The ingestion worker will pick this up within 1-5 minutes.`,
 
         try {
           // Insert directly into patterns table via Supabase
-          const SUPABASE_URL = process.env.NEXT_PUBLIC_SUPABASE_URL || 'https://gqizlqwwytybfqpetwip.supabase.co';
-          const SUPABASE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY || MEMORY_API_TOKEN;
+          // Use the same SUPABASE_URL and SUPABASE_KEY from top-level config
+          const localSupabaseUrl = SUPABASE_URL;
+          const localSupabaseKey = SUPABASE_KEY;
 
-          const insertResponse = await fetch(`${SUPABASE_URL}/rest/v1/patterns`, {
+          const insertResponse = await fetch(`${localSupabaseUrl}/rest/v1/patterns`, {
             method: 'POST',
             headers: {
               'Content-Type': 'application/json',
-              'apikey': SUPABASE_KEY as string,
-              'Authorization': `Bearer ${SUPABASE_KEY}`,
+              'apikey': localSupabaseKey as string,
+              'Authorization': `Bearer ${localSupabaseKey}`,
               'Prefer': 'return=representation',
             },
             body: JSON.stringify({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ekkos/mcp-server",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "ekkOS Memory MCP Server - Universal AI memory across Cursor, Windsurf, VS Code, Claude Code via stdio transport",
   "type": "module",
   "bin": {