@flytrap-qa/mcp 0.1.0 → 0.1.1

package/README.md

@@ -70,14 +70,11 @@ Public catalog (no key): `lookup_app`, `get_app_profile`, `lookup_sdk`, `lookup_
 
 ## Configuration
 
-| Variable | Default | Meaning |
-| --- | --- | --- |
-| `FLYTRAP_API_KEY` | none | Personal API key from Settings > API keys (`ft_live_...`). Optional for catalog tools |
-| `FLYTRAP_API_URL` | `https://api.flytrap.dev` | Override for self-hosted or local API. Must be https unless localhost |
+The only setting is `FLYTRAP_API_KEY`: your personal key from Settings > API keys (`ft_live_...`). It is optional for the public catalog tools. The server always talks to `https://api.flytrap.dev`.
 
 ## Security
 
-- The key is sent only to `FLYTRAP_API_URL` as a `Bearer` header, over https. It is never written to disk or logged.
+- The key is sent only to `https://api.flytrap.dev` as a `Bearer` header, over https. It is never written to disk or logged.
 - Keys are scoped. A `read` key cannot start crawls, create keys or change billing, even if the agent asks. Revoke keys any time in the dashboard.
 - Keys inherit the project permissions of the user who created them. A key never sees another account's private projects.
 - Tool output is bounded (log windows, call caps, 4 MiB per response) and marked as untrusted app data, since bug titles, log lines and URLs originate from the crawled app and its traffic.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flytrap-qa/mcp",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "MCP server that lets your coding agent read FlyTrap crawl results: bugs with evidence, screen graphs, network hosts, SDKs and build diffs for your own apps.",
   "license": "MIT",
   "type": "module",

package/src/config.js

@@ -1,26 +1,12 @@
-export const DEFAULT_API_URL = 'https://api.flytrap.dev'
+export const API_URL = 'https://api.flytrap.dev'
 export const API_KEY_PATTERN = /^ft_live_[0-9a-f]{48}$/
 export const SIGNUP_URL = 'https://app.flytrap.dev/register'
 export const KEYS_URL = 'https://app.flytrap.dev/settings/api-keys'
 
-const isLoopback = url => ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname)
-
 export const loadConfig = (env = process.env) => {
-    const rawUrl = (env.FLYTRAP_API_URL || DEFAULT_API_URL).trim().replace(/\/+$/, '')
-    let url
-    try {
-        url = new URL(rawUrl)
-    } catch {
-        throw new Error('FLYTRAP_API_URL is not a valid URL')
-    }
-    if (url.protocol !== 'https:' && !(url.protocol === 'http:' && isLoopback(url)))
-        throw new Error('FLYTRAP_API_URL must use https (http is only allowed for localhost)')
-    if (url.username || url.password)
-        throw new Error('FLYTRAP_API_URL must not embed credentials')
-
     const apiKey = (env.FLYTRAP_API_KEY || '').trim() || null
     if (apiKey && !API_KEY_PATTERN.test(apiKey))
         throw new Error('FLYTRAP_API_KEY does not look like a FlyTrap key (expected ft_live_ followed by 48 hex chars)')
 
-    return {apiUrl: url.origin + url.pathname.replace(/\/+$/, ''), apiKey}
+    return {apiUrl: API_URL, apiKey}
 }

package/src/index.js

@@ -38,5 +38,5 @@ export const main = async () => {
     const {server, config} = createServer()
     const transport = new StdioServerTransport()
     await server.connect(transport)
-    process.stderr.write(`flytrap-mcp ${version} ready (${config.apiKey ? 'authenticated' : 'public catalog only'}, ${config.apiUrl})\n`)
+    process.stderr.write(`flytrap-mcp ${version} ready (${config.apiKey ? 'authenticated' : 'public catalog only'})\n`)
 }