@kolbo/mcp 1.30.4 → 1.30.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kolbo/mcp",
3
- "version": "1.30.4",
3
+ "version": "1.30.5",
4
4
  "description": "Kolbo AI MCP Server - Generate images, videos, music, speech, and sound effects from Claude Code",
5
5
  "main": "src/index.js",
6
6
  "bin": {
package/src/apps/index.js CHANGED
@@ -48,16 +48,29 @@ function widgetHtml(uri) {
48
48
  // img/script/style/font/media-src; connectDomains to connect-src.
49
49
  const WIDGET_CSP = {
50
50
  resourceDomains: [
51
- 'https://*.kolbo.ai', // media.kolbo.ai CDN + app.kolbo.ai model icons
52
- 'https://*.digitaloceanspaces.com', // DO Spaces buckets (all envs)
53
- 'https://*.cdn.digitaloceanspaces.com', // DO Spaces CDN endpoints
51
+ // Exact hosts FIRST not every host CSP implementation honors wildcards,
52
+ // and a declared-but-unmatched allowlist blocks harder than no declaration.
53
+ 'https://api.kolbo.ai', // model icons (/assets)
54
+ 'https://app.kolbo.ai',
55
+ 'https://media.kolbo.ai', // media CDN (prod)
56
+ 'https://media-staging.kolbo.ai',
57
+ 'https://media-dev.kolbo.ai',
58
+ 'https://kolboai-production.ams3.digitaloceanspaces.com',
59
+ 'https://kolboai-production.ams3.cdn.digitaloceanspaces.com',
60
+ 'https://kolboai-development.ams3.digitaloceanspaces.com',
61
+ 'https://kolboai-development.ams3.cdn.digitaloceanspaces.com',
62
+ 'https://kolbo-general-media.fra1.cdn.digitaloceanspaces.com',
54
63
  'https://fonts.googleapis.com', // Inter / JetBrains Mono stylesheet
55
64
  'https://fonts.gstatic.com', // font files
56
65
  'https://images.pexels.com', // stock thumbnails
66
+ // Wildcards as a second layer for hosts that do support them.
67
+ 'https://*.kolbo.ai',
68
+ 'https://*.digitaloceanspaces.com',
69
+ 'https://*.cdn.digitaloceanspaces.com',
57
70
  'https://*.pexels.com',
58
71
  'https://*.pixabay.com',
59
72
  'https://*.sketchfab.com',
60
- 'https://*.cloudfront.net', // provider-hosted previews
73
+ 'https://*.cloudfront.net',
61
74
  ],
62
75
  connectDomains: [],
63
76
  };
package/src/index.js CHANGED
@@ -97,7 +97,12 @@ function createServer(opts = {}) {
97
97
 
98
98
  const server = new McpServer({
99
99
  name: 'kolbo',
100
- version: '1.0.0'
100
+ title: 'Kolbo',
101
+ version: '1.0.0',
102
+ websiteUrl: 'https://kolbo.ai',
103
+ // Connector avatar for hosts that render server icons (claude.ai tool
104
+ // headers show this instead of a letter monogram).
105
+ icons: [{ src: 'https://api.kolbo.ai/assets/kolbo-ai.png', mimeType: 'image/png', sizes: ['512x512'] }]
101
106
  });
102
107
 
103
108
  // Register all tools. `inlineImages` (off by default) is opt-in: only the