@kadoa/mcp 0.5.13 → 0.5.14

package/README.md

@@ -24,16 +24,17 @@ claude mcp add kadoa --transport http https://mcp.kadoa.com/mcp
 2. Enter the URL: `https://mcp.kadoa.com/mcp`
 3. Sign in with your Kadoa account via OAuth
 
-### Claude organization shared workspace
+### Claude service connector
 
-A Kadoa workspace admin can generate organization connector credentials under **Workspace settings → Claude connector**. The generated OAuth client is fixed to that workspace's service account.
+A Kadoa workspace admin can generate service connector credentials under **Workspace settings → MCP connector**. The generated OAuth client is fixed to that workspace's service account.
 
 1. In Kadoa, select **Generate credentials** and copy the MCP URL, OAuth Client ID, and OAuth Client Secret. The secret is shown once.
 2. In Claude organization **Admin settings → Connectors**, select **Add custom connector**.
-3. Enter `https://mcp.kadoa.com/mcp` and paste the generated OAuth Client ID/Secret under Advanced settings.
-4. Organization members find the custom connector under **Settings → Connectors** and select **Connect**.
+3. Enter `https://service.mcp.kadoa.com/mcp` and paste the generated OAuth Client ID/Secret under Advanced settings.
+4. In the connector's tool settings, allow only the tools that organization members should use.
+5. Organization members find the custom connector under **Settings → Connectors** and select **Connect**.
 
-Members do not need Kadoa accounts. All actions are attributed to the shared Kadoa service account, and team switching is unavailable. To rotate access, rotate the secret in Kadoa, replace it in Claude, and reconnect. Revoking the connector stops access immediately.
+The service connector uses a separate hostname from the personal connector at `https://mcp.kadoa.com/mcp`, so Claude users can configure both. Members do not need Kadoa accounts. All actions are attributed to the shared Kadoa service account, and team switching is unavailable. To rotate access, rotate the secret in Kadoa, replace it in Claude, and reconnect. Revoking the connector stops access immediately.
 
 Do not paste a Kadoa workspace API key into Claude.
 

package/dist/index.js

@@ -53662,7 +53662,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@kadoa/mcp",
-    version: "0.5.13",
+    version: "0.5.14",
     description: "Kadoa MCP Server — manage workflows from Claude Desktop, Cursor, and other MCP clients",
     type: "module",
     main: "dist/index.js",
@@ -57695,6 +57695,15 @@ var init_bearerAuth = __esm(() => {
   init_errors4();
 });
 
+// src/managed-connector-client.ts
+function isManagedConnectorClientId(clientId) {
+  return MANAGED_CONNECTOR_CLIENT_ID_PREFIXES.some((prefix) => clientId.startsWith(prefix));
+}
+var MANAGED_CONNECTOR_CLIENT_ID_PREFIXES;
+var init_managed_connector_client = __esm(() => {
+  MANAGED_CONNECTOR_CLIENT_ID_PREFIXES = ["kadoa_mcp_", "kadoa_claude_"];
+});
+
 // src/managed-connector-registry.ts
 class ManagedConnectorRegistry {
   baseUrl;
@@ -57894,7 +57903,7 @@ class KadoaOAuthProvider {
     const thisProvider = this;
     return {
       async getClient(clientId) {
-        if (clientId.startsWith("kadoa_claude_")) {
+        if (isManagedConnectorClientId(clientId)) {
           const connector = await thisProvider.getManagedRegistry().get(clientId);
           if (!connector)
             return;
@@ -58834,6 +58843,7 @@ function escapeHtml(str) {
 var TEAM_SELECTION_TTL, ACCESS_TOKEN_TTL;
 var init_auth2 = __esm(() => {
   init_errors4();
+  init_managed_connector_client();
   init_managed_connector_registry();
   TEAM_SELECTION_TTL = 10 * 60 * 1000;
   ACCESS_TOKEN_TTL = 7 * 24 * 3600;
@@ -58954,7 +58964,7 @@ function managedTokenHandler(options) {
   return async (req, res, next) => {
     const body = req.body ?? {};
     const clientId = typeof body.client_id === "string" ? body.client_id : "";
-    if (!clientId.startsWith("kadoa_claude_")) {
+    if (!isManagedConnectorClientId(clientId)) {
       next();
       return;
     }
@@ -59001,6 +59011,7 @@ function managedTokenHandler(options) {
 }
 var init_managed_token_handler = __esm(() => {
   init_errors4();
+  init_managed_connector_client();
   init_managed_connector_registry();
 });
 
@@ -59064,7 +59075,7 @@ async function startHttpServer(options) {
     limit: 50,
     standardHeaders: true,
     legacyHeaders: false,
-    skip: (req) => !String(req.body?.client_id ?? "").startsWith("kadoa_claude_"),
+    skip: (req) => !isManagedConnectorClientId(String(req.body?.client_id ?? "")),
     message: {
       error: "too_many_requests",
       error_description: "Too many managed connector token requests"
@@ -59229,6 +59240,7 @@ var init_http2 = __esm(async () => {
   init_auth2();
   init_redis_store();
   init_client2();
+  init_managed_connector_client();
   init_managed_connector_registry();
   init_managed_token_handler();
   await init_src();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kadoa/mcp",
-  "version": "0.5.13",
+  "version": "0.5.14",
   "description": "Kadoa MCP Server — manage workflows from Claude Desktop, Cursor, and other MCP clients",
   "type": "module",
   "main": "dist/index.js",