@frihet/mcp-server 1.5.3 → 1.5.5

package/README.md

@@ -17,7 +17,7 @@
   <a href="https://smithery.ai/server/frihet/frihet-mcp"><img src="https://smithery.ai/badge/frihet/frihet-mcp" alt="Smithery installs"></a>
   <a href="https://registry.modelcontextprotocol.io/?q=io.frihet"><img src="https://img.shields.io/badge/MCP_Registry-io.frihet%2Ferp-4A90D9?style=flat&logo=anthropic&logoColor=white" alt="MCP Registry"></a>
   <a href="https://github.com/Frihet-io/frihet-mcp/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-MIT-18181b?style=flat&labelColor=09090b" alt="license"></a>
-  <img src="https://img.shields.io/badge/tools-52-18181b?style=flat&labelColor=09090b" alt="52 tools">
+  <img src="https://img.shields.io/badge/tools-55-18181b?style=flat&labelColor=09090b" alt="55 tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-18181b?style=flat&labelColor=09090b" alt="node >=18">
   <a href="https://www.typescriptlang.org/"><img src="https://img.shields.io/badge/TypeScript-18181b?style=flat&labelColor=09090b" alt="TypeScript"></a>
 </p>
@@ -33,7 +33,7 @@ You:     "Create an invoice for TechStart SL, 40 hours of consulting at 75 EUR/h
 Claude:  Done. Invoice INV-2026-089 created. Total: 3,000.00 EUR + 21% IVA = 3,630.00 EUR.
 ```
 
-52 tools. 11 resources. 10 prompts. Structured output on every tool. Zero boilerplate.
+55 tools. 8 resources. 7 prompts. Structured output on every tool. Zero boilerplate.
 
 ---
 
@@ -161,7 +161,7 @@ Talk to your ERP. These are real prompts, not marketing copy.
 
 ## What to expect
 
-This MCP is a **structured data interface** -- you describe what you want in natural language, and the AI creates, queries, or modifies business records in Frihet. All 52 tools are CRUD operations over the REST API.
+This MCP is a **structured data interface** -- you describe what you want in natural language, and the AI creates, queries, or modifies business records in Frihet. All 55 tools are CRUD operations over the REST API.
 
 **Works great:**
 
@@ -188,7 +188,7 @@ If you need to digitize paper invoices or receipts, extract the data first (e.g.
 
 ---
 
-## Tools (52)
+## Tools (55)
 
 ### Invoices (6)
 
@@ -283,7 +283,7 @@ If you need to digitize paper invoices or receipts, extract the data first (e.g.
 | `get_quarterly_taxes` | Quarterly tax prep: Modelo 303/130 fields, collected vs deductible, liability |
 | `duplicate_invoice` | Clone an invoice for recurring billing (copies items/client/tax, starts as draft) |
 
-All 52 tools return **structured output** via `outputSchema` -- typed JSON, not raw text. List tools return paginated results (`{ data, total, limit, offset }`).
+All 55 tools return **structured output** via `outputSchema` -- typed JSON, not raw text. List tools return paginated results (`{ data, total, limit, offset }`).
 
 ---
 
@@ -462,10 +462,12 @@ npm run build   # must pass before submitting
 
 | Package | What it is |
 |---------|-----------|
-| [`@frihet/mcp-server`](https://www.npmjs.com/package/@frihet/mcp-server) | This MCP server (52 tools, 11 resources, 10 prompts) |
+| [`@frihet/mcp-server`](https://www.npmjs.com/package/@frihet/mcp-server) | This MCP server (55 tools, 8 resources, 7 prompts) |
 | [`@frihet/sdk`](https://github.com/Frihet-io/frihet-sdk) | TypeScript SDK (`frihet.invoices.create()`) |
 | [`frihet`](https://www.npmjs.com/package/frihet) | CLI (`frihet invoices list --status overdue`) |
+| [`n8n-nodes-frihet`](https://www.npmjs.com/package/n8n-nodes-frihet) | n8n community node for workflow automation |
 | [REST API](https://docs.frihet.io/desarrolladores/api-rest) | OpenAPI 3.1 at `api.frihet.io/v1` |
+| [Remote MCP](https://mcp.frihet.io) | Hosted endpoint on Cloudflare Workers (zero install) |
 | [Webhooks](https://docs.frihet.io/desarrolladores/webhooks) | Real-time events with HMAC-SHA256 |
 
 ## Links

package/dist/index.js

@@ -14,15 +14,18 @@ import { FrihetClient } from "./client.js";
 import { registerAllTools } from "./tools/register-all.js";
 import { registerAllResources } from "./resources/register-all.js";
 import { registerAllPrompts } from "./prompts/register-all.js";
+import { applyOpenAIProfile, OPENAI_EXCLUDED_COUNT, OPENAI_EXCLUDED_RESOURCE_COUNT } from "./openai-profile.js";
 import { log } from "./logger.js";
 import { registerShutdownHook } from "./metrics.js";
 function main() {
     const apiKey = process.env.FRIHET_API_KEY;
     if (!apiKey) {
-        console.error("Error: FRIHET_API_KEY environment variable is required.\n" +
-            "Set it in your MCP configuration or export it in your shell.\n\n" +
-            "Example:\n" +
-            '  export FRIHET_API_KEY="fri_your_api_key_here"\n');
+        console.error("Error: FRIHET_API_KEY environment variable is required.\n\n" +
+            "Get your API key:\n" +
+            "  1. Create a free account at https://app.frihet.io\n" +
+            "  2. Go to Settings > Developers > API Keys\n" +
+            "  3. Create a key and add it to your MCP configuration\n\n" +
+            "Documentation: https://docs.frihet.io/desarrolladores/mcp-server\n");
         process.exit(1);
     }
     const baseUrl = process.env.FRIHET_API_URL;
@@ -55,7 +58,17 @@ function main() {
             "11 resources (8 static + 3 live), and 10 workflow prompts for business management " +
             "with full Spanish tax compliance (IVA, IGIC, IPSI).",
     });
-    // Register all 52 tools (36 CRUD + 8 CRM + 4 intelligence + 4 actions)
+    // Apply OpenAI-safe profile if enabled (strips sensitive fields, fixes annotations)
+    const openaiMode = process.env.FRIHET_OPENAI_MODE === "true";
+    if (openaiMode) {
+        applyOpenAIProfile(server);
+        log({
+            level: "info",
+            message: `OpenAI safety profile active — ${OPENAI_EXCLUDED_COUNT} tools + ${OPENAI_EXCLUDED_RESOURCE_COUNT} resources excluded, gov IDs + credentials redacted`,
+            operation: "startup",
+        });
+    }
+    // Register tools (55 full / 53 in OpenAI mode)
     registerAllTools(server, client);
     // Register 11 resources (8 static + 3 dynamic via API)
     registerAllResources(server, client);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,SAAS,IAAI;IACX,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CACX,2DAA2D;YACzD,kEAAkE;YAClE,YAAY;YACZ,mDAAmD,CACtD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CACX,8CAA8C,OAAO,KAAK;gBACxD,8DAA8D,CACjE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CACX,iDAAiD,MAAM,CAAC,QAAQ,OAAO,CACxE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,KAAK,CACX,gEAAgE,MAAM,CAAC,QAAQ,OAAO;gBACpF,mDAAmD,CACtD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,qGAAqG;YACrG,mIAAmI;YACnI,oFAAoF;YACpF,qDAAqD;KACxD,CAAC,CAAC;IAEH,uEAAuE;IACvE,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,uDAAuD;IACvD,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAErC,+BAA+B;IAC/B,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE3B,sDAAsD;IACtD,oBAAoB,EAAE,CAAC;IAEvB,8BAA8B;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QAClC,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC1F,GAAG,CAAC;YACF,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,oCAAoC;YAC7C,SAAS,EAAE,SAAS;YACpB,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE;SACnD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC1B,GAAG,CAAC;YACF,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,mCAAmC;YAC5C,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC3E,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AAChH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,SAAS,IAAI;IACX,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CACX,6DAA6D;YAC3D,qBAAqB;YACrB,uDAAuD;YACvD,+CAA+C;YAC/C,4DAA4D;YAC5D,oEAAoE,CACvE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CACX,8CAA8C,OAAO,KAAK;gBACxD,8DAA8D,CACjE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CACX,iDAAiD,MAAM,CAAC,QAAQ,OAAO,CACxE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,KAAK,CACX,gEAAgE,MAAM,CAAC,QAAQ,OAAO;gBACpF,mDAAmD,CACtD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,qGAAqG;YACrG,mIAAmI;YACnI,oFAAoF;YACpF,qDAAqD;KACxD,CAAC,CAAC;IAEH,oFAAoF;IACpF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,CAAC;IAC7D,IAAI,UAAU,EAAE,CAAC;QACf,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,GAAG,CAAC;YACF,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,kCAAkC,qBAAqB,YAAY,8BAA8B,qDAAqD;YAC/J,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,uDAAuD;IACvD,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAErC,+BAA+B;IAC/B,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE3B,sDAAsD;IACtD,oBAAoB,EAAE,CAAC;IAEvB,8BAA8B;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QAClC,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC1F,GAAG,CAAC;YACF,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,oCAAoC;YAC7C,SAAS,EAAE,SAAS;YACpB,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE;SACnD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC1B,GAAG,CAAC;YACF,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,mCAAmC;YAC5C,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC3E,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/openai-profile.d.ts

@@ -0,0 +1,49 @@
+/**
+ * OpenAI-safe profile for the Frihet MCP server.
+ *
+ * Activated by FRIHET_OPENAI_MODE=true (env var or Worker binding).
+ *
+ * Applies transformations to every tool registration to comply with
+ * OpenAI's ChatGPT Apps submission requirements:
+ *
+ * 1. Excludes tools that return highly sensitive fiscal data
+ * 2. Corrects openWorldHint for tools that trigger external communication
+ * 3. Removes government IDs and credentials from input schemas
+ * 4. Redacts sensitive fields from all tool outputs
+ * 5. Updates descriptions to reflect modified behavior + openWorldHint justifications
+ *
+ * The full MCP server (55 tools) remains available for Claude, Cursor,
+ * Windsurf, Cline, Codex, and all other MCP clients.
+ *
+ * OpenAI-safe mode: 53 tools (2 excluded), 0 government IDs in I/O.
+ *
+ * @see https://developers.openai.com/apps-sdk/app-submission-guidelines
+ */
+/**
+ * Content-Security-Policy for the OpenAI-safe MCP endpoint.
+ * OpenAI requires CSP specifying the exact domains the app fetches from.
+ */
+export declare const OPENAI_CSP: string;
+/**
+ * Applies the OpenAI-safe profile to an MCP server.
+ *
+ * Must be called BEFORE registerAllTools() and registerAllResources().
+ * Intercepts both registerTool() and registerResource() to apply
+ * the profile transformations.
+ *
+ * @example
+ * ```ts
+ * const server = new McpServer({ name: "Frihet", version: "1.5.4" });
+ * if (process.env.FRIHET_OPENAI_MODE === "true") {
+ *   applyOpenAIProfile(server);
+ * }
+ * registerAllTools(server, client);
+ * registerAllResources(server, client);
+ * ```
+ */
+export declare function applyOpenAIProfile(server: any): void;
+/** Number of tools excluded in OpenAI mode (for logging). */
+export declare const OPENAI_EXCLUDED_COUNT: number;
+/** Number of resources excluded in OpenAI mode (for logging). */
+export declare const OPENAI_EXCLUDED_RESOURCE_COUNT: number;
+//# sourceMappingURL=openai-profile.d.ts.map

package/dist/openai-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-profile.d.ts","sourceRoot":"","sources":["../src/openai-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA2LH;;;GAGG;AACH,eAAO,MAAM,UAAU,QAQkB,CAAC;AAM1C;;;;;;;;;;;;;;;;GAgBG;AAEH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAiGpD;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,QAA4B,CAAC;AAE/D,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,QAAyB,CAAC"}

package/dist/openai-profile.js

@@ -0,0 +1,273 @@
+/**
+ * OpenAI-safe profile for the Frihet MCP server.
+ *
+ * Activated by FRIHET_OPENAI_MODE=true (env var or Worker binding).
+ *
+ * Applies transformations to every tool registration to comply with
+ * OpenAI's ChatGPT Apps submission requirements:
+ *
+ * 1. Excludes tools that return highly sensitive fiscal data
+ * 2. Corrects openWorldHint for tools that trigger external communication
+ * 3. Removes government IDs and credentials from input schemas
+ * 4. Redacts sensitive fields from all tool outputs
+ * 5. Updates descriptions to reflect modified behavior + openWorldHint justifications
+ *
+ * The full MCP server (55 tools) remains available for Claude, Cursor,
+ * Windsurf, Cline, Codex, and all other MCP clients.
+ *
+ * OpenAI-safe mode: 53 tools (2 excluded), 0 government IDs in I/O.
+ *
+ * @see https://developers.openai.com/apps-sdk/app-submission-guidelines
+ */
+const PROFILE = {
+    // ── Tools excluded entirely ─────────────────────────────────────────
+    // Return restricted data categories that cannot be adequately redacted.
+    excludeTools: new Set([
+        "get_quarterly_taxes", // Modelo 303/130 tax filing data — sensitive fiscal PII
+        "get_invoice_einvoice", // EN16931 XML mandatorily contains seller+buyer NIF/CIF
+    ]),
+    // ── Annotation corrections ──────────────────────────────────────────
+    // openWorldHint MUST be true for tools that cause external side effects.
+    annotationOverrides: {
+        send_invoice: { openWorldHint: true },
+        send_quote: { openWorldHint: true },
+        create_webhook: { openWorldHint: true },
+        update_webhook: { openWorldHint: true },
+    },
+    // ── Description overrides ───────────────────────────────────────────
+    // Remove references to stripped fields (taxId, secret, to) and include
+    // openWorldHint justifications as required by OpenAI review guidelines.
+    descriptionOverrides: {
+        list_clients: "List all clients/customers with optional pagination. " +
+            "Returns contact info and addresses. " +
+            "/ Lista todos los clientes con paginacion opcional. " +
+            "Devuelve informacion de contacto y direcciones.",
+        create_client: "Create a new client/customer. Requires at minimum a name. " +
+            "Clients are used when creating invoices and quotes. " +
+            "Example: name='Acme Corp', email='billing@acme.com', " +
+            "address={street:'Main St 1', city:'Madrid', country:'ES'} " +
+            "/ Crea un nuevo cliente. Requiere como minimo un nombre.",
+        update_client: "Update an existing client using PATCH semantics. Only the provided fields will be changed. " +
+            "Example: id='abc123', email='new@acme.com', phone='+34600123456' " +
+            "/ Actualiza un cliente existente. Solo se modifican los campos proporcionados.",
+        list_vendors: "List all vendors/suppliers with optional pagination and search. " +
+            "Returns contact info and addresses. " +
+            "/ Lista todos los proveedores con paginacion y busqueda opcional. " +
+            "Devuelve informacion de contacto y direcciones.",
+        create_vendor: "Create a new vendor/supplier. Requires at minimum a name. " +
+            "Vendors are used when tracking expenses and purchase orders. " +
+            "Example: name='Office Supplies Ltd', email='billing@office.com', " +
+            "address={street:'Gran Via 1', city:'Madrid', country:'ES'} " +
+            "/ Crea un nuevo proveedor. Requiere como minimo un nombre.",
+        update_vendor: "Update an existing vendor using PATCH semantics. Only the provided fields will be changed. " +
+            "Example: id='abc123', email='new@supplier.com', phone='+34600123456' " +
+            "/ Actualiza un proveedor existente. Solo se modifican los campos proporcionados.",
+        send_invoice: "Send an invoice to the client via email using the client's stored email address. " +
+            "The invoice must exist and should not already be cancelled. " +
+            "[openWorldHint: true — triggers email delivery to the client's external email address " +
+            "via Frihet's transactional email service] " +
+            "/ Envia una factura al cliente por email usando el email almacenado del cliente.",
+        send_quote: "Send a quote to the client via email using the client's stored email address. " +
+            "The quote must exist and should not already be expired or rejected. " +
+            "[openWorldHint: true — triggers email delivery to the client's external email address " +
+            "via Frihet's transactional email service] " +
+            "/ Envia un presupuesto al cliente por email usando el email almacenado del cliente.",
+        create_webhook: "Register a new webhook endpoint. Specify the URL and events to subscribe to. " +
+            "Available events: invoice.created, invoice.updated, invoice.paid, invoice.deleted, " +
+            "expense.created, expense.updated, expense.deleted, client.created, client.updated, " +
+            "quote.created, quote.updated, quote.accepted. " +
+            "Example: url='https://example.com/webhook', events=['invoice.created','invoice.paid'] " +
+            "[openWorldHint: true — configures Frihet to POST event data to the specified external URL] " +
+            "/ Registra un nuevo endpoint de webhook.",
+        update_webhook: "Update an existing webhook configuration using PATCH semantics. " +
+            "Example: id='abc123', active=false to disable a webhook. " +
+            "[openWorldHint: true — can modify the external URL that receives webhook notifications] " +
+            "/ Actualiza la configuracion de un webhook.",
+    },
+    // ── Input fields stripped ──────────────────────────────────────────
+    // Government IDs (NIF/CIF/VAT), auth credentials, and unsolicited
+    // email address collection removed from input schemas.
+    stripInputFields: {
+        create_client: ["taxId"], // NIF/CIF/VAT — government-issued identifier
+        update_client: ["taxId"],
+        create_vendor: ["taxId"],
+        update_vendor: ["taxId"],
+        send_invoice: ["to"], // Don't solicit email — use client's stored email
+        send_quote: ["to"],
+        create_webhook: ["secret"], // Signing credential — manage via Frihet web app
+        update_webhook: ["secret"],
+    },
+    // ── Output fields redacted ─────────────────────────────────────────
+    // Stripped from structuredContent and text in ALL tool responses.
+    // Includes synonyms that the Frihet API may return via .passthrough() schemas.
+    redactOutputFields: [
+        "taxId", "tax_id", // Primary field name + snake_case variant
+        "nif", "cif", "vatNumber", // Spanish/EU synonyms for government tax ID
+        "vat_number", "vatId", "vat_id",
+        "secret", // Webhook signing credential
+        "iban", "bankAccount", // Banking identifiers (if exposed via passthrough)
+        "bank_account", "accountNumber",
+    ],
+};
+/* ------------------------------------------------------------------ */
+/*  Deep field redaction                                                */
+/* ------------------------------------------------------------------ */
+/** Recursively removes named fields from an object/array tree. */
+function deepRedact(obj, fields) {
+    if (obj === null || typeof obj !== "object")
+        return;
+    if (Array.isArray(obj)) {
+        for (const item of obj)
+            deepRedact(item, fields);
+        return;
+    }
+    const record = obj;
+    for (const field of fields) {
+        if (field in record)
+            delete record[field];
+    }
+    for (const value of Object.values(record)) {
+        deepRedact(value, fields);
+    }
+}
+/** Best-effort redaction of JSON field patterns from display text. */
+function redactText(text, fields) {
+    let result = text;
+    for (const field of fields) {
+        // Remove "field": "value", or "field": value patterns
+        result = result.replace(new RegExp(`\\s*"${field}"\\s*:\\s*(?:"[^"]*"|null|true|false|\\d+(?:\\.\\d+)?)\\s*,?`, "g"), "");
+    }
+    // Clean up trailing commas before } or ] left by removals
+    return result.replace(/,(\s*[}\]])/g, "$1");
+}
+/* ------------------------------------------------------------------ */
+/*  Resources excluded / redacted in OpenAI mode                       */
+/* ------------------------------------------------------------------ */
+/** Dynamic resources excluded — return too much raw PII to safely redact. */
+const EXCLUDE_RESOURCES = new Set([
+    "overdue-invoices", // Returns up to 100 raw invoice objects with client NIF/CIF
+]);
+/* ------------------------------------------------------------------ */
+/*  CSP for the OpenAI Worker                                          */
+/* ------------------------------------------------------------------ */
+/**
+ * Content-Security-Policy for the OpenAI-safe MCP endpoint.
+ * OpenAI requires CSP specifying the exact domains the app fetches from.
+ */
+export const OPENAI_CSP = "default-src 'self'; " +
+    "script-src 'self' 'unsafe-inline' https://www.gstatic.com https://apis.google.com; " +
+    "style-src 'self' 'unsafe-inline'; " +
+    "connect-src 'self' https://api.frihet.io https://us-central1-gen-lang-client-0335716041.cloudfunctions.net " +
+    "https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://www.googleapis.com https://www.gstatic.com; " +
+    "frame-src https://accounts.google.com https://github.com https://login.microsoftonline.com; " +
+    "img-src 'self' data: https:; " +
+    "font-src 'self' https://www.frihet.io";
+/* ------------------------------------------------------------------ */
+/*  Profile applicator                                                 */
+/* ------------------------------------------------------------------ */
+/**
+ * Applies the OpenAI-safe profile to an MCP server.
+ *
+ * Must be called BEFORE registerAllTools() and registerAllResources().
+ * Intercepts both registerTool() and registerResource() to apply
+ * the profile transformations.
+ *
+ * @example
+ * ```ts
+ * const server = new McpServer({ name: "Frihet", version: "1.5.4" });
+ * if (process.env.FRIHET_OPENAI_MODE === "true") {
+ *   applyOpenAIProfile(server);
+ * }
+ * registerAllTools(server, client);
+ * registerAllResources(server, client);
+ * ```
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export function applyOpenAIProfile(server) {
+    const fieldsToRedact = PROFILE.redactOutputFields;
+    /* ── Intercept registerTool ─────────────────────────────────────── */
+    const originalRegisterTool = server.registerTool.bind(server);
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    server.registerTool = (name, config, handler) => {
+        // 1. Skip excluded tools entirely
+        if (PROFILE.excludeTools.has(name))
+            return;
+        // 2. Merge annotation overrides
+        const annOverrides = PROFILE.annotationOverrides[name];
+        if (annOverrides) {
+            config.annotations = { ...config.annotations, ...annOverrides };
+        }
+        // 3. Replace descriptions
+        const descOverride = PROFILE.descriptionOverrides[name];
+        if (descOverride) {
+            config.description = descOverride;
+        }
+        // 4. Strip sensitive input fields
+        const inputStrip = PROFILE.stripInputFields[name];
+        if (inputStrip && config.inputSchema) {
+            for (const field of inputStrip) {
+                delete config.inputSchema[field];
+            }
+        }
+        // 5. Wrap handler to redact sensitive output fields
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const wrappedHandler = async (input) => {
+            const result = await handler(input);
+            // Redact structuredContent (programmatic output)
+            if (result.structuredContent) {
+                deepRedact(result.structuredContent, fieldsToRedact);
+            }
+            // Best-effort redact text content (display output)
+            if (Array.isArray(result.content)) {
+                for (const block of result.content) {
+                    if (block.type === "text" && typeof block.text === "string") {
+                        block.text = redactText(block.text, fieldsToRedact);
+                    }
+                }
+            }
+            return result;
+        };
+        return originalRegisterTool(name, config, wrappedHandler);
+    };
+    /* ── Intercept registerResource ─────────────────────────────────── */
+    const originalRegisterResource = server.registerResource.bind(server);
+    // registerResource(name, uri, config, handler) — 4 args
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    server.registerResource = (name, ...rest) => {
+        // Skip resources that expose too much raw PII
+        if (EXCLUDE_RESOURCES.has(name))
+            return;
+        // Find the handler (last argument) and wrap it
+        const handler = rest[rest.length - 1];
+        if (typeof handler === "function") {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            rest[rest.length - 1] = async (...args) => {
+                const result = await handler(...args);
+                // Resources return { contents: [{ uri, text?, blob? }] }
+                if (result?.contents && Array.isArray(result.contents)) {
+                    for (const content of result.contents) {
+                        if (typeof content.text === "string") {
+                            // Parse JSON, redact, re-serialize for clean removal
+                            try {
+                                const parsed = JSON.parse(content.text);
+                                deepRedact(parsed, fieldsToRedact);
+                                content.text = JSON.stringify(parsed, null, 2);
+                            }
+                            catch {
+                                // Not JSON — fall back to regex redaction
+                                content.text = redactText(content.text, fieldsToRedact);
+                            }
+                        }
+                    }
+                }
+                return result;
+            };
+        }
+        return originalRegisterResource(name, ...rest);
+    };
+}
+/** Number of tools excluded in OpenAI mode (for logging). */
+export const OPENAI_EXCLUDED_COUNT = PROFILE.excludeTools.size;
+/** Number of resources excluded in OpenAI mode (for logging). */
+export const OPENAI_EXCLUDED_RESOURCE_COUNT = EXCLUDE_RESOURCES.size;
+//# sourceMappingURL=openai-profile.js.map

package/dist/openai-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-profile.js","sourceRoot":"","sources":["../src/openai-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAqBH,MAAM,OAAO,GAAkB;IAC7B,uEAAuE;IACvE,wEAAwE;IACxE,YAAY,EAAE,IAAI,GAAG,CAAC;QACpB,qBAAqB,EAAG,wDAAwD;QAChF,sBAAsB,EAAE,wDAAwD;KACjF,CAAC;IAEF,uEAAuE;IACvE,yEAAyE;IACzE,mBAAmB,EAAE;QACnB,YAAY,EAAI,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,UAAU,EAAM,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;KACxC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,oBAAoB,EAAE;QACpB,YAAY,EACV,uDAAuD;YACvD,sCAAsC;YACtC,sDAAsD;YACtD,iDAAiD;QAEnD,aAAa,EACX,4DAA4D;YAC5D,sDAAsD;YACtD,uDAAuD;YACvD,4DAA4D;YAC5D,0DAA0D;QAE5D,aAAa,EACX,6FAA6F;YAC7F,mEAAmE;YACnE,gFAAgF;QAElF,YAAY,EACV,kEAAkE;YAClE,sCAAsC;YACtC,oEAAoE;YACpE,iDAAiD;QAEnD,aAAa,EACX,4DAA4D;YAC5D,+DAA+D;YAC/D,mEAAmE;YACnE,6DAA6D;YAC7D,4DAA4D;QAE9D,aAAa,EACX,6FAA6F;YAC7F,uEAAuE;YACvE,kFAAkF;QAEpF,YAAY,EACV,mFAAmF;YACnF,8DAA8D;YAC9D,wFAAwF;YACxF,4CAA4C;YAC5C,kFAAkF;QAEpF,UAAU,EACR,gFAAgF;YAChF,sEAAsE;YACtE,wFAAwF;YACxF,4CAA4C;YAC5C,qFAAqF;QAEvF,cAAc,EACZ,+EAA+E;YAC/E,qFAAqF;YACrF,qFAAqF;YACrF,gDAAgD;YAChD,wFAAwF;YACxF,6FAA6F;YAC7F,0CAA0C;QAE5C,cAAc,EACZ,kEAAkE;YAClE,2DAA2D;YAC3D,0FAA0F;YAC1F,6CAA6C;KAChD;IAED,sEAAsE;IACtE,kEAAkE;IAClE,uDAAuD;IACvD,gBAAgB,EAAE;QAChB,aAAa,EAAG,CAAC,OAAO,CAAC,EAAI,6CAA6C;QAC1E,aAAa,EAAG,CAAC,OAAO,CAAC;QACzB,aAAa,EAAG,CAAC,OAAO,CAAC;QACzB,aAAa,EAAG,CAAC,OAAO,CAAC;QACzB,YAAY,EAAI,CAAC,IAAI,CAAC,EAAO,kDAAkD;QAC/E,UAAU,EAAM,CAAC,IAAI,CAAC;QACtB,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAG,iDAAiD;QAC9E,cAAc,EAAE,CAAC,QAAQ,CAAC;KAC3B;IAED,sEAAsE;IACtE,kEAAkE;IAClE,+EAA+E;IAC/E,kBAAkB,EAAE;QAClB,OAAO,EAAE,QAAQ,EAAc,0CAA0C;QACzE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAM,4CAA4C;QAC3E,YAAY,EAAE,OAAO,EAAE,QAAQ;QAC/B,QAAQ,EAAuB,6BAA6B;QAC5D,MAAM,EAAE,aAAa,EAAU,mDAAmD;QAClF,cAAc,EAAE,eAAe;KAChC;CACF,CAAC;AAEF,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AAExE,kEAAkE;AAClE,SAAS,UAAU,CAAC,GAAY,EAAE,MAAgB;IAChD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO;IAEpD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,GAAG;YAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,IAAY,EAAE,MAAgB;IAChD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,sDAAsD;QACtD,MAAM,GAAG,MAAM,CAAC,OAAO,CACrB,IAAI,MAAM,CACR,QAAQ,KAAK,8DAA8D,EAC3E,GAAG,CACJ,EACD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,0DAA0D;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,kBAAkB,EAAE,4DAA4D;CACjF,CAAC,CAAC;AAEH,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GACrB,sBAAsB;IACtB,qFAAqF;IACrF,oCAAoC;IACpC,6GAA6G;IAC3G,gIAAgI;IAClI,8FAA8F;IAC9F,+BAA+B;IAC/B,uCAAuC,CAAC;AAE1C,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;;;;;;;;;;;;;;GAgBG;AACH,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,MAAW;IAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAElD,uEAAuE;IAEvE,MAAM,oBAAoB,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9D,8DAA8D;IAC9D,MAAM,CAAC,YAAY,GAAG,CAAC,IAAY,EAAE,MAAW,EAAE,OAAY,EAAE,EAAE;QAChE,kCAAkC;QAClC,IAAI,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAE3C,gCAAgC;QAChC,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,YAAY,EAAE,CAAC;QAClE,CAAC;QAED,0BAA0B;QAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC;QACpC,CAAC;QAED,kCAAkC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,8DAA8D;QAC9D,MAAM,cAAc,GAAG,KAAK,EAAE,KAAU,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YAEpC,iDAAiD;YACjD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;YACvD,CAAC;YAED,mDAAmD;YACnD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC5D,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,OAAO,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,uEAAuE;IAEvE,MAAM,wBAAwB,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtE,wDAAwD;IACxD,8DAA8D;IAC9D,MAAM,CAAC,gBAAgB,GAAG,CAAC,IAAY,EAAE,GAAG,IAAW,EAAE,EAAE;QACzD,8CAA8C;QAC9C,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAExC,+CAA+C;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,8DAA8D;YAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE;gBAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBAEtC,yDAAyD;gBACzD,IAAI,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACtC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACrC,qDAAqD;4BACrD,IAAI,CAAC;gCACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gCACxC,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;gCACnC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;4BACjD,CAAC;4BAAC,MAAM,CAAC;gCACP,0CAA0C;gCAC1C,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;4BAC1D,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,wBAAwB,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;AAE/D,iEAAiE;AACjE,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB,CAAC,IAAI,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@frihet/mcp-server",
-  "version": "1.5.3",
-  "description": "AI-native MCP server for business management — invoices, expenses, clients, products, quotes, webhooks, CRM. 55 tools with business intelligence. Works with Claude, Cursor, Windsurf, Cline.",
+  "version": "1.5.5",
+  "description": "AI-native MCP server for business management — invoices, expenses, clients, products, quotes, webhooks, CRM. 55 tools. Remote endpoint at mcp.frihet.io (zero install). Works with Claude, Cursor, Windsurf, Cline.",
   "type": "module",
   "main": "./dist/index.js",
   "bin": {
@@ -39,6 +39,10 @@
     "quotes",
     "saas",
     "tax-compliance",
+    "gemini-cli",
+    "freelancer",
+    "small-business",
+    "business-automation",
     "verifactu",
     "webhooks",
     "windsurf"