@elitedcs/ghl-mcp 3.59.0 → 3.60.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # Changelog
 
+## 3.60.0 — One install for every tier, and upgrading is just the license key
+
+A real free-tier user installed, was told "Setup complete!", asked for the
+account audit every email promises — and got "Tool not found." The audit
+needs a one-time browser login that was framed as optional and buried after
+the success message. Worse: a free user who completed that login and then
+upgraded had it silently ERASED by the upgrade itself. This release makes
+the install one thing, for everyone:
+
+- **"Complete" now means complete.** When the browser login hasn't happened
+  yet, setup says "Step 1 of 2 done" and names the next command
+  (`capture_firebase_interactive`, now available before the restart) — one
+  restart total, not two. The word "optional" is gone.
+- **The auditor never vanishes.** Before the unlock, `audit_workflows` and
+  `validate_workflow` answer with 60-second finish-your-install directions
+  instead of not existing.
+- **Upgrading is one paste.** `setup_ghl_mcp` now accepts just your email and
+  the new license key: the GHL credentials and Workflow Builder unlock saved
+  on your machine are reused and kept. (Previously, re-running setup wiped
+  the unlock — fixed, with tests that keep it fixed.) Supply the GHL key and
+  location ID only on a first-time setup, always as a pair.
+- **A rejected credential update can no longer destroy a working one** — if
+  you re-run setup with bad Firebase values, the good saved ones stay.
+- `health_check` now points at the one-click unlock and current URLs.
+
+The free and paid tiers install identically; the license key alone decides
+what unlocks. Free stays read-only; paid unlocks everything, on the same
+install, with the same key-swap.
+
 ## 3.59.0 — One-command install: `npx -y @elitedcs/ghl-mcp cli install`
 
 The old install step said "Edit Config, paste this block." Edit Config opens a

package/README.md

@@ -8,7 +8,7 @@ Works with **both the Claude Desktop App and Claude Code terminal** — your cho
 
 **License required.** Get it at [ghlcommand.com](https://ghlcommand.com?utm_source=npm&utm_medium=readme) — $97/mo, covering UNLIMITED GoHighLevel sub-accounts on up to 3 machines (never billed per account). **30-day time-back guarantee**: save 5+ hours on one client build or your first month back.
 
-**Try it FREE (read-only tier).** Grab an instant free key at [ghlcommand.com/free](https://ghlcommand.com/free?utm_source=npm&utm_medium=readme) — 107 read-only tools on your own GHL account (89 before the one-login auditor unlock): the account-wide workflow audit (`audit_workflows` finds the silently broken references GHL never warns you about), account health, and every read across contacts, pipelines, funnels, and workflows. Write tools stay visible and answer with upgrade info. Buying later with the same email upgrades your key in place — 1 machine on free, 3 when you upgrade.
+**Try it FREE (read-only tier).** Grab an instant free key at [ghlcommand.com/free](https://ghlcommand.com/free?utm_source=npm&utm_medium=readme) — 107 read-only tools on your own GHL account once the two-step install is finished (the same install as the paid tier — upgrading later is just a license swap): the account-wide workflow audit (`audit_workflows` finds the silently broken references GHL never warns you about), account health, and every read across contacts, pipelines, funnels, and workflows. Write tools stay visible and answer with upgrade info. Buying later with the same email upgrades your key in place — 1 machine on free, 3 when you upgrade.
 
 **How this differs from HighLevel's official MCP.** HighLevel ships an official Anthropic MCP that reads and writes your CRM (contacts, conversations, calendars, opportunities, payments, social) over the public API — it's free and it's good; use it for that. What it *cannot* do, because the public API doesn't expose it: **build or edit workflows, build funnels/landing pages, or build forms.** That's exactly what GHL Command does — the programmatic Workflow Builder, funnel/page builder, form builder, deep workflow cloning, the silent-failure `audit_workflows`, and Blueprint (build a whole client account from one intake — ships as a guided skill that **installs itself automatically** with this package; nothing to download), all on GHL's internal APIs. **Official MCP = read/write your CRM. GHL Command = build and fix it.** They stack fine together.
 
@@ -175,7 +175,7 @@ https://app.gohighlevel.com/v2/location/YOUR_LOCATION_ID/dashboard
 
 ## Enable the Workflow Builder
 
-The builder + cloner + validator tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow) use GHL's internal API and require Firebase credentials. Without them, the other 179 tools work fine — you just won't have workflow/funnel/form/pipeline editing. This is the flagship feature: do this step.
+The builder + cloner + validator tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow) use GHL's internal API and require Firebase credentials. Without them, the other 181 tools work fine — you just won't have workflow/funnel/form/pipeline editing. This is the flagship feature: do this step.
 
 **One-click capture (v3.49.0+, the supported path):**
 
@@ -518,7 +518,7 @@ Highlights (full guide: [`docs/HEADLESS.md`](docs/HEADLESS.md)):
 |---|---|
 | `get_mcp_version` | Check installed version against the latest published to npm. Confirms an upgrade landed after restarting Claude. Available even before GHL credentials are configured. |
 | `health_check` | Run a full health check: npm registry + version status, GHL API key validity, default location reachability, Firebase auth status, token registry presence. Use when something feels broken. |
-| `enable_workflow_builder` | Add Firebase credentials to an existing install to unlock 54 additional Firebase-gated tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, memberships, validate_workflow). No need to re-enter license / API key / location ID. Run this any time after the basic setup, on the buyer's schedule. |
+| `enable_workflow_builder` | Add Firebase credentials to an existing install to unlock 52 additional Firebase-gated tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, memberships, validate_workflow). No need to re-enter license / API key / location ID. Run this any time after the basic setup, on the buyer's schedule. |
 
 ### Other Modules
 

package/dist/index.js

@@ -1508,12 +1508,16 @@ function registerSetupTool(server2, pkgVersion) {
   if (pkgVersion) setupPkgVersion = pkgVersion;
   server2.tool(
     "setup_ghl_mcp",
-    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 233 tools (179 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder). No license yet? Paid ($97/mo) at https://ghlcommand.com \u2014 or a FREE read-only key, instantly, at https://ghlcommand.com/free.",
+    "First-run setup AND license upgrades for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file; restart Claude once after it completes. UPGRADING an existing install (e.g. free key to paid)? Supply ONLY email + license_key \u2014 the GHL credentials and any Workflow Builder unlock already saved on this machine are reused and kept; do not re-enter ghl_api_key or ghl_location_id. No license yet? Paid ($97/mo) at https://ghlcommand.com \u2014 or a FREE read-only key, instantly, at https://ghlcommand.com/free.",
     {
       email: import_zod42.z.string().email().describe("Email used at purchase."),
       license_key: import_zod42.z.string().min(20).describe("License key from your purchase email."),
-      ghl_api_key: import_zod42.z.string().min(10).describe("GHL Private Integration key (starts with 'pit-'). Created INSIDE the sub-account at Settings > Integrations > Private Integrations."),
-      ghl_location_id: import_zod42.z.string().min(10).describe("GHL Location ID (sub-account ID). Found in your GHL URL: /location/THIS_PART/dashboard."),
+      // v3.60.0: optional AS A PAIR for the one-line upgrade. Supply both, or
+      // neither (reuses the pair saved on this machine). Never one alone —
+      // mixing a fresh key with a stale stored location (or vice versa) would
+      // silently persist a mismatched tuple (Codex-agreed atomic-pair rule).
+      ghl_api_key: import_zod42.z.string().min(10).optional().describe("GHL Private Integration key (starts with 'pit-'). Created INSIDE the sub-account at Settings > Integrations > Private Integrations. OMIT together with ghl_location_id to reuse the pair already saved on this machine (upgrades)."),
+      ghl_location_id: import_zod42.z.string().min(10).optional().describe("GHL Location ID (sub-account ID). Found in your GHL URL: /location/THIS_PART/dashboard. OMIT together with ghl_api_key to reuse the saved pair (upgrades)."),
       ghl_company_id: import_zod42.z.string().optional().describe("(Agency only) Company ID for multi-location access."),
       // v3.25.0: one-paste shortcut. Run `auto_capture_firebase_script` first;
       // it returns a console script that fills the clipboard with this exact
@@ -1533,7 +1537,38 @@ function registerSetupTool(server2, pkgVersion) {
 
 Purchase a license at https://ghlcommand.com \u2014 or get a FREE read-only key instantly at https://ghlcommand.com/free. Stuck? Reply to any email from us or write support@ghlcommand.com.` }], isError: true };
       }
-      const ghl = await validateGhl(args.ghl_api_key, args.ghl_location_id);
+      const priorForPair = readCredentials();
+      const suppliedApiKey = args.ghl_api_key?.trim();
+      const suppliedLocationId = args.ghl_location_id?.trim();
+      if (suppliedApiKey && !suppliedLocationId || !suppliedApiKey && suppliedLocationId) {
+        return {
+          content: [{
+            type: "text",
+            text: "Provide BOTH ghl_api_key and ghl_location_id, or NEITHER (to reuse the pair already saved on this machine). Mixing one new value with one saved value is not allowed \u2014 they are validated and stored as a pair."
+          }],
+          isError: true
+        };
+      }
+      let ghlApiKey;
+      let ghlLocationId;
+      let usedStoredPair = false;
+      if (suppliedApiKey && suppliedLocationId) {
+        ghlApiKey = suppliedApiKey;
+        ghlLocationId = suppliedLocationId;
+      } else if (priorForPair?.ghl_api_key && priorForPair?.ghl_location_id) {
+        ghlApiKey = priorForPair.ghl_api_key;
+        ghlLocationId = priorForPair.ghl_location_id;
+        usedStoredPair = true;
+      } else {
+        return {
+          content: [{
+            type: "text",
+            text: 'No GHL credentials supplied and none saved on this machine yet. For a first-time setup you need both:\n  ghl_api_key \u2014 a Private Integration key (pit-...) created INSIDE your sub-account: Settings > Integrations > Private Integrations (click "Select all" on scopes, copy the WHOLE key)\n  ghl_location_id \u2014 the part of your GHL URL after /location/\nFull walkthrough: https://ghlcommand.com/start'
+          }],
+          isError: true
+        };
+      }
+      const ghl = await validateGhl(ghlApiKey, ghlLocationId);
       if (!ghl.ok) {
         emit("setup_failed", { pkgVersion: setupPkgVersion, reasonCode: ghl.reason });
         return { content: [{ type: "text", text: `GHL credential check failed: ${ghl.error}` }], isError: true };
@@ -1573,21 +1608,34 @@ Purchase a license at https://ghlcommand.com \u2014 or get a FREE read-only key
         if (!fb.ok) {
           workflowBuilderNote = `
 
-Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builder. Re-run setup_ghl_mcp later with fresh Firebase fields (use auto_capture_firebase_script for a one-paste flow) to enable it.`;
+Note: Firebase credentials rejected (${fb.error}).`;
         } else {
           workflowBuilderEnabled = true;
         }
       }
+      const prior = priorForPair;
+      const priorFirebase = prior?.ghl_user_id && prior?.ghl_firebase_api_key && prior?.ghl_firebase_refresh_token ? {
+        userId: prior.ghl_user_id,
+        fbApi: prior.ghl_firebase_api_key,
+        fbRefresh: prior.ghl_firebase_refresh_token
+      } : null;
+      const finalFirebase = workflowBuilderEnabled ? { userId: resolvedUserId.trim(), fbApi: resolvedFbApi.trim(), fbRefresh: resolvedFbRefresh.trim() } : priorFirebase;
+      if (!workflowBuilderEnabled && wantsWorkflowBuilder && priorFirebase) {
+        workflowBuilderNote += ` KEPT your existing working Workflow Builder credentials \u2014 nothing was lost. To refresh them later, run capture_firebase_interactive.`;
+      } else if (!workflowBuilderEnabled && wantsWorkflowBuilder) {
+        workflowBuilderNote += ` Saved without Workflow Builder. Run capture_firebase_interactive (one browser login) to finish the install.`;
+      }
+      const builderActive = finalFirebase !== null;
       writeCredentials({
         license_key: args.license_key.trim(),
         email: args.email.trim(),
         verified_at: (/* @__PURE__ */ new Date()).toISOString(),
-        ghl_api_key: args.ghl_api_key.trim(),
-        ghl_location_id: args.ghl_location_id.trim(),
-        ghl_company_id: args.ghl_company_id?.trim() || void 0,
-        ghl_user_id: workflowBuilderEnabled ? resolvedUserId?.trim() : void 0,
-        ghl_firebase_api_key: workflowBuilderEnabled ? resolvedFbApi?.trim() : void 0,
-        ghl_firebase_refresh_token: workflowBuilderEnabled ? resolvedFbRefresh?.trim() : void 0,
+        ghl_api_key: ghlApiKey,
+        ghl_location_id: ghlLocationId,
+        ghl_company_id: args.ghl_company_id?.trim() || prior?.ghl_company_id || void 0,
+        ghl_user_id: finalFirebase?.userId,
+        ghl_firebase_api_key: finalFirebase?.fbApi,
+        ghl_firebase_refresh_token: finalFirebase?.fbRefresh,
         // v3.24.0+ attestation. Tied to email + license + device fingerprint;
         // verified on every MCP startup. Closes the hand-crafted creds bypass.
         signed_attestation: lic.signedAttestation
@@ -1600,30 +1648,44 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
       const telemetryLine = telemetryDisabled(process.env) ? "" : `
 
 ${TELEMETRY_DISCLOSURE}`;
-      const toolCount = isFree ? workflowBuilderEnabled ? "107" : "89" : workflowBuilderEnabled ? "233" : "179";
-      const wfLine = workflowBuilderEnabled ? "Workflow Builder: enabled." : "Workflow Builder: not configured (optional).";
-      const wfTip = workflowBuilderEnabled ? "" : isFree ? `
-Unlock the account auditor next (the free tier's best tool): say "Unlock the Workflow Builder" \u2014 one browser login enables audit_workflows, validate_workflow, and the full-detail reads.` : "\nTo enable Workflow Builder later (52 extra Firebase-gated tools): run enable_workflow_builder with your three Firebase values. No need to re-enter license/API key/location ID.";
-      const freeTip = isFree ? "\n\nFree tier: 107 read-only tools (89 before the one-login auditor unlock). Write tools stay visible but answer with upgrade info instead of acting. Full version ($97/mo founding rate, same key upgrades in place): https://ghlcommand.com" : "";
+      const finishedCount = isFree ? "107" : "233";
+      const freeTip = isFree ? `
+
+Free tier: read-only. Write tools stay visible but answer with upgrade info instead of acting. Full version ($97/mo founding rate) upgrades in place \u2014 same install, you only swap the license key: https://ghlcommand.com` : "";
+      const upgradeLine = usedStoredPair && prior && prior.license_key !== args.license_key.trim() ? `License updated \u2014 everything you set up before is kept.
+` : "";
+      const text = builderActive ? [
+        `Setup complete!`,
+        ``,
+        upgradeLine + `License: verified (installs ${lic.installs})${isFree ? " \u2014 FREE read-only tier" : ""}.`,
+        `GHL: connected to "${ghl.locationName}".`,
+        `Workflow Builder: enabled.`,
+        ``,
+        `Credentials saved to: ${credentialsPath()}`,
+        ``,
+        `**Restart Claude once (quit fully and reopen) to load all ${finishedCount} ${isFree ? "read-only " : ""}tools.**`,
+        ``,
+        `After restart, try: "List my GHL contacts" \u2014 or "Audit my workflows" to find what's silently broken.${freeTip}`,
+        workflowBuilderNote,
+        telemetryLine
+      ] : [
+        `Step 1 of 2 done \u2014 one more step finishes the install.`,
+        ``,
+        upgradeLine + `License: verified (installs ${lic.installs})${isFree ? " \u2014 FREE read-only tier" : ""}.`,
+        `GHL: connected to "${ghl.locationName}".`,
+        `Credentials saved to: ${credentialsPath()}`,
+        ``,
+        `**Step 2 \u2014 run \`capture_firebase_interactive\` now.** A Chrome window opens; log into GHL once; the install finishes itself (about 60 seconds). It powers the account auditor${isFree ? "" : " and the workflow/funnel/form builders"} \u2014 the reason you installed this.`,
+        `(No Chrome on this machine? Run \`auto_capture_firebase_script\` for the copy-paste path.)`,
+        ``,
+        `**Then restart Claude once** (quit fully and reopen) and all ${finishedCount} ${isFree ? "read-only " : ""}tools load. One restart total \u2014 do step 2 first.`,
+        ``,
+        `Checkpoint after restart: ask "Audit my workflows".${freeTip}`,
+        workflowBuilderNote,
+        telemetryLine
+      ];
       return {
-        content: [{
-          type: "text",
-          text: [
-            `Setup complete!`,
-            ``,
-            `License: verified (installs ${lic.installs})${isFree ? " \u2014 FREE read-only tier" : ""}.`,
-            `GHL: connected to "${ghl.locationName}".`,
-            wfLine,
-            ``,
-            `Credentials saved to: ${credentialsPath()}`,
-            ``,
-            `**Restart Claude (quit fully and reopen) to load all ${toolCount} ${isFree ? "read-only " : ""}tools.**`,
-            ``,
-            `After restart, try: "List my GHL contacts" or "Show my pipelines".${wfTip}${freeTip}`,
-            workflowBuilderNote,
-            telemetryLine
-          ].join("\n")
-        }]
+        content: [{ type: "text", text: text.join("\n") }]
       };
     }
   );
@@ -1631,7 +1693,7 @@ Unlock the account auditor next (the free tier's best tool): say "Unlock the Wor
 function registerEnableWorkflowBuilderTool(server2) {
   server2.tool(
     "enable_workflow_builder",
-    "Add Firebase credentials to an existing GHL Command install to unlock 54 additional tools across the internal-API modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, and memberships, plus the pre-deploy validator. On the FREE tier this same login unlocks the read-only auditor suite (audit_workflows, validate_workflow, full-detail workflow/funnel/pipeline reads). Requires you've already run setup_ghl_mcp. EASIEST PATH: run `capture_firebase_interactive` instead \u2014 a Chrome window opens, you log into GHL, zero pasting. Use THIS tool when you have JSON from `auto_capture_firebase_script` (console-paste path) to put in `firebase_paste`, or the three manual DevTools fields. Tool count goes from 179 to 233 after the next Claude restart.",
+    "Add Firebase credentials to an existing GHL Command install to unlock 52 additional tools across the internal-API modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, and memberships, plus the pre-deploy validator. On the FREE tier this same login unlocks the read-only auditor suite (audit_workflows, validate_workflow, full-detail workflow/funnel/pipeline reads). Requires you've already run setup_ghl_mcp. EASIEST PATH: run `capture_firebase_interactive` instead \u2014 a Chrome window opens, you log into GHL, zero pasting. Use THIS tool when you have JSON from `auto_capture_firebase_script` (console-paste path) to put in `firebase_paste`, or the three manual DevTools fields. Tool count goes from 181 to 233 after the next Claude restart.",
     {
       // v3.25.0: one-paste path. Tool runs `auto_capture_firebase_script` to
       // get the console script; the script returns a JSON object that pastes
@@ -2792,7 +2854,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.59.0",
+      version: "3.60.0",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 233 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -14734,7 +14796,35 @@ async function fullWorkflowCatalog(builderClient) {
   return { ids, rows, complete };
 }
 function registerValidatorTools(server2, client, builderClient) {
-  if (!builderClient) return;
+  if (!builderClient) {
+    const finishInstallStub = (asked) => ({
+      content: [{
+        type: "text",
+        text: [
+          `\`${asked}\` needs the one-time browser login that finishes your install (step 2 of 2).`,
+          "",
+          'Say: **"Unlock the Workflow Builder"** (or run `capture_firebase_interactive`).',
+          "A Chrome window opens, you log into GHL once, and the install finishes itself \u2014 about 60 seconds.",
+          "Then restart Claude once, and this tool will be live.",
+          "",
+          "No Chrome on this machine? Run `auto_capture_firebase_script` for the copy-paste path instead."
+        ].join("\n")
+      }]
+    });
+    server2.tool(
+      "validate_workflow",
+      "Pre-flight ID validation for ONE deployed GHL workflow. [NEEDS INSTALL STEP 2 \u2014 run capture_firebase_interactive (one-time browser login) to activate this tool.]",
+      { workflowId: import_zod52.z.string().describe("The workflow ID to validate.") },
+      async () => finishInstallStub("validate_workflow")
+    );
+    server2.tool(
+      "audit_workflows",
+      "Account-wide silent-failure audit of every workflow. [NEEDS INSTALL STEP 2 \u2014 run capture_firebase_interactive (one-time browser login) to activate this tool.]",
+      {},
+      async () => finishInstallStub("audit_workflows")
+    );
+    return;
+  }
   server2.tool(
     "validate_workflow",
     "Pre-flight ID validation for ONE deployed GHL workflow. Scans every trigger and action for references to pipelines, pipeline stages, custom fields, users, workflows, forms, calendars, and surveys; verifies each ID exists in the current location. Use BEFORE publish_workflow when a workflow was edited, or when a published workflow stops behaving. Catches the silent-failure bug where invalid IDs make GHL skip all subsequent actions. Never reports a false break \u2014 anything it cannot fully verify is marked 'unverified', not 'error'.",
@@ -14919,7 +15009,7 @@ function registerDiagnosticTools(server2, installedVersion, client, builderClien
       })();
       const firebasePromise = (async () => {
         if (!builderClient) {
-          return { name: "Firebase auth (workflow builder)", status: "skip", detail: "Not configured. The 54 Firebase-gated tools need Firebase credentials. The other 179 tools work fine without. To add it: run enable_workflow_builder with the three Firebase values from your GHL browser session (see elitedcs.com/ghl-mcp-firebase for DevTools steps). Do NOT put Firebase values as env vars in your Claude Desktop config \u2014 that path is unreliable and is the usual reason this still shows skip after a restart. enable_workflow_builder saves and verifies them for you." };
+          return { name: "Firebase auth (workflow builder)", status: "skip", detail: "Not configured \u2014 your install is one step from finished. Run capture_firebase_interactive: a Chrome window opens, you log into GHL once, and it captures + verifies everything itself (about 60 seconds). This powers the account auditor and the Firebase-gated tools. No Chrome on this machine? auto_capture_firebase_script is the copy-paste path. Do NOT put Firebase values as env vars in your Claude Desktop config \u2014 that path is unreliable and is the usual reason this still shows skip after a restart." };
         }
         const result = await builderClient.checkAuth();
         const tokenCompany = builderClient.getTokenCompanyId();
@@ -19288,7 +19378,10 @@ async function resolveAccessAndRegister() {
     registerSetupTool(server, pkg.version);
     registerLeadCaptureTool(server);
     registerOutOfBand(
-      [{ name: "auto_capture_firebase_script", register: () => registerFirebaseCaptureScriptTool(server) }],
+      [
+        { name: "auto_capture_firebase_script", register: () => registerFirebaseCaptureScriptTool(server) },
+        { name: "capture_firebase_interactive", register: () => registerInteractiveCaptureTool(server) }
+      ],
       gatingConfig,
       outOfBandTracker
     );
@@ -19302,6 +19395,13 @@ async function resolveAccessAndRegister() {
         // a fresh refresh token when it rotates. Registered on the FREE tier too:
         // the Firebase login powers the read-only auditor tools (audit_workflows,
         // validate_workflow, *_full reads) — only the write tools stay gated.
+        // v3.60.0: setup_ghl_mcp registers in NORMAL mode too — it is the
+        // ONE-LINE UPGRADE path ("email + new license key, nothing else").
+        // Before this it existed only in bootstrap, so an installed free user
+        // pasting the upgrade line got "Tool setup_ghl_mcp not found" — the
+        // exact audience the upgrade exists for. Caught by the live wire
+        // proof, not by unit tests (the handler worked; registration didn't).
+        { name: "setup_ghl_mcp", register: () => registerSetupTool(server, pkg.version) },
         { name: "enable_workflow_builder", register: () => registerEnableWorkflowBuilderTool(server) },
         { name: "auto_capture_firebase_script", register: () => registerFirebaseCaptureScriptTool(server) },
         // One-click Builder unlock — buyer just logs into a Chrome window the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.59.0",
+  "version": "3.60.0",
   "mcpName": "io.github.drjerryrelth/ghl-command",
   "description": "GoHighLevel MCP Server for Claude. 233 tools — full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
   "main": "dist/index.js",