@elastic.io/mcp 1.0.0 → 1.0.1-beta

package/resources/docs/credential-validation-gaps.md

@@ -1,35 +0,0 @@
-# Credential Validation Gaps
-
-## Problem
-When building or updating a flow, the MCP server does not validate whether credentials/secrets are actually functional before allowing them to be used. This leads to flows being created with broken credentials that fail at runtime.
-
-## Discovered on flow `6aaa5f922fbba1001240ee87`
-- Step 7: Azure Data Lake Storage (`makeRawRequest`)
-- Secret used: `68655543cb48720012860817` ("My New Azure Data Lake Storage component Credential") — state `ready` but account `sparrow1test` does not exist (DNS failure)
-- Second secret: `6842d77f5758c500127a90b1` ("QA") — state `error`, OAuth refresh_token expired since July 2025
-
-## Fix applied (partial)
-Changed `discoveryState.secrets` from `Set<string>` to `Map<string, string>` (id → state) so that `checkDiscoveryState()` can reject secrets in `error` state **before** submitting to the API.
-
-### Files changed
-- `src/tools/types.ts` — `secrets` type changed to `Map<string, string>`
-- `src/tools/handlers.ts` — initialization updated
-- `src/tools/handlers/auth.ts` — `list_secrets` now stores state
-- `src/tools/validation.ts` — `checkDiscoveryState()` rejects non-ready secrets
-- `src/tools/__tests__/handlers.test.ts` — updated to use Map
-
-## Additional fix: verification tracking and pre-submission blocking
-
-Added `credentialVerifications: Map<string, { ok: boolean; error?: string }>` to `DiscoveryState`. 
-
-### Changes
-- `src/tools/types.ts` — added `credentialVerifications` field
-- `src/tools/handlers.ts` — initialization updated
-- `src/tools/handlers/auth.ts` — `init_verify_credentials` now polls verification result internally and stores it in `discoveryState.credentialVerifications`. Returns final result instead of pending executionId.
-- `src/tools/validation.ts` — `checkDiscoveryState()` checks verification results for all nodes and blocks credentials/secrets that failed verification
-- `src/tools/__tests__/handlers.test.ts` — 6 new tests + 4 updated existing tests
-
-### What this covers
-1. **Secret in `ready` state but actually broken** — caught if `init_verify_credentials` was called (verification result stored and checked pre-submission)
-2. **Plain credentials** — same mechanism via `credentialVerifications` Map
-3. **Test coverage** — secret state check + verification result check for both secrets and plain credentials

package/resources/docs/debug-issues.md

@@ -1,71 +0,0 @@
-# Debug Issues — Component Testing
-
-Issues discovered during debug_flow_step testing on flow `6aad4e79acd7d1001240041f`.
-
----
-
-## Apptivo — Invalid API endpoint
-
-- **Component**: `PS_component_testing/apptivo-component` (`689b49481890650012d6e5b9`)
-- **Action**: `makeRawRequest`
-- **Credential**: `QA_test` (`689b54ef1890650012d72e17`) — verifies OK
-- **Problem**: All `makeRawRequest` calls return `500 Internal Server Error` with `{"status_code":"1503","status_reason":"Invalid API end point","status":"failure"}`
-- **Tried URLs**:
-  - `/contacts?a=getAllContacts&countPerPage=1`
-  - `/contacts?a=getContactById&contactId=1`
-  - `contacts?a=getAllContacts&countPerPage=1` (without leading slash)
-- **Base URL**: Component docs say base is `https://app.apptivo.com/app/dao/v6`, so the raw request URL should be relative to that. None of the tried paths worked.
-- **Status**: Unresolved. Needs investigation of correct Apptivo API v6 URL format.
-
----
-
-## Square — URL requires no `/v2` prefix
-
-- **Component**: `PS_component_testing/square-component` (`667be8681ed49100120a1197`)
-- **Action**: `makeRawRequest`
-- **Credential**: `QA` (`68babd3faa954a00120aabbf`) — verifies OK
-- **Problem**: `/v2/locations` returns 404 (`INVALID_REQUEST_ERROR / NOT_FOUND`), but `/locations` works fine (200 with location data).
-- **Root cause**: The component's base URL already includes `/v2`, so raw request paths should NOT include the `/v2` prefix. This is not obvious from the component descriptor.
-- **Status**: Resolved. Use paths without `/v2` prefix (e.g. `/locations` instead of `/v2/locations`).
-
----
-
-## Phantom data sample / dynamic_metadata deletion
-
-- **Flow**: `6aad4e79acd7d1001240041f`
-- **Problem**: After building 18 steps with debug samples, UI showed "Failed to load the samples" for all steps. Investigation found 4 missing resources (404):
-  - `6ab260c7adc8720012aacb24` — `dynamic_metadata` on step_8 (AWS S3)
-  - `6ab2771aab80c900126621e0` — `dynamic_metadata` on step_13 (Gemini)
-  - `6ab2771badc8720012adf2dc` — `dynamic_metadata` on step_14 (Grok)
-  - `6ab28333ab80c9001267dd0a` — `selected_data_samples` on step_18 (Stripe)
-- **UI behavior**: `src/frontend/src/modules/store/actions/data-samples.js:70-75` uses `Promise.all` to load all samples; if any returns 404, the entire load fails with "Failed to load the samples".
-- **What dynamic_metadata actually is**: Stored in MongoDB collection `DynamicMetadata` (`src/commons/lib/models/dynamic_metadata.js`), NOT in `DataSample`. Created by `/v2/components/{id}/versions/{ver}/dynamic-metadata`. The `dynamic_metadata` field on a node references a DynamicMetadata record, not a data sample — so a 404 on these should NOT cause data sample loading to fail (unless the UI tries to load them as data samples).
-- **No TTL/GC exists**: Neither `DataSample` nor `DynamicMetadata` models have `expireAfterSeconds` indexes. Wiper does not clean them. Both are only deleted on workspace deletion or recipe re-export.
-- **Root cause**: Unknown. The records disappeared without any known cleanup mechanism. Possible causes:
-  - Manual deletion via API or DB
-  - Debug process resetting the draft and orphaning/deleting associated records
-  - Race condition during concurrent draft modifications (UI + API)
-- **Fix applied**: Removed broken `dynamic_metadata` references from step_8/13/14, re-debugged Stripe to create new data sample `6ab2851cadc8720012b015e0`.
-- **Status**: Fixed but root cause unknown. Needs investigation of what deletes data samples and dynamic metadata records outside of workspace deletion.
-
----
-
-## SAP Business One — Debug timeout (30s)
-
-- **Component**: `PS_component_testing/sap-business-one-component` (`676e7cb9d6b1100012f5e9be`)
-- **Action**: `makeRawRequest`
-- **Credential**: (`676ea7e5d6b1100012f6d05b`)
-- **Input**: `{"method": "GET", "url": "BusinessPartners?$top=1"}`
-- **Problem**: `debug_flow_step` times out after 30s. On-premise SAP system too slow to respond within the debug timeout window.
-- **Status**: Unresolved. Synthetic data sample used instead. Live retrieval not possible with current 30s timeout.
-
----
-
-## MS Dynamics CRM V2 — DNS resolution failure
-
-- **Component**: `PS_component_testing/microsoft-dynamics-crm-v2` (`64592579991bbb00128be3e4`)
-- **Action**: `makeRawRequest`
-- **Secret**: (`686fc9f14109aa0012d32f07`)
-- **Input**: `{"method": "GET", "url": "accounts?$top=1"}`
-- **Problem**: `500 Internal Server Error` — `getaddrinfo ENOTFOUND org15005212.crm4.dynamics.com`. The Dynamics CRM instance hostname cannot be resolved (instance may be decommissioned or offline).
-- **Status**: Unresolved. Synthetic data sample used instead. Credential/instance needs verification.

package/resources/docs/deployment-and-scaling.md

@@ -1,136 +0,0 @@
-# Deployment and Scaling Guide (SSE Mode)
-
-This guide documents the architecture, horizontal scaling requirements, and security controls for deploying the elastic.io MCP server in multi-tenant cloud environments.
-
----
-
-## 1. The Stateful Nature of SSE Mode
-
-When running in Server-Sent Events (SSE) mode, the server operates on a hybrid architecture:
-1. **Persistent SSE Stream (GET /sse)**: Keeps an open, persistent HTTP response channel to push events from the server to the client.
-2. **Client-to-Server Messages (POST /sse or POST /messages)**: Short-lived HTTP requests sent by the client to invoke tools or send notifications.
-
-Under the hood, each user session creates a live Node.js `McpServer` object and an active REST client tied to the user's platform credentials. **This connection state and session memory exist solely in the RAM of the specific Node.js process/container that initialized it.**
-
----
-
-## 2. Horizontal Scaling & Clustering (Sticky Sessions)
-
-Because the session manager is in-memory, horizontal scaling across multiple container instances (e.g. behind AWS ALB, Kubernetes NGINX Ingress, or GCP Cloud Load Balancing) requires **Sticky Sessions (Session Affinity)**. 
-
-Without Sticky Sessions:
-* **The Issue**: A client connects to `GET /sse` and routes to *Instance A* (creating the session in memory). The client's subsequent tool call `POST /messages` gets routed by the load balancer to *Instance B*. *Instance B* does not have this session ID in its memory, returning a `404 Session not found` error.
-* **The Solution**: The load balancer must bind a client's session to the same backend container instance for the duration of the session.
-
-### Load Balancer Configuration Patterns
-
-Below are configuration patterns for major cloud providers:
-
-#### A. AWS Application Load Balancer (ALB)
-Configure **Duration-Based Stickiness** or **Application-Controlled Stickiness** on your Target Group:
-* **Stickiness Type**: `lb_cookie` (Load Balancer Generated Cookie)
-* **Cookie Duration**: Match your session idle timeout (e.g., `1800 seconds` / 30 minutes).
-* **Terraform Example**:
-  ```hcl
-  resource "aws_lb_target_group" "mcp_server" {
-    name     = "mcp-server-tg"
-    port     = 3000
-    protocol = "HTTP"
-    vpc_id   = var.vpc_id
-
-    stickiness {
-      type            = "lb_cookie"
-      cookie_duration = 1800
-      enabled         = true
-    }
-  }
-  ```
-
-#### B. Kubernetes NGINX Ingress Controller
-Add the session affinity annotations to your Ingress resource. NGINX will automatically inject a cookie (default: `INGRESSCOOKIE`) to route subsequent requests:
-* **Ingress YAML Example**:
-  ```yaml
-  apiVersion: networking.k8s.io/v1
-  kind: Ingress
-  metadata:
-    name: mcp-server-ingress
-    annotations:
-      nginx.ingress.kubernetes.io/affinity: "cookie"
-      nginx.ingress.kubernetes.io/session-cookie-name: "route"
-      nginx.ingress.kubernetes.io/session-cookie-hash: "sha1"
-      nginx.ingress.kubernetes.io/session-cookie-expires: "1800"
-      nginx.ingress.kubernetes.io/session-cookie-max-age: "1800"
-  spec:
-    rules:
-    - host: mcp.yourdomain.com
-      http:
-        paths:
-        - path: /
-          pathType: Prefix
-          backend:
-            service:
-              name: mcp-server-service
-              port:
-                number: 3000
-  ```
-
-#### C. Google Cloud Platform (GCP) HTTP(S) Load Balancing
-Set the backend service's session affinity to `GENERATED_COOKIE`:
-* **gcloud Command**:
-  ```bash
-  gcloud compute backend-services update mcp-server-backend-service \
-      --session-affinity=GENERATED_COOKIE \
-      --affinity-cookie-ttl=1800 \
-      --global
-  ```
-
----
-
-## 3. Production Resource & Rate Limit Considerations
-
-### Redis-Backed Rate Limiting
-The default rate limiter (`sseRateLimiter` in `src/index.ts`) records IP connections in an in-memory Map. 
-* **Limitation**: In a cluster, each container rate-limits independently. An attacker could bypass rate limits by hitting different containers.
-* **Production Fix**: Replace the custom rate limiter with `express-rate-limit` using the `rate-limit-redis` store:
-  ```typescript
-  import rateLimit from 'express-rate-limit';
-  import RedisStore from 'rate-limit-redis';
-  import Redis from 'ioredis';
-
-  const redisClient = new Redis(config.redisUrl);
-
-  const limiter = rateLimit({
-    windowMs: 60 * 1000, // 1 minute
-    max: 10, // Limit each IP to 10 connections per window
-    standardHeaders: true,
-    legacyHeaders: false,
-    store: new RedisStore({
-      sendCommand: (...args: string[]) => redisClient.call(args[0], ...args.slice(1)),
-    }),
-  });
-  ```
-
----
-
-## 4. Architectural Alternatives: Transitioning to Mature Solutions
-
-The custom Node.js Express/SSE wrapper (`SessionManager`) acts as an in-memory multiplexer, which introduces maintenance overhead (writing custom reapers, session state checks, and sticky load balancer affinity).
-
-For enterprise production setups, you are highly encouraged to move the session, transport, and process management out of the application codebase using one of two mature alternatives:
-
-### Alternative A: Third-Party MCP Gateway (Protocol Bridging)
-Deploy this repository strictly as a stateless `stdio` (stdin/stdout) service (which is already implemented in the code), and wrap it using a production-ready, off-the-shelf gateway:
-* **ContextForge Gateway**: An open-source gateway designed to act as a centralized, multi-tenant proxy that handles credentials, logging, and exposes a unified SSE/REST interface.
-* **Supergateway**: A lightweight CLI/Docker wrapper that exposes any `stdio` server over SSE with zero custom code:
-  ```bash
-  supergateway --port 3000 --stdio "node dist/index.js"
-  ```
-* **Apache APISIX (`mcp-bridge` plugin)**: Bridges standard stdio processes and scales them dynamically as SSE streams, managing routing, rate-limiting, and credentials centrally.
-
-### Alternative B: Infrastructure-Level Multi-Tenancy (Micro-Containers)
-Achieve strict security and process-level isolation by delegating execution lifecycles to cloud infrastructure:
-1. **Stateless Stdio Container**: Package the MCP server strictly in `stdio` mode inside a Docker image.
-2. **On-Demand Orchestration**: Spin up isolated, single-tenant container instances (or micro-VMs) on-demand for active users (using AWS ECS, GCP Cloud Run, or Fly.io).
-3. **Gateway Routing**: An API Gateway authenticates the user, spins up their dedicated container task, and proxies the connection.
-4. **Benefits**: Wipes out custom session reapers, memory leak risks, and session state serialization logic from the application repository.
-

package/resources/docs/packaging-plan.md

@@ -1,84 +0,0 @@
-# MCP Server — Packaging Plan
-
-Plan for publishing `elasticio-mcp-server` as a standalone npm package.
-
-## Current State
-
-- TypeScript with `outDir: ./dist`, ESM (`"type": "module"`)
-- `"main": "dist/index.js"` already set
-- Two transport modes: stdio (CLI) and SSE (HTTP server)
-- `"private": true` — blocks npm publish
-- Qdrant + Google GenAI are required dependencies (crash on startup without credentials)
-
-## Changes Required
-
-### 1. `package.json`
-
-- Remove `"private": true`
-- Add `bin` entry:
-  ```json
-  "bin": {
-    "elasticio-mcp": "./dist/index.js"
-  }
-  ```
-- Add `files` to control what gets published:
-  ```json
-  "files": ["dist", "resources"]
-  ```
-- Exclude `.env`, `settings.json`, test files, scripts from the package
-
-### 2. Shebang
-
-Add `#!/usr/bin/env node` to the top of `src/index.ts` so the CLI entry point works when installed globally.
-
-### 3. Make Vector Search Optional
-
-Qdrant and embedding dependencies are only used by 3 tools:
-- `search_documentation`
-- `search_flow_samples`
-- `search_flow_steps`
-
-The remaining ~20 tools (CRUD for flows, components, credentials, etc.) work purely via the elastic.io REST API.
-
-**Approach**: If `VECTOR_STORE_URL` is not set, skip registration of search tools or return a "Vector search not configured" message. Do not crash on startup.
-
-### 4. Share Qdrant as Read-Only (Default Search)
-
-Create a **read-only API key** in Qdrant Cloud and hardcode it as the default `VECTOR_STORE_URL` / `VECTOR_STORE_API_KEY`. This way users get search over the pre-indexed flow examples and documentation out of the box.
-
-Qdrant Cloud supports granular API keys — grant only `search` permission, no `write`.
-
-**Behavior**:
-- No env vars set → uses built-in read-only Qdrant endpoint (search works out of the box)
-- User provides own `VECTOR_STORE_URL` → connects to their instance instead
-- `EMBEDDING_PROVIDER_API_KEY` still required for embeddings (Google GenAI) — make this optional too, or document that users need their own key
-
-### 5. Make `validateConfigOnStartup()` Graceful
-
-Currently crashes if `EMBEDDING_PROVIDER_API_KEY` or `VECTOR_STORE_URL` are missing. For the packaged version:
-- Only require `ELASTICIO_API_EMAIL` + `ELASTICIO_API_KEY` for stdio mode
-- All other config should be optional with sensible defaults or disabled features
-
-### 6. Handle Missing `resources/` Gracefully
-
-`resources/elasticio.github.io/content` (used by `view_documentation` and `ingest_docs.ts`) may not exist in all installations. Add existence checks to avoid crashes.
-
-### 7. Potential Dependency Optimization
-
-`@google/genai` and `@qdrant/js-client-rest` are heavy dependencies that are only needed for vector search. Consider:
-- Moving them to `optionalDependencies` or `peerDependencies`
-- Lazy-loading them only when search tools are invoked
-
-## Publish Checklist
-
-- [ ] Remove `"private": true`
-- [ ] Add `bin`, `files` fields
-- [ ] Add shebang to entry point
-- [ ] Make Qdrant/embeddings optional
-- [ ] Create read-only Qdrant API key and set as default
-- [ ] Graceful startup without vector store credentials
-- [ ] Graceful handling of missing `resources/elasticio.github.io/`
-- [ ] Add `.npmignore` or verify `files` field excludes dev artifacts
-- [ ] Test `npm pack` and inspect tarball contents
-- [ ] Test `npx elasticio-mcp` works end-to-end
-- [ ] Choose package scope: `elasticio-mcp-server` or `@elasticio/mcp-server`

package/resources/docs/unique-components.md

@@ -1,60 +0,0 @@
-# Unique Components from Verified Credentials Tests
-
-Workspace: `59d341e9037f7200184a408b`
-
-| # | Component | Example Scenario | Flow ID |
-|---|---|---|---|
-| 1 | REST API V2 | VC-A4: No Auth POST | `6a9ac39ea6268100125ee352` |
-| 2 | PostgreSQL | VC-B1: SELECT | `6a9ac415a6268100125ef145` |
-| 3 | MSSQL | VC-B5: SELECT | `6a9ac449a6268100125ef5bd` |
-| 4 | MongoDB | VC-B8: Lookup by ID | `6a9ac699a6268100125f2260` |
-| 5 | JDBC | VC-B12: MySQL Query | `6a9ac6e8a6268100125f29c7` |
-| 7 | SFTP | VC-D1: Poll New Files | `6a9ac4df03c95f0012cf9fba` |
-| 11 | ChatGPT | VC-E1: Text Generation | `6a9ac51f03c95f0012cfa355` |
-| 12 | Claude AI | VC-E4: Text Generation | `6a9ad08a03c95f0012d0ac56` |
-| 13 | Gemini | VC-E6: Text Generation | `6a9ad0e303c95f0012d0b2f3` |
-| 14 | Grok | VC-E8: Text Generation | `6a9ad10b03c95f0012d0b5b0` |
-| 15 | HubSpot | VC-F1: Poll Contacts | `6a9ad12ba6268100126020dd` |
-| 16 | Zoho CRM | VC-F4: Poll Leads | `6a9ad179a62681001260263e` |
-| 20 | Apptivo | VC-F12: Raw Request Contacts | `6a9ad6d403c95f0012d10cef` |
-| 21 | Square | VC-F13: Poll Payments | `6a9ad77403c95f0012d1196e` |
-| 22 | Stripe | VC-F15: Lookup Charges | `6a9ad795a62681001260884a` |
-| 23 | Klaviyo | VC-F17: Poll Profiles | `6a9ad85a03c95f0012d1286c` |
-| 24 | MailChimp | VC-F19: Subscribe Contact | `6a9ad88c03c95f0012d12c0e` |
-| 25 | Marketo | VC-F21: Poll Leads | `6a9ad89403c95f0012d12cdc` |
-| 26 | Magento 2 | VC-G1: Poll Orders | `6a9ad8f903c95f0012d13401` |
-| 27 | Shopify Admin V1 | VC-G5: Poll Products | `6a9ad93ea62681001260a50a` |
-| 28 | Shopify Admin V2 | VC-G6: Poll Orders | `6a9ad942a62681001260a57c` |
-| 29 | VTEX | VC-G9: Poll Customers | `6a9ad966a62681001260a90d` |
-| 30 | Amazon SP | VC-G12: Poll Orders | `6a9ad971a62681001260aa9f` |
-| 31 | SAP Business One | VC-H5: Poll Partners | `6a9ad9fc03c95f0012d146d4` |
-| 32 | SAP ByDesign | VC-H6: Poll Orders | `6a9ada0003c95f0012d14784` |
-| 33 | MS Dynamics CRM V2 | VC-H7: Poll Accounts | `6a9ada0fa62681001260b4a3` |
-| 34 | MS Dynamics BC OnPrem | VC-H10: Poll Items | `6a9ada4f03c95f0012d14c69` |
-| 35 | Custom MS Dynamics BC | VC-H11: Poll Records | `6a9ada6703c95f0012d14d2d` |
-| 36 | AFAS | VC-H12: Poll Records | `6a9ada6ca62681001260bdb1` |
-| 37 | Tableau Cloud | VC-H16: Poll Objects | `6a9ada7703c95f0012d14fc3` |
-| 38 | Slack | VC-I1: Send Message | `6a9adad503c95f0012d15767` |
-| 41 | Email (SMTP) | VC-I6: Send via SMTP | `6a9adae0a62681001260c5bf` |
-| 42 | ClickSend SMS | VC-I8: Send | `6a9adae2a62681001260c631` |
-| 43 | Google Sheets V2 | VC-J1: Read Rows | `6a9adc95a62681001260dca3` |
-| 44 | Gmail | VC-J4: Poll New Emails | `6a9adcf1a62681001260e5b8` |
-| 45 | Google Analytics | VC-J6: Run Report | `6a9add1503c95f0012d17ece` |
-| 47 | Google Pub/Sub | VC-J10: Publish Message | `6a9add47a62681001260ec1b` |
-| 48 | Outlook | VC-K1: Poll New Emails | `6a9add7ca62681001260f010` |
-| 49 | Monday | VC-K3: Webhook New Items | `6a9addb803c95f0012d18b9f` |
-| 50 | AMQP | VC-L1: Publish Message | `6a9adde1a62681001260f745` |
-| 51 | AWS SQS | VC-L4: Send Message | `6a9ade05a62681001260fa6e` |
-| 52 | iLovePDF | VC-M1: Merge PDFs | `6a9ade26a62681001260fc98` |
-| 53 | Picsart | VC-M3: Remove Background | `6a9ade4c03c95f0012d198e0` |
-| 54 | Bynder | VC-M4: Poll Assets | `6a9adeb3a6268100126106ae` |
-| 55 | PandaDoc | VC-M6: Poll Documents | `6a9adee703c95f0012d1a26b` |
-| 56 | WordPress | VC-M8: Poll Posts | `6a9adefd03c95f0012d1a548` |
-| 57 | Twitter | VC-N1: Post Tweet | `6a9adf36a626810012610c58` |
-| 58 | Pinterest | VC-N2: Create Pin (Sandbox) | `6a9adf64a626810012610e8b` |
-| 59 | Kit | VC-N3: Poll Subscribers | `6a9adf7ea6268100126110ff` |
-| 60 | DeepL | VC-O3: Translate Text | `6a9adffc03c95f0012d1bbce` |
-| 61 | SmartyStreets | VC-O5: Validate Address | `6a9ae02403c95f0012d1be2a` |
-| 62 | SOAP | VC-O7: Call Service | `6a9ae03403c95f0012d1c056` |
-| 63 | Git Protocol | VC-O8: Read File | `6a9ae060a626810012611cde` |
-| 64 | Basecamp | VC-O9: Webhook To-dos | `6a9ae0a2a626810012611fe5` |

package/resources/docs/verified-creds-flow-ids.md

@@ -1,193 +0,0 @@
-# Verified Credentials Test Flow IDs
-
-Workspace: `59d341e9037f7200184a408b`
-
-All flows created for testing components with verified credentials.
-Delete all these flows after testing is complete.
-
-## Flow IDs
-
-| Scenario | Flow ID | Name | Status |
-|---|---|---|---|
-| VC-A4 | `6a9ac39ea6268100125ee352` | REST API V2 — No Auth POST | created |
-| VC-A2 | `6a9ac3aba6268100125ee48e` | REST API V2 — Basic Auth POST | created |
-| VC-A3 | `6a9ac3b6a6268100125ee5fa` | REST API V2 — API Key GET | created |
-| VC-A6 | `6a9ac3c3a6268100125ee859` | REST API V2 — Rebound on 5xx | created |
-| VC-A7 | `6a9ac3d103c95f0012cf8c12` | REST API V2 — Emit Error as Message | created |
-| VC-A8 | `6a9ac3dd03c95f0012cf8ca2` | REST API V2 — Download as Attachment | created |
-| VC-A9 | `6a9ac3e8a6268100125eec9e` | REST API V2 — Custom Headers + Timeout | created |
-| VC-A10 | `6a9ac3f3a6268100125eee21` | REST API V2 — Follow Redirects | created |
-| VC-B1 | `6a9ac415a6268100125ef145` | PostgreSQL SELECT | created |
-| VC-B2 | `6a9ac421a6268100125ef203` | PostgreSQL INSERT from Webhook | created |
-| VC-B5 | `6a9ac449a6268100125ef5bd` | MSSQL SELECT | created |
-| VC-C1 | `6a9ac47fa6268100125efc47` | Salesforce V2 Poll Accounts | created |
-| VC-C7 | `6a9ac48fa6268100125efdd4` | Salesforce V2 Raw Request | created |
-| VC-D1 | `6a9ac4df03c95f0012cf9fba` | SFTP Poll New Files | created |
-| VC-E1 | `6a9ac51f03c95f0012cfa355` | ChatGPT Text Generation | created |
-| VC-A5 | `6a9ac55b03c95f0012cfa725` | REST API V2 — All HTTP Methods Chain | created |
-| VC-B3 | `6a9ac628a6268100125f181b` | PostgreSQL UPDATE with Condition | created |
-| VC-B4 | `6a9ac63803c95f0012cfb5c6` | PostgreSQL DELETE Record | created |
-| VC-B6 | `6a9ac65503c95f0012cfb6cf` | MSSQL INSERT from Webhook | created |
-| VC-B7 | `6a9ac678a6268100125f20a8` | MSSQL Stored Procedure | created |
-| VC-B8 | `6a9ac699a6268100125f2260` | MongoDB Lookup by ID | created |
-| VC-B9 | `6a9ac6a303c95f0012cfbc00` | MongoDB Upsert Document | created |
-| VC-B10 | `6a9ac6b1a6268100125f253b` | MongoDB Aggregate Pipeline | created |
-| VC-B11 | `6a9ac6baa6268100125f26a4` | MongoDB Delete by Criteria | created |
-| VC-B12 | `6a9ac6e8a6268100125f29c7` | JDBC MySQL Query | created |
-| VC-B13 | `6a9ac719a6268100125f2ae8` | JDBC PostgreSQL Query | created |
-| VC-B14 | `6a9ac72403c95f0012cfc5d6` | JDBC MSSQL Query | created |
-| VC-B16 | `6a9ac738a6268100125f2c9e` | JDBC Cross-DB Compare | created |
-| VC-B17 | `6a9ac75da6268100125f2ecd` | PS/PostgreSQL SELECT | created |
-| VC-B18 | `6a9ac77a03c95f0012cfcd74` | PS/MongoDB Lookup | created |
-| VC-B19 | `6a9ac79aa6268100125f340e` | PS/JDBC Multi-DB Test | created |
-| VC-C2 | `6a9ac7c303c95f0012cfd165` | Salesforce V2 SOQL Query | created |
-| VC-C3 | `6a9ac7d0a6268100125f37f0` | Salesforce V2 Lookup Contact | created |
-| VC-C4 | `6a9ac7e2a6268100125f39ad` | Salesforce V2 Create Lead | created |
-| VC-C5 | `6a9ac7eca6268100125f3a03` | Salesforce V2 Upsert Contact | created |
-| VC-C6 | `6a9ac7f403c95f0012cfd6fe` | Salesforce V2 Delete Lead | created |
-| VC-C8 | `6a9ac7ffa6268100125f3b74` | Salesforce V2 Lookup Objects | created |
-| VC-C9 | `6a9ac80903c95f0012cfd8ed` | Salesforce V2 Bulk Query | created |
-| VC-C10 | `6a9acd3aa6268100125fda9f` | Salesforce V2 Subscribe PubSub | created |
-| VC-C11 | `6a9acd5403c95f0012d06df4` | PS/Salesforce V2 Query | created |
-| VC-D2 | `6a9ace39a6268100125fe983` | SFTP Upload File | created |
-| VC-D3 | `6a9ace84a6268100125fee63` | SFTP Poll CSV Parse Split | created |
-| VC-D4 | `6a9ace98a6268100125fef63` | SFTP Move File After Processing | created |
-| VC-D5 | `6a9acee403c95f0012d08b72` | PS/SFTP Poll Files | created |
-| VC-D6 | `6a9acf5a03c95f0012d0956c` | PS/SFTP Upload Private Key Auth | created |
-| VC-D7 | `6a9acf7ca6268100126002ca` | AWS S3 Poll New Objects | created |
-| VC-D8 | `6a9acf8a03c95f0012d0985f` | AWS S3 Upload Object | created |
-| VC-D9 | `6a9acf98a62681001260062e` | AWS S3 Download to SFTP Upload | created |
-| VC-D10 | `6a9acfb2a626810012600962` | Azure Data Lake Read | created |
-| VC-D11 | `6a9acfc2a626810012600b1d` | Azure Data Lake Write | created |
-| VC-D12 | `6a9ad004a626810012600f53` | Google Drive Upload File | created |
-| VC-D13 | `6a9ad00ea626810012600fe9` | Google Drive Download File | created |
-| VC-E2 | `6a9ad05603c95f0012d0a7c0` | ChatGPT Data Extraction | created |
-| VC-E3 | `6a9ad060a62681001260139d` | ChatGPT Summarization | created |
-| VC-E4 | `6a9ad08a03c95f0012d0ac56` | Claude AI Text Generation | created |
-| VC-E5 | `6a9ad0a303c95f0012d0af04` | Claude AI Code Review | created |
-| VC-E6 | `6a9ad0e303c95f0012d0b2f3` | Gemini Text Generation | created |
-| VC-E7 | `6a9ad0ed03c95f0012d0b39f` | Gemini Classification | created |
-| VC-E8 | `6a9ad10b03c95f0012d0b5b0` | Grok Text Generation | created |
-| VC-F1 | `6a9ad12ba6268100126020dd` | HubSpot Poll Contacts | created |
-| VC-F2 | `6a9ad138a626810012602268` | HubSpot Create Deal | created |
-| VC-F3 | `6a9ad153a626810012602456` | HubSpot Lookup Company | created |
-| VC-F4 | `6a9ad179a62681001260263e` | Zoho CRM Poll Leads | created |
-| VC-F5 | `6a9ad18da6268100126028c1` | Zoho CRM Create Contact | created |
-| VC-F6 | `6a9ad2af03c95f0012d0d137` | Close CRM Poll Leads | created |
-| VC-F7 | `6a9ad30ca626810012604269` | Close CRM Create Lead | created |
-| VC-F8 | `6a9ad6a403c95f0012d10892` | Odoo Poll Partners | created |
-| VC-F10 | `6a9ad6c1a626810012607c62` | Freshworks Poll Contacts | created |
-| VC-F12 | `6a9ad6d403c95f0012d10cef` | Apptivo Raw Request Contacts | created |
-| VC-F13 | `6a9ad77403c95f0012d1196e` | Square Poll Payments | created |
-| VC-F14 | `6a9ad790a6268100126087ba` | Square Create Customer | created |
-| VC-F15 | `6a9ad795a62681001260884a` | Stripe Lookup Charges | created |
-| VC-F16 | `6a9ad798a6268100126088fb` | Stripe Create Customer | created |
-| VC-F17 | `6a9ad85a03c95f0012d1286c` | Klaviyo Poll Profiles | created |
-| VC-F18 | `6a9ad85d03c95f0012d128d0` | Klaviyo Create Profile | created |
-| VC-F19 | `6a9ad88c03c95f0012d12c0e` | MailChimp Subscribe Contact | created |
-| VC-F21 | `6a9ad89403c95f0012d12cdc` | Marketo Poll Leads | created |
-| VC-F22 | `6a9ad8a103c95f0012d12f25` | Marketo Upsert Lead | created |
-| VC-G1 | `6a9ad8f903c95f0012d13401` | Magento 2 Poll Orders | created |
-| VC-G2 | `6a9ad914a62681001260a136` | Magento 2 Upsert Product | created |
-| VC-G3 | `6a9ad919a62681001260a1f6` | Magento 2 Lookup Customer | created |
-| VC-G4 | `6a9ad90603c95f0012d13621` | PS/Magento 2 Poll Orders | created |
-| VC-G5 | `6a9ad93ea62681001260a50a` | Shopify Admin V1 Poll Products | created |
-| VC-G6 | `6a9ad942a62681001260a57c` | Shopify Admin V2 Poll Orders | created |
-| VC-G9 | `6a9ad966a62681001260a90d` | VTEX Poll Customers | created |
-| VC-G12 | `6a9ad971a62681001260aa9f` | Amazon SP Poll Orders | created |
-| VC-H5 | `6a9ad9fc03c95f0012d146d4` | SAP Business One Poll Partners | created |
-| VC-H6 | `6a9ada0003c95f0012d14784` | SAP ByDesign Poll Orders | created |
-| VC-H7 | `6a9ada0fa62681001260b4a3` | MS Dynamics CRM V2 Poll Accounts | created |
-| VC-H8 | `6a9ada1fa62681001260b5f6` | MS Dynamics CRM V2 Upsert Contact | created |
-| VC-H9 | `6a9ada27a62681001260b6b8` | MS Dynamics CRM V2 Lookup | created |
-| VC-H10 | `6a9ada4f03c95f0012d14c69` | MS Dynamics BC OnPrem Poll Items | created |
-| VC-H11 | `6a9ada6703c95f0012d14d2d` | Custom MS Dynamics BC Poll Records | created |
-| VC-H12 | `6a9ada6ca62681001260bdb1` | AFAS Poll Records | created |
-| VC-H13 | `6a9ada7203c95f0012d14f1e` | AFAS Create Record | created |
-| VC-H16 | `6a9ada7703c95f0012d14fc3` | Tableau Cloud Poll Objects | created |
-| VC-I1 | `6a9adad503c95f0012d15767` | Slack Send Message | created |
-| VC-I3 | `6a9adad7a62681001260c3b4` | Telegram Send Message | created |
-| VC-I5 | `6a9adadea62681001260c557` | WhatsApp Send Message | created |
-| VC-I6 | `6a9adae0a62681001260c5bf` | Email Send via SMTP | created |
-| VC-I8 | `6a9adae2a62681001260c631` | ClickSend SMS Send | created |
-| VC-J1 | `6a9adc95a62681001260dca3` | Google Sheets V2 — Read Rows | created |
-| VC-J2 | `6a9adca103c95f0012d17845` | Google Sheets V2 — Append Row | created |
-| VC-J3 | `6a9adcb3a62681001260e066` | Google Sheets V2 — Update Row | created |
-| VC-J4 | `6a9adcf1a62681001260e5b8` | Gmail — Poll New Emails | created |
-| VC-J5 | `6a9adcfd03c95f0012d17cde` | Gmail — Send Email | created |
-| VC-J6 | `6a9add1503c95f0012d17ece` | Google Analytics — Run Report | created |
-| VC-J7 | `6a9add32a62681001260eb2b` | Google Translate — Translate Text | created |
-| VC-J10 | `6a9add47a62681001260ec1b` | Google Pub/Sub — Publish Message | created |
-| VC-J11 | `6a9add5403c95f0012d1830c` | Google Pub/Sub — Subscribe and Process | created |
-| VC-K1 | `6a9add7ca62681001260f010` | Outlook — Poll New Emails | created |
-| VC-K2 | `6a9add92a62681001260f1a3` | Outlook — Send Email | created |
-| VC-K3 | `6a9addb803c95f0012d18b9f` | Monday — Webhook New Items | created |
-| VC-K4 | `6a9addcb03c95f0012d18dd1` | Monday — Create Item | created |
-| VC-L1 | `6a9adde1a62681001260f745` | AMQP — Publish Message | created |
-| VC-L2 | `6a9addef03c95f0012d1903a` | AMQP — Consume Messages | created |
-| VC-L4 | `6a9ade05a62681001260fa6e` | AWS SQS — Send Message | created |
-| VC-L5 | `6a9ade0fa62681001260facd` | AWS SQS — Receive Messages | created |
-| VC-M1 | `6a9ade26a62681001260fc98` | iLovePDF — Merge PDFs | created |
-| VC-M2 | `6a9ade3103c95f0012d1964d` | iLovePDF — Compress PDF | created |
-| VC-M3 | `6a9ade4c03c95f0012d198e0` | Picsart — Remove Background | created |
-| VC-M4 | `6a9adeb3a6268100126106ae` | Bynder — Poll Assets | created |
-| VC-M6 | `6a9adee703c95f0012d1a26b` | PandaDoc — Poll Documents | created |
-| VC-M8 | `6a9adefd03c95f0012d1a548` | WordPress — Poll Posts | created |
-| VC-M9 | `6a9adf0ba626810012610a30` | WordPress — Create Post | created |
-| VC-N1 | `6a9adf36a626810012610c58` | Twitter — Post Tweet | created |
-| VC-N2 | `6a9adf64a626810012610e8b` | Pinterest — Create Pin (Sandbox) | created |
-| VC-N3 | `6a9adf7ea6268100126110ff` | Kit — Poll Subscribers | created |
-| VC-N4 | `6a9adf8e03c95f0012d1b1f3` | Kit — Create Subscriber | created |
-| VC-O3 | `6a9adffc03c95f0012d1bbce` | DeepL — Translate Text | created |
-| VC-O5 | `6a9ae02403c95f0012d1be2a` | SmartyStreets — Validate Address | created |
-| VC-O7 | `6a9ae03403c95f0012d1c056` | SOAP — Call Service | created |
-| VC-O8 | `6a9ae060a626810012611cde` | Git Protocol — Read File | created |
-| VC-O9 | `6a9ae0a2a626810012611fe5` | Basecamp — Webhook To-dos | created |
-| VC-O11 | `6a9ae0daa6268100126125a7` | Code with Creds — Basic Auth | created |
-| VC-O12 | `6a9ae0e3a626810012612601` | Code with Creds — API Key | created |
-| VC-O13 | `6a9ae0eca62681001261266a` | Code with Creds — OAuth2 | created |
-| VC-O14 | `6a9ae0f8a6268100126127f9` | Code with Creds — No Auth | created |
-| VC-P1 | `6a9ae12da626810012612bee` | PS/Webhook — No Auth | created |
-| VC-P2 | `6a9ae13703c95f0012d1d287` | PS/Webhook — Basic Auth | created |
-| VC-P3 | `6a9ae28503c95f0012d1e6a6` | PS/Webhook API Key Auth | created |
-| VC-P4 | `6a9ae292a626810012614230` | PS/Webhook HMAC 256 Auth | created |
-| VC-P5 | `6a9ae29c03c95f0012d1e8f4` | PS/Webhook HMAC 512 Auth | created |
-| VC-Q1 | `6a9d8a07a62681001289bc30` | CRM to eCommerce Sync | created |
-| VC-Q3 | `6a9d8a6ca62681001289c32a` | Multi-CRM Lead Sync | created |
-| VC-Q5 | `6a9d8ac503c95f0012f9ab1b` | AI-Enriched Contact Pipeline | created |
-| VC-Q6 | `6a9d8afda62681001289ce23` | Multi-Database ETL | created |
-| VC-Q10 | `6a9d8b2203c95f0012f9b05f` | Social Media Content Pipeline | created |
-| VC-Q12 | `6a9d8b3803c95f0012f9b22c` | Customer Onboarding Pipeline | created |
-| VC-Q13 | `6a9d8b6803c95f0012f9b5c2` | Order Notification Multi-Channel | created |
-| VC-Q16 | `6a9d8c8603c95f0012f9cbae` | AI Support Ticket Triage | created |
-| VC-Q18 | `6a9d8b86a62681001289d93c` | Webhook Full Audit Trail | created |
-| VC-Q19 | `6a9d8c9ea62681001289f1d8` | Queue-Driven Processing | created |
-| VC-Q20 | `6a9d8b9603c95f0012f9ba25` | Email Monitoring Pipeline | created |
-| VC-Q21 | `6a9d8baba62681001289dc26` | Multi-Step Data Enrichment | created |
-| VC-Q25 | `6a9d8bbda62681001289dd71` | Dynamics CRM to Salesforce Migration | created |
-| VC-Q26 | `6a9d8bcf03c95f0012f9bf91` | Real-Time Webhook Router with Logging | created |
-| VC-Q27 | `6a9ac533a6268100125f0962` | Scheduled Health Check | created |
-| VC-Q30 | `6a9d8beda62681001289e329` | Full eCommerce Order Lifecycle | created |
-| VC-Q34 | `6a9d8c0203c95f0012f9c21a` | Lead Scoring Pipeline | created |
-| VC-Q39 | `6a9d8c1f03c95f0012f9c562` | Multi-Step Approval Pipeline | created |
-| VC-Q40 | `6a9d8c3903c95f0012f9c799` | IoT Data Pipeline Simulation | created |
-| VC-Q2 | `6a9d949703c95f0012fa3f0e` | eCommerce to ERP Order Sync | created |
-| VC-Q4 | `6a9d95ab03c95f0012fa51b1` | File Processing Pipeline | created |
-| VC-Q7 | `6a9d943fa6268100128a69cf` | Document Generation Pipeline | created |
-| VC-Q8 | `6a9d94ea03c95f0012fa456d` | Address Validation + CRM Update | created |
-| VC-Q9 | `6a9d95cba6268100128a803d` | Inventory Cross-Platform Sync | created |
-| VC-Q11 | `6a9d9555a6268100128a7b16` | Translation Pipeline Multi-Engine | created |
-| VC-Q14 | `6a9d963403c95f0012fa5a63` | Database Backup to Cloud | created |
-| VC-Q15 | `6a9d983da6268100128aada4` | ERP Sync SAP to NetSuite | created |
-| VC-Q17 | `6a9d96e903c95f0012fa663d` | Google Sheets to Multi-DB Sync | created |
-| VC-Q22 | `6a9d972903c95f0012fa6a88` | File Sync SFTP to S3 to Drive | created |
-| VC-Q23 | `6a9d97c903c95f0012fa74d9` | eCommerce to Analytics Pipeline | created |
-| VC-Q24 | `6a9d986103c95f0012fa7f52` | Payment Reconciliation | created |
-| VC-Q28 | `6a9d97e803c95f0012fa76d2` | CSV Import with Validation | created |
-| VC-Q29 | `6a9d9896a6268100128ab38e` | AI Content Generation Pipeline | created |
-| VC-Q31 | `6a9d98b3a6268100128ab755` | Multi-Messenger Customer Service | created |
-| VC-Q32 | `6a9d98d3a6268100128ab96e` | DAM to eCommerce Asset Pipeline | created |
-| VC-Q33 | `6a9d98f5a6268100128abb98` | Financial Reporting Pipeline | created |
-| VC-Q36 | `6a9d992103c95f0012fa8cd9` | Airtable to Multi-Platform Publish | created |
-| VC-Q37 | `6a9d9805a6268100128aa950` | SFTP to DB to Notification Chain | created |
-| VC-Q38 | `6a9d982403c95f0012fa7a34` | Real-time CRM Enrichment | created |