@ferrlabs/mcp 4.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright 2024-present FerrLabs Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,89 @@
+# FerrLabs MCP Server
+
+[![npm](https://img.shields.io/npm/v/@ferrlabs/mcp)](https://www.npmjs.com/package/@ferrlabs/mcp)
+[![Coverage](https://codecov.io/gh/FerrLabs/MCP/branch/main/graph/badge.svg)](https://codecov.io/gh/FerrLabs/MCP)
+[![License](https://img.shields.io/github/license/FerrLabs/MCP)](LICENSE)
+
+[Model Context Protocol](https://modelcontextprotocol.io) server that lets AI assistants interact with the FerrLabs ecosystem (FerrFlow, FerrVault, FerrTrack, FerrGrowth, FerrFleet, FerrLens) through the unified FerrLabs API. Runs locally via stdio transport.
+
+## Quick Start
+
+Add to your MCP client configuration (Claude Code, Cursor, etc.):
+
+```json
+{
+  "mcpServers": {
+    "ferrlabs": {
+      "command": "npx",
+      "args": ["-y", "@ferrlabs/mcp"],
+      "env": {
+        "FERRLABS_API_TOKEN": "fl_..."
+      }
+    }
+  }
+}
+```
+
+Create a token from `app.ferrlabs.com` (Settings → API Tokens) and assign the scopes you want the assistant to have. The token is forwarded as `x-api-token` to `api.ferrlabs.com`.
+
+## Available Tools
+
+| Tool                 | Scope   | Description                                                                    |
+| -------------------- | ------- | ------------------------------------------------------------------------------ |
+| `get_stats`          | public  | Public usage statistics from `api.ferrlabs.com`                                |
+| `health_check`       | public  | API health status                                                              |
+| `fetch_docs`         | public  | Fetch a page from a product marketing site (ferrflow, ferrvault, ferrtrack, …) |
+| `get_me`             | auth    | Current user profile                                                           |
+| `list_tokens`        | auth    | List your API tokens                                                           |
+| `create_token`       | session | Create a new API token (requires interactive session, not a token)             |
+| `revoke_token`       | auth    | Revoke an API token                                                            |
+| `list_orgs`          | auth    | List FerrLabs organizations you belong to                                      |
+| `list_projects`      | auth    | List projects inside an organization                                           |
+| `list_subscriptions` | auth    | List product subscriptions for an organization                                 |
+| `list_vaults`        | auth    | List FerrVault vaults inside a project                                         |
+| `list_issues`        | auth    | List FerrTrack issues inside a project                                         |
+
+FerrFlow CLI-specific tools (`dry_run`, `validate_config`, `read_config`, `read_changelog`, `list_release_tags`, `record_event`) were removed in v4.0.0 — they required either a local FerrFlow CLI install or HMAC signing the MCP doesn't do. Use the FerrFlow CLI directly or fetch docs via `fetch_docs("ferrflow", "docs/...")`.
+
+## Stack
+
+| Component | Technology                |
+| --------- | ------------------------- |
+| Runtime   | Node.js 22+               |
+| Language  | TypeScript                |
+| MCP SDK   | @modelcontextprotocol/sdk |
+
+## Configuration
+
+| Variable             | Description                                                                  | Default                    |
+| -------------------- | ---------------------------------------------------------------------------- | -------------------------- |
+| `API_URL`            | FerrLabs API base URL (no `/v1` suffix — paths are prefixed in code)         | `https://api.ferrlabs.com` |
+| `FERRLABS_API_TOKEN` | FerrLabs API token (required for authenticated tools)                        | —                          |
+| `FERRFLOW_API_TOKEN` | **Deprecated** — accepted as a fallback for backward compatibility with v3.x | —                          |
+
+## Smoke test
+
+`pnpm smoke` builds the server, spawns it over stdio, runs the MCP `initialize`/`tools/list` handshake, then calls `health_check` and `get_stats` against the real `api.ferrlabs.com`. Useful to confirm the server boots, registers all tools, and the API is reachable. Exits non-zero on any failure.
+
+```
+[PASS] initialize handshake — serverInfo: ferrlabs@4.0.0
+[PASS] tools/list — 12 tools registered
+[PASS] tools/call health_check — {"status":"ready", ...}
+[PASS] tools/call get_stats — total_releases=N
+
+Smoke: 4/4 OK
+```
+
+## Migrating from `@ferrflow/mcp` v3.x
+
+v4.0.0 renames the package and points the MCP at the unified FerrLabs API. To migrate:
+
+1. Replace `@ferrflow/mcp` with `@ferrlabs/mcp` in your MCP client config.
+2. Rename `FERRFLOW_API_TOKEN` → `FERRLABS_API_TOKEN` (the old name still works for one release).
+3. If you were overriding `API_URL=https://api.ferrflow.com`, drop the override — the default is now `https://api.ferrlabs.com`.
+
+Tokens issued by the legacy FerrFlow-only API are not valid against the unified API. Create a fresh one from `app.ferrlabs.com`.
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { registerStatsTools } from './tools/stats.js';
+import { registerTokenTools } from './tools/tokens.js';
+import { registerOrgsTools } from './tools/orgs.js';
+import { registerVaultsTools } from './tools/vaults.js';
+import { registerIssuesTools } from './tools/issues.js';
+import { registerSubscriptionsTools } from './tools/subscriptions.js';
+import { registerDocsTools } from './tools/docs.js';
+const server = new McpServer({
+    name: 'ferrlabs',
+    version: '4.0.0',
+});
+registerStatsTools(server);
+registerTokenTools(server);
+registerOrgsTools(server);
+registerVaultsTools(server);
+registerIssuesTools(server);
+registerSubscriptionsTools(server);
+registerDocsTools(server);
+const { StdioServerTransport } = await import('@modelcontextprotocol/sdk/server/stdio.js');
+const transport = new StdioServerTransport();
+await server.connect(transport);

package/dist/tools/__tests__/api-client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=api-client.test.d.ts.map

package/dist/tools/__tests__/api-client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/api-client.test.ts"],"names":[],"mappings":""}

package/dist/tools/__tests__/api-client.test.js

@@ -0,0 +1,47 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { apiRequest } from '../api-client.js';
+const mockFetch = vi.fn();
+vi.stubGlobal('fetch', mockFetch);
+function makeResponse(body, status = 200) {
+    return {
+        ok: status >= 200 && status < 300,
+        status,
+        json: () => Promise.resolve(body),
+    };
+}
+describe('apiRequest', () => {
+    beforeEach(() => {
+        mockFetch.mockReset();
+    });
+    it('makes a GET request and returns parsed JSON', async () => {
+        mockFetch.mockResolvedValue(makeResponse({ status: 'ok' }));
+        const result = await apiRequest('/health');
+        expect(result).toEqual({ status: 'ok' });
+        expect(mockFetch).toHaveBeenCalledWith(expect.stringContaining('/health'), expect.objectContaining({ method: 'GET' }));
+    });
+    it('includes x-api-token header when token is provided', async () => {
+        mockFetch.mockResolvedValue(makeResponse({ id: 'user-1' }));
+        await apiRequest('/v1/auth/me', { token: 'my-secret-token' });
+        const [, init] = mockFetch.mock.calls[0];
+        expect(init.headers['x-api-token']).toBe('my-secret-token');
+    });
+    it('returns undefined for 204 No Content responses', async () => {
+        mockFetch.mockResolvedValue({ ok: true, status: 204, json: vi.fn() });
+        const result = await apiRequest('/v1/auth/tokens/123', { method: 'DELETE' });
+        expect(result).toBeUndefined();
+    });
+    it('throws an error when the response is not ok', async () => {
+        mockFetch.mockResolvedValue(makeResponse({ error: 'Not found' }, 404));
+        await expect(apiRequest('/missing')).rejects.toThrow('Not found');
+    });
+    it('throws a generic error when response has no error field', async () => {
+        mockFetch.mockResolvedValue(makeResponse({}, 500));
+        await expect(apiRequest('/broken')).rejects.toThrow('API error: 500');
+    });
+    it('sends a JSON body for POST requests', async () => {
+        mockFetch.mockResolvedValue(makeResponse({ id: 'tok-1' }));
+        await apiRequest('/v1/auth/tokens', { method: 'POST', body: { name: 'ci', scopes: ['*'] } });
+        const [, init] = mockFetch.mock.calls[0];
+        expect(init.body).toBe(JSON.stringify({ name: 'ci', scopes: ['*'] }));
+    });
+});

package/dist/tools/__tests__/orgs.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=orgs.test.d.ts.map

package/dist/tools/__tests__/orgs.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/orgs.test.ts"],"names":[],"mappings":""}

package/dist/tools/__tests__/orgs.test.js

@@ -0,0 +1,51 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+process.env.FERRLABS_API_TOKEN = 'test-token';
+const handlers = new Map();
+const mockServer = {
+    tool: vi.fn((name, _desc, _schema, handler) => {
+        handlers.set(name, handler);
+    }),
+};
+const mockFetch = vi.fn();
+vi.stubGlobal('fetch', mockFetch);
+function makeResponse(body, status = 200) {
+    return {
+        ok: status >= 200 && status < 300,
+        status,
+        json: () => Promise.resolve(body),
+    };
+}
+describe('orgs tools', () => {
+    beforeEach(async () => {
+        vi.clearAllMocks();
+        handlers.clear();
+        const { registerOrgsTools } = await import('../orgs.js');
+        registerOrgsTools(mockServer);
+    });
+    it('registers list_orgs and list_projects', () => {
+        expect(handlers.has('list_orgs')).toBe(true);
+        expect(handlers.has('list_projects')).toBe(true);
+    });
+    it('list_orgs hits /v1/orgs with the API token', async () => {
+        mockFetch.mockResolvedValue(makeResponse([
+            {
+                id: 'o1',
+                slug: 'acme',
+                name: 'Acme',
+                member_count: 3,
+                created_at: '2026-01-01T00:00:00Z',
+            },
+        ]));
+        const result = await handlers.get('list_orgs')({});
+        const [url, init] = mockFetch.mock.calls[0];
+        expect(url).toContain('/v1/orgs');
+        expect(init.headers['x-api-token']).toBe('test-token');
+        expect(result).toMatchObject({ content: [{ type: 'text' }] });
+    });
+    it('list_projects URL-encodes the org slug', async () => {
+        mockFetch.mockResolvedValue(makeResponse([]));
+        await handlers.get('list_projects')({ org_slug: 'acme corp' });
+        const [url] = mockFetch.mock.calls[0];
+        expect(url).toContain('/v1/orgs/acme%20corp/projects');
+    });
+});

package/dist/tools/api-client.d.ts

@@ -0,0 +1,8 @@
+interface RequestOptions {
+    method?: string;
+    body?: unknown;
+    token?: string;
+}
+export declare function apiRequest<T>(path: string, options?: RequestOptions): Promise<T>;
+export {};
+//# sourceMappingURL=api-client.d.ts.map

package/dist/tools/api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/tools/api-client.ts"],"names":[],"mappings":"AAEA,UAAU,cAAc;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC,CA6B1F"}

package/dist/tools/api-client.js

@@ -0,0 +1,24 @@
+const API_URL = process.env.API_URL ?? 'https://api.ferrlabs.com';
+export async function apiRequest(path, options = {}) {
+    const { method = 'GET', body, token } = options;
+    const headers = {
+        'Content-Type': 'application/json',
+        'User-Agent': 'ferrlabs-mcp/4.0.0',
+    };
+    if (token) {
+        headers['x-api-token'] = token;
+    }
+    const res = await fetch(`${API_URL}${path}`, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : undefined,
+    });
+    if (res.status === 204) {
+        return undefined;
+    }
+    const data = await res.json();
+    if (!res.ok) {
+        throw new Error(data.error ?? `API error: ${res.status}`);
+    }
+    return data;
+}

package/dist/tools/docs.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerDocsTools(server: McpServer): void;
+//# sourceMappingURL=docs.d.ts.map

package/dist/tools/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/tools/docs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiCpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,QA4ClD"}

package/dist/tools/docs.js

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+const PRODUCT_HOSTS = {
+    ferrlabs: 'https://ferrlabs.com',
+    ferrflow: 'https://ferrflow.com',
+    ferrvault: 'https://ferrvault.com',
+    ferrtrack: 'https://ferrtrack.com',
+    ferrgrowth: 'https://ferrgrowth.com',
+    ferrfleet: 'https://ferrfleet.com',
+    ferrlens: 'https://ferrlens.com',
+};
+const productEnum = z.enum(Object.keys(PRODUCT_HOSTS));
+const MAX_BYTES = 200_000;
+function stripHtml(html) {
+    const article = html.match(/<main[\s\S]*?<\/main>/i)?.[0] ?? html;
+    return article
+        .replace(/<script[\s\S]*?<\/script>/gi, '')
+        .replace(/<style[\s\S]*?<\/style>/gi, '')
+        .replace(/<[^>]+>/g, ' ')
+        .replace(/&nbsp;/g, ' ')
+        .replace(/&amp;/g, '&')
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>')
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'")
+        .replace(/[ \t]+/g, ' ')
+        .replace(/\n{3,}/g, '\n\n')
+        .trim();
+}
+export function registerDocsTools(server) {
+    server.tool('fetch_docs', 'Fetch documentation or marketing copy from a FerrLabs product website (ferrflow, ferrvault, ferrtrack, ferrgrowth, ferrfleet, ferrlens, or ferrlabs holding). Returns the page text content, HTML stripped.', {
+        product: productEnum.describe('FerrLabs product whose docs to fetch'),
+        slug: z
+            .string()
+            .optional()
+            .describe("Path on the product site, e.g. 'docs/getting-started' or 'pricing'. Omit for the homepage."),
+    }, async ({ product, slug }) => {
+        const host = PRODUCT_HOSTS[product];
+        const path = slug ? `/${slug.replace(/^\//, '')}` : '/';
+        const url = `${host}${path}`;
+        const res = await fetch(url, {
+            headers: {
+                'User-Agent': 'ferrlabs-mcp/4.0.0',
+                Accept: 'text/html,text/markdown,text/plain',
+            },
+        });
+        if (!res.ok) {
+            throw new Error(`fetch_docs ${url}: HTTP ${res.status}`);
+        }
+        const raw = await res.text();
+        const text = stripHtml(raw);
+        const truncated = text.length > MAX_BYTES;
+        const out = truncated ? `${text.slice(0, MAX_BYTES)}\n\n[truncated]` : text;
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `# ${url}\n\n${out}`,
+                },
+            ],
+        };
+    });
+}

package/dist/tools/issues.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerIssuesTools(server: McpServer): void;
+//# sourceMappingURL=issues.d.ts.map

package/dist/tools/issues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issues.d.ts","sourceRoot":"","sources":["../../src/tools/issues.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAgCpE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,QA+BpD"}

package/dist/tools/issues.js

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+import { apiRequest } from './api-client.js';
+const API_TOKEN = process.env.FERRLABS_API_TOKEN ?? process.env.FERRFLOW_API_TOKEN;
+function requireToken() {
+    if (!API_TOKEN) {
+        throw new Error('FERRLABS_API_TOKEN environment variable is required for authenticated operations.');
+    }
+    return API_TOKEN;
+}
+export function registerIssuesTools(server) {
+    server.tool('list_issues', 'List FerrTrack issues for a project (FerrTrack — issue tracker)', {
+        org_slug: z.string().min(1).describe('Organization slug'),
+        project_slug: z.string().min(1).describe('Project slug'),
+        page: z.number().int().min(1).optional().describe('Page number (default 1)'),
+        per_page: z
+            .number()
+            .int()
+            .min(1)
+            .max(100)
+            .optional()
+            .describe('Items per page (default 25, max 100)'),
+    }, async ({ org_slug, project_slug, page, per_page }) => {
+        const token = requireToken();
+        const params = new URLSearchParams();
+        if (page !== undefined)
+            params.set('page', String(page));
+        if (per_page !== undefined)
+            params.set('per_page', String(per_page));
+        const qs = params.toString();
+        const issues = await apiRequest(`/v1/orgs/${encodeURIComponent(org_slug)}/projects/${encodeURIComponent(project_slug)}/issues${qs ? `?${qs}` : ''}`, { token });
+        return {
+            content: [{ type: 'text', text: JSON.stringify(issues, null, 2) }],
+        };
+    });
+}

package/dist/tools/orgs.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerOrgsTools(server: McpServer): void;
+//# sourceMappingURL=orgs.d.ts.map

package/dist/tools/orgs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.d.ts","sourceRoot":"","sources":["../../src/tools/orgs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA+BpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,QA+BlD"}

package/dist/tools/orgs.js

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+import { apiRequest } from './api-client.js';
+const API_TOKEN = process.env.FERRLABS_API_TOKEN ?? process.env.FERRFLOW_API_TOKEN;
+function requireToken() {
+    if (!API_TOKEN) {
+        throw new Error('FERRLABS_API_TOKEN environment variable is required for authenticated operations.');
+    }
+    return API_TOKEN;
+}
+export function registerOrgsTools(server) {
+    server.tool('list_orgs', 'List FerrLabs organizations the authenticated user belongs to', {}, async () => {
+        const token = requireToken();
+        const orgs = await apiRequest('/v1/orgs', { token });
+        return {
+            content: [{ type: 'text', text: JSON.stringify(orgs, null, 2) }],
+        };
+    });
+    server.tool('list_projects', 'List projects inside a FerrLabs organization', {
+        org_slug: z.string().min(1).describe('Organization slug (from list_orgs)'),
+    }, async ({ org_slug }) => {
+        const token = requireToken();
+        const projects = await apiRequest(`/v1/orgs/${encodeURIComponent(org_slug)}/projects`, { token });
+        return {
+            content: [{ type: 'text', text: JSON.stringify(projects, null, 2) }],
+        };
+    });
+}

package/dist/tools/stats.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerStatsTools(server: McpServer): void;
+//# sourceMappingURL=stats.d.ts.map

package/dist/tools/stats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../src/tools/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAgBpE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,QA6BnD"}

package/dist/tools/stats.js

@@ -0,0 +1,25 @@
+import { apiRequest } from './api-client.js';
+export function registerStatsTools(server) {
+    server.tool('get_stats', 'Get public FerrLabs usage statistics (releases cut, repos using FerrFlow, commits analyzed)', {}, async () => {
+        const stats = await apiRequest('/stats');
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(stats, null, 2),
+                },
+            ],
+        };
+    });
+    server.tool('health_check', 'Check FerrLabs API health status', {}, async () => {
+        const health = await apiRequest('/health');
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(health, null, 2),
+                },
+            ],
+        };
+    });
+}

package/dist/tools/subscriptions.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerSubscriptionsTools(server: McpServer): void;
+//# sourceMappingURL=subscriptions.d.ts.map

package/dist/tools/subscriptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptions.d.ts","sourceRoot":"","sources":["../../src/tools/subscriptions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA0BpE,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,QAkB3D"}

package/dist/tools/subscriptions.js

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+import { apiRequest } from './api-client.js';
+const API_TOKEN = process.env.FERRLABS_API_TOKEN ?? process.env.FERRFLOW_API_TOKEN;
+function requireToken() {
+    if (!API_TOKEN) {
+        throw new Error('FERRLABS_API_TOKEN environment variable is required for authenticated operations.');
+    }
+    return API_TOKEN;
+}
+export function registerSubscriptionsTools(server) {
+    server.tool('list_subscriptions', 'List FerrLabs product subscriptions for an organization (FerrVault, FerrTrack, FerrGrowth, FerrFleet)', {
+        org_slug: z.string().min(1).describe('Organization slug'),
+    }, async ({ org_slug }) => {
+        const token = requireToken();
+        const subs = await apiRequest(`/v1/orgs/${encodeURIComponent(org_slug)}/subscriptions`, { token });
+        return {
+            content: [{ type: 'text', text: JSON.stringify(subs, null, 2) }],
+        };
+    });
+}

package/dist/tools/tokens.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerTokenTools(server: McpServer): void;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/tools/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/tools/tokens.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAsCpE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,QA4EnD"}

package/dist/tools/tokens.js

@@ -0,0 +1,73 @@
+import { z } from 'zod';
+import { apiRequest } from './api-client.js';
+const API_TOKEN = process.env.FERRLABS_API_TOKEN ?? process.env.FERRFLOW_API_TOKEN;
+function requireToken() {
+    if (!API_TOKEN) {
+        throw new Error('FERRLABS_API_TOKEN environment variable is required for authenticated operations (FERRFLOW_API_TOKEN is accepted as a fallback for backward compatibility).');
+    }
+    return API_TOKEN;
+}
+export function registerTokenTools(server) {
+    server.tool('get_me', 'Get the current authenticated FerrLabs user profile', {}, async () => {
+        const token = requireToken();
+        const user = await apiRequest('/v1/auth/me', { token });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(user, null, 2),
+                },
+            ],
+        };
+    });
+    server.tool('list_tokens', 'List all API tokens for the authenticated user', {}, async () => {
+        const token = requireToken();
+        const tokens = await apiRequest('/v1/auth/tokens', { token });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(tokens, null, 2),
+                },
+            ],
+        };
+    });
+    server.tool('create_token', 'Create a new FerrLabs API token (requires an interactive session, not a token)', {
+        name: z.string().min(1).max(100).describe('Token name'),
+        scopes: z.array(z.string()).describe('Token scopes (e.g. ["*"] for all)'),
+        expires_at: z.string().optional().describe('Expiration date (ISO 8601)'),
+    }, async ({ name, scopes, expires_at }) => {
+        const token = requireToken();
+        const result = await apiRequest('/v1/auth/tokens', {
+            method: 'POST',
+            body: { name, scopes, expires_at },
+            token,
+        });
+        const { plaintext, ...meta } = result;
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Token created: ${plaintext}\n\nThis is the only time the full token will be shown. Store it securely.\n\n${JSON.stringify(meta, null, 2)}`,
+                },
+            ],
+        };
+    });
+    server.tool('revoke_token', 'Revoke a FerrLabs API token by ID', {
+        token_id: z.string().uuid().describe('Token ID to revoke'),
+    }, async ({ token_id }) => {
+        const token = requireToken();
+        await apiRequest(`/v1/auth/tokens/${token_id}`, {
+            method: 'DELETE',
+            token,
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Token ${token_id} revoked successfully.`,
+                },
+            ],
+        };
+    });
+}

package/dist/tools/vaults.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerVaultsTools(server: McpServer): void;
+//# sourceMappingURL=vaults.d.ts.map

package/dist/tools/vaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaults.d.ts","sourceRoot":"","sources":["../../src/tools/vaults.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAuBpE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,QAmBpD"}

package/dist/tools/vaults.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+import { apiRequest } from './api-client.js';
+const API_TOKEN = process.env.FERRLABS_API_TOKEN ?? process.env.FERRFLOW_API_TOKEN;
+function requireToken() {
+    if (!API_TOKEN) {
+        throw new Error('FERRLABS_API_TOKEN environment variable is required for authenticated operations.');
+    }
+    return API_TOKEN;
+}
+export function registerVaultsTools(server) {
+    server.tool('list_vaults', 'List FerrVault vaults inside a project (FerrVault — secrets management)', {
+        org_slug: z.string().min(1).describe('Organization slug'),
+        project_slug: z.string().min(1).describe('Project slug'),
+    }, async ({ org_slug, project_slug }) => {
+        const token = requireToken();
+        const vaults = await apiRequest(`/v1/orgs/${encodeURIComponent(org_slug)}/projects/${encodeURIComponent(project_slug)}/vaults`, { token });
+        return {
+            content: [{ type: 'text', text: JSON.stringify(vaults, null, 2) }],
+        };
+    });
+}

package/package.json

@@ -0,0 +1,66 @@
+{
+  "bin": {
+    "ferrlabs-mcp": "./dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "zod": "^4.3.6"
+  },
+  "description": "Model Context Protocol server for the FerrLabs ecosystem (FerrFlow, FerrVault, FerrTrack, FerrGrowth, FerrFleet, FerrLens)",
+  "devDependencies": {
+    "@types/node": "^25.5.0",
+    "@vitest/coverage-v8": "^4.1.2",
+    "husky": "^9.1.7",
+    "lint-staged": "^15.2.10",
+    "prettier": "^3.4.2",
+    "tsx": "^4.19.0",
+    "typescript": "^6.0.0",
+    "vitest": "^4.1.2"
+  },
+  "lint-staged": {
+    "*.{ts,tsx,js,jsx,mjs,cjs,json,md,css}": "prettier --write"
+  },
+  "engines": {
+    "node": ">=22.0.0",
+    "pnpm": ">=9.0.0"
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "mcp",
+    "ferrlabs",
+    "ferrflow",
+    "ferrvault",
+    "ferrtrack",
+    "ferrgrowth",
+    "ferrfleet",
+    "ferrlens",
+    "model-context-protocol",
+    "ai"
+  ],
+  "license": "MIT",
+  "main": "./dist/index.js",
+  "name": "@ferrlabs/mcp",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/FerrLabs/MCP.git"
+  },
+  "type": "module",
+  "version": "4.0.0",
+  "scripts": {
+    "build": "tsc",
+    "ci:local": "pnpm typecheck && pnpm test && pnpm build",
+    "dev": "tsx watch src/index.ts",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "smoke": "pnpm build && tsx scripts/smoke.ts",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc --noEmit"
+  }
+}