@elitedcs/ghl-mcp 3.19.1 → 3.20.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 3.20.0 — License gate for headless / env-var installs
+
+**Security + headless support. No tool changes (212 across 43 modules).**
+
+Closes a gap where setting `GHL_API_KEY` + `GHL_LOCATION_ID` via environment variables loaded the full tool set **without ever validating a license**. The server now requires a verified license before exposing the full tools:
+
+- A `credentials.json` written by `setup_ghl_mcp` carries `verified_at` (validated at setup) and is trusted as before — **no change for normal Desktop/Claude Code installs.**
+- The env-var / headless path must now supply `GHL_LICENSE_EMAIL` + `GHL_LICENSE_KEY`. These are validated once at boot and the verified result is cached to `credentials.json`, so there's no per-restart phone-home and device activations aren't re-counted on a stable machine.
+- Without a verified license, the server stays in bootstrap mode (only `setup_ghl_mcp`, `request_license`, `get_mcp_version`) with a clear message.
+
+This makes headless/server installs first-class: set `GHL_LICENSE_EMAIL`, `GHL_LICENSE_KEY`, `GHL_API_KEY`, `GHL_LOCATION_ID` (plus the Firebase vars for the workflow builder) and the server boots into the full tool set.
+
 ## 3.19.1 — MCP registry prep + README UTM tracking
 
 - Added `mcpName` (`io.github.drjerryrelth/ghl-command`) to package.json so the package can be published to the official MCP registry (many directories pull from it).

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.19.1",
+      version: "3.20.0",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 212 tools \u2014 full CRM, automation, marketing control, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -60,9 +60,15 @@ var require_package = __commonJS({
         "model-context-protocol",
         "gohighlevel",
         "ghl",
+        "gohighlevel-mcp",
+        "ghl-automation",
         "crm",
         "claude",
-        "anthropic"
+        "anthropic",
+        "workflow-builder",
+        "marketing-automation",
+        "ai-agent",
+        "agency"
       ],
       author: "Elite DCs, LLC",
       license: "MIT",
@@ -8321,24 +8327,60 @@ var server = new import_mcp.McpServer({
   name: "elite-dcs-ghl",
   version: pkg.version
 });
-var inBootstrapMode = !apiKey || !locationId;
 registerMetaTools(server, pkg.version);
-if (inBootstrapMode) {
-  process.stderr.write(
-    `[ghl-mcp] Bootstrap mode: no credentials found.
-[ghl-mcp] Looked for env vars (GHL_API_KEY, GHL_LOCATION_ID) and credentials file (${credentialsPath()}).
+var inBootstrapMode = true;
+async function resolveAccessAndRegister() {
+  let licenseVerified = Boolean(fileCreds?.verified_at && fileCreds?.license_key);
+  if (!licenseVerified && apiKey && locationId) {
+    const licEmail = (process.env.GHL_LICENSE_EMAIL || fileCreds?.email)?.trim();
+    const licKey = (process.env.GHL_LICENSE_KEY || fileCreds?.license_key)?.trim();
+    if (licEmail && licKey) {
+      const lic = await validateLicense(licEmail, licKey);
+      if (lic.ok) {
+        licenseVerified = true;
+        try {
+          writeCredentials({
+            license_key: licKey,
+            email: licEmail,
+            verified_at: (/* @__PURE__ */ new Date()).toISOString(),
+            ghl_api_key: apiKey,
+            ghl_location_id: locationId,
+            ...process.env.GHL_COMPANY_ID ? { ghl_company_id: process.env.GHL_COMPANY_ID } : {},
+            ...process.env.GHL_USER_ID ? { ghl_user_id: process.env.GHL_USER_ID } : {},
+            ...process.env.GHL_FIREBASE_API_KEY ? { ghl_firebase_api_key: process.env.GHL_FIREBASE_API_KEY } : {},
+            ...process.env.GHL_FIREBASE_REFRESH_TOKEN ? { ghl_firebase_refresh_token: process.env.GHL_FIREBASE_REFRESH_TOKEN } : {}
+          });
+          process.stderr.write("[ghl-mcp] License validated and cached.\n");
+        } catch {
+        }
+      } else {
+        process.stderr.write(`[ghl-mcp] License check failed: ${lic.error}
+`);
+      }
+    } else {
+      process.stderr.write(
+        "[ghl-mcp] No verified license. For a headless/server install set GHL_LICENSE_EMAIL + GHL_LICENSE_KEY alongside GHL_API_KEY + GHL_LOCATION_ID; otherwise run setup_ghl_mcp.\n"
+      );
+    }
+  }
+  inBootstrapMode = !apiKey || !locationId || !licenseVerified;
+  if (inBootstrapMode) {
+    process.stderr.write(
+      `[ghl-mcp] Bootstrap mode.
+[ghl-mcp] Need a valid license plus GHL_API_KEY + GHL_LOCATION_ID (env vars or credentials file at ${credentialsPath()}).
 [ghl-mcp] Only setup_ghl_mcp, request_license, and get_mcp_version are available. Run setup_ghl_mcp with your license + GHL credentials \u2014 or request_license if you don't have a license yet.
 `
-  );
-  registerSetupTool(server);
-  registerLeadCaptureTool(server);
-} else {
-  const client = new GHLClient({ apiKey, locationId });
-  registerAllTools(server, client, registry, pkg.version);
-  registerEnableWorkflowBuilderTool(server);
-  if (fileCreds && !process.env.GHL_API_KEY) {
-    process.stderr.write(`[ghl-mcp] Loaded credentials from ${credentialsPath()}
+    );
+    registerSetupTool(server);
+    registerLeadCaptureTool(server);
+  } else {
+    const client = new GHLClient({ apiKey, locationId });
+    registerAllTools(server, client, registry, pkg.version);
+    registerEnableWorkflowBuilderTool(server);
+    if (fileCreds && !process.env.GHL_API_KEY) {
+      process.stderr.write(`[ghl-mcp] Loaded credentials from ${credentialsPath()}
 `);
+    }
   }
 }
 async function validateApiKey() {
@@ -8375,6 +8417,7 @@ async function checkForUpdates() {
   }
 }
 async function main() {
+  await resolveAccessAndRegister();
   const transport = new import_stdio.StdioServerTransport();
   await server.connect(transport);
   if (inBootstrapMode) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.19.1",
+  "version": "3.20.0",
   "mcpName": "io.github.drjerryrelth/ghl-command",
   "description": "GoHighLevel MCP Server for Claude. 212 tools — full CRM, automation, marketing control, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
   "main": "dist/index.js",
@@ -29,9 +29,15 @@
     "model-context-protocol",
     "gohighlevel",
     "ghl",
+    "gohighlevel-mcp",
+    "ghl-automation",
     "crm",
     "claude",
-    "anthropic"
+    "anthropic",
+    "workflow-builder",
+    "marketing-automation",
+    "ai-agent",
+    "agency"
   ],
   "author": "Elite DCs, LLC",
   "license": "MIT",