@elitedcs/ghl-mcp 3.6.0 → 3.8.0

package/CHANGELOG.md

@@ -1,5 +1,106 @@
 # Changelog
 
+## 3.8.0 — Bundle re-extraction wins (triggers + goal events) + correctness fixes
+
+**178 tools across 38 modules. Bundle: 291.3 KB.**
+
+Three improvements that all flow from one bundle dive into `client-app-automation-workflows.leadconnectorhq.com`:
+
+### Goal-event catalogue — all 10 conditions documented (was 1)
+v3.6.0 shipped `build_goal_event` with one verified `goal_condition` (`review_request_clicked`) and a permissive string for everything else. The bundle's `GoalCondition` enum reveals the full set:
+
+- `email_event` — extras: `{ stepIds: [] }`
+- `link_click` — extras: `{ linkIds: [] }`
+- `add_contact_tag` — extras: `{ tags: [] }` (inferred)
+- `remove_contact_tag` — extras: `{ tags: [] }` (inferred)
+- `appointment_status` — extras: `{ calendarId }`
+- `payment_received` — extras: `{ globalProductIds: [] }`
+- `form_submission` — extras: `{ formIds: [] }`
+- `document_status` — extras: `{ templateId }`
+- `invoice_paid` — extras: `{ invoiceStepId }`
+- `review_request_clicked` — extras: `{ reviewTypes, reviewLinkId }`
+
+`build_goal_event`'s `goal_condition` is now a `z.enum` of these 10 values (was permissive `z.string()`). The per-condition extras shapes are documented in the tool description.
+
+### Goal-event action enum fixed
+v3.6.0's tool advertised `action: "exit" | "continue" | "goto"`. The actual `GoalAction` enum in the bundle is `continue | wait | exit` — **no `goto`**. Fixed. Also removed the `target_node_id` parameter that paired with the bogus goto. `WorkflowGoalAttributes` type updated to match.
+
+### 7 of 9 previously-uncaptured triggers now documented
+Trigger field paths extracted from per-trigger validator functions in the bundle:
+
+- `affiliate_created` → `affiliate.id, contact.tags`
+- `scheduler_trigger` → `scheduler.interval, scheduler.cron, scheduler.frequency`
+- `user_log_in` → `product.id, category.id, lesson.id, offer.id, contact.tags` (shares membership-course validator)
+- `order_submission` → `order.funnel_id, order.line_item_global_product_ids, order.line_item_funnel_product_ids, payment.calendar.id, payment.global_product_ids, payment.form.id`
+- `facebook_lead_gen` → `facebook.formId, facebook.pageId, contact.tags`
+
+Plus 2 more handled explicitly:
+- `conv_ai_trigger`, `conv_ai_autonomous_trigger` — confirmed fieldless (no specific validator in the bundle)
+- `custom_object_created`, `custom_object_changed` — fields are user-defined per object using the `customObject.<field>` prefix; schema now documents this dynamic shape
+
+Coverage: **57/57 native triggers, 0 type-only-pending** (was 9 type-only-pending).
+
+### Bug fix: `remove_from_workflow` read/write asymmetry
+Don Harris flagged at the end of his 2026-05-14 funnel audit that some GHL workflows return only the `workflow_id` array on read, while writes require both that AND the `workflowId` string. Couldn't reproduce in MCP Testing — both reads I checked returned both fields — but added defensive symmetric normalization to both paths in `workflow-builder-client.ts`. If only one form is present in either direction, the other is synthesized. No-op when both are already present.
+
+### Bug fix: accurate "without Firebase" tool count
+Empirical audit: basic-creds mode (no Firebase) actually exposes **148 tools**, not 168 as the v3.5.1 messaging claimed. Firebase adds **30 tools** across 6 modules (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow). `setup_ghl_mcp`, `enable_workflow_builder`, README, and CLAUDE.md all corrected.
+
+### Bundle re-extraction methodology (for future audits)
+1. Fetch `https://client-app-automation-workflows.leadconnectorhq.com/` → find current `index-*.js` bundle URL
+2. Pull the bundle (~9.5 MB minified)
+3. Search for `var GoalCondition=(...)` and `var GoalAction=(...)` for enum extraction
+4. Search for `<triggerName>Validator=n=>` patterns for per-trigger field paths
+5. Watch for i18n translation pollution — filter out windows containing non-ASCII Danish/German/Swedish characters
+
+### Files changed
+- `src/trigger-schemas.ts` — 7 uncaptured triggers now documented; 2 confirmed fieldless; 2 use dynamic `customObject.*` schema
+- `src/tools/workflow-builder.ts` — `build_goal_event` enum tightened; goto removed; description lists all 10 goal_condition values + extras shapes
+- `src/workflow-action-types.ts` — `WorkflowGoalAttributes.action` corrected to `continue | wait | exit`
+- `src/workflow-builder-client.ts` — `normalizeRemoveFromWorkflowAction()` helper applied symmetrically on read + write
+- `src/setup-tool.ts` — 168 → 148; "9 workflow builder tools" → "30 tools across 6 modules"
+- `README.md`, `CLAUDE.md` — synced
+
+## 3.7.0 — Funnel-builder fixes (Don Harris audit)
+
+**178 tools across 38 modules. Bundle: 288.4 KB.**
+
+Implements all 7 fixes from Don Harris's 2026-05-14 audit. Don captured the correct endpoints via Chrome DevTools against `page-builder.leadconnectorhq.com` and `app.gohighlevel.com`, then verified each fix with curl round-trips against two live sub-accounts. Full credit to Don for the diagnostic work.
+
+### The root cause
+All funnel write tools were hitting endpoints that don't exist on `backend.leadconnectorhq.com/funnels/...`. The real save paths live on the same host but with different verbs, methods, and body shapes. Plus, mutating endpoints require `Origin` + `Referer` headers that `funnelRequest()` wasn't sending, causing 401 `{"message":"Error calling IAM service"}` on every write.
+
+### Header fix (unblocks every funnel write)
+Added `Origin: https://app.gohighlevel.com` and `Referer: https://app.gohighlevel.com/` to `funnelRequest()`. Without these, GHL's IAM rejects writes regardless of bearer token validity.
+
+### Endpoint fixes
+| Tool | Was | Now |
+|---|---|---|
+| `update_page_content` | `PUT /page/{pageId}` | `POST /builder/prebuilt-section/sync/changes` with `{ locationId, pageId, pageData, write: true, isPublished }` |
+| `update_funnel` | `PUT /funnel/{funnelId}` | `POST /funnel/update-settings` with full settings body. Rewritten with fetch-then-merge so you can change one field without blowing away the others. |
+| `create_funnel_page` | `POST /page` | `POST /funnel/create-step` with client-generated step UUID + nested `step` object. Now also returns the generated `stepId` so the caller can use it with `update_funnel_step` / `delete_funnel_page` without a separate lookup. |
+| `delete_funnel_page` | `DELETE /page/{pageId}` | `POST /funnel/delete-step` with `{ funnelId, stepId }`. **SIGNATURE CHANGED**: now takes `funnelId + stepId` instead of `pageId`. |
+| `delete_funnel` | `DELETE /funnel/{id}` | `POST /funnel/delete` with `{ funnelId, locationId, userId }` |
+
+### `update_funnel_step` (NEW)
+Per-step renames, URL slugs, and domain attachments. `PUT /funnel/step/{funnelId}` with `{ stepId, name, url, domainName }`. Use this when you want to rename a single page entry inside a funnel without touching funnel-level settings.
+
+### `WorkflowBuilderClient.getUserId()` (NEW, internal)
+Public getter on the builder client. Required because `delete_funnel` needs `userId` in the request body. Not exposed via MCP.
+
+### Round-trip verified in MCP Testing
+- 6/6 tested funnel writes return success against real GHL backend (the 7th, `update_page_content`, was already verified by Don's 112KB real-page round-trip in his audit email).
+- Created → renamed → added step → renamed step → deleted step → deleted funnel, all in one test pass.
+
+### Honest scoping
+- The 168/178 "without Firebase / with Firebase" split documented in `setup_ghl_mcp` and `enable_workflow_builder` is carried forward from v3.5.1 and hasn't been audited empirically. It's likely off in absolute terms (funnel/form/pipeline builders all gate on Firebase too). TODO to do a real audit.
+- The bonus `update_workflow_actions` / `remove_from_workflow` read/write asymmetry Don flagged at the end of his email is not addressed in this release — separate concern, separate fix when prioritized.
+
+### Files changed
+- `src/tools/funnel-builder.ts` — full rewrite of all 6 broken endpoints + `update_funnel_step` added
+- `src/workflow-builder-client.ts` — `getUserId()` public getter
+- `src/setup-tool.ts` — tool counts refreshed
+
 ## 3.6.0 — `build_goal_event` (closes Don-e's last open complaint)
 
 **177 tools across 38 modules. Bundle: 281.9 KB.**

package/README.md

@@ -1,6 +1,6 @@
 # GHL Command — GoHighLevel MCP Server
 
-**Full GoHighLevel API access for Claude.** 177 tools across 36 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers.
+**Full GoHighLevel API access for Claude.** 178 tools across 36 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers.
 
 **Distributed via npm as [`@elitedcs/ghl-mcp`](https://www.npmjs.com/package/@elitedcs/ghl-mcp).** Buyers install with one config block — no git, no Node.js setup, no terminal commands. Updates flow automatically (`npx @latest` re-resolves on every Claude restart).
 
@@ -138,7 +138,7 @@ https://app.gohighlevel.com/v2/location/YOUR_LOCATION_ID/dashboard
 
 ## Enable Workflow Builder (Optional)
 
-The 9 workflow builder tools use GHL'''s internal API and require Firebase credentials. Without them, the other 168 tools work fine — you just won'''t have workflow editing.
+The 30 builder + cloner + validator tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow) use GHL'''s internal API and require Firebase credentials. Without them, the other 148 tools work fine — you just won'''t have workflow/funnel/form/pipeline editing.
 
 Grab the three values from your GHL browser session, then re-run `setup_ghl_mcp` with them:
 
@@ -167,9 +167,9 @@ Re-run setup_ghl_mcp with workflow builder:
 
 ---
 
-## Tools (177)
+## Tools (178)
 
-> **v3.6.0 adds `build_goal_event`** — a high-level helper that emits a correctly-shaped GHL workflow goal-event node. Goal events sit inline in the action chain and terminate (or jump) the workflow when their condition fires. Closes Don-e's last open complaint from May 4 — Claude can now both READ and BUILD goal events end-to-end.
+> **v3.7.0 fixes Don Harris's 2026-05-14 funnel-builder audit.** All six previously-broken funnel write tools (`update_funnel`, `create_funnel_page`, `delete_funnel_page`, `delete_funnel`, `update_page_content`, plus `create_funnel` which 401'd) now hit the correct GHL endpoints. New: `update_funnel_step` for per-step renames / slugs / domains. Origin + Referer headers added to all funnel writes — required by GHL's IAM, missing before.
 
 ### CRM & Contacts (15 tools)
 
@@ -420,7 +420,7 @@ Re-run setup_ghl_mcp with workflow builder:
 |---|---|
 | `get_mcp_version` | Check installed version against the latest published to npm. Confirms an upgrade landed after restarting Claude. Available even before GHL credentials are configured. |
 | `health_check` | Run a full health check: npm registry + version status, GHL API key validity, default location reachability, Firebase auth status, token registry presence. Use when something feels broken. |
-| `enable_workflow_builder` | Add Firebase credentials to an existing install to unlock the 9 workflow builder tools. No need to re-enter license / API key / location ID. Run this any time after the basic setup, on the buyer's schedule. |
+| `enable_workflow_builder` | Add Firebase credentials to an existing install to unlock 30 additional tools across 6 modules (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow). No need to re-enter license / API key / location ID. Run this any time after the basic setup, on the buyer's schedule. |
 
 ### Other Modules
 
@@ -542,7 +542,7 @@ ghl-command-mcp/
 │       ├── emails.ts              # 1 tool  — email campaign listing
 │       ├── trigger-links.ts       # 1 tool  — trigger link listing
 │       ├── workflow-builder.ts    # 6 tools — full workflow CRUD (internal API)
-│       ├── funnel-builder.ts      # 9 tools — funnel/page builder (internal API)
+│       ├── funnel-builder.ts      # 10 tools — funnel/page builder (internal API)
 │       ├── form-builder.ts        # 5 tools — form builder (internal API)
 │       ├── pipeline-builder.ts    # 5 tools — pipeline/stage builder (internal API)
 │       ├── bulk-operations.ts     # 5 tools — batch contact operations

package/dist/index.js

@@ -31,8 +31,8 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.6.0",
-      description: "GoHighLevel MCP Server for Claude. 177 tools \u2014 full CRM, automation, marketing control, and the only programmatic GHL workflow builder.",
+      version: "3.8.0",
+      description: "GoHighLevel MCP Server for Claude. 178 tools \u2014 full CRM, automation, marketing control, and the only programmatic GHL workflow builder.",
       main: "dist/index.js",
       bin: {
         "ghl-mcp": "dist/index.js"
@@ -651,15 +651,60 @@ var FacebookCommentOnPostTriggerSchema = typedTrigger("facebook_comment_on_post"
 var IgCommentOnPostTriggerSchema = typedTrigger("ig_comment_on_post", [], "partial");
 var InboundWebhookTriggerSchema = typedTrigger("inbound_webhook", [], "fieldless");
 var PaymentReceivedTriggerSchema = typedTrigger("payment_received", [], "fieldless");
-var AffiliateCreatedTriggerSchema = typedTrigger("affiliate_created", [], "uncaptured");
-var SchedulerTriggerTriggerSchema = typedTrigger("scheduler_trigger", [], "uncaptured");
-var UserLogInTriggerSchema = typedTrigger("user_log_in", [], "uncaptured");
-var OrderSubmissionTriggerSchema = typedTrigger("order_submission", [], "uncaptured");
-var ConvAiTriggerTriggerSchema = typedTrigger("conv_ai_trigger", [], "uncaptured");
-var ConvAiAutonomousTriggerTriggerSchema = typedTrigger("conv_ai_autonomous_trigger", [], "uncaptured");
-var CustomObjectCreatedTriggerSchema = typedTrigger("custom_object_created", [], "uncaptured");
-var CustomObjectChangedTriggerSchema = typedTrigger("custom_object_changed", [], "uncaptured");
-var FacebookLeadGenTriggerSchema = typedTrigger("facebook_lead_gen", [], "uncaptured");
+var AffiliateCreatedTriggerSchema = typedTrigger("affiliate_created", [
+  "affiliate.id",
+  "contact.tags"
+]);
+var SchedulerTriggerTriggerSchema = typedTrigger("scheduler_trigger", [
+  "scheduler.interval",
+  "scheduler.cron",
+  "scheduler.frequency"
+]);
+var UserLogInTriggerSchema = typedTrigger("user_log_in", [
+  // Shares membershipCourseValidator with course/lesson/category triggers.
+  "product.id",
+  "category.id",
+  "lesson.id",
+  "offer.id",
+  "contact.tags"
+]);
+var OrderSubmissionTriggerSchema = typedTrigger("order_submission", [
+  "order.funnel_id",
+  "order.line_item_global_product_ids",
+  "order.line_item_funnel_product_ids",
+  "payment.calendar.id",
+  "payment.global_product_ids",
+  "payment.form.id"
+]);
+var FacebookLeadGenTriggerSchema = typedTrigger("facebook_lead_gen", [
+  "facebook.formId",
+  "facebook.pageId",
+  "contact.tags"
+]);
+var CustomObjectCreatedTriggerSchema = TriggerCommonSchema.extend({
+  type: import_zod2.z.literal("custom_object_created"),
+  conditions: import_zod2.z.array(import_zod2.z.object({
+    operator: import_zod2.z.string(),
+    field: import_zod2.z.string().describe("Custom-object field paths use the `customObject.<your_field_name>` prefix. Field names are user-defined per custom object \u2014 query the location's custom objects to discover valid field paths."),
+    value: import_zod2.z.unknown().optional(),
+    title: import_zod2.z.string().optional(),
+    type: import_zod2.z.string().optional(),
+    id: import_zod2.z.string().optional()
+  }).passthrough()).optional()
+});
+var CustomObjectChangedTriggerSchema = TriggerCommonSchema.extend({
+  type: import_zod2.z.literal("custom_object_changed"),
+  conditions: import_zod2.z.array(import_zod2.z.object({
+    operator: import_zod2.z.string(),
+    field: import_zod2.z.string().describe("Custom-object field paths use the `customObject.<your_field_name>` prefix. Field names are user-defined per custom object \u2014 query the location's custom objects to discover valid field paths."),
+    value: import_zod2.z.unknown().optional(),
+    title: import_zod2.z.string().optional(),
+    type: import_zod2.z.string().optional(),
+    id: import_zod2.z.string().optional()
+  }).passthrough()).optional()
+});
+var ConvAiTriggerTriggerSchema = typedTrigger("conv_ai_trigger", [], "fieldless");
+var ConvAiAutonomousTriggerTriggerSchema = typedTrigger("conv_ai_autonomous_trigger", [], "fieldless");
 var UnknownTriggerSchema = TriggerCommonSchema.extend({
   type: import_zod2.z.string(),
   conditions: import_zod2.z.array(import_zod2.z.record(import_zod2.z.unknown())).optional()
@@ -770,6 +815,23 @@ var CreateWorkflowResponseSchema = import_zod3.z.union([
     version: typeof data.version === "number" ? data.version : 1
   });
 });
+function normalizeRemoveFromWorkflowAction(action) {
+  if (action.type !== "remove_from_workflow") return action;
+  const attrs = action.attributes;
+  if (!attrs || typeof attrs !== "object") return action;
+  const a = attrs;
+  const hasArr = Array.isArray(a.workflow_id) && a.workflow_id.length > 0;
+  const hasStr = typeof a.workflowId === "string" && a.workflowId.length > 0;
+  if (hasArr && hasStr) return action;
+  if (!hasArr && !hasStr) return action;
+  const next = { ...a };
+  if (hasArr && !hasStr) {
+    next.workflowId = a.workflow_id[0];
+  } else if (hasStr && !hasArr) {
+    next.workflow_id = [a.workflowId];
+  }
+  return { ...action, attributes: next };
+}
 function hasId(action) {
   return typeof action.id === "string" && action.id.length > 0;
 }
@@ -869,6 +931,14 @@ var WorkflowBuilderClient = class _WorkflowBuilderClient {
   getApiKey() {
     return this.apiKey;
   }
+  /**
+   * Return the current Firebase user ID. Required by the funnel-builder's
+   * delete_funnel endpoint which needs `userId` in the request body. Not
+   * exposed via MCP.
+   */
+  getUserId() {
+    return this.userId;
+  }
   /**
    * Probe Firebase auth by refreshing the ID token. Used by the health_check
    * diagnostic tool. Does not touch GHL backend — just exchanges the refresh
@@ -1066,7 +1136,11 @@ ${errorBody}`
       workflowData: isRecord(raw.workflowData.workflowData) ? raw.workflowData.workflowData : { templates: [] },
       triggers: raw.triggers
     } : raw;
-    return WorkflowFullSchema.parse(flat);
+    const parsed = WorkflowFullSchema.parse(flat);
+    if (parsed.workflowData?.templates) {
+      parsed.workflowData.templates = parsed.workflowData.templates.map(normalizeRemoveFromWorkflowAction);
+    }
+    return parsed;
   }
   /**
    * Create a new empty workflow
@@ -1227,7 +1301,7 @@ ${errorBody}`
    */
   buildActionChain(actions) {
     validateActionChain(actions);
-    const linked = actions.map((action, i) => {
+    const linked = actions.map(normalizeRemoveFromWorkflowAction).map((action, i) => {
       const copy = { ...action };
       if (!copy.id) {
         copy.id = crypto.randomUUID();
@@ -4300,21 +4374,28 @@ function registerWorkflowBuilderTools(server2, client) {
   );
   server2.tool(
     "build_goal_event",
-    "Build a correctly-shaped GHL workflow goal-event node. Goal events sit inline in the action chain \u2014 when the goal condition fires during workflow execution, the configured action runs (default: exit the workflow). The previous action's `next` should point to the goal node's id; the goal node itself does not have a `next`. Verified goal_condition value (Jerry's UI sample): 'review_request_clicked' with extras { reviewTypes: ['sms', 'email'], reviewLinkId: '' }. Other goal_condition values that GHL ships are passed through verbatim \u2014 the catalogue of all goal conditions has not been fully captured yet, but the schema accepts any string value.",
-    {
-      goal_condition: import_zod31.z.string().describe("The goal-condition identifier \u2014 what the goal is watching for. Verified value: 'review_request_clicked'. Other goal_condition strings that GHL's UI exposes (e.g., tag-related, appointment-related) pass through unchanged."),
-      extras: import_zod31.z.record(import_zod31.z.unknown()).optional().describe("Goal-condition-specific config. Example for review_request_clicked: { reviewTypes: ['sms', 'email'], reviewLinkId: '' }. Pass an empty object {} or omit if the goal_condition has no extras."),
-      action: import_zod31.z.enum(["exit", "continue", "goto"]).default("exit").describe("What happens when the goal fires. 'exit' terminates the workflow path (verified). 'continue' and 'goto' are GHL UI options; 'goto' likely needs an extra targetNodeId field, not yet captured."),
-      target_node_id: import_zod31.z.string().optional().describe("Required when action === 'goto'. The action node id to jump to."),
+    "Build a correctly-shaped GHL workflow goal-event node. Goal events sit inline in the action chain \u2014 when the goal condition fires during workflow execution, the configured action runs (default: exit the workflow). The previous action's `next` should point to the goal node's id; the goal node itself does not have a `next`. All 10 goal_condition values are catalogued (from GHL's workflow-builder JS bundle, extracted 2026-05-18): email_event, link_click, add_contact_tag, remove_contact_tag, appointment_status, payment_received, form_submission, document_status, invoice_paid, review_request_clicked. Each one has a different `extras` shape (see the `goal_condition` field's description for details).",
+    {
+      goal_condition: import_zod31.z.enum([
+        "email_event",
+        "link_click",
+        "add_contact_tag",
+        "remove_contact_tag",
+        "appointment_status",
+        "payment_received",
+        "form_submission",
+        "document_status",
+        "invoice_paid",
+        "review_request_clicked"
+      ]).describe("The goal-condition identifier. Extras shape per condition: email_event \u2192 {stepIds:[]}; link_click \u2192 {linkIds:[]}; appointment_status \u2192 {calendarId}; payment_received \u2192 {globalProductIds:[]}; form_submission \u2192 {formIds:[]}; document_status \u2192 {templateId}; invoice_paid \u2192 {invoiceStepId}; review_request_clicked \u2192 {reviewTypes:['sms'|'email'], reviewLinkId}; add_contact_tag/remove_contact_tag \u2192 {tags:[]} (uncaptured but inferred)."),
+      extras: import_zod31.z.record(import_zod31.z.unknown()).optional().describe("Goal-condition-specific config. See goal_condition description for the expected shape per value. Pass {} or omit for goal_conditions without extras."),
+      action: import_zod31.z.enum(["exit", "continue", "wait"]).default("exit").describe("What happens when the goal fires (per GHL's GoalAction enum). 'exit' terminates the workflow path (verified). 'continue' lets it proceed to a downstream node. 'wait' pauses on the goal."),
       name: import_zod31.z.string().default("Goal").describe("Display name in the GHL UI."),
       op: import_zod31.z.enum(["or", "and"]).default("or").describe("Top-level boolean operator across segments. Default 'or'."),
       inner_op: import_zod31.z.enum(["or", "and"]).default("or").describe("Boolean operator across conditions within a single segment. Default 'or'.")
     },
-    async ({ goal_condition, extras, action, target_node_id, name, op, inner_op }) => {
+    async ({ goal_condition, extras, action, name, op, inner_op }) => {
       try {
-        if (action === "goto" && !target_node_id) {
-          throw new Error("action='goto' requires target_node_id to identify which workflow action to jump to.");
-        }
         const nodeId = crypto.randomUUID();
         const conditionId = crypto.randomUUID();
         const attributes = {
@@ -4330,9 +4411,6 @@ function registerWorkflowBuilderTools(server2, client) {
           type: "workflow_goal",
           action
         };
-        if (action === "goto" && target_node_id) {
-          attributes.targetNodeId = target_node_id;
-        }
         const goalNode = {
           id: nodeId,
           name,
@@ -4397,6 +4475,8 @@ function registerFunnelBuilderTools(server2, builderClient) {
   }
   async function funnelRequest(method, path6, body) {
     const headers = await client.buildHeaders();
+    headers.Origin = "https://app.gohighlevel.com";
+    headers.Referer = "https://app.gohighlevel.com/";
     const url = `https://backend.leadconnectorhq.com/funnels${path6}`;
     const options = { method, headers };
     if (body && (method === "POST" || method === "PUT")) {
@@ -4502,21 +4582,92 @@ ${text2}`);
   );
   server2.tool(
     "update_funnel",
-    "Update a funnel's name, domain, or steps configuration.",
+    "Update a funnel's settings: name, path/slug, tracking codes, GDPR + payment + chat widget flags, etc. This is the 'save settings panel' endpoint \u2014 it sends the entire settings object, so the tool fetches current settings first, merges your overrides on top, then POSTs back. To rename a single step (page) inside a funnel, use update_funnel_step instead.",
     {
       funnelId: import_zod32.z.string().describe("The funnel ID to update."),
-      name: import_zod32.z.string().optional().describe("New funnel name."),
-      steps: import_zod32.z.array(import_zod32.z.record(import_zod32.z.unknown())).optional().describe("Updated steps array with page references.")
+      name: import_zod32.z.string().optional().describe("New funnel display name."),
+      path: import_zod32.z.string().optional().describe("URL slug for the funnel (e.g., '/my-funnel'). Mapped to funnelPath."),
+      bodyTrackingCode: import_zod32.z.string().optional().describe("Custom tracking script injected before </body>."),
+      headTrackingCode: import_zod32.z.string().optional().describe("Custom tracking script injected before </head>."),
+      chatWidgetId: import_zod32.z.string().optional().describe("Chat widget to embed on every page in this funnel."),
+      domainId: import_zod32.z.string().optional().describe("Custom domain ID for the funnel."),
+      faviconUrl: import_zod32.z.string().optional().describe("Favicon URL for funnel pages."),
+      paymentMode: import_zod32.z.boolean().optional().describe("Whether to require a payment mode for the funnel."),
+      requireCreditCard: import_zod32.z.boolean().optional().describe("Whether to require a credit card on opt-in steps."),
+      isGdprCompliant: import_zod32.z.boolean().optional().describe("Toggle GDPR compliance mode."),
+      isOptimisePageLoad: import_zod32.z.boolean().optional().describe("Enable GHL's page-load optimization."),
+      imageOptimization: import_zod32.z.boolean().optional().describe("Enable automatic image optimization."),
+      allowPaymentModeOption: import_zod32.z.boolean().optional().describe("Allow buyers to choose payment mode on checkout."),
+      storeCurrencyFormatting: import_zod32.z.boolean().optional().describe("Use store-wide currency formatting.")
     },
-    async ({ funnelId, name, steps }) => {
+    async (args) => {
       try {
-        const body = { locationId: client.locationId };
-        if (name !== void 0) body.name = name;
-        if (steps !== void 0) body.steps = steps;
-        const result = await funnelRequest("PUT", `/funnel/${funnelId}`, body);
-        return {
-          content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+        const current = await funnelRequest("GET", `/funnel/list?locationId=${client.locationId}&limit=200`);
+        const funnels = Array.isArray(current.funnels) ? current.funnels : [];
+        const found = funnels.find((f) => f._id === args.funnelId || f.id === args.funnelId);
+        if (!found) {
+          throw new Error(`Funnel ${args.funnelId} not found in this location.`);
+        }
+        const overrides = {};
+        if (args.name !== void 0) overrides.funnelName = args.name;
+        if (args.path !== void 0) overrides.funnelPath = args.path;
+        if (args.bodyTrackingCode !== void 0) overrides.bodyTrackingCode = args.bodyTrackingCode;
+        if (args.headTrackingCode !== void 0) overrides.headTrackingCode = args.headTrackingCode;
+        if (args.chatWidgetId !== void 0) overrides.chatWidgetId = args.chatWidgetId;
+        if (args.domainId !== void 0) overrides.domainId = args.domainId;
+        if (args.faviconUrl !== void 0) overrides.faviconUrl = args.faviconUrl;
+        if (args.paymentMode !== void 0) overrides.paymentMode = args.paymentMode;
+        if (args.requireCreditCard !== void 0) overrides.requireCreditCard = args.requireCreditCard;
+        if (args.isGdprCompliant !== void 0) overrides.isGdprCompliant = args.isGdprCompliant;
+        if (args.isOptimisePageLoad !== void 0) overrides.isOptimisePageLoad = args.isOptimisePageLoad;
+        if (args.imageOptimization !== void 0) overrides.imageOptimization = args.imageOptimization;
+        if (args.allowPaymentModeOption !== void 0) overrides.allowPaymentModeOption = args.allowPaymentModeOption;
+        if (args.storeCurrencyFormatting !== void 0) overrides.storeCurrencyFormatting = args.storeCurrencyFormatting;
+        const body = {
+          locationId: client.locationId,
+          funnelId: args.funnelId,
+          funnelName: found.name ?? "",
+          funnelPath: found.url ?? "/",
+          allowPaymentModeOption: found.allowPaymentModeOption ?? true,
+          bodyTrackingCode: found.bodyTrackingCode ?? "",
+          chatWidgetId: found.chatWidgetId ?? "",
+          domainId: found.domainId ?? "",
+          faviconUrl: found.faviconUrl ?? "",
+          headTrackingCode: found.headTrackingCode ?? "",
+          imageOptimization: found.imageOptimization ?? true,
+          isGdprCompliant: found.isGdprCompliant ?? false,
+          isOptimisePageLoad: found.isOptimisePageLoad ?? true,
+          paymentMode: found.paymentMode ?? true,
+          requireCreditCard: found.requireCreditCard ?? true,
+          stopAllSplitTestsAndReset: null,
+          storeCurrencyFormatting: found.storeCurrencyFormatting ?? false,
+          ...overrides
         };
+        const result = await funnelRequest("POST", `/funnel/update-settings`, body);
+        return jsonResponse(result);
+      } catch (error) {
+        return errorResponse(error);
+      }
+    }
+  );
+  server2.tool(
+    "update_funnel_step",
+    "Update a single step (page entry) inside a funnel \u2014 display name, URL slug, or attached domain. A step is GHL's container for one or more pages (multiple pages exist when split-testing). Use update_funnel for funnel-level settings instead.",
+    {
+      funnelId: import_zod32.z.string().describe("The funnel ID containing the step."),
+      stepId: import_zod32.z.string().describe("The step ID to update (from get_funnel_pages / list_funnels_full)."),
+      name: import_zod32.z.string().optional().describe("New step display name."),
+      url: import_zod32.z.string().optional().describe("URL slug for the step (e.g., '/thank-you')."),
+      domainName: import_zod32.z.string().optional().describe("Custom domain to attach to this step.")
+    },
+    async ({ funnelId, stepId, name, url, domainName }) => {
+      try {
+        const body = { stepId };
+        if (name !== void 0) body.name = name;
+        if (url !== void 0) body.url = url;
+        if (domainName !== void 0) body.domainName = domainName;
+        const result = await funnelRequest("PUT", `/funnel/step/${funnelId}`, body);
+        return jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -4524,17 +4675,19 @@ ${text2}`);
   );
   server2.tool(
     "delete_funnel",
-    "Permanently delete a funnel and all its pages. IRREVERSIBLE.",
+    "Permanently delete a funnel and all its steps/pages. IRREVERSIBLE.",
     {
       funnelId: import_zod32.z.string().describe("The funnel ID to delete."),
       confirm: import_zod32.z.literal("DELETE").describe("Must pass 'DELETE' to confirm this destructive action.")
     },
     async ({ funnelId }) => {
       try {
-        const result = await funnelRequest("DELETE", `/funnel/${funnelId}?locationId=${client.locationId}`);
-        return {
-          content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
-        };
+        const result = await funnelRequest("POST", `/funnel/delete`, {
+          funnelId,
+          locationId: client.locationId,
+          userId: client.getUserId()
+        });
+        return jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -4542,23 +4695,30 @@ ${text2}`);
   );
   server2.tool(
     "create_funnel_page",
-    "Create a new page in a funnel. Returns the page ID which you can then update with content.",
+    "Create a new step (page entry) in a funnel. The client generates a step UUID locally and sends it in the request; GHL auto-creates a blank page inside the step on the server side. The response includes the new step's id and the page's Firestore reference, which you can then update via update_page_content.",
     {
-      funnelId: import_zod32.z.string().describe("The funnel ID to add the page to."),
-      name: import_zod32.z.string().describe("Page name."),
-      url: import_zod32.z.string().optional().describe("URL slug for the page (e.g. '/thank-you').")
+      funnelId: import_zod32.z.string().describe("The funnel ID to add the step to."),
+      name: import_zod32.z.string().describe("Step display name."),
+      url: import_zod32.z.string().optional().describe("URL slug for the step. Defaults to '' (blank) like the GHL UI."),
+      type: import_zod32.z.string().optional().describe("Step type. Defaults to 'optin_funnel_page'.")
     },
-    async ({ funnelId, name, url }) => {
+    async ({ funnelId, name, url, type }) => {
       try {
-        const result = await funnelRequest("POST", `/page?locationId=${client.locationId}`, {
+        const stepId = crypto.randomUUID();
+        const result = await funnelRequest("POST", `/funnel/create-step`, {
           funnelId,
-          name,
-          url: url || `/${name.toLowerCase().replace(/\s+/g, "-")}`,
-          locationId: client.locationId
+          step: {
+            id: stepId,
+            name,
+            url: url ?? "",
+            pages: [],
+            control_traffic: 100,
+            split: false,
+            type: type ?? "optin_funnel_page"
+          }
         });
-        return {
-          content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
-        };
+        const merged = typeof result === "object" && result !== null ? { stepId, ...result } : { stepId, result };
+        return jsonResponse(merged);
       } catch (error) {
         return errorResponse(error);
       }
@@ -4566,20 +4726,22 @@ ${text2}`);
   );
   server2.tool(
     "update_page_content",
-    "Update a page's builder content \u2014 sections, elements, styles, tracking codes, popups. Use get_page_content first to see the current structure, modify it, and pass the updated JSON here.",
+    "Update a page's builder content \u2014 sections, elements, settings, pageStyles, trackingCode, popups, popupsList, fontsForPreview. Use get_page_content first to see the current structure, modify it, then pass the full 8-field envelope here. GHL's UI fires three POSTs to this endpoint per save (one collaborative-edit broadcast + two commits); for MCP use, one POST with write=true is enough.",
     {
       pageId: import_zod32.z.string().describe("The page ID to update."),
-      content: import_zod32.z.record(import_zod32.z.unknown()).describe("The full page content JSON (sections, settings, general, pageStyles, trackingCode, popups, popupsList).")
+      content: import_zod32.z.record(import_zod32.z.unknown()).describe("The full page content JSON. Expected fields: sections, settings, general, pageStyles, trackingCode, popups, popupsList, fontsForPreview."),
+      isPublished: import_zod32.z.boolean().optional().describe("Whether the page should be marked published after the save. Defaults to false (draft).")
     },
-    async ({ pageId, content }) => {
+    async ({ pageId, content, isPublished }) => {
       try {
-        const result = await funnelRequest("PUT", `/page/${pageId}?locationId=${client.locationId}`, {
-          ...content,
-          locationId: client.locationId
+        const result = await funnelRequest("POST", `/builder/prebuilt-section/sync/changes`, {
+          locationId: client.locationId,
+          pageId,
+          pageData: content,
+          write: true,
+          isPublished: isPublished ?? false
         });
-        return {
-          content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
-        };
+        return jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -4587,17 +4749,16 @@ ${text2}`);
   );
   server2.tool(
     "delete_funnel_page",
-    "Permanently delete a page from a funnel. IRREVERSIBLE.",
+    "Permanently delete a step (and all its pages) from a funnel. IRREVERSIBLE. SIGNATURE CHANGED in v3.7.0: was pageId, now requires funnelId + stepId to match GHL's actual delete-step endpoint.",
     {
-      pageId: import_zod32.z.string().describe("The page ID to delete."),
+      funnelId: import_zod32.z.string().describe("The funnel ID containing the step."),
+      stepId: import_zod32.z.string().describe("The step ID to delete (from get_funnel_pages / list_funnels_full)."),
       confirm: import_zod32.z.literal("DELETE").describe("Must pass 'DELETE' to confirm this destructive action.")
     },
-    async ({ pageId }) => {
+    async ({ funnelId, stepId }) => {
       try {
-        const result = await funnelRequest("DELETE", `/page/${pageId}?locationId=${client.locationId}`);
-        return {
-          content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
-        };
+        const result = await funnelRequest("POST", `/funnel/delete-step`, { funnelId, stepId });
+        return jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -6633,7 +6794,7 @@ async function validateFirebase(firebaseKey, refreshToken) {
 function registerSetupTool(server2) {
   server2.tool(
     "setup_ghl_mcp",
-    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 176 tools (168 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder).",
+    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 178 tools (148 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder).",
     {
       email: import_zod42.z.string().email().describe("Email used at purchase."),
       license_key: import_zod42.z.string().min(20).describe("License key from your purchase email."),
@@ -6688,7 +6849,7 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
         ghl_firebase_api_key: workflowBuilderEnabled ? args.ghl_firebase_api_key?.trim() : void 0,
         ghl_firebase_refresh_token: workflowBuilderEnabled ? args.ghl_firebase_refresh_token?.trim() : void 0
       });
-      const toolCount = workflowBuilderEnabled ? "176" : "168";
+      const toolCount = workflowBuilderEnabled ? "178" : "148";
       const wfLine = workflowBuilderEnabled ? "Workflow Builder: enabled." : "Workflow Builder: not configured (optional).";
       const wfTip = workflowBuilderEnabled ? "" : "\nTo enable Workflow Builder later (8 extra tools): run enable_workflow_builder with your three Firebase values. No need to re-enter license/API key/location ID.";
       return {
@@ -6716,7 +6877,7 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
 function registerEnableWorkflowBuilderTool(server2) {
   server2.tool(
     "enable_workflow_builder",
-    "Add Firebase credentials to an existing GHL Command install to unlock the 8 workflow builder tools (create/edit/clone/delete/publish workflows, validate_workflow, get_trigger_registry). Requires you've already run setup_ghl_mcp. Capture the three Firebase values from your GHL browser session \u2014 see elitedcs.com/ghl-mcp-firebase for step-by-step DevTools instructions. Tool count goes from 168 to 176 after the next Claude restart.",
+    "Add Firebase credentials to an existing GHL Command install to unlock 30 additional tools across 6 modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder (10 tools), form builder (5 tools), pipeline builder (5 tools), and workflow cloning. Requires you've already run setup_ghl_mcp. Capture the three Firebase values from your GHL browser session \u2014 see elitedcs.com/ghl-mcp-firebase for step-by-step DevTools instructions. Tool count goes from 148 to 178 after the next Claude restart.",
     {
       ghl_user_id: import_zod42.z.string().min(10).describe("Firebase User ID (uid). DevTools \u2192 Application \u2192 IndexedDB \u2192 firebaseLocalStorageDb \u2192 firebaseLocalStorage \u2192 the value.uid field of the firebase:authUser row."),
       ghl_firebase_api_key: import_zod42.z.string().min(10).describe("Firebase API Key starting with 'AIza'. The string between 'firebase:authUser:' and ':[DEFAULT]' in the row's Key column."),
@@ -6763,7 +6924,7 @@ DevTools steps: https://elitedcs.com/ghl-mcp-firebase`
             "",
             "Firebase credentials verified and saved.",
             "",
-            "**Restart Claude (quit fully and reopen) to load the 8 additional workflow builder tools (176 total).**",
+            "**Restart Claude (quit fully and reopen) to load the workflow builder + funnel builder + pipeline builder + form builder + workflow cloner tools (178 total).**",
             "",
             'After restart, try: "List my workflows in full detail" or "Validate workflow <id>".',
             "",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.6.0",
-  "description": "GoHighLevel MCP Server for Claude. 177 tools — full CRM, automation, marketing control, and the only programmatic GHL workflow builder.",
+  "version": "3.8.0",
+  "description": "GoHighLevel MCP Server for Claude. 178 tools — full CRM, automation, marketing control, and the only programmatic GHL workflow builder.",
   "main": "dist/index.js",
   "bin": {
     "ghl-mcp": "dist/index.js"