@elitedcs/ghl-mcp 3.12.0 → 3.13.0

package/CHANGELOG.md

@@ -1,5 +1,64 @@
 # Changelog
 
+## 3.13.0 — Memberships read + 200-tool milestone (gap-closure round 6, final)
+
+**201 tools across 43 modules. Bundle: ~318 KB.**
+
+Closes the last Phase-2 gap. Memberships read tools — and the tool count crosses 200.
+
+### 3 new tools (Firebase-gated, read-only)
+
+- **`list_membership_offers`** — offers + products in one call (`{products, offers}`). Products are courses/communities; offers are the access grants.
+- **`list_membership_categories`** — all course categories in a location.
+- **`list_membership_lessons`** — all course lessons in a location.
+
+Most useful for fetching the IDs that membership trigger conditions reference: `offer_access_granted`, `product_completed`, `category_completed`, `lesson_completed`, etc.
+
+### Endpoint discovery
+
+From the workflow bundle's `LocationMembership` class:
+```js
+membershipUrl = `${config.membershipURL}`  // → backend.leadconnectorhq.com/membership
+endpoint = `${membershipUrl}/smart-list/offers-products/${locationId}`
+```
+
+Verified endpoints (Firebase auth):
+- `GET /membership/smart-list/offers-products/{loc}`
+- `GET /membership/smart-list/location/{loc}/workflow?type=category`
+- `GET /membership/smart-list/location/{loc}/workflow?type=lesson`
+
+Bearer/PIT returns 401 — Firebase-gated, same as the other internal-API tools.
+
+### Read-only by design
+
+The workflow bundle only READS membership data (to populate trigger/action dropdowns). Creating/editing courses, offers, and lessons lives in the Memberships app and isn't exposed here — that would need a DevTools capture against a live account with actual courses. The per-product (`?product_id=`) and per-category (`/category/{id}/lessons`) filtered endpoints returned 401 for synthetic IDs and couldn't be verified without real course data, so they're not exposed; the location-scoped "list all" endpoints return everything anyway.
+
+### Phase-2 complete
+
+All 6 Phase-2 gap areas from the v3.8.1 analysis have now been addressed:
+
+| Area | Result |
+|---|---|
+| Email templates | list/create/update (v3.10.0) |
+| SMS/snippet templates | list-only — write is scope-walled (v3.10.1) |
+| Smart Lists | full CRUD (v3.11.0) |
+| Reputation | review-link-list; reviews capture-pending (v3.11.1) |
+| Email campaigns | list (fixed) + create-draft; send capture-pending (v3.12.0) |
+| Memberships | read-only (this release) |
+
+The recurring limiter: high-value write actions (send a campaign, list reviews, create a course, delete a template) sit behind either GHL's IAM wall or location-resolution quirks that need a DevTools capture against a live account. Read + create-draft surfaces were reachable; full write automation for those areas is the next frontier when a live-account capture session happens.
+
+### Tool count impact
+
+- Total: 198 → 201 (+3) — crosses 200
+- Modules: 42 → 43
+
+### Files changed
+
+- `src/tools/memberships.ts` — NEW
+- `src/tools/index.ts` — registered membership tools
+- `src/setup-tool.ts` — count 198 → 201
+
 ## 3.12.0 — Email campaigns: create-draft + list fix (gap-closure round 5)
 
 **198 tools across 42 modules. Bundle: ~316 KB.**

package/README.md

@@ -1,6 +1,6 @@
 # GHL Command — GoHighLevel MCP Server
 
-**Full GoHighLevel API access for Claude.** 198 tools across 42 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers.
+**Full GoHighLevel API access for Claude.** 201 tools across 43 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers.
 
 **Distributed via npm as [`@elitedcs/ghl-mcp`](https://www.npmjs.com/package/@elitedcs/ghl-mcp).** Buyers install with one config block — no git, no Node.js setup, no terminal commands. Updates flow automatically (`npx @latest` re-resolves on every Claude restart).
 

package/dist/index.js

@@ -31,8 +31,8 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.12.0",
-      description: "GoHighLevel MCP Server for Claude. 198 tools \u2014 full CRM, automation, marketing control, and the only programmatic GHL workflow builder.",
+      version: "3.13.0",
+      description: "GoHighLevel MCP Server for Claude. 201 tools \u2014 full CRM, automation, marketing control, and the only programmatic GHL workflow builder.",
       main: "dist/index.js",
       bin: {
         "ghl-mcp": "dist/index.js"
@@ -6245,42 +6245,112 @@ ${text2}`);
   );
 }
 
-// src/tools/template-deployer.ts
+// src/tools/memberships.ts
 var import_zod43 = require("zod");
+var MEMBERSHIP_BASE = "https://backend.leadconnectorhq.com/membership";
+function registerMembershipTools(server2, builderClient) {
+  const client = builderClient;
+  if (!client) return;
+  async function membershipRequest(path6) {
+    const headers = await client.buildHeaders();
+    const response = await fetch(`${MEMBERSHIP_BASE}${path6}`, { method: "GET", headers });
+    if (!response.ok) {
+      const text2 = await response.text();
+      throw new Error(`Membership API Error ${response.status}: GET ${path6}
+${text2}`);
+    }
+    const text = await response.text();
+    if (!text) return {};
+    return JSON.parse(text);
+  }
+  server2.tool(
+    "list_membership_offers",
+    "List a location's membership offers and products in one call. Returns { products: [...], offers: [...] }. Products are courses/communities; offers are the access grants (what a contact gets enrolled in). Use the returned ids with membership trigger conditions like offer_access_granted / product_completed. READ-ONLY \u2014 creating offers/products happens in the GHL Memberships UI.",
+    {
+      locationId: import_zod43.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await membershipRequest(`/smart-list/offers-products/${loc}`);
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "list_membership_categories",
+    "List all membership/course categories in a location. Categories group lessons inside a course/product. Use the returned ids with the category_completed / category_started trigger conditions. READ-ONLY.",
+    {
+      limit: import_zod43.z.number().optional().describe("Max categories to return. Defaults to a large value (effectively all)."),
+      locationId: import_zod43.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ limit, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await membershipRequest(`/smart-list/location/${loc}/workflow?type=category&limit=${limit ?? 1e5}`);
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "list_membership_lessons",
+    "List all membership/course lessons in a location. Use the returned ids with the lesson_completed / lesson_started trigger conditions. READ-ONLY.",
+    {
+      limit: import_zod43.z.number().optional().describe("Max lessons to return. Defaults to a large value (effectively all)."),
+      locationId: import_zod43.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ limit, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await membershipRequest(`/smart-list/location/${loc}/workflow?type=lesson&limit=${limit ?? 1e5}`);
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+}
+
+// src/tools/template-deployer.ts
+var import_zod44 = require("zod");
 var fs3 = __toESM(require("fs"));
 var path3 = __toESM(require("path"));
 function delay3(ms) {
   return new Promise((resolve5) => setTimeout(resolve5, ms));
 }
-var TemplateSchema = import_zod43.z.object({
-  templateName: import_zod43.z.string(),
-  templateVersion: import_zod43.z.string().optional(),
-  description: import_zod43.z.string().optional().default(""),
-  questionnaire: import_zod43.z.array(import_zod43.z.object({
-    id: import_zod43.z.string(),
-    question: import_zod43.z.string(),
-    type: import_zod43.z.string(),
-    required: import_zod43.z.boolean().optional(),
-    placeholder: import_zod43.z.string().optional()
+var TemplateSchema = import_zod44.z.object({
+  templateName: import_zod44.z.string(),
+  templateVersion: import_zod44.z.string().optional(),
+  description: import_zod44.z.string().optional().default(""),
+  questionnaire: import_zod44.z.array(import_zod44.z.object({
+    id: import_zod44.z.string(),
+    question: import_zod44.z.string(),
+    type: import_zod44.z.string(),
+    required: import_zod44.z.boolean().optional(),
+    placeholder: import_zod44.z.string().optional()
   })).optional().default([]),
-  location: import_zod43.z.record(import_zod43.z.unknown()).optional(),
-  tags: import_zod43.z.array(import_zod43.z.string()).optional(),
-  customFields: import_zod43.z.array(import_zod43.z.object({
-    name: import_zod43.z.string(),
-    dataType: import_zod43.z.string()
+  location: import_zod44.z.record(import_zod44.z.unknown()).optional(),
+  tags: import_zod44.z.array(import_zod44.z.string()).optional(),
+  customFields: import_zod44.z.array(import_zod44.z.object({
+    name: import_zod44.z.string(),
+    dataType: import_zod44.z.string()
   })).optional(),
-  pipelines: import_zod43.z.array(import_zod43.z.object({
-    name: import_zod43.z.string(),
-    stages: import_zod43.z.array(import_zod43.z.object({ position: import_zod43.z.number(), name: import_zod43.z.string() }))
+  pipelines: import_zod44.z.array(import_zod44.z.object({
+    name: import_zod44.z.string(),
+    stages: import_zod44.z.array(import_zod44.z.object({ position: import_zod44.z.number(), name: import_zod44.z.string() }))
   })).optional(),
-  workflows: import_zod43.z.array(import_zod43.z.object({
-    name: import_zod43.z.string(),
-    condition: import_zod43.z.string().optional(),
-    actions: import_zod43.z.array(import_zod43.z.record(import_zod43.z.unknown())).optional().default([])
+  workflows: import_zod44.z.array(import_zod44.z.object({
+    name: import_zod44.z.string(),
+    condition: import_zod44.z.string().optional(),
+    actions: import_zod44.z.array(import_zod44.z.record(import_zod44.z.unknown())).optional().default([])
   })).optional(),
-  calendars: import_zod43.z.array(import_zod43.z.object({
-    name: import_zod43.z.string(),
-    description: import_zod43.z.string().optional()
+  calendars: import_zod44.z.array(import_zod44.z.object({
+    name: import_zod44.z.string(),
+    description: import_zod44.z.string().optional()
   })).optional()
 });
 function registerTemplateDeployerTools(server2, client) {
@@ -6351,7 +6421,7 @@ function registerTemplateDeployerTools(server2, client) {
     "get_template_questionnaire",
     "Get the questionnaire for a specific template. Returns all the questions that need to be answered before deploying. Present these to the user one at a time in a conversational style.",
     {
-      templateFile: import_zod43.z.string().describe("Path to the template JSON file (from list_templates).")
+      templateFile: import_zod44.z.string().describe("Path to the template JSON file (from list_templates).")
     },
     async ({ templateFile }) => {
       try {
@@ -6384,10 +6454,10 @@ function registerTemplateDeployerTools(server2, client) {
     "deploy_template",
     "Deploy a template to set up a GHL sub-account. Creates tags, custom fields, pipelines with stages, calendars, workflows, and forms based on the template and the user's questionnaire answers. This is the main setup automation tool.",
     {
-      templateFile: import_zod43.z.string().describe("Path to the template JSON file."),
-      answers: import_zod43.z.record(import_zod43.z.unknown()).describe("Questionnaire answers keyed by question ID (e.g. {business_name: 'My Clinic', business_phone: '+15551234567', ...})."),
-      locationId: import_zod43.z.string().optional().describe("Location ID to deploy to. Uses default if not specified."),
-      dryRun: import_zod43.z.boolean().optional().describe("If true, shows what would be created without actually creating anything. Defaults to false.")
+      templateFile: import_zod44.z.string().describe("Path to the template JSON file."),
+      answers: import_zod44.z.record(import_zod44.z.unknown()).describe("Questionnaire answers keyed by question ID (e.g. {business_name: 'My Clinic', business_phone: '+15551234567', ...})."),
+      locationId: import_zod44.z.string().optional().describe("Location ID to deploy to. Uses default if not specified."),
+      dryRun: import_zod44.z.boolean().optional().describe("If true, shows what would be created without actually creating anything. Defaults to false.")
     },
     async ({ templateFile, answers, locationId: locationId2, dryRun }) => {
       try {
@@ -6633,7 +6703,7 @@ ${errors.join("\n")}` : "\nNo errors!",
 }
 
 // src/tools/validators.ts
-var import_zod44 = require("zod");
+var import_zod45 = require("zod");
 function extractFromTrigger(trigger, refs) {
   const triggerName = String(trigger.name ?? trigger.type ?? "unnamed trigger");
   const where = `trigger "${triggerName}"`;
@@ -6768,7 +6838,7 @@ function registerValidatorTools(server2, client, builderClient) {
     "validate_workflow",
     "Pre-flight ID validation for a deployed GHL workflow. Scans every trigger and action for references to pipelines, pipeline stages, custom fields, users, workflows, forms, calendars, and surveys; verifies each ID exists in the current location. Use this BEFORE publish_workflow when a workflow has been edited, or whenever a published workflow stops behaving as expected. Catches the silent-failure bug where invalid IDs make GHL skip all subsequent actions without warning. Returns a structured report of valid + missing references.",
     {
-      workflowId: import_zod44.z.string().describe("The workflow ID to validate.")
+      workflowId: import_zod45.z.string().describe("The workflow ID to validate.")
     },
     async ({ workflowId }) => {
       try {
@@ -7139,6 +7209,7 @@ function registerAllTools(server2, client, registry2, mcpVersion) {
   registerSmartListTools(server2, builderClient);
   registerReputationTools(server2, builderClient);
   registerEmailCampaignTools(server2, builderClient);
+  registerMembershipTools(server2, builderClient);
   registerValidatorTools(server2, client, builderClient);
   registerDiagnosticTools(server2, mcpVersion ?? "unknown", client, builderClient, registry2 ?? null);
   registerLocationSwitcherTools(server2, client, builderClient, registry2, mcpVersion);
@@ -7148,18 +7219,18 @@ function registerAllTools(server2, client, registry2, mcpVersion) {
 var fs4 = __toESM(require("fs"));
 var path4 = __toESM(require("path"));
 var os = __toESM(require("os"));
-var import_zod45 = require("zod");
+var import_zod46 = require("zod");
 var APP_NAME = "elitedcs-ghl-mcp";
-var CredentialsSchema = import_zod45.z.object({
-  license_key: import_zod45.z.string().min(1),
-  email: import_zod45.z.string().email(),
-  verified_at: import_zod45.z.string().min(1),
-  ghl_api_key: import_zod45.z.string().min(1),
-  ghl_location_id: import_zod45.z.string().min(1),
-  ghl_company_id: import_zod45.z.string().optional(),
-  ghl_user_id: import_zod45.z.string().optional(),
-  ghl_firebase_api_key: import_zod45.z.string().optional(),
-  ghl_firebase_refresh_token: import_zod45.z.string().optional()
+var CredentialsSchema = import_zod46.z.object({
+  license_key: import_zod46.z.string().min(1),
+  email: import_zod46.z.string().email(),
+  verified_at: import_zod46.z.string().min(1),
+  ghl_api_key: import_zod46.z.string().min(1),
+  ghl_location_id: import_zod46.z.string().min(1),
+  ghl_company_id: import_zod46.z.string().optional(),
+  ghl_user_id: import_zod46.z.string().optional(),
+  ghl_firebase_api_key: import_zod46.z.string().optional(),
+  ghl_firebase_refresh_token: import_zod46.z.string().optional()
 });
 function appDataDir() {
   const home = os.homedir();
@@ -7209,7 +7280,7 @@ function writeCredentials(creds) {
 // src/setup-tool.ts
 var os2 = __toESM(require("os"));
 var crypto3 = __toESM(require("crypto"));
-var import_zod46 = require("zod");
+var import_zod47 = require("zod");
 var LICENSE_API = "https://elitedcs.com/api/validate-license";
 var GHL_API = "https://services.leadconnectorhq.com";
 var FIREBASE_TOKEN_API = "https://securetoken.googleapis.com/v1/token";
@@ -7278,16 +7349,16 @@ async function validateFirebase(firebaseKey, refreshToken) {
 function registerSetupTool(server2) {
   server2.tool(
     "setup_ghl_mcp",
-    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 198 tools (161 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder).",
+    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 201 tools (161 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder).",
     {
-      email: import_zod46.z.string().email().describe("Email used at purchase."),
-      license_key: import_zod46.z.string().min(20).describe("License key from your purchase email."),
-      ghl_api_key: import_zod46.z.string().min(10).describe("GHL Private Integration key (starts with 'pit-'). Created INSIDE the sub-account at Settings > Integrations > Private Integrations."),
-      ghl_location_id: import_zod46.z.string().min(10).describe("GHL Location ID (sub-account ID). Found in your GHL URL: /location/THIS_PART/dashboard."),
-      ghl_company_id: import_zod46.z.string().optional().describe("(Agency only) Company ID for multi-location access."),
-      ghl_user_id: import_zod46.z.string().optional().describe("(Workflow Builder, optional) Firebase User ID. See README for browser capture instructions."),
-      ghl_firebase_api_key: import_zod46.z.string().optional().describe("(Workflow Builder, optional) Firebase API Key starting with 'AIza'."),
-      ghl_firebase_refresh_token: import_zod46.z.string().optional().describe("(Workflow Builder, optional) Firebase refresh token starting with 'AMf-'.")
+      email: import_zod47.z.string().email().describe("Email used at purchase."),
+      license_key: import_zod47.z.string().min(20).describe("License key from your purchase email."),
+      ghl_api_key: import_zod47.z.string().min(10).describe("GHL Private Integration key (starts with 'pit-'). Created INSIDE the sub-account at Settings > Integrations > Private Integrations."),
+      ghl_location_id: import_zod47.z.string().min(10).describe("GHL Location ID (sub-account ID). Found in your GHL URL: /location/THIS_PART/dashboard."),
+      ghl_company_id: import_zod47.z.string().optional().describe("(Agency only) Company ID for multi-location access."),
+      ghl_user_id: import_zod47.z.string().optional().describe("(Workflow Builder, optional) Firebase User ID. See README for browser capture instructions."),
+      ghl_firebase_api_key: import_zod47.z.string().optional().describe("(Workflow Builder, optional) Firebase API Key starting with 'AIza'."),
+      ghl_firebase_refresh_token: import_zod47.z.string().optional().describe("(Workflow Builder, optional) Firebase refresh token starting with 'AMf-'.")
     },
     async (args) => {
       const lic = await validateLicense(args.email, args.license_key);
@@ -7333,7 +7404,7 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
         ghl_firebase_api_key: workflowBuilderEnabled ? args.ghl_firebase_api_key?.trim() : void 0,
         ghl_firebase_refresh_token: workflowBuilderEnabled ? args.ghl_firebase_refresh_token?.trim() : void 0
       });
-      const toolCount = workflowBuilderEnabled ? "198" : "161";
+      const toolCount = workflowBuilderEnabled ? "201" : "161";
       const wfLine = workflowBuilderEnabled ? "Workflow Builder: enabled." : "Workflow Builder: not configured (optional).";
       const wfTip = workflowBuilderEnabled ? "" : "\nTo enable Workflow Builder later (8 extra tools): run enable_workflow_builder with your three Firebase values. No need to re-enter license/API key/location ID.";
       return {
@@ -7361,11 +7432,11 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
 function registerEnableWorkflowBuilderTool(server2) {
   server2.tool(
     "enable_workflow_builder",
-    "Add Firebase credentials to an existing GHL Command install to unlock 30 additional tools across 6 modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder (10 tools), form builder (5 tools), pipeline builder (5 tools), and workflow cloning. Requires you've already run setup_ghl_mcp. Capture the three Firebase values from your GHL browser session \u2014 see elitedcs.com/ghl-mcp-firebase for step-by-step DevTools instructions. Tool count goes from 161 to 198 after the next Claude restart.",
+    "Add Firebase credentials to an existing GHL Command install to unlock 30 additional tools across 6 modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder (10 tools), form builder (5 tools), pipeline builder (5 tools), and workflow cloning. Requires you've already run setup_ghl_mcp. Capture the three Firebase values from your GHL browser session \u2014 see elitedcs.com/ghl-mcp-firebase for step-by-step DevTools instructions. Tool count goes from 161 to 201 after the next Claude restart.",
     {
-      ghl_user_id: import_zod46.z.string().min(10).describe("Firebase User ID (uid). DevTools \u2192 Application \u2192 IndexedDB \u2192 firebaseLocalStorageDb \u2192 firebaseLocalStorage \u2192 the value.uid field of the firebase:authUser row."),
-      ghl_firebase_api_key: import_zod46.z.string().min(10).describe("Firebase API Key starting with 'AIza'. The string between 'firebase:authUser:' and ':[DEFAULT]' in the row's Key column."),
-      ghl_firebase_refresh_token: import_zod46.z.string().min(10).describe("Firebase refresh token. value.stsTokenManager.refreshToken in the firebase:authUser row.")
+      ghl_user_id: import_zod47.z.string().min(10).describe("Firebase User ID (uid). DevTools \u2192 Application \u2192 IndexedDB \u2192 firebaseLocalStorageDb \u2192 firebaseLocalStorage \u2192 the value.uid field of the firebase:authUser row."),
+      ghl_firebase_api_key: import_zod47.z.string().min(10).describe("Firebase API Key starting with 'AIza'. The string between 'firebase:authUser:' and ':[DEFAULT]' in the row's Key column."),
+      ghl_firebase_refresh_token: import_zod47.z.string().min(10).describe("Firebase refresh token. value.stsTokenManager.refreshToken in the firebase:authUser row.")
     },
     async (args) => {
       const existing = readCredentials();
@@ -7408,7 +7479,7 @@ DevTools steps: https://elitedcs.com/ghl-mcp-firebase`
             "",
             "Firebase credentials verified and saved.",
             "",
-            "**Restart Claude (quit fully and reopen) to load the workflow builder + funnel builder + pipeline builder + form builder + workflow cloner tools (198 total).**",
+            "**Restart Claude (quit fully and reopen) to load the workflow builder + funnel builder + pipeline builder + form builder + workflow cloner tools (201 total).**",
             "",
             'After restart, try: "List my workflows in full detail" or "Validate workflow <id>".',
             "",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.12.0",
-  "description": "GoHighLevel MCP Server for Claude. 198 tools — full CRM, automation, marketing control, and the only programmatic GHL workflow builder.",
+  "version": "3.13.0",
+  "description": "GoHighLevel MCP Server for Claude. 201 tools — full CRM, automation, marketing control, and the only programmatic GHL workflow builder.",
   "main": "dist/index.js",
   "bin": {
     "ghl-mcp": "dist/index.js"