@hootlens/mcp 1.0.1 → 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/CHANGELOG.md +25 -1
  2. package/README.md +45 -224
  3. package/dist/cli.mjs +1259 -257
  4. package/package.json +8 -15
package/CHANGELOG.md CHANGED
@@ -2,6 +2,30 @@
2
2
 
3
3
  All notable changes to `@hootlens/mcp` are recorded here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow [Semantic Versioning](https://semver.org/).
4
4
 
5
+ ## [1.1.0] - Prepared 2026-10-12
6
+
7
+ Publication is pending. This entry describes the reviewed source, not a published npm artifact.
8
+
9
+ ### Added
10
+
11
+ - Authenticated `create_site` uses an explicitly approved OAuth `sites:create` permission, available account site slots, and a required retry key. It starts with balanced or strict privacy and required consent. Account owners can authorize their first site even when their account has no sites yet. Personal access tokens and project-pinned or demo connections cannot create sites.
12
+ - `sites` toolset and explicit `login --scopes read,replay,sites:create` opt-in. A creation response returns installation guidance and distinguishes a created site from verified capture. Identical retries recover the site for 24 hours; later recovery must check existing sites first.
13
+
14
+ - MCP Apps: in a host that renders them (such as Claude), `get_session_narrative` shows an interactive replay (play, pause, speed, snag and error markers, the steps of the visit that jump to their moment), `get_heatmap` shows click density over the page with the most clicked elements and scroll reach, and `review_findings` shows the pages with the most snags as cards. They are served as `ui://hootlens/replay`, `ui://hootlens/heatmap` and `ui://hootlens/findings`. Other hosts get the same text and data as before. The replay views load their events through `load_replay` (replay scope), a tool marked for views only, so the model's tool results do not grow.
15
+ - `list_errors` and `get_error` (read scope): JavaScript errors grouped by fingerprint, with where each was thrown (the original file and line when the release's source maps were uploaded), the elements whose click it followed, the releases, page groups and device classes it appeared in, and example recordings with the replay scope. `get_session_narrative` says "followed by TypeError: ..." for a snag an error followed, and `review_findings` lists `followedBy` on those elements.
16
+
17
+ ### Changed
18
+
19
+ - Tool and parameter descriptions now state only what each tool does, takes and returns, as the Claude Connectors Directory requires. Guidance on workflow, citing ids, saying "rose" or "fell" and treating recorded content as untrusted moved into the server `instructions`. Tool names, parameters, annotations and response shapes are unchanged.
20
+ - The tools offered follow the scopes the person behind the connection still holds on their sites (`GET /v1/access`), so a tool leaves the list within seconds of its permission being taken away. `get_session_narrative` keeps needing only the read scope, and is offered when the person behind the connection may watch replays on a site it reaches; for a person who may not, the API answers 403 `replay_required`.
21
+ - `list_projects` and `whoami` can report a site role of `custom`: a member's access on a site can now be an individual set of permissions rather than Viewer or Editor.
22
+
23
+ ## [1.0.2] - 2026-10-10
24
+
25
+ ### Changed
26
+
27
+ - The npm page no longer links to the private GitHub repository, which returned a 404. `repository` and `bugs` point at the public [Parallel-Platforms/hootlens-mcp](https://github.com/Parallel-Platforms/hootlens-mcp) repository and support@hootlens.com, and `homepage` at the docs on hootlens.com. Released from 1.0.1 with only these package links changed; the changes listed under Unreleased are not in it.
28
+
5
29
  ## [1.0.1] - 2026-10-07
6
30
 
7
31
  ### Changed
@@ -22,7 +46,7 @@ First release on npm. The same server was available before as a single-file down
22
46
  - Prompts for common jobs and resources for the Hoot Lens documentation.
23
47
  - Structured output for tool results, alongside the text content.
24
48
  - `hootlens-mcp login`, `logout` and `whoami`: sign in with your browser (OAuth with PKCE) instead of creating an access key. The sign-in is stored in the macOS Keychain, the Linux Secret Service, or a private file, and renews itself.
25
- - Packaging as an npm package with a `hootlens-mcp` command, no runtime dependencies, and npm provenance.
49
+ - Packaging as an npm package with a `hootlens-mcp` command, and no runtime dependencies. Historical packages did not carry npm provenance.
26
50
 
27
51
  ### Changed
28
52
 
package/README.md CHANGED
@@ -1,269 +1,90 @@
1
- # @hootlens/mcp
1
+ # Hoot Lens
2
2
 
3
- The Hoot Lens MCP server. It lets an AI assistant (Claude, Cursor, VS Code, Codex and other MCP clients) read what Hoot Lens recorded on your websites: visits, replays, heatmaps, funnels, traffic, findings and changes. The assistant sees only what your own Hoot Lens account can see, and only the sites (projects) and scopes you allow.
3
+ Give your coding agent evidence from website visits: recordings, click maps, funnels and recurring snags. Trace a finding to the page, release, device and recorded moment before proposing a fix.
4
4
 
5
- You can run it two ways:
5
+ This repository prepares buildable source for `@hootlens/mcp` 1.1.0, imported from the reviewed Hoot Lens source commit recorded in [SOURCE.json](docs/SOURCE.json). This checkout does not establish npm publication. The last published version verified during preparation is [1.0.2](https://www.npmjs.com/package/@hootlens/mcp/v/1.0.2). Issues and questions are welcome here.
6
6
 
7
- - **Locally over stdio** with `npx -y @hootlens/mcp` (this package). Works in every MCP client.
8
- - **Hosted** at `https://mcp.hootlens.com/mcp`, for clients that support remote MCP servers. Nothing to install; you sign in with Hoot Lens in your browser.
7
+ [Public release preparation](docs/RELEASING.md) proposes a reviewed migration to public CI with npm provenance for a future version. It has not published a new version or changed npm publisher settings. [Security scan evidence](docs/SECURITY-EVIDENCE.md) separates published-source inspection from synthetic runtime enumeration.
9
8
 
10
- Both offer the same tools.
9
+ ## Try a first investigation without an account
11
10
 
12
- ## Requirements
11
+ Connect a remote MCP client to:
13
12
 
14
- - Node.js 20 or newer (local server only).
15
- - A Hoot Lens account with at least one project.
16
-
17
- ## Sign in
18
-
19
- Pick one.
20
-
21
- **Browser sign-in (recommended).** Run this once:
22
-
23
- ```sh
24
- npx -y @hootlens/mcp login
13
+ ```text
14
+ https://mcp.hootlens.com/demo
25
15
  ```
26
16
 
27
- Your browser opens Hoot Lens. Choose the projects and permissions to share, and approve. The sign-in is saved in the macOS Keychain, the Linux Secret Service (libsecret), or, where those are not available, a private file (`~/.config/hootlens-mcp/credentials.json`, or `%APPDATA%\hootlens-mcp\credentials.json` on Windows, readable only by you). Tokens are never printed.
17
+ For Claude Code:
28
18
 
29
19
  ```sh
30
- npx -y @hootlens/mcp whoami # who is signed in, scopes, projects, token expiry
31
- npx -y @hootlens/mcp logout # delete the saved sign-in and end it at the server
20
+ claude mcp add --transport http hootlens-demo https://mcp.hootlens.com/demo
32
21
  ```
33
22
 
34
- `login --scopes read,replay` asks for fewer permissions (default: `read replay annotate`). On a remote machine without a browser, `login` prints the link; open it on a machine that can reach the CLI on `127.0.0.1` (for example through an SSH port forward of the port it names).
35
-
36
- How long it lasts: access tokens last 1 hour and are renewed automatically. The renewal token lasts 30 days from its last use, so if you do not use the server for 30 days you must run `login` again. Disconnecting the app under Connected apps in the Hoot Lens dashboard ends the sign-in immediately. When a sign-in has ended, the server tells you to run `npx -y @hootlens/mcp login`.
37
-
38
- **Access key.** In the dashboard, open Settings, AI assistant, and create a key for one project. Set it as `HOOTLENS_PAT` in the client's environment. When `HOOTLENS_PAT` is set it is used instead of the saved sign-in. A key belongs to one project and you can revoke it in the dashboard at any time. Prefer the browser sign-in on a personal machine and keys for CI or shared setups.
23
+ Ask your agent:
39
24
 
40
- ## Install in your client
25
+ > Find one recurring snag in the fictional Fieldnote site. Say the data is synthetic. Cite its page, release, revision, device, variant and one recording with a timed source moment. Separate what was observed from what still needs reproduction. Do not change anything.
41
26
 
42
- The commands below use the local server. Replace `YOUR_PROJECT_ID` if you want to pin one project (optional; see Project pinning). If you did not run `login`, add your `HOOTLENS_PAT` as shown in each example.
27
+ The demo offers read and replay tools only. It requires no account or token. Start with `whoami` to verify the synthetic project, then `review_findings`. Follow an example through `get_heatmap`, `get_recording` and `get_session_narrative`. A historical cohort is evidence to investigate, not proof of a current defect, a visitor's opinion or an improvement.
43
28
 
44
- ### Claude Code
29
+ ## Connect your own site
45
30
 
46
- Local:
31
+ The local package needs Node.js 20 or newer. Sign in with the projects and read permissions you want to share:
47
32
 
48
33
  ```sh
49
- claude mcp add --transport stdio hootlens -- npx -y @hootlens/mcp
50
- # with an access key instead of the saved sign-in, and a pinned project:
51
- claude mcp add --transport stdio --env HOOTLENS_PAT=hl_pat_... hootlens -- npx -y @hootlens/mcp --project YOUR_PROJECT_ID
52
- ```
53
-
54
- Hosted (then run `/mcp` inside Claude Code to sign in):
55
-
56
- ```sh
57
- claude mcp add --transport http hootlens "https://mcp.hootlens.com/mcp"
58
- ```
59
-
60
- Add `--scope project` to share the entry with your team through `.mcp.json`, or `--scope user` for all your projects.
61
-
62
- ### Cursor
63
-
64
- Add to `.cursor/mcp.json` in a project, or `~/.cursor/mcp.json` for all projects.
65
-
66
- Local:
67
-
68
- ```json
69
- {
70
- "mcpServers": {
71
- "hootlens": {
72
- "type": "stdio",
73
- "command": "npx",
74
- "args": ["-y", "@hootlens/mcp"],
75
- "env": { "HOOTLENS_PAT": "${env:HOOTLENS_PAT}" }
76
- }
77
- }
78
- }
34
+ npx -y @hootlens/mcp@1.0.2 login --scopes read,replay
35
+ npx -y @hootlens/mcp@1.0.2 whoami
79
36
  ```
80
37
 
81
- Leave out `env` to use the saved sign-in from `login`.
38
+ Add a stdio server to your client with command `npx` and arguments `-y @hootlens/mcp@1.0.2 --toolsets read,replay` for an investigation connection. Read scopes alone do not remove default install and feedback tools, which can submit setup requests or issues. Selecting the toolsets narrows what your agent is offered. It uses the saved sign-in. `HOOTLENS_PAT`, when set, overrides it. You can pin a project with `--project YOUR_PROJECT_ID`; the API still checks access on every request.
82
39
 
83
- Hosted:
40
+ For remote clients, connect to `https://mcp.hootlens.com/mcp` and approve Hoot Lens sign-in in the browser. See the [current client guides and permission details](https://hootlens.com/docs/MCP.md), or the [Cline installation guide](llms-install.md).
84
41
 
85
- ```json
86
- {
87
- "mcpServers": {
88
- "hootlens": { "url": "https://mcp.hootlens.com/mcp" }
89
- }
90
- }
91
- ```
42
+ Package 1.0.2 and the hosted server have different release schedules. This local release provides analytics reads, replay data, installation tools, feedback and optional annotation. Hosted MCP Apps and newer configuration tools are not in this local release. The local `whoami` above is a CLI command; it is not an MCP tool in 1.0.2. Inspect `tools/list` on the connection you actually use.
92
43
 
93
- ### VS Code
94
-
95
- Add to `.vscode/mcp.json` (the top-level key is `servers`, not `mcpServers`).
96
-
97
- Local:
98
-
99
- ```json
100
- {
101
- "inputs": [
102
- { "type": "promptString", "id": "hootlens-pat", "description": "Hoot Lens access key", "password": true }
103
- ],
104
- "servers": {
105
- "hootlens": {
106
- "type": "stdio",
107
- "command": "npx",
108
- "args": ["-y", "@hootlens/mcp"],
109
- "env": { "HOOTLENS_PAT": "${input:hootlens-pat}" }
110
- }
111
- }
112
- }
113
- ```
44
+ End the local sign-in with `npx -y @hootlens/mcp@1.0.2 logout`. Revoke a connected app or access key in the Hoot Lens dashboard when access should end.
114
45
 
115
- Leave out `inputs` and `env` to use the saved sign-in from `login`.
46
+ ## Create a site through an authenticated agent
116
47
 
117
- Hosted:
48
+ The prepared 1.1.0 source adds `create_site`. The verified account owner must explicitly approve the optional OAuth `sites:create` permission for all sites. It is never included in default login scopes. Personal access tokens, anonymous demo connections and project-pinned connections cannot create sites. An owner with no sites can authorize an agent to create their first site.
118
49
 
119
- ```json
120
- {
121
- "servers": {
122
- "hootlens": { "type": "http", "url": "https://mcp.hootlens.com/mcp" }
123
- }
124
- }
125
- ```
50
+ From a built checkout, opt in with:
126
51
 
127
- ### Claude Desktop
128
-
129
- Local. Open Settings, Developer, Edit Config, and add to `claude_desktop_config.json` (macOS: `~/Library/Application Support/Claude/claude_desktop_config.json`, Windows: `%APPDATA%\Claude\claude_desktop_config.json`), then quit and reopen Claude Desktop:
130
-
131
- ```json
132
- {
133
- "mcpServers": {
134
- "hootlens": {
135
- "command": "npx",
136
- "args": ["-y", "@hootlens/mcp"]
137
- }
138
- }
139
- }
52
+ ```sh
53
+ node dist/cli.mjs login --scopes read,replay,sites:create
140
54
  ```
141
55
 
142
- This uses the saved sign-in from `login`. To use an access key, add `"env": { "HOOTLENS_PAT": "hl_pat_..." }`.
56
+ The tool takes a site name, exact HTTPS origins and a stable `idempotencyKey`. The API enforces available site slots atomically. New agent-created sites use balanced or strict privacy and require visitor consent. Retrying the same site arguments and key recovers the original site for 24 hours. After that, inspect existing sites before creating again.
143
57
 
144
- Hosted. Remote servers are not added in the JSON file. In Claude Desktop add a custom connector (Customize, Connectors, Add custom connector) with the URL `https://mcp.hootlens.com/mcp`, then sign in with Hoot Lens when asked. Custom connectors depend on your Claude plan.
58
+ The response distinguishes site creation from tag installation and received recording data. Install the platform-specific code, connect the visitor consent platform or an explicit consent control, then use `check_install`. If fetching installation code temporarily fails, the response keeps the created project ID so the agent can retrieve its tag with `get_install_snippet` rather than create another site.
145
59
 
146
- ### Codex
60
+ This source also includes MCP Apps, JavaScript error tools and the optional `configure` toolset. Settings changes remain a preview and apply flow that can only tighten privacy. Existing OAuth connections require fresh approval to gain a new optional permission. Inspect `tools/list` on the actual connection; npm 1.0.2 does not include these newer tools.
147
61
 
148
- Local:
62
+ ## Build and verify the source
149
63
 
150
64
  ```sh
151
- codex mcp add hootlens -- npx -y @hootlens/mcp
152
- # with an access key:
153
- codex mcp add hootlens --env HOOTLENS_PAT=hl_pat_... -- npx -y @hootlens/mcp
154
- ```
155
-
156
- The same in `~/.codex/config.toml`:
157
-
158
- ```toml
159
- [mcp_servers.hootlens]
160
- command = "npx"
161
- args = ["-y", "@hootlens/mcp"]
162
- # env_vars = ["HOOTLENS_PAT"] # forward the key from your shell instead of saving it here
65
+ npm ci
66
+ npm run typecheck
67
+ npm run build
68
+ npm test
69
+ node dist/cli.mjs --version
163
70
  ```
164
71
 
165
- Hosted:
166
-
167
- ```toml
168
- [mcp_servers.hootlens]
169
- url = "https://mcp.hootlens.com/mcp"
170
- ```
171
-
172
- then run `codex mcp login hootlens`.
173
-
174
- ### Other clients
175
-
176
- Any client that can start a stdio server: command `npx`, arguments `-y @hootlens/mcp`, optional environment `HOOTLENS_PAT`. Any client that supports remote servers over Streamable HTTP with OAuth: the URL `https://mcp.hootlens.com/mcp`. The hosted endpoint advertises its sign-in through standard OAuth discovery (RFC 9728 and RFC 8414) and accepts Client ID Metadata Documents and dynamic client registration.
177
-
178
- ## Hosted URL options
179
-
180
- Two optional query parameters narrow what a hosted connection offers. They never widen what you approved.
181
-
182
- | Parameter | Example | Effect |
183
- | --- | --- | --- |
184
- | `project` | `https://mcp.hootlens.com/mcp?project=YOUR_PROJECT_ID` | Tools default to this project. |
185
- | `toolsets` | `https://mcp.hootlens.com/mcp?toolsets=read,replay` | Offer only these toolsets. |
186
-
187
- Combine them with `&`: `https://mcp.hootlens.com/mcp?project=YOUR_PROJECT_ID&toolsets=read`. Put the URL in quotes in a shell.
188
-
189
- ## Toolsets
190
-
191
- Toolsets group tools so an assistant is offered only what it needs. Set them with `--toolsets read,replay` or `HOOTLENS_TOOLSETS=read,replay`.
192
-
193
- | Toolset | What it offers |
194
- | --- | --- |
195
- | `read` | Sites (projects), visits, recording lists, narratives, heatmaps, findings, traffic, goals, funnels, changes, weekly summary. |
196
- | `replay` | Raw replay events and clicks of one recording. Needs the `replay` scope. |
197
- | `annotate` | Add notes to recordings and log changes. Needs the `annotate` scope. |
198
- | `install` | Install tags per platform and the install checker. |
199
- | `feedback` | Report bugs and ideas to the Hoot Lens team and follow your reports. |
200
- | `issues` | Hoot Lens staff triage tools. Needs the `triage` scope. |
201
- | `default` | `read`, `replay`, `install`, `feedback`, plus `annotate` when your credential holds that scope. |
202
- | `all` | Every toolset your credential can use. |
203
-
204
- A toolset your credential cannot use is not offered, and the server says so on stderr.
205
-
206
- ## Project pinning
207
-
208
- By default tools take a `projectId`. To work in one project, pin it. The first of these that is set wins:
209
-
210
- 1. `--project YOUR_PROJECT_ID`
211
- 2. `HOOTLENS_PROJECT=YOUR_PROJECT_ID`
212
- 3. A `.hootlens.json` file in the working directory or any parent: `{"projectId": "YOUR_PROJECT_ID"}`. Project IDs are public, so the file is safe to commit.
213
-
214
- Pinning sets a default. The API still checks every call against what your credential may reach.
215
-
216
- ## Configuration
217
-
218
- | Variable | Purpose |
219
- | --- | --- |
220
- | `HOOTLENS_PAT` | Access key. Overrides the saved sign-in. |
221
- | `HOOTLENS_API_URL` | API origin (default: the Hoot Lens production API). Used by `login`, `whoami` and the server. |
222
- | `HOOTLENS_PROJECT` | Pinned project. |
223
- | `HOOTLENS_TOOLSETS` | Comma separated toolsets. |
224
-
225
- The server writes messages to stderr only. Standard output carries the MCP protocol.
226
-
227
- ## Troubleshooting
228
-
229
- - **"No credential"**: run `npx -y @hootlens/mcp login`, or set `HOOTLENS_PAT`.
230
- - **"The sign-in has ended"**: it was unused for 30 days or was disconnected in the dashboard. Run `login` again.
231
- - **A tool says a scope is missing**: the credential lacks that permission. Run `login --scopes read,replay,annotate`, or add the scope to your access key in the dashboard.
232
- - **A project is not found**: you did not share it when signing in, or you are not a member. Run `whoami` to list what the credential can reach.
233
- - **`npx` is not found by Claude Desktop or an editor**: those apps start with a short `PATH`. Use the absolute path to `npx` (`which npx`) as the command, or install Node from nodejs.org.
234
- - **No keychain on Linux (headless server, container)**: the sign-in falls back to the private file. Install `libsecret-tools` and run a Secret Service to use the keychain.
235
- - **`login` says all ports are in use**: login listens on 127.0.0.1 ports 28731 to 28735. Close what is using them and run `login` again.
236
- - **Behind a proxy or offline**: the server needs HTTPS access to the API (or `HOOTLENS_API_URL`).
237
- - **Show the version**: `npx -y @hootlens/mcp --version`.
238
-
239
- ## Versions
240
-
241
- The package follows Semantic Versioning. Tool names and arguments do not change within a major version; new tools and optional arguments can appear in a minor version. See `CHANGELOG.md`. `npx -y @hootlens/mcp` always runs the latest 1.x; pin with `npx -y @hootlens/mcp@1.0.1` if you need a fixed version. The server supports MCP protocol versions 2026-07-28 and 2025.
242
-
243
- ## Privacy
72
+ The shared source needed by the server is included under `packages/core`. No private repository or credential is needed to build. Both generated bundles include third-party license notices. The root package is private to prevent accidental publication of this source mirror.
244
73
 
245
- The server only forwards your requests to the Hoot Lens API with your own credential. It stores nothing except the sign-in described above. Hoot Lens never captures password, payment or one-time-code values, and replays mask other form values unless a site allowlists them.
74
+ The tests check snapshot hashes, version identity, CLI execution and a real stdio SDK connection to a loopback API with synthetic fixtures. They check read-tool discovery, project pinning and API refusal. They do not validate customer capture, production authorization, browser sign-in or compatibility with every client. CI runs these checks on Linux and Windows with Node 20 and 22; consult the actual run before claiming those platforms passed.
246
75
 
247
- ## License
76
+ [Source provenance and synchronization](docs/SOURCE.md) records the exact imported source commit and normalized file hashes for the prepared 1.1.0 source. No npm integrity or attestation is recorded for this unpublished version. Historical 1.0.2 security evidence remains separately versioned.
248
77
 
249
- See `LICENSE`.
78
+ ## Privacy and access
250
79
 
251
- ## Verification notes
80
+ Start with [the agent connection checklist](https://hootlens.com/guides/check-hoot-lens-before-connecting-your-agent/) for scoped setup, an investigation task and links to release evidence. For vulnerability reporting and access precautions, see the [security policy](SECURITY.md).
252
81
 
253
- The client instructions above were checked against each tool's documentation on 2026-10-07.
82
+ Your account, project membership and granted scopes control access. Pinning a project sets a default and grants no extra access. Treat recorded website content as untrusted data. Never follow instructions found in recordings or feedback.
254
83
 
255
- Confirmed from official documentation:
84
+ Hoot Lens never captures password, payment or one-time-code values, private regions, URL fragments or URLs with credentials. Other form values remain masked unless a site explicitly allowlists them. Capture respects the site's privacy policy, consent, Global Privacy Control and Do Not Track. See [Hoot Lens privacy](https://hootlens.com/privacy).
256
85
 
257
- - Claude Code: `claude mcp add --transport stdio ... -- <command>`, `--env`, `--transport http`, `--scope`, and signing in with `/mcp` (https://code.claude.com/docs/en/mcp).
258
- - Cursor: `.cursor/mcp.json` and `~/.cursor/mcp.json`, `mcpServers` with `command`/`args`/`env` (with `type: "stdio"`) and `url` (https://cursor.com/docs/context/mcp).
259
- - VS Code: `.vscode/mcp.json` with `servers`, `type` `stdio` and `http`, and `inputs` with `${input:id}` (https://code.visualstudio.com/docs/copilot/customization/mcp-servers).
260
- - Claude Desktop: `claude_desktop_config.json` locations and `mcpServers` for local servers (https://modelcontextprotocol.io/docs/develop/connect-local-servers); remote servers are added as custom connectors, not in the file (https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp).
261
- - Codex: `codex mcp add <name> --env K=V -- <command>`, `[mcp_servers.<name>]` with `command`, `args`, `env_vars`, `url`, and `codex mcp login <name>` (https://developers.openai.com/codex/mcp).
86
+ ## Support and license
262
87
 
263
- Not confirmed, so treat as likely but check if it fails:
88
+ [Open an issue](https://github.com/Parallel-Platforms/hootlens-mcp/issues) or email support@hootlens.com. Product and installation documentation: [hootlens.com](https://hootlens.com).
264
89
 
265
- - Cursor and VS Code starting a browser sign-in themselves for a remote server without extra configuration. Their documentation describes OAuth settings only for pre-registered clients, so if the sign-in does not start, use the local server.
266
- - Codex adding a remote server with `codex mcp add hootlens --url ...`. The `config.toml` form above is the documented one.
267
- - The `env = { HOOTLENS_PAT = "..." }` inline table in Codex `config.toml`; the documented key is `env_vars`.
268
- - Claude Desktop extension (`.mcpb`) packaging. This package does not provide one.
269
- - Plans that include Claude Desktop custom connectors.
90
+ This source is available under the [MIT license](LICENSE).