@elitedcs/ghl-mcp 3.14.0 → 3.16.0

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## 3.16.0 — Membership/course creates, SMS templates, reviews list (Firebase-gated)
+
+**212 tools across 43 modules (+6). Build courses and SMS templates from Claude; read the reviews that come back.**
+
+Six new write/read tools, all reverse-engineered from DevTools captures of the live GHL UI against the MCP Testing sandbox and verified end-to-end (each returns 2xx with the exact request shape these tools send). All require Firebase auth — the public bearer key 401s on each — so the no-Firebase tool count stays 163.
+
+### New tools (6)
+
+- **`create_course`** — create a membership course (a "product") with title + description.
+- **`create_membership_category`** — add a category/module inside a course (groups lessons; supports drip days).
+- **`create_membership_lesson`** — add a lesson (a "post") inside a category, with HTML body and content type.
+- **`create_membership_offer`** — create the access grant that enrolls contacts into one or more courses. Free by default; supports recurring/one-time pricing.
+- **`create_sms_template`** — create an SMS/text template (a "snippet") for the composer and SMS workflow actions; merge fields supported. Also creates email snippets via `type: "email"`.
+- **`list_reviews`** — list the reviews a location has received (Google, Facebook, etc.) with rating, author, text, and reply status. **Fixes the long-standing "No Location Found" error:** the reviews endpoint resolves location through nested `filterParams[locationId][0][value]`, not a flat `locationId`. Responding to a review is still pending (needs a live review to capture).
+
+Course/category/lesson/offer hit `backend.leadconnectorhq.com/membership/locations/{loc}/*`; reviews hit `backend.leadconnectorhq.com/reputation/reviews`; SMS templates hit `services.leadconnectorhq.com/snippets/{loc}`. All with the workflow-builder Firebase token.
+
+### Still pending
+
+Email-campaign delete/send/schedule live in a cross-origin iframe (`email-home-prod.leadconnectorhq.com`) that can't be black-box captured and whose REST paths 404 on the public host — deferred until a capture from inside that iframe.
+
+## 3.15.0 — Email-template delete, rename, archive (Firebase-gated)
+
+**206 tools across 43 modules (+3). Manage email templates without leaving Claude.**
+
+Until now you could create and update email templates through the public API, but deleting or renaming one meant clicking through the GHL UI — the public bearer API 404s on both. Those mutations live on the internal API behind Firebase auth. Confirmed working 2026-05-24 against the MCP Testing sandbox and verified end-to-end (create → rename → archive → unarchive → delete, round-trip clean).
+
+### New tools (3, all require Firebase configured)
+
+- **`delete_email_template`** — hard delete a template by id. Irreversible. Breaks any workflow email action or draft campaign that references it.
+- **`rename_email_template`** — change a template's display title only; HTML content and sender settings untouched.
+- **`archive_email_template`** — archive (`archived: true`) or restore (`archived: false`) a template. Removes it from the active list without deleting it — the reversible alternative to delete.
+
+All three hit `backend.leadconnectorhq.com/emails/builder` with the workflow-builder Firebase token (the GHL UI persists via Firestore, but the REST routes exist server-side). Registered by `registerEmailBuilderInternalTools` in the internal-API block. `update_email_template`'s description now points at `rename_email_template` / `delete_email_template` instead of telling you to use the UI.
+
 ## 3.14.0 — Multi-tenant Firebase: run the workflow builder in clients' accounts
 
 **203 tools across 43 modules (+2). The workflow builder is no longer single-company.**

package/README.md

@@ -1,6 +1,6 @@
 # GHL Command — GoHighLevel MCP Server
 
-**Full GoHighLevel API access for Claude.** 203 tools across 43 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers. **Multi-tenant:** one install can run the workflow builder across multiple clients' GHL accounts.
+**Full GoHighLevel API access for Claude.** 212 tools across 43 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers. **Multi-tenant:** one install can run the workflow builder across multiple clients' GHL accounts.
 
 **Distributed via npm as [`@elitedcs/ghl-mcp`](https://www.npmjs.com/package/@elitedcs/ghl-mcp).** Buyers install with one config block — no git, no Node.js setup, no terminal commands. Updates flow automatically (`npx @latest` re-resolves on every Claude restart).
 

package/dist/index.js

@@ -31,8 +31,8 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.14.0",
-      description: "GoHighLevel MCP Server for Claude. 203 tools \u2014 full CRM, automation, marketing control, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
+      version: "3.16.0",
+      description: "GoHighLevel MCP Server for Claude. 212 tools \u2014 full CRM, automation, marketing control, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
       bin: {
         "ghl-mcp": "dist/index.js"
@@ -3860,6 +3860,8 @@ function registerBlogTools(server2, client) {
 
 // src/tools/emails.ts
 var import_zod25 = require("zod");
+var EMAIL_BUILDER_BASE = "https://backend.leadconnectorhq.com/emails/builder";
+var SNIPPETS_BASE = "https://services.leadconnectorhq.com/snippets";
 var TEMPLATE_TYPES = ["html", "folder", "import", "builder", "blank", "ai_template", "vibe-editor"];
 var EDITOR_TYPES = ["html", "builder"];
 function registerEmailTools(server2, client) {
@@ -3930,7 +3932,7 @@ function registerEmailTools(server2, client) {
   safeTool(
     server2,
     "update_email_template",
-    "Save HTML content into an existing email template. Use this to update the body of a template after `create_email_template`. The `updatedBy` field is required by GHL; defaults to 'mcp' if not provided. Note: this updates CONTENT only. Renaming the title or deleting the template is not yet possible through the public API \u2014 do those in the GHL UI for now.",
+    "Save HTML content into an existing email template. Use this to update the body of a template after `create_email_template`. The `updatedBy` field is required by GHL; defaults to 'mcp' if not provided. Note: this updates CONTENT only. To rename a template use `rename_email_template`; to delete it use `delete_email_template` (both Firebase-gated).",
     {
       templateId: import_zod25.z.string().describe("The template ID to update (from create_email_template or list_email_templates)."),
       html: import_zod25.z.string().describe("The full HTML body of the email. Can include merge fields like {{contact.first_name}}."),
@@ -3952,6 +3954,116 @@ function registerEmailTools(server2, client) {
     }
   );
 }
+function registerEmailBuilderInternalTools(server2, builderClient) {
+  const client = builderClient;
+  if (!client) return;
+  async function builderRequest(method, path6, body) {
+    const headers = await client.buildHeaders();
+    const response = await fetch(`${EMAIL_BUILDER_BASE}${path6}`, {
+      method,
+      headers,
+      body: body ? JSON.stringify(body) : void 0
+    });
+    if (!response.ok) {
+      const text2 = await response.text();
+      throw new Error(`Email Builder API Error ${response.status}: ${method} /emails/builder${path6}
+${text2}`);
+    }
+    const text = await response.text();
+    return text ? JSON.parse(text) : { ok: true };
+  }
+  server2.tool(
+    "delete_email_template",
+    "Permanently delete an email template ('builder') by id. This is a HARD delete \u2014 the template is removed, not archived (use archive_email_template if you want a reversible remove). Requires Firebase auth; the public bearer API can't do this. Get the templateId from list_email_templates. WARNING: irreversible. If the template is referenced by a workflow email action or a draft campaign, deleting it will break that reference.",
+    {
+      templateId: import_zod25.z.string().describe("The template id to delete (from list_email_templates, the `id` field)."),
+      locationId: import_zod25.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ templateId, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await builderRequest("DELETE", `/data/${templateId}?locationId=${loc}`);
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "rename_email_template",
+    "Rename an existing email template ('builder'). Updates the display title only; the HTML content and sender settings are left untouched. Requires Firebase auth; the public bearer API can't do this. Get the templateId from list_email_templates.",
+    {
+      templateId: import_zod25.z.string().describe("The template id to rename (from list_email_templates, the `id` field)."),
+      name: import_zod25.z.string().describe("The new display name for the template (e.g., 'May Newsletter \u2014 Final')."),
+      locationId: import_zod25.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ templateId, name, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await builderRequest("PATCH", `/${templateId}`, { locationId: loc, name });
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "archive_email_template",
+    "Archive (or unarchive) an email template ('builder'). Archiving removes it from the active templates list without deleting it \u2014 a reversible alternative to delete_email_template. Requires Firebase auth. Get the templateId from list_email_templates.",
+    {
+      templateId: import_zod25.z.string().describe("The template id to archive/unarchive (from list_email_templates, the `id` field)."),
+      archived: import_zod25.z.boolean().optional().describe("true to archive (default), false to restore from archive."),
+      locationId: import_zod25.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ templateId, archived, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await builderRequest("PATCH", `/${templateId}`, { locationId: loc, archived: archived ?? true });
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "create_sms_template",
+    "Create an SMS/text template (a 'snippet') for quick-insert into the conversations composer and SMS workflow actions. The body can include merge fields like {{contact.first_name}}. Set type to 'email' to create an HTML email snippet instead. Returns the created snippet including its id. Requires Firebase auth \u2014 the public bearer key returns 401 on this endpoint.",
+    {
+      name: import_zod25.z.string().describe("Template/snippet name (shown in the snippets list, not sent to contacts)."),
+      body: import_zod25.z.string().describe("The message body. SMS: plain text with optional merge fields. Email snippet: HTML."),
+      type: import_zod25.z.enum(["sms", "email"]).optional().describe("Snippet type. Defaults to 'sms' (text). Use 'email' for an HTML email snippet."),
+      locationId: import_zod25.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ name, body, type, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const headers = await client.buildHeaders();
+        const response = await fetch(`${SNIPPETS_BASE}/${loc}`, {
+          method: "POST",
+          headers,
+          body: JSON.stringify({
+            name,
+            template: { body, attachments: [] },
+            useForLiveChat: false,
+            urlAttachments: [],
+            type: type ?? "sms",
+            isFolder: false,
+            parentId: ""
+          })
+        });
+        if (!response.ok) {
+          const text2 = await response.text();
+          throw new Error(`Snippets API Error ${response.status}: POST /snippets/${loc}
+${text2}`);
+        }
+        const text = await response.text();
+        return jsonResponse(text ? JSON.parse(text) : { ok: true });
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+}
 
 // src/tools/trigger-links.ts
 var import_zod26 = require("zod");
@@ -5658,7 +5770,7 @@ async function validateFirebase(firebaseKey, refreshToken) {
 function registerSetupTool(server2) {
   server2.tool(
     "setup_ghl_mcp",
-    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 203 tools (163 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder).",
+    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 212 tools (163 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder).",
     {
       email: import_zod37.z.string().email().describe("Email used at purchase."),
       license_key: import_zod37.z.string().min(20).describe("License key from your purchase email."),
@@ -5713,7 +5825,7 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
         ghl_firebase_api_key: workflowBuilderEnabled ? args.ghl_firebase_api_key?.trim() : void 0,
         ghl_firebase_refresh_token: workflowBuilderEnabled ? args.ghl_firebase_refresh_token?.trim() : void 0
       });
-      const toolCount = workflowBuilderEnabled ? "203" : "163";
+      const toolCount = workflowBuilderEnabled ? "212" : "163";
       const wfLine = workflowBuilderEnabled ? "Workflow Builder: enabled." : "Workflow Builder: not configured (optional).";
       const wfTip = workflowBuilderEnabled ? "" : "\nTo enable Workflow Builder later (8 extra tools): run enable_workflow_builder with your three Firebase values. No need to re-enter license/API key/location ID.";
       return {
@@ -6838,6 +6950,43 @@ ${text2}`);
       }
     }
   );
+  server2.tool(
+    "list_reviews",
+    "List the reviews a location has received (Google, Facebook, etc.) with rating, author, text, reply status, and source. Supports paging and an optional rating filter. NOTE: location is resolved through nested filter params internally \u2014 a flat locationId is what caused the long-standing 'No Location Found' error, now fixed. Responding to a review is not yet available via API. Requires Firebase auth.",
+    {
+      locationId: import_zod43.z.string().optional().describe("Location ID. Falls back to the active builder client's location."),
+      pageNumber: import_zod43.z.number().optional().describe("1-based page number. Defaults to 1."),
+      pageSize: import_zod43.z.number().optional().describe("Results per page. Defaults to 10."),
+      rating: import_zod43.z.number().optional().describe("Optional: only return reviews with this star rating (1-5)."),
+      includeDeleted: import_zod43.z.boolean().optional().describe("Include deleted reviews. Defaults to false.")
+    },
+    async ({ locationId: locationId2, pageNumber, pageSize, rating, includeDeleted }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const q = [
+          `filterParams[locationId][0][value]=${encodeURIComponent(loc)}`,
+          `filterParams[locationId][0][condition]=eq`,
+          `filterParams[deleted][0][value]=${includeDeleted ? "true" : "false"}`,
+          `filterParams[deleted][0][condition]=eq`
+        ];
+        if (rating !== void 0) {
+          q.push(`filterParams[rating][0][value]=${rating}`);
+          q.push(`filterParams[rating][0][condition]=eq`);
+        }
+        q.push(`sortParams[dateAdded]=-1`);
+        q.push(`pageNumber=${pageNumber ?? 1}`);
+        q.push(`pageSize=${pageSize ?? 10}`);
+        const query = q.map((p) => {
+          const i = p.indexOf("=");
+          return `${encodeURIComponent(p.slice(0, i))}=${p.slice(i + 1)}`;
+        }).join("&");
+        const result = await reputationRequest("GET", `/reviews?${query}`);
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
 }
 
 // src/tools/email-campaigns.ts
@@ -6901,12 +7050,16 @@ var MEMBERSHIP_BASE = "https://backend.leadconnectorhq.com/membership";
 function registerMembershipTools(server2, builderClient) {
   const client = builderClient;
   if (!client) return;
-  async function membershipRequest(path6) {
+  async function membershipRequest(path6, method = "GET", body) {
     const headers = await client.buildHeaders();
-    const response = await fetch(`${MEMBERSHIP_BASE}${path6}`, { method: "GET", headers });
+    const response = await fetch(`${MEMBERSHIP_BASE}${path6}`, {
+      method,
+      headers,
+      body: body ? JSON.stringify(body) : void 0
+    });
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Membership API Error ${response.status}: GET ${path6}
+      throw new Error(`Membership API Error ${response.status}: ${method} ${path6}
 ${text2}`);
     }
     const text = await response.text();
@@ -6963,6 +7116,130 @@ ${text2}`);
       }
     }
   );
+  server2.tool(
+    "create_course",
+    "Create a membership course (a 'product') in a location. Creates the course shell with a title and description; add categories (create_membership_category) and lessons (create_membership_lesson) into it, and an offer (create_membership_offer) to grant access. Returns the new product, including its id. Requires Firebase auth.",
+    {
+      title: import_zod45.z.string().describe("Course title."),
+      description: import_zod45.z.string().optional().describe("Course description. Defaults to empty."),
+      locationId: import_zod45.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ title, description, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await membershipRequest(`/locations/${loc}/products`, "POST", {
+          title,
+          description: description ?? ""
+        });
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "create_membership_category",
+    "Create a category (module/section) inside a membership course. Categories group lessons. Needs the productId of the course (from create_course or list_membership_offers). Returns the new category, including its id (use it as categoryId when creating lessons). Requires Firebase auth.",
+    {
+      title: import_zod45.z.string().describe("Category title (e.g. 'Module 1')."),
+      productId: import_zod45.z.string().describe("The course/product id this category belongs to."),
+      description: import_zod45.z.string().optional().describe("Category description. Defaults to empty."),
+      visibility: import_zod45.z.enum(["published", "draft"]).optional().describe("'published' (default) or 'draft'."),
+      sequenceNo: import_zod45.z.number().optional().describe("Display order within the course. Defaults to 0."),
+      dripDays: import_zod45.z.number().optional().describe("Days after enrollment before this category unlocks. Defaults to 0 (no drip)."),
+      locationId: import_zod45.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ title, productId, description, visibility, sequenceNo, dripDays, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await membershipRequest(`/locations/${loc}/categories`, "POST", {
+          title,
+          productId,
+          visibility: visibility ?? "published",
+          sequenceNo: sequenceNo ?? 0,
+          dripDays: dripDays ?? 0,
+          description: description ?? "",
+          parentCategory: null,
+          posterImage: "",
+          lockedBy: null,
+          lockedByCategory: null,
+          commentPermission: null,
+          metadata: null
+        });
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "create_membership_lesson",
+    "Create a lesson (a 'post') inside a membership course category. Needs both the categoryId (from create_membership_category) and the productId of the course. Description is the lesson body as HTML. Returns the new lesson, including its id. Requires Firebase auth.",
+    {
+      title: import_zod45.z.string().describe("Lesson title."),
+      categoryId: import_zod45.z.string().describe("The category id this lesson belongs to (from create_membership_category)."),
+      productId: import_zod45.z.string().describe("The course/product id this lesson belongs to."),
+      description: import_zod45.z.string().optional().describe("Lesson body as HTML. Defaults to empty."),
+      contentType: import_zod45.z.enum(["video", "audio", "text", "pdf", "assignment"]).optional().describe("Lesson content type. Defaults to 'video'."),
+      visibility: import_zod45.z.enum(["published", "draft"]).optional().describe("'published' (default) or 'draft'."),
+      sequenceNo: import_zod45.z.number().optional().describe("Display order within the category. Defaults to 0."),
+      locationId: import_zod45.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ title, categoryId, productId, description, contentType, visibility, sequenceNo, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await membershipRequest(`/locations/${loc}/posts`, "POST", {
+          title,
+          description: description ?? "",
+          categoryId,
+          productId,
+          visibility: visibility ?? "published",
+          sequenceNo: sequenceNo ?? 0,
+          posterImage: null,
+          commentStatus: "visible",
+          contentType: contentType ?? "video",
+          commentPermission: "enabled",
+          lockedByPost: null,
+          lockedByCategory: null,
+          certificateTemplateId: null,
+          metaData: null,
+          contentId: null
+        });
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "create_membership_offer",
+    "Create a membership offer \u2014 the access grant that enrolls contacts into one or more courses/products. Link it to course product ids. Defaults to a free offer; for paid, set type to 'recurring' or 'one_time' with an amount. Returns the new offer, including its id (referenced by the offer_access_granted trigger). Requires Firebase auth.",
+    {
+      title: import_zod45.z.string().describe("Offer title (shown at checkout / in the offer list)."),
+      productIds: import_zod45.z.array(import_zod45.z.string()).describe("Course/product ids this offer grants access to (from create_course or list_membership_offers)."),
+      type: import_zod45.z.enum(["free", "recurring", "one_time"]).optional().describe("Offer type. Defaults to 'free'."),
+      amount: import_zod45.z.number().optional().describe("Price for paid offers. Defaults to 0 (free)."),
+      currency: import_zod45.z.string().optional().describe("Currency code for paid offers. Defaults to 'USD'."),
+      locationId: import_zod45.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+    },
+    async ({ title, productIds, type, amount, currency, locationId: locationId2 }) => {
+      try {
+        const loc = locationId2 ?? client.locationId;
+        const result = await membershipRequest(`/locations/${loc}/offers`, "POST", {
+          title,
+          type: type ?? "free",
+          isLivePaymentMode: true,
+          locationId: loc,
+          productIds,
+          amount: amount ?? 0,
+          currency: currency ?? "USD"
+        });
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
 }
 
 // src/tools/template-deployer.ts
@@ -7863,6 +8140,7 @@ function registerAllTools(server2, client, registry2, mcpVersion) {
   registerSmartListTools(server2, builderClient);
   registerReputationTools(server2, builderClient);
   registerEmailCampaignTools(server2, builderClient);
+  registerEmailBuilderInternalTools(server2, builderClient);
   registerMembershipTools(server2, builderClient);
   registerValidatorTools(server2, client, builderClient);
   registerDiagnosticTools(server2, mcpVersion ?? "unknown", client, builderClient, registry2 ?? null);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.14.0",
-  "description": "GoHighLevel MCP Server for Claude. 203 tools — full CRM, automation, marketing control, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
+  "version": "3.16.0",
+  "description": "GoHighLevel MCP Server for Claude. 212 tools — full CRM, automation, marketing control, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
   "main": "dist/index.js",
   "bin": {
     "ghl-mcp": "dist/index.js"