@iterable/mcp 1.0.3 → 1.2.0

package/README.md

@@ -5,8 +5,6 @@
 
 With the new Iterable MCP server, you can now connect Iterable to your favorite AI tools like Cursor, Claude Desktop, and Claude Code!
 
-
-
 ## What is MCP?
 
 MCP stands for Model Context Protocol. It's a new, open standard that lets AI tools (like Cursor or Claude Desktop) connect to external tools and APIs in a secure, structured way. MCP acts as a "bridge" between your AI app and platforms like Iterable, so you can ask questions or perform actions in plain English, and the AI translates those into safe API calls behind the scenes.
@@ -35,13 +33,13 @@ npx @iterable/mcp setup --advanced
 ```
 
 What you’ll choose (optional):
-- View user PII (`ITERABLE_USER_PII`)
-- Enable Writes (Create/Update/Delete actions) (`ITERABLE_ENABLE_WRITES`)
-- Enable actual sends (`ITERABLE_ENABLE_SENDS`) — requires Writes
+- Enable access to user PII (`ITERABLE_USER_PII`)
+- Enable writes (create/update/delete actions) (`ITERABLE_ENABLE_WRITES`)
+- Enable sends (campaigns/journeys/events) (`ITERABLE_ENABLE_SENDS`) — requires writes
 
 Safety notes:
-- Sends require Writes to be enabled.
-- When you use an existing Keychain key, your choices are saved per key.
+- Enabling sends requires writes to be enabled.
+- Permission settings are saved per key (see key management section below).
 - Prompts are generated from read‑only tools for extra safety.
 
 ## Prefer a global install?
@@ -53,7 +51,9 @@ iterable-mcp setup
 
 **Note:** The setup command automatically configures the correct command path.
 
-## Install from source
+Throughout this guide, commands are shown as `iterable-mcp` for brevity. If not globally installed, use `npx @iterable/mcp` instead (e.g., `npx @iterable/mcp keys list`).
+
+### Install from source
 
 ```bash
 git clone https://github.com/iterable/mcp-server.git
@@ -61,15 +61,14 @@ cd mcp-server
 pnpm install-dev:cursor  # or install-dev:claude-desktop or install-dev:claude-code
 ```
 
-## Claude Code
+### Claude Code
 
-The `setup --claude-code` command automatically configures Claude Code by running `claude mcp add` for you and stores your API key securely in macOS Keychain.
+The `setup --claude-code` command automatically configures Claude Code by running `claude mcp add` for you.
 
-Alternatively, you can run it manually:
+Alternatively, you can configure it manually:
 
 ```bash
-# Manual installation (alternative to setup --claude-code)
-# First, add your API key to the keychain (interactive prompts)
+# Add your API key first (see API Key Management section below)
 iterable-mcp keys add
 
 # Then configure Claude Code
@@ -95,15 +94,15 @@ claude mcp add-from-claude-desktop
 
 For more information, see the [Claude Code MCP documentation](https://docs.claude.com/en/docs/claude-code/mcp).
 
-## Manual configuration (Cursor & Claude Desktop)
+### Manual configuration (Cursor & Claude Desktop)
 
 The above commands will automatically configure your AI tool to use the MCP server by editing the appropriate configuration file, but you can also manually edit the appropriate configuration file:
 - **Claude Desktop:** `~/Library/Application Support/Claude/claude_desktop_config.json`
 - **Cursor:** `~/.cursor/mcp.json`
 
-**macOS (with Keychain):**
+**Recommended: Using key manager:**
 ```bash
-# First, add your API key to the keychain (interactive prompts)
+# First, add your API key (interactive prompts)
 iterable-mcp keys add
 ```
 
@@ -119,9 +118,9 @@ Then edit your config file:
 }
 ```
 
-Note: No `env` needed on macOS - API key and base URL are loaded from Keychain.
+No `env` section needed - API key and base URL are loaded automatically.
 
-**Windows/Linux (using environment variables):**
+**Alternative: Environment variables:**
 ```json
 {
   "mcpServers": {
@@ -150,7 +149,7 @@ export ITERABLE_MCP_NPX_PATH="/path/to/custom/npx"
 npx @iterable/mcp setup --cursor
 ```
 
-Alternatively, you can manually edit your configuration file (after adding your key to the keychain):
+Alternatively, you can manually edit your configuration file (after adding your key):
 
 ```json
 {
@@ -163,7 +162,7 @@ Alternatively, you can manually edit your configuration file (after adding your
 }
 ```
 
-Note: No `env` needed on macOS — API key and base URL are loaded from Keychain.
+No `env` section is needed if using the key manager.
 
 ## What you can do
 
@@ -185,7 +184,11 @@ Try these prompts:
 
 ### API Key Management
 
-**macOS Keychain:** API keys are stored securely in Keychain. Each key is tied to its API endpoint (US, EU, or custom).
+**Key Storage:**
+
+API keys are stored in the `~/.iterable-mcp/keys.json` file and managed via the `iterable-mcp keys` commands. On macOS the actual API key values are stored in the system Keychain. On Linux, the API key values are stored directly in the file with restricted permissions (0o600). On Windows, the file is protected by default NTFS home directory permissions.
+
+Each key is tied to its API endpoint (US, EU, or custom) and to its permissions (view PII, write operations, send messages).
 
 **How Key Selection Works:**
 - You can store multiple API keys with different names (e.g., "production", "staging", "dev")
@@ -213,14 +216,12 @@ iterable-mcp keys delete <key-id>
 # To update a key: delete the old one and add a new one with the same name
 ```
 
-**Windows/Linux:** Use `ITERABLE_API_KEY` and (optionally) `ITERABLE_BASE_URL` env vars.
-
 ### Environment variables
 
 | Variable | Required | Description |
 |----------|----------|-------------|
-| `ITERABLE_API_KEY` | No* | Your Iterable API key (*Optional on macOS if using Keychain manager, Required on Windows and Linux) |
-| `ITERABLE_BASE_URL` | No** | Base URL for the Iterable API (**Not needed on macOS when using key manager - URL is stored with each key) |
+| `ITERABLE_API_KEY` | No* | Your Iterable API key (*Optional if using key manager, otherwise required) |
+| `ITERABLE_BASE_URL` | No** | Base URL for the Iterable API (**Not needed when using key manager - URL is stored with each key) |
 | `ITERABLE_DEBUG` | No | Set to `true` for API request logging |
 | `LOG_LEVEL` | No | Set to `debug` for troubleshooting |
 | `ITERABLE_USER_PII` | No | Set to `true` to enable tools that access user PII data (default: `false`) |
@@ -263,7 +264,7 @@ Integration tests make real API calls to Iterable and require a valid API key.
    export ITERABLE_API_KEY=your_actual_api_key
    ```
 
-2. Or on macOS, add a key to the keychain (interactive):
+2. Or add a key to key manager (interactive):
    ```bash
    iterable-mcp keys add
    ```
@@ -275,7 +276,7 @@ Integration tests make real API calls to Iterable and require a valid API key.
    pnpm test:integration
    ```
 
-**Note:** Integration tests require a valid API key (env or active macOS Keychain key). The suite fails fast if none is found.
+**Note:** Integration tests require a valid API key (env var or active key manager key). The suite fails fast if none is found.
 
 ### Development workflow
 
@@ -299,8 +300,7 @@ pnpm run install-dev
 ## Troubleshooting
 
 - Claude CLI missing: install `claude` CLI, then re-run `iterable-mcp setup --claude-code`.
-- macOS Keychain issues: Ensure Keychain is available; re-run setup. Stale locks are auto‑recovered.
-
+- macOS Keychain issues: Ensure Keychain is accessible and re-run setup if needed.
 
 ## Beta Feature Reminder
 Iterable's MCP server is currently in beta. MCP functionality may change, be

package/TOOLS.md

@@ -1,21 +1,25 @@
 # Available Iterable MCP Tools (104 tools)
 
-**Legend:** 🔒 = Contains PII, ✏️ = Write operation
+**Legend:**
+- 🔒 = Requires enabling user PII access
+- ✏️ = Requires enabling writes
+- ✉️ = Requires enabling sends
+
 
 ## Campaigns (13 tools)
 - **abort_campaign** ✏️: Abort a campaign that is currently running
-- **activate_triggered_campaign** ✏️: Activate a triggered campaign (requires API triggered campaign activation enabled)
+- **activate_triggered_campaign** ✏️✉️: Activate a triggered campaign (requires API triggered campaign activation enabled)
 - **archive_campaigns** ✏️: Archive one or more campaigns. Scheduled/recurring campaigns will be cancelled, running campaigns will be aborted.
 - **cancel_campaign** ✏️: Cancel a scheduled or recurring campaign
-- **create_campaign** ✏️: Create a new blast or triggered campaign from an existing template. If listIds are provided, the campaign will be a blast campaign, otherwise it will be a triggered campaign. Blast campaigns will be sent immediately if sendAt is not provided.
+- **create_campaign** ✏️✉️: Create a new blast or triggered campaign from an existing template. If listIds are provided, the campaign will be a blast campaign, otherwise it will be a triggered campaign. Blast campaigns will be sent immediately if sendAt is not provided.
 - **deactivate_triggered_campaign** ✏️: Deactivate a triggered campaign (requires API triggered campaign deactivation enabled)
 - **get_campaign**: Get detailed information about a specific campaign
 - **get_campaign_metrics**: Get campaign performance metrics
 - **get_campaigns**: Retrieve campaigns
 - **get_child_campaigns**: Get child campaigns generated by a recurring campaign
-- **schedule_campaign** ✏️: Schedule an existing campaign to be sent at a specific time
-- **send_campaign** ✏️: Send an existing scheduled campaign immediately
-- **trigger_campaign** ✏️: Trigger a campaign to send to specified lists
+- **schedule_campaign** ✏️✉️: Schedule an existing campaign to be sent at a specific time
+- **send_campaign** ✏️✉️: Send an existing scheduled campaign immediately
+- **trigger_campaign** ✏️✉️: Trigger a campaign to send to specified lists
 
 ## Catalogs (12 tools)
 - **bulk_delete_catalog_items** ✏️: Bulk delete catalog items by their IDs
@@ -41,15 +45,15 @@
 ## Events (4 tools)
 - **get_user_events_by_email** 🔒: Get event history for a user by email address
 - **get_user_events_by_user_id** 🔒: Get event history for a user by user ID
-- **track_bulk_events** 🔒✏️: Track multiple events in a single request for better performance
-- **track_event** 🔒✏️: Track a custom event for a user
+- **track_bulk_events** 🔒✏️✉️: Track multiple events in a single request for better performance
+- **track_event** 🔒✏️✉️: Track a custom event for a user
 
 ## Experiments (1 tools)
 - **get_experiment_metrics**: Get experiment metrics for A/B testing analysis (currently supports email experiments only)
 
 ## Journeys (2 tools)
 - **get_journeys**: Get journeys (workflows) with optional pagination and state filtering
-- **trigger_journey** 🔒✏️: Trigger a journey (workflow) for a user
+- **trigger_journey** 🔒✏️✉️: Trigger a journey (workflow) for a user
 
 ## Lists (8 tools)
 - **create_list** ✏️: Create a new user list
@@ -72,12 +76,12 @@
 - **get_embedded_messages** 🔒: Get embedded messages for a user, grouped by placement ID
 - **get_in_app_messages** 🔒: Get in-app messages for a user
 - **get_message_types**: Get all message types within the project for use in templates
-- **send_email** 🔒✏️: Send email to user
-- **send_in_app** 🔒✏️: Send in-app message to user
-- **send_push** 🔒✏️: Send push notification to user
-- **send_sms** 🔒✏️: Send SMS message to user
-- **send_web_push** 🔒✏️: Send web push notification to user
-- **send_whatsapp** 🔒✏️: Send WhatsApp message to user
+- **send_email** 🔒✏️✉️: Send email to user
+- **send_in_app** 🔒✏️✉️: Send in-app message to user
+- **send_push** 🔒✏️✉️: Send push notification to user
+- **send_sms** 🔒✏️✉️: Send SMS message to user
+- **send_web_push** 🔒✏️✉️: Send web push notification to user
+- **send_whatsapp** 🔒✏️✉️: Send WhatsApp message to user
 
 ## Snippets (5 tools)
 - **create_snippet** ✏️: Create a new snippet with Handlebars templating support
@@ -103,10 +107,10 @@
 - **get_templates**: Retrieve templates
 - **preview_email_template**: Preview email template with custom data. Returns fully rendered HTML with user, event, and/or data feed data substituted.
 - **preview_inapp_template**: Preview in-app message template with custom data. Returns fully rendered HTML with user, event, and/or data feed data substituted.
-- **send_email_template_proof** 🔒✏️: Send a proof of a email template to a specific user
-- **send_inapp_template_proof** 🔒✏️: Send a proof of a in-app message template to a specific user
-- **send_push_template_proof** 🔒✏️: Send a proof of a push notification template to a specific user
-- **send_sms_template_proof** 🔒✏️: Send a proof of a SMS template to a specific user
+- **send_email_template_proof** 🔒✏️✉️: Send a proof of a email template to a specific user
+- **send_inapp_template_proof** 🔒✏️✉️: Send a proof of a in-app message template to a specific user
+- **send_push_template_proof** 🔒✏️✉️: Send a proof of a push notification template to a specific user
+- **send_sms_template_proof** 🔒✏️✉️: Send a proof of a SMS template to a specific user
 - **update_email_template** ✏️: Update existing email template by templateId
 - **update_inapp_template** ✏️: Update existing in-app message template by templateId
 - **update_push_template** ✏️: Update existing push notification template by templateId

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAKA;;GAEG;AAEH,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC1C,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAQtE;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC,CAwFpE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAKA;;GAEG;AAEH,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC1C,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAQtE;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC,CA0FpE"}

package/dist/config.js

@@ -14,9 +14,8 @@ export async function loadMcpServerConfig() {
     let apiKey = null;
     let baseUrl = process.env.ITERABLE_BASE_URL || "https://api.iterable.com";
     let keyEnv;
-    // Try to load API key from KeyManager first (macOS only)
     // SAFETY: Skip keyManager in test environments to prevent production data access
-    if (process.platform === "darwin" && process.env.NODE_ENV !== "test") {
+    if (process.env.NODE_ENV !== "test") {
         try {
             const keyManager = getKeyManager();
             await keyManager.initialize();
@@ -52,9 +51,10 @@ export async function loadMcpServerConfig() {
                 logger.error("Unexpected error loading from key manager", {
                     error: sanitizedMessage,
                 });
-                console.error("⚠️  Warning: Failed to load API key from macOS Keychain:", sanitizedMessage);
-                // Provide helpful guidance for sync issues
-                if (sanitizedMessage.includes("could not be found")) {
+                console.error("⚠️  Warning: Failed to load API key from key storage:", sanitizedMessage);
+                // Provide helpful guidance for sync issues (macOS Keychain specific)
+                if (process.platform === "darwin" &&
+                    sanitizedMessage.includes("could not be found")) {
                     console.error("\n💡 This may be a sync issue. Restarting the server will automatically clean up orphaned keys.");
                 }
                 console.error("   Falling back to ITERABLE_API_KEY environment variable");

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAmBrD,MAAM,UAAU,iBAAiB,CAC/B,MAA0C,EAC1C,GAAsB;IAEtB,MAAM,YAAY,GAChB,CAAC,MAAM,EAAE,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,MAAM,CAAC;IAClE,MAAM,WAAW,GACf,CAAC,MAAM,EAAE,sBAAsB,IAAI,GAAG,CAAC,sBAAsB,CAAC,KAAK,MAAM,CAAC;IAC5E,MAAM,UAAU,GACd,CAAC,MAAM,EAAE,qBAAqB,IAAI,GAAG,CAAC,qBAAqB,CAAC,KAAK,MAAM,CAAC;IAC1E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,OAAO,GACT,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;IAC9D,IAAI,MAA0C,CAAC;IAE/C,yDAAyD;IACzD,iFAAiF;IACjF,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;YACnC,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;YAE9B,+BAA+B;YAC/B,IAAI,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/B,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,CAAC;gBACzC,gDAAgD;gBAChD,MAAM,iBAAiB,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,CAAC;gBAClE,IAAI,iBAAiB,EAAE,OAAO,EAAE,CAAC;oBAC/B,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC;gBACtC,CAAC;gBACD,IAAI,iBAAiB,EAAE,GAAG,EAAE,CAAC;oBAC3B,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC;gBACjC,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,UAAU,CAAC,gBAAgB,CAC/B,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAC5B,OAAO,CACR,CAAC;gBACF,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8DAA8D;YAC9D,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEzD,IACE,YAAY,CAAC,QAAQ,CAAC,2BAA2B,CAAC;gBAClD,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACzC,CAAC;gBACD,uDAAuD;gBACvD,MAAM,CAAC,KAAK,CACV,8DAA8D,CAC/D,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,yEAAyE;gBACzE,MAAM,gBAAgB,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;gBACtD,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;oBACxD,KAAK,EAAE,gBAAgB;iBACxB,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CACX,0DAA0D,EAC1D,gBAAgB,CACjB,CAAC;gBAEF,2CAA2C;gBAC3C,IAAI,gBAAgB,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACpD,OAAO,CAAC,KAAK,CACX,iGAAiG,CAClG,CAAC;gBACJ,CAAC;gBAED,OAAO,CAAC,KAAK,CACX,0DAA0D,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACxC,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,iBAAiB,CACjE,MAAM,EACN,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACpE,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAmBrD,MAAM,UAAU,iBAAiB,CAC/B,MAA0C,EAC1C,GAAsB;IAEtB,MAAM,YAAY,GAChB,CAAC,MAAM,EAAE,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,MAAM,CAAC;IAClE,MAAM,WAAW,GACf,CAAC,MAAM,EAAE,sBAAsB,IAAI,GAAG,CAAC,sBAAsB,CAAC,KAAK,MAAM,CAAC;IAC5E,MAAM,UAAU,GACd,CAAC,MAAM,EAAE,qBAAqB,IAAI,GAAG,CAAC,qBAAqB,CAAC,KAAK,MAAM,CAAC;IAC1E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,OAAO,GACT,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;IAC9D,IAAI,MAA0C,CAAC;IAE/C,iFAAiF;IACjF,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;YACnC,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;YAE9B,+BAA+B;YAC/B,IAAI,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/B,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,CAAC;gBACzC,gDAAgD;gBAChD,MAAM,iBAAiB,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,CAAC;gBAClE,IAAI,iBAAiB,EAAE,OAAO,EAAE,CAAC;oBAC/B,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC;gBACtC,CAAC;gBACD,IAAI,iBAAiB,EAAE,GAAG,EAAE,CAAC;oBAC3B,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC;gBACjC,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,UAAU,CAAC,gBAAgB,CAC/B,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAC5B,OAAO,CACR,CAAC;gBACF,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8DAA8D;YAC9D,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEzD,IACE,YAAY,CAAC,QAAQ,CAAC,2BAA2B,CAAC;gBAClD,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACzC,CAAC;gBACD,uDAAuD;gBACvD,MAAM,CAAC,KAAK,CACV,8DAA8D,CAC/D,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,yEAAyE;gBACzE,MAAM,gBAAgB,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;gBACtD,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;oBACxD,KAAK,EAAE,gBAAgB;iBACxB,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CACX,uDAAuD,EACvD,gBAAgB,CACjB,CAAC;gBAEF,qEAAqE;gBACrE,IACE,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAC7B,gBAAgB,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAC/C,CAAC;oBACD,OAAO,CAAC,KAAK,CACX,iGAAiG,CAClG,CAAC;gBACJ,CAAC;gBAED,OAAO,CAAC,KAAK,CACX,0DAA0D,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACxC,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,iBAAiB,CACjE,MAAM,EACN,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACpE,CAAC"}

package/dist/install.d.ts

@@ -1,3 +1,4 @@
+export declare const findCommand: (command: string) => Promise<string>;
 export declare const buildMcpConfig: (options: {
     isLocal?: boolean;
     env: Record<string, string>;
@@ -24,6 +25,11 @@ export declare function pickPersistablePermissionEnv(env: Record<string, string>
     ITERABLE_ENABLE_WRITES: "true" | "false";
     ITERABLE_ENABLE_SENDS: "true" | "false";
 };
+/**
+ * Remove permission flags from env (they're loaded from key manager)
+ * Returns only non-persisted env vars like debug flags
+ */
+export declare function omitPersistablePermissionEnv(env: Record<string, string>): Record<string, string>;
 /**
  * Enforce that Sends require Writes. If Sends is enabled but Writes is disabled,
  * disable Sends and optionally emit a warning.

package/dist/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AA+EA,eAAO,MAAM,cAAc,GAAI,SAAS;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;;;;;CAeA,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBxB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IACzE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,sBAAsB,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAC;CACzC,CAWA;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG;IAC1D,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;CACvB,CAEA;AAED,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,IAAI,CAwzBnD,CAAC"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAsEA,eAAO,MAAM,WAAW,GAAU,SAAS,MAAM,KAAG,OAAO,CAAC,MAAM,CAajE,CAAC;AAkBF,eAAO,MAAM,cAAc,GAAI,SAAS;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;;;;;CAeA,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBxB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IACzE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,sBAAsB,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAC;CACzC,CAWA;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQxB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG;IAC1D,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;CACvB,CAEA;AAED,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,IAAI,CAuzBnD,CAAC"}