@guiie/buda-mcp 1.0.0 → 1.1.1

package/README.md

@@ -1,122 +1,360 @@
 # buda-mcp
 
-A production-ready [MCP](https://modelcontextprotocol.io/) server for the [Buda.com](https://www.buda.com/) cryptocurrency exchange public API. Exposes real-time market data tools to any MCP-compatible AI client (Claude Code, Cursor, ChatGPT, etc.).
+[![npm version](https://img.shields.io/npm/v/@guiie/buda-mcp)](https://www.npmjs.com/package/@guiie/buda-mcp)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Node.js >=18](https://img.shields.io/badge/node-%3E%3D18-brightgreen)](https://nodejs.org/)
 
-## Tools
-
-| Tool | Description |
-|---|---|
-| `get_markets` | List all trading pairs, or get details for one market |
-| `get_ticker` | Current price, bid/ask, volume, and price change for a market |
-| `get_orderbook` | Full order book (bids + asks) for a market |
-| `get_trades` | Recent trade history for a market |
-| `get_market_volume` | 24h and 7-day transacted volume for a market |
+MCP server for [Buda.com](https://www.buda.com/) — the leading cryptocurrency exchange in Chile, Colombia, and Peru. Gives any MCP-compatible AI assistant live access to market data, order books, trade history, spreads, and (when credentials are provided) private account tools.
 
-All tools use Buda.com's **public** endpoints — no API key required.
+---
 
-## Requirements
+## Quick Start
 
-- Node.js 18+
-- npm 8+
+```bash
+npx @guiie/buda-mcp
+```
 
-## Installation
+Or install permanently:
 
 ```bash
-git clone https://github.com/gtorreal/buda-mcp.git
-cd buda-mcp
-npm install
-npm run build
+npm install -g @guiie/buda-mcp
+buda-mcp
 ```
 
-## Running the test suite
+---
+
+## Install in your MCP client
 
-Calls each tool against the live Buda API and prints the results:
+### Claude Code
 
 ```bash
-npm test
+claude mcp add buda-mcp -- npx -y @guiie/buda-mcp
 ```
 
-## Usage
+### Claude Desktop (`claude_desktop_config.json`)
 
-### Claude Code
+```json
+{
+  "mcpServers": {
+    "buda-mcp": {
+      "command": "npx",
+      "args": ["-y", "@guiie/buda-mcp"]
+    }
+  }
+}
+```
 
-Add the server with the `claude` CLI:
+### Cursor (`~/.cursor/mcp.json`)
 
-```bash
-claude mcp add buda-mcp -- node /absolute/path/to/buda-mcp/dist/index.js
+```json
+{
+  "mcpServers": {
+    "buda-mcp": {
+      "command": "npx",
+      "args": ["-y", "@guiie/buda-mcp"]
+    }
+  }
+}
 ```
 
-Then ask Claude things like:
+---
+
+## Tools
+
+### Public tools (no credentials required)
+
+#### `get_markets`
+List all 26 trading pairs on Buda.com, or get details for a specific market.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | No | Market ID (e.g. `BTC-CLP`). Omit to list all markets. |
+
+**Example prompts:**
+- *"List all markets available on Buda.com"*
+- *"What are the trading fees for BTC-CLP?"*
+- *"What's the minimum order size for ETH-COP?"*
+
+---
+
+#### `get_ticker`
+Current snapshot: last price, best bid/ask, 24h volume, and price change over 24h and 7d.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | Yes | Market ID (e.g. `BTC-CLP`, `ETH-COP`). |
+
+**Example prompts:**
+- *"What is the current Bitcoin price in Chilean pesos?"*
+- *"Show me the ETH-COP ticker"*
+- *"How much has BTC changed in the last 7 days on Buda?"*
+
+---
+
+#### `get_orderbook`
+Current order book: sorted bids and asks as `[price, amount]` pairs.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | Yes | Market ID. |
+| `limit` | number | No | Max price levels per side (default: all). |
+
+**Example prompts:**
+- *"Show me the BTC-CLP order book — top 10 bids and asks"*
+- *"How deep is the ETH-BTC order book?"*
+
+---
+
+#### `get_trades`
+Recent trade history. Each entry: `[timestamp_ms, amount, price, direction]`.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | Yes | Market ID. |
+| `limit` | number | No | Number of trades (default 50, max 100). |
+| `timestamp` | number | No | Unix seconds — returns trades older than this (pagination). |
+
+**Example prompts:**
+- *"Show the last 20 trades on BTC-CLP"*
+- *"Were there more buys or sells in the last 50 BTC-COP trades?"*
+
+---
+
+#### `get_market_volume`
+24h and 7-day transacted volume by side (bid = buys, ask = sells).
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | Yes | Market ID. |
+
+**Example prompts:**
+- *"How much ETH was traded on Buda in the last 7 days?"*
+- *"What's the BTC-CLP buy vs sell volume over 24 hours?"*
+
+---
+
+#### `get_spread`
+Bid/ask spread: absolute value and percentage of the ask price.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | Yes | Market ID. |
+
+**Example prompts:**
+- *"What's the spread on BTC-COP right now?"*
+- *"Is the ETH-CLP spread tighter than BTC-CLP?"*
+
+---
+
+#### `compare_markets`
+Side-by-side ticker data for all pairs of a given base currency (CLP, COP, PEN, USDC…).
 
-> What is the current BTC-CLP price?
-> Show me the order book for ETH-CLP.
-> How much Bitcoin was traded in the last 7 days on BTC-CLP?
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `base_currency` | string | Yes | Base currency to compare (e.g. `BTC`, `ETH`). |
 
-### Cursor
+**Example prompts:**
+- *"Compare the Bitcoin price across all Buda markets"*
+- *"Show me ETH in CLP, COP, and PEN side by side"*
+- *"Which Buda market has the highest BTC trading volume?"*
 
-Add to `.cursor/mcp.json` in your project (or `~/.cursor/mcp.json` globally):
+---
+
+#### `get_price_history`
+OHLCV candles derived from recent trade history (no native candlestick endpoint exists on Buda — candles are aggregated client-side from up to 100 raw trades).
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | Yes | Market ID. |
+| `period` | `1h` \| `4h` \| `1d` | No | Candle period (default `1h`). |
+| `limit` | number | No | Raw trades to fetch before aggregation (default 100, max 100). |
+
+**Example prompts:**
+- *"Show me hourly price candles for BTC-CLP"*
+- *"What were the daily open/high/low/close for ETH-COP?"*
+
+---
+
+### Authenticated tools
+
+Available only when `BUDA_API_KEY` and `BUDA_API_SECRET` environment variables are set. See [Authentication mode](#authentication-mode) below.
+
+> **Warning:** Authenticated instances must be run **locally only**. Never expose a server with API credentials to the internet.
+
+#### `get_balances`
+All currency balances: total, available, frozen, and pending withdrawal.
+
+**Example prompts:**
+- *"What's my BTC balance on Buda?"*
+- *"Show all my balances"*
+
+---
+
+#### `get_orders`
+Orders for a given market, filterable by state.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | Yes | Market ID. |
+| `state` | string | No | `pending`, `active`, `traded`, `canceled`, `canceled_and_traded`. |
+| `per` | number | No | Results per page (default 20, max 300). |
+| `page` | number | No | Page number (default 1). |
+
+**Example prompts:**
+- *"Show my open orders on BTC-CLP"*
+- *"List my last 10 traded orders on ETH-COP"*
+
+---
+
+#### `place_order`
+Place a limit or market order.
+
+**Requires `confirmation_token="CONFIRM"`** — prevents accidental execution from ambiguous prompts.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `market_id` | string | Yes | Market ID. |
+| `type` | `Bid` \| `Ask` | Yes | Order side. |
+| `price_type` | `limit` \| `market` | Yes | Order type. |
+| `amount` | number | Yes | Order size in base currency. |
+| `limit_price` | number | No | Required for limit orders. |
+| `confirmation_token` | string | Yes | Must equal `"CONFIRM"` to execute. |
+
+**Example prompts:**
+- *"Place a limit buy order for 0.001 BTC at 60,000,000 CLP on BTC-CLP, confirmation_token=CONFIRM"*
+
+---
+
+#### `cancel_order`
+Cancel an open order by ID.
+
+**Requires `confirmation_token="CONFIRM"`**.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `order_id` | number | Yes | Numeric order ID. |
+| `confirmation_token` | string | Yes | Must equal `"CONFIRM"` to cancel. |
+
+---
+
+## MCP Resources
+
+In addition to tools, the server exposes two MCP Resources that clients can read directly:
+
+| URI | Description |
+|-----|-------------|
+| `buda://markets` | JSON list of all Buda.com markets |
+| `buda://ticker/{market}` | JSON ticker for a specific market (e.g. `buda://ticker/BTC-CLP`) |
+
+---
+
+## Authentication mode
+
+The server defaults to **public-only mode** — no API key needed, no breaking changes for existing users.
+
+To enable authenticated tools, set environment variables before running:
+
+```bash
+BUDA_API_KEY=your_api_key BUDA_API_SECRET=your_api_secret npx @guiie/buda-mcp
+```
+
+Or in Claude Desktop config:
 
 ```json
 {
   "mcpServers": {
     "buda-mcp": {
-      "command": "node",
-      "args": ["/absolute/path/to/buda-mcp/dist/index.js"]
+      "command": "npx",
+      "args": ["-y", "@guiie/buda-mcp"],
+      "env": {
+        "BUDA_API_KEY": "your_api_key",
+        "BUDA_API_SECRET": "your_api_secret"
+      }
     }
   }
 }
 ```
 
-Restart Cursor and the tools will be available to the AI agent in chat.
+Authentication uses HMAC-SHA384 signing per the [Buda API docs](https://api.buda.com/en/#authentication). Keys are never logged.
 
-### ChatGPT (Actions / Custom GPT)
+> **Security:** Never expose an authenticated instance on a public server. Always run locally when using API credentials.
 
-ChatGPT does not natively support the stdio MCP transport. To use this server with ChatGPT you need an HTTP bridge. The simplest option is [mcp-server-proxy](https://github.com/sparfenyuk/mcp-proxy):
+---
 
-```bash
-pip install mcp-proxy
-mcp-proxy --port 8000 -- node /absolute/path/to/buda-mcp/dist/index.js
-```
+## Markets covered
 
-Then register `http://localhost:8000` (or your deployed URL) as a GPT Action endpoint. Use the auto-generated OpenAPI schema that `mcp-proxy` exposes at `/openapi.json`.
+| Quote | Country | Sample pairs |
+|-------|---------|-------------|
+| CLP | Chile | BTC-CLP, ETH-CLP, XRP-CLP |
+| COP | Colombia | BTC-COP, ETH-COP, XRP-COP |
+| PEN | Peru | BTC-PEN, ETH-PEN |
+| USDC | USD-pegged | BTC-USDC, ETH-USDC |
+| BTC | Cross | ETH-BTC, XRP-BTC, BCH-BTC |
 
-## Project structure
+---
 
+## Build from source
+
+```bash
+git clone https://github.com/gtorreal/buda-mcp.git
+cd buda-mcp
+npm install
+npm run build
+node dist/index.js        # stdio (for MCP clients)
+node dist/http.js         # HTTP on port 3000 (for Railway / hosted)
 ```
-src/
-  index.ts          — MCP server entry point
-  client.ts         — BudaClient HTTP wrapper (extend here for auth)
-  types.ts          — TypeScript types for all API responses
-  tools/
-    markets.ts      — get_markets
-    ticker.ts       — get_ticker
-    orderbook.ts    — get_orderbook
-    trades.ts       — get_trades
-    volume.ts       — get_market_volume
-test/
-  run-all.ts        — integration test script
+
+Run tests (requires live internet access):
+
+```bash
+npm test
 ```
 
-## Adding private endpoints
+---
 
-`BudaClient` in `src/client.ts` is structured for easy extension. To add authenticated endpoints (balances, orders, withdrawals):
+## HTTP / Railway deployment
 
-1. Add `apiKey` and `apiSecret` constructor parameters.
-2. Implement HMAC-SHA2 signing in a `signedGet` / `signedPost` method (see [Buda auth docs](https://api.buda.com/en/#rest-api-private-endpoints-authentication)).
-3. Drop new tool files under `src/tools/` and call `register(server, client)` in `src/index.ts`.
+The `dist/http.js` entrypoint runs an Express server with:
+- `POST /mcp` — Streamable HTTP MCP transport
+- `GET /mcp` — SSE streaming transport
+- `GET /health` — health check (`{ status, version, auth_mode }`)
+- `GET /.well-known/mcp/server-card.json` — Smithery-compatible static tool manifest
 
-## Markets available
+Set `PORT` environment variable to override the default `3000`.
 
-Buda.com operates in Chile, Colombia, and Peru:
+---
 
-| Quote currency | Country |
-|---|---|
-| CLP | Chile |
-| COP | Colombia |
-| PEN | Peru |
+## Project structure
+
+```
+src/
+  client.ts          BudaClient (HTTP + HMAC auth)
+  cache.ts           In-memory TTL cache
+  types.ts           TypeScript types for Buda API responses
+  index.ts           stdio MCP server entrypoint
+  http.ts            HTTP/SSE MCP server entrypoint
+  tools/
+    markets.ts       get_markets
+    ticker.ts        get_ticker
+    orderbook.ts     get_orderbook
+    trades.ts        get_trades
+    volume.ts        get_market_volume
+    spread.ts        get_spread
+    compare_markets.ts  compare_markets
+    price_history.ts get_price_history
+    balances.ts      get_balances (auth)
+    orders.ts        get_orders (auth)
+    place_order.ts   place_order (auth)
+    cancel_order.ts  cancel_order (auth)
+marketplace/
+  cursor-mcp.json    Cursor MCP config example
+  claude-listing.md  Claude registry listing
+  openapi.yaml       OpenAPI spec (GPT Actions / HTTP wrapper)
+  gemini-tools.json  Gemini function declarations
+```
 
-Common markets: `BTC-CLP`, `ETH-CLP`, `BTC-COP`, `ETH-COP`, `BTC-PEN`, `ETH-PEN`, `ETH-BTC`, `XRP-BTC`, etc.
+---
 
 ## License
 
-MIT
+MIT — [Buda.com API docs](https://api.buda.com/en/)

package/dist/cache.d.ts

@@ -0,0 +1,13 @@
+export declare class MemoryCache {
+    private store;
+    getOrFetch<T>(key: string, ttlMs: number, fetcher: () => Promise<T>): Promise<T>;
+    invalidate(key: string): void;
+    clear(): void;
+}
+export declare const CACHE_TTL: {
+    readonly MARKETS: 60000;
+    readonly TICKER: 5000;
+    readonly ORDERBOOK: 3000;
+};
+export declare const cache: MemoryCache;
+//# sourceMappingURL=cache.d.ts.map

package/dist/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAKA,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAA0C;IAEjD,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAUtF,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI7B,KAAK,IAAI,IAAI;CAGd;AAED,eAAO,MAAM,SAAS;;;;CAIZ,CAAC;AAEX,eAAO,MAAM,KAAK,aAAoB,CAAC"}

package/dist/cache.js

@@ -0,0 +1,25 @@
+export class MemoryCache {
+    store = new Map();
+    async getOrFetch(key, ttlMs, fetcher) {
+        const entry = this.store.get(key);
+        if (entry && Date.now() < entry.expiry) {
+            return entry.data;
+        }
+        const data = await fetcher();
+        this.store.set(key, { data, expiry: Date.now() + ttlMs });
+        return data;
+    }
+    invalidate(key) {
+        this.store.delete(key);
+    }
+    clear() {
+        this.store.clear();
+    }
+}
+export const CACHE_TTL = {
+    MARKETS: 60_000,
+    TICKER: 5_000,
+    ORDERBOOK: 3_000,
+};
+export const cache = new MemoryCache();
+//# sourceMappingURL=cache.js.map

package/dist/client.d.ts

@@ -5,14 +5,15 @@ export declare class BudaApiError extends Error {
 }
 export declare class BudaClient {
     private readonly baseUrl;
-    constructor(baseUrl?: string);
-    /**
-     * Perform an authenticated GET request.
-     *
-     * Private endpoints (balances, orders, etc.) require HMAC-SHA2 signing.
-     * To add auth later, extend this method with the `apiKey` + `apiSecret`
-     * constructor params and sign the nonce/path headers here before fetching.
-     */
+    private readonly apiKey;
+    private readonly apiSecret;
+    constructor(baseUrl?: string, apiKey?: string, apiSecret?: string);
+    hasAuth(): boolean;
+    private nonce;
+    private sign;
+    private authHeaders;
     get<T>(path: string, params?: Record<string, string | number>): Promise<T>;
+    post<T>(path: string, payload: unknown): Promise<T>;
+    put<T>(path: string, payload: unknown): Promise<T>;
 }
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA,qBAAa,YAAa,SAAQ,KAAK;aAEnB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;gBADZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM;CAKlB;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,GAAE,MAAiB;IAItC;;;;;;OAMG;IACG,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CA6BjF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,qBAAa,YAAa,SAAQ,KAAK;aAEnB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;gBADZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM;CAKlB;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;gBAG7C,OAAO,GAAE,MAAiB,EAC1B,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM;IAOpB,OAAO,IAAI,OAAO;IAIlB,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,WAAW;IAWb,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAgC1E,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IA+BnD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;CA8BzD"}

package/dist/client.js

@@ -1,3 +1,4 @@
+import { createHmac } from "crypto";
 const BASE_URL = "https://www.buda.com/api/v2";
 export class BudaApiError extends Error {
     status;
@@ -11,16 +12,39 @@ export class BudaApiError extends Error {
 }
 export class BudaClient {
     baseUrl;
-    constructor(baseUrl = BASE_URL) {
+    apiKey;
+    apiSecret;
+    constructor(baseUrl = BASE_URL, apiKey, apiSecret) {
         this.baseUrl = baseUrl;
+        this.apiKey = apiKey;
+        this.apiSecret = apiSecret;
+    }
+    hasAuth() {
+        return Boolean(this.apiKey && this.apiSecret);
+    }
+    nonce() {
+        return String(Math.floor(Date.now() * 1000));
+    }
+    sign(method, pathWithQuery, body, nonce) {
+        const encodedBody = body ? Buffer.from(body).toString("base64") : "";
+        const parts = [method, pathWithQuery];
+        if (encodedBody)
+            parts.push(encodedBody);
+        parts.push(nonce);
+        const msg = parts.join(" ");
+        return createHmac("sha384", this.apiSecret).update(msg).digest("hex");
+    }
+    authHeaders(method, path, body) {
+        if (!this.hasAuth())
+            return {};
+        const nonce = this.nonce();
+        const signature = this.sign(method, path, body ?? "", nonce);
+        return {
+            "X-SBTC-APIKEY": this.apiKey,
+            "X-SBTC-NONCE": nonce,
+            "X-SBTC-SIGNATURE": signature,
+        };
     }
-    /**
-     * Perform an authenticated GET request.
-     *
-     * Private endpoints (balances, orders, etc.) require HMAC-SHA2 signing.
-     * To add auth later, extend this method with the `apiKey` + `apiSecret`
-     * constructor params and sign the nonce/path headers here before fetching.
-     */
     async get(path, params) {
         const url = new URL(`${this.baseUrl}${path}.json`);
         if (params) {
@@ -28,11 +52,70 @@ export class BudaClient {
                 url.searchParams.set(key, String(value));
             }
         }
+        const urlPath = url.pathname + url.search;
+        const headers = {
+            Accept: "application/json",
+            "User-Agent": "buda-mcp/1.1.0",
+            ...this.authHeaders("GET", urlPath),
+        };
+        const response = await fetch(url.toString(), { headers });
+        if (!response.ok) {
+            let detail = response.statusText;
+            try {
+                const body = (await response.json());
+                if (body.message)
+                    detail = body.message;
+            }
+            catch {
+                // ignore parse error, use statusText
+            }
+            throw new BudaApiError(response.status, path, `Buda API ${response.status}: ${detail}`);
+        }
+        return response.json();
+    }
+    async post(path, payload) {
+        const url = new URL(`${this.baseUrl}${path}.json`);
+        const bodyStr = JSON.stringify(payload);
+        const urlPath = url.pathname + url.search;
+        const headers = {
+            Accept: "application/json",
+            "Content-Type": "application/json",
+            "User-Agent": "buda-mcp/1.1.0",
+            ...this.authHeaders("POST", urlPath, bodyStr),
+        };
+        const response = await fetch(url.toString(), {
+            method: "POST",
+            headers,
+            body: bodyStr,
+        });
+        if (!response.ok) {
+            let detail = response.statusText;
+            try {
+                const body = (await response.json());
+                if (body.message)
+                    detail = body.message;
+            }
+            catch {
+                // ignore parse error, use statusText
+            }
+            throw new BudaApiError(response.status, path, `Buda API ${response.status}: ${detail}`);
+        }
+        return response.json();
+    }
+    async put(path, payload) {
+        const url = new URL(`${this.baseUrl}${path}.json`);
+        const bodyStr = JSON.stringify(payload);
+        const urlPath = url.pathname + url.search;
+        const headers = {
+            Accept: "application/json",
+            "Content-Type": "application/json",
+            "User-Agent": "buda-mcp/1.1.0",
+            ...this.authHeaders("PUT", urlPath, bodyStr),
+        };
         const response = await fetch(url.toString(), {
-            headers: {
-                Accept: "application/json",
-                "User-Agent": "buda-mcp/1.0.0",
-            },
+            method: "PUT",
+            headers,
+            body: bodyStr,
         });
         if (!response.ok) {
             let detail = response.statusText;

package/dist/http.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":""}