@intangle/mcp-server 2.5.1 → 2.5.3

package/README.md

@@ -20,6 +20,12 @@ Claude code by running the command below (recommend "-s" user for global across
 claude mcp add intangle -s user --env MCP_API_KEY=<your-api-key-here> --env NEXT_APP_URL=https://intangle.app -- npx -y @intangle/mcp-server
 ```
 
+If your deployment is behind Vercel Deployment Protection (for example staging), add:
+
+```bash
+--env VERCEL_BYPASS_TOKEN=<your-vercel-bypass-token>
+```
+
 Standard MCP (Claude desktop, Cursor): by adding to your `claude_desktop_config.json` or `mcp.json`:
 
 ```json
@@ -30,7 +36,8 @@ Standard MCP (Claude desktop, Cursor): by adding to your `claude_desktop_config.
       "args": ["@intangle/mcp-server"],
       "env": {
         "MCP_API_KEY": "your-api-key-here",
-        "NEXT_APP_URL": "https://intangle.app"
+        "NEXT_APP_URL": "https://intangle.app",
+        "VERCEL_BYPASS_TOKEN": "optional-vercel-bypass-token-for-protected-deployments"
       }
     }
   }
@@ -91,4 +98,4 @@ If Claude can't access your context:
 
 ## License
 
-MIT
+MIT

package/dist/index.js

@@ -32,8 +32,10 @@ try {
     // Base URL for API calls to Next.js app
     const API_BASE_URL = process.env.NEXT_APP_URL || "https://intangle.app";
     const MCP_API_KEY = process.env.MCP_API_KEY;
+    const VERCEL_BYPASS_TOKEN = process.env.VERCEL_BYPASS_TOKEN || process.env.VERCEL_PROTECTION_BYPASS;
     log(`CWD: ${process.cwd()}`);
     log(`Has API Key: ${!!MCP_API_KEY}`);
+    log(`Has Vercel Bypass Token: ${!!VERCEL_BYPASS_TOKEN}`);
     log(`Node Version: ${process.version}`);
     if (!MCP_API_KEY) {
         log("Error: MCP_API_KEY environment variable is required");
@@ -92,6 +94,13 @@ try {
     }
     // Default timeout for API calls (90 seconds)
     const API_TIMEOUT_MS = 90_000;
+    function buildApiUrl(endpoint) {
+        const url = new URL(`/api/mcp/${endpoint}`, API_BASE_URL);
+        if (VERCEL_BYPASS_TOKEN) {
+            url.searchParams.set("x-vercel-protection-bypass", VERCEL_BYPASS_TOKEN);
+        }
+        return url.toString();
+    }
     async function makeApiCall(endpoint, data, timeoutMs) {
         // Ensure we have client info before making requests
         ensureClientInfo();
@@ -110,21 +119,36 @@ try {
         if (mcpClientVersion) {
             headers["X-MCP-Client-Version"] = mcpClientVersion;
         }
+        if (VERCEL_BYPASS_TOKEN) {
+            headers["x-vercel-protection-bypass"] = VERCEL_BYPASS_TOKEN;
+        }
         // Apply timeout to prevent hanging requests
         const controller = new AbortController();
         const effectiveTimeout = timeoutMs || API_TIMEOUT_MS;
         const timeoutId = setTimeout(() => controller.abort(), effectiveTimeout);
         try {
-            const response = await fetch(`${API_BASE_URL}/api/mcp/${endpoint}`, {
+            const response = await fetch(buildApiUrl(endpoint), {
                 method: "POST",
                 headers,
                 body: JSON.stringify(data),
                 signal: controller.signal,
             });
+            const contentType = response.headers.get("content-type") || "";
+            const responseBody = await response.text();
             if (!response.ok) {
+                if (response.status === 401 &&
+                    contentType.includes("text/html") &&
+                    responseBody.includes("Vercel Authentication")) {
+                    throw new Error(VERCEL_BYPASS_TOKEN
+                        ? "API call blocked by Vercel deployment protection despite bypass token. Check token validity and deployment protection settings."
+                        : "API call blocked by Vercel deployment protection. Set VERCEL_BYPASS_TOKEN in MCP server env.");
+                }
                 throw new Error(`API call failed: ${response.status} ${response.statusText}`);
             }
-            return response.json();
+            if (responseBody.trim() === "") {
+                return {};
+            }
+            return JSON.parse(responseBody);
         }
         catch (error) {
             if (error instanceof Error && error.name === "AbortError") {
@@ -139,8 +163,12 @@ try {
     const server = new Server({
         name: "intangle-context",
         version: "1.0.0",
-        vendor: "Intangle",
-        icon: "https://intangle.tools/icon.png",
+        icons: [
+            {
+                src: "https://intangle.tools/icon.png",
+                mimeType: "image/png",
+            },
+        ],
     }, {
         capabilities: {
             tools: {},
@@ -200,7 +228,7 @@ try {
         if (!args.space_id) {
             throw new Error("space_id is required. Use view_spaces to see available options.");
         }
-        if (!args.add && !args.update && !args.delete && !args.link && !args.unlink) {
+        if (!args.add && !args.update && !args.delete) {
             throw new Error("At least one operation must be provided");
         }
         // Ensure all add items have a type field to prevent classification timeout
@@ -220,8 +248,6 @@ try {
             add,
             update: args.update,
             delete: args.delete,
-            link: args.link,
-            unlink: args.unlink,
         });
     }
     async function handleMessage(args) {
@@ -252,12 +278,13 @@ try {
                 case "view_spaces":
                     result = await handleViewSpaces();
                     break;
-                case "view_projects":
-                    result = await handleViewProjects(args);
-                    break;
-                case "view_project":
-                    result = await handleViewProject(args);
-                    break;
+                // PROJECTS DISABLED - Projects have been disabled. May be re-enabled later.
+                // case "view_projects":
+                //   result = await handleViewProjects(args)
+                //   break
+                // case "view_project":
+                //   result = await handleViewProject(args)
+                //   break
                 case "create_space":
                     result = await handleCreateSpace(args);
                     break;
@@ -267,6 +294,7 @@ try {
                 case "start":
                     result = await handleStart(args);
                     break;
+                case "update_memory":
                 case "update_space":
                     result = await handleUpdateSpace(args);
                     break;

package/dist/tool-definitions.js

@@ -43,43 +43,50 @@ export const TOOLS = [
             }
         }
     },
-    {
-        name: "view_projects",
-        title: "View Projects",
-        description: "List all projects in a space. Projects are user-created canvases that organize context, tasks, documents, and skills. Use this to discover available projects before viewing their contents.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                space_id: {
-                    type: "string",
-                    description: "REQUIRED: Space to list projects from (use view_spaces to see available options)"
-                }
-            },
-            required: ["space_id"]
-        }
-    },
-    {
-        name: "view_project",
-        title: "View Project",
-        description: "View a specific project with all its items (context, tasks, documents, skills). Returns item metadata (IDs, titles, types, status) for each item in the project. Use fetch_items to get full content of specific items.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                project_id: {
-                    type: "string",
-                    description: "Project ID to view (e.g., 'proj_123...'). Get project IDs from view_projects."
-                },
-                space_id: {
-                    type: "string",
-                    description: "Optional: Space ID (required if using slug instead of project_id)"
-                },
-                slug: {
-                    type: "string",
-                    description: "Optional: Project slug (URL-friendly name). Requires space_id if used."
-                }
-            }
-        }
-    },
+    // PROJECTS DISABLED - Projects have been disabled. May be re-enabled later.
+    // {
+    //   name: "view_projects",
+    //   title: "View Projects",
+    //   description:
+    //     "List all projects in a space. Projects are user-created canvases that organize context, tasks, documents, and skills. Use this to discover available projects before viewing their contents.",
+    //   inputSchema: {
+    //     type: "object",
+    //     properties: {
+    //       space_id: {
+    //         type: "string",
+    //         description:
+    //           "REQUIRED: Space to list projects from (use view_spaces to see available options)"
+    //       }
+    //     },
+    //     required: ["space_id"]
+    //   }
+    // },
+    // {
+    //   name: "view_project",
+    //   title: "View Project",
+    //   description:
+    //     "View a specific project with all its items (context, tasks, documents, skills). Returns item metadata (IDs, titles, types, status) for each item in the project. Use fetch_items to get full content of specific items.",
+    //   inputSchema: {
+    //     type: "object",
+    //     properties: {
+    //       project_id: {
+    //         type: "string",
+    //         description:
+    //           "Project ID to view (e.g., 'proj_123...'). Get project IDs from view_projects."
+    //       },
+    //       space_id: {
+    //         type: "string",
+    //         description:
+    //           "Optional: Space ID (required if using slug instead of project_id)"
+    //       },
+    //       slug: {
+    //         type: "string",
+    //         description:
+    //           "Optional: Project slug (URL-friendly name). Requires space_id if used."
+    //       }
+    //     }
+    //   }
+    // },
     {
         name: "start",
         title: "Start Space Session",
@@ -148,8 +155,8 @@ export const TOOLS = [
         }
     },
     {
-        name: "update_space",
-        title: "Update Space",
+        name: "update_memory",
+        title: "Update Memory",
         description: "Add, update, or delete items in a space. Supports any combination of operations in a single call.\n\nTIPS FOR RICH MEMORY: The more context you provide, the smarter the system becomes:\n- Include WHY something matters, not just WHAT it is\n- Note user preferences, patterns, and approaches you observe\n- Describe repeatable workflows as skills (step-by-step procedures)\n- Link related items using parent_id or linkedItemIds\n- Use descriptive titles that capture the essence\n- Add context about decisions, reasoning, and outcomes\n\nThe system learns from patterns - sharing how the user works helps it anticipate their needs.",
         inputSchema: {
             type: "object",

package/index.ts

@@ -44,9 +44,12 @@ try {
   // Base URL for API calls to Next.js app
   const API_BASE_URL = process.env.NEXT_APP_URL || "https://intangle.app"
   const MCP_API_KEY = process.env.MCP_API_KEY
+  const VERCEL_BYPASS_TOKEN =
+    process.env.VERCEL_BYPASS_TOKEN || process.env.VERCEL_PROTECTION_BYPASS
 
   log(`CWD: ${process.cwd()}`)
   log(`Has API Key: ${!!MCP_API_KEY}`)
+  log(`Has Vercel Bypass Token: ${!!VERCEL_BYPASS_TOKEN}`)
   log(`Node Version: ${process.version}`)
 
   if (!MCP_API_KEY) {
@@ -121,6 +124,16 @@ try {
   // Default timeout for API calls (90 seconds)
   const API_TIMEOUT_MS = 90_000
 
+  function buildApiUrl(endpoint: string) {
+    const url = new URL(`/api/mcp/${endpoint}`, API_BASE_URL)
+
+    if (VERCEL_BYPASS_TOKEN) {
+      url.searchParams.set("x-vercel-protection-bypass", VERCEL_BYPASS_TOKEN)
+    }
+
+    return url.toString()
+  }
+
   async function makeApiCall(endpoint: string, data: any, timeoutMs?: number) {
     // Ensure we have client info before making requests
     ensureClientInfo()
@@ -141,6 +154,9 @@ try {
     if (mcpClientVersion) {
       headers["X-MCP-Client-Version"] = mcpClientVersion
     }
+    if (VERCEL_BYPASS_TOKEN) {
+      headers["x-vercel-protection-bypass"] = VERCEL_BYPASS_TOKEN
+    }
 
     // Apply timeout to prevent hanging requests
     const controller = new AbortController()
@@ -148,20 +164,37 @@ try {
     const timeoutId = setTimeout(() => controller.abort(), effectiveTimeout)
 
     try {
-      const response = await fetch(`${API_BASE_URL}/api/mcp/${endpoint}`, {
+      const response = await fetch(buildApiUrl(endpoint), {
         method: "POST",
         headers,
         body: JSON.stringify(data),
         signal: controller.signal as AbortSignal,
       })
 
+      const contentType = response.headers.get("content-type") || ""
+      const responseBody = await response.text()
+
       if (!response.ok) {
-        throw new Error(
-          `API call failed: ${response.status} ${response.statusText}`
-        )
+        if (
+          response.status === 401 &&
+          contentType.includes("text/html") &&
+          responseBody.includes("Vercel Authentication")
+        ) {
+          throw new Error(
+            VERCEL_BYPASS_TOKEN
+              ? "API call blocked by Vercel deployment protection despite bypass token. Check token validity and deployment protection settings."
+              : "API call blocked by Vercel deployment protection. Set VERCEL_BYPASS_TOKEN in MCP server env."
+          )
+        }
+
+        throw new Error(`API call failed: ${response.status} ${response.statusText}`)
       }
 
-      return response.json()
+      if (responseBody.trim() === "") {
+        return {}
+      }
+
+      return JSON.parse(responseBody)
     } catch (error: unknown) {
       if (error instanceof Error && error.name === "AbortError") {
         throw new Error(
@@ -178,8 +211,12 @@ try {
     {
       name: "intangle-context",
       version: "1.0.0",
-      vendor: "Intangle",
-      icon: "https://intangle.tools/icon.png",
+      icons: [
+        {
+          src: "https://intangle.tools/icon.png",
+          mimeType: "image/png",
+        },
+      ],
     },
     {
       capabilities: {
@@ -272,7 +309,7 @@ try {
       )
     }
 
-    if (!args.add && !args.update && !args.delete && !args.link && !args.unlink) {
+    if (!args.add && !args.update && !args.delete) {
       throw new Error(
         "At least one operation must be provided"
       )
@@ -296,8 +333,6 @@ try {
       add,
       update: args.update,
       delete: args.delete,
-      link: args.link,
-      unlink: args.unlink,
     })
   }
 
@@ -336,12 +371,13 @@ try {
         case "view_spaces":
           result = await handleViewSpaces()
           break
-        case "view_projects":
-          result = await handleViewProjects(args)
-          break
-        case "view_project":
-          result = await handleViewProject(args)
-          break
+        // PROJECTS DISABLED - Projects have been disabled. May be re-enabled later.
+        // case "view_projects":
+        //   result = await handleViewProjects(args)
+        //   break
+        // case "view_project":
+        //   result = await handleViewProject(args)
+        //   break
         case "create_space":
           result = await handleCreateSpace(args)
           break
@@ -351,6 +387,7 @@ try {
         case "start":
           result = await handleStart(args)
           break
+        case "update_memory":
         case "update_space":
           result = await handleUpdateSpace(args)
           break

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@intangle/mcp-server",
-	"version": "2.5.1",
+	"version": "2.5.3",
 	"description": "Model Context Protocol server for Intangle - AI context that persists across conversations",
 	"main": "dist/index.js",
 	"type": "module",

package/tool-definitions.ts

@@ -49,49 +49,50 @@ export const TOOLS = [
       }
     }
   },
-  {
-    name: "view_projects",
-    title: "View Projects",
-    description:
-      "List all projects in a space. Projects are user-created canvases that organize context, tasks, documents, and skills. Use this to discover available projects before viewing their contents.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        space_id: {
-          type: "string",
-          description:
-            "REQUIRED: Space to list projects from (use view_spaces to see available options)"
-        }
-      },
-      required: ["space_id"]
-    }
-  },
-  {
-    name: "view_project",
-    title: "View Project",
-    description:
-      "View a specific project with all its items (context, tasks, documents, skills). Returns item metadata (IDs, titles, types, status) for each item in the project. Use fetch_items to get full content of specific items.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        project_id: {
-          type: "string",
-          description:
-            "Project ID to view (e.g., 'proj_123...'). Get project IDs from view_projects."
-        },
-        space_id: {
-          type: "string",
-          description:
-            "Optional: Space ID (required if using slug instead of project_id)"
-        },
-        slug: {
-          type: "string",
-          description:
-            "Optional: Project slug (URL-friendly name). Requires space_id if used."
-        }
-      }
-    }
-  },
+  // PROJECTS DISABLED - Projects have been disabled. May be re-enabled later.
+  // {
+  //   name: "view_projects",
+  //   title: "View Projects",
+  //   description:
+  //     "List all projects in a space. Projects are user-created canvases that organize context, tasks, documents, and skills. Use this to discover available projects before viewing their contents.",
+  //   inputSchema: {
+  //     type: "object",
+  //     properties: {
+  //       space_id: {
+  //         type: "string",
+  //         description:
+  //           "REQUIRED: Space to list projects from (use view_spaces to see available options)"
+  //       }
+  //     },
+  //     required: ["space_id"]
+  //   }
+  // },
+  // {
+  //   name: "view_project",
+  //   title: "View Project",
+  //   description:
+  //     "View a specific project with all its items (context, tasks, documents, skills). Returns item metadata (IDs, titles, types, status) for each item in the project. Use fetch_items to get full content of specific items.",
+  //   inputSchema: {
+  //     type: "object",
+  //     properties: {
+  //       project_id: {
+  //         type: "string",
+  //         description:
+  //           "Project ID to view (e.g., 'proj_123...'). Get project IDs from view_projects."
+  //       },
+  //       space_id: {
+  //         type: "string",
+  //         description:
+  //           "Optional: Space ID (required if using slug instead of project_id)"
+  //       },
+  //       slug: {
+  //         type: "string",
+  //         description:
+  //           "Optional: Project slug (URL-friendly name). Requires space_id if used."
+  //       }
+  //     }
+  //   }
+  // },
   {
     name: "start",
     title: "Start Space Session",
@@ -167,8 +168,8 @@ export const TOOLS = [
     }
   },
   {
-    name: "update_space",
-    title: "Update Space",
+    name: "update_memory",
+    title: "Update Memory",
     description:
       "Add, update, or delete items in a space. Supports any combination of operations in a single call.\n\nTIPS FOR RICH MEMORY: The more context you provide, the smarter the system becomes:\n- Include WHY something matters, not just WHAT it is\n- Note user preferences, patterns, and approaches you observe\n- Describe repeatable workflows as skills (step-by-step procedures)\n- Link related items using parent_id or linkedItemIds\n- Use descriptive titles that capture the essence\n- Add context about decisions, reasoning, and outcomes\n\nThe system learns from patterns - sharing how the user works helps it anticipate their needs.",
     inputSchema: {