@latellu/atlas-mcp 1.0.3 → 1.0.4

package/README.md

@@ -172,7 +172,7 @@ AI: → Calls upload_media with file_path='/Users/you/Pictures/tokyo.png'
 
 ### Best Practices
 
-1. **Scope API keys**: Use minimal scopes required
+1. **Scope API keys**: For management keys, grant only the scopes each tool needs — `content:write` for create/update/delete/reorder, `content:publish` for publish/unpublish/archive/schedule, `media:write` for uploads/deletes. Leave unused scopes off.
 2. **Restrict upload paths**: Only allow necessary directories
 3. **Rotate keys**: Regularly rotate API keys
 4. **Monitor usage**: Review MCP tool calls for suspicious activity

package/dist/index.js

@@ -12553,6 +12553,20 @@ var AtlasClient = class {
         ...options?.headers
       }
     });
+    return this.handleResponse(response);
+  }
+  // Write requests to /api/v1/manage/* carry an Idempotency-Key so that
+  // AI-agent-driven retries don't risk double-create/double-publish.
+  async writeRequest(path, options) {
+    return this.request(path, {
+      ...options,
+      headers: {
+        "Idempotency-Key": crypto.randomUUID(),
+        ...options.headers
+      }
+    });
+  }
+  async handleResponse(response) {
     if (!response.ok) {
       const error = await response.json().catch(() => ({}));
       throw new Error(
@@ -12591,39 +12605,39 @@ var AtlasClient = class {
     return this.request(`/api/v1/public/entries/${slug}`);
   }
   async createEntry(contentType, data, slug) {
-    return this.request(`/api/v1/manage/content-types/${contentType}/entries`, {
+    return this.writeRequest(`/api/v1/manage/content-types/${contentType}/entries`, {
       method: "POST",
       body: JSON.stringify({ slug, data })
     });
   }
   async updateEntry(contentType, slug, data) {
-    return this.request(`/api/v1/manage/content-types/${contentType}/entries/${slug}`, {
+    return this.writeRequest(`/api/v1/manage/content-types/${contentType}/entries/${slug}`, {
       method: "PUT",
       body: JSON.stringify({ data })
     });
   }
   async deleteEntry(contentType, slug) {
-    return this.request(`/api/v1/manage/content-types/${contentType}/entries/${slug}`, {
+    return this.writeRequest(`/api/v1/manage/content-types/${contentType}/entries/${slug}`, {
       method: "DELETE"
     });
   }
   async publishEntry(contentType, slug) {
-    return this.request(`/api/v1/manage/content-types/${contentType}/entries/${slug}/publish`, {
+    return this.writeRequest(`/api/v1/manage/content-types/${contentType}/entries/${slug}/publish`, {
       method: "PATCH"
     });
   }
   async unpublishEntry(contentType, slug) {
-    return this.request(`/api/v1/manage/content-types/${contentType}/entries/${slug}/unpublish`, {
+    return this.writeRequest(`/api/v1/manage/content-types/${contentType}/entries/${slug}/unpublish`, {
       method: "PATCH"
     });
   }
   async archiveEntry(contentType, slug) {
-    return this.request(`/api/v1/manage/content-types/${contentType}/entries/${slug}/archive`, {
+    return this.writeRequest(`/api/v1/manage/content-types/${contentType}/entries/${slug}/archive`, {
       method: "PATCH"
     });
   }
   async duplicateEntry(contentType, slug) {
-    return this.request(`/api/v1/manage/content-types/${contentType}/entries/${slug}/duplicate`, {
+    return this.writeRequest(`/api/v1/manage/content-types/${contentType}/entries/${slug}/duplicate`, {
       method: "POST"
     });
   }
@@ -12638,24 +12652,24 @@ var AtlasClient = class {
     return this.request(`/api/v1/public/pages/${slug}`);
   }
   async createPage(data) {
-    return this.request("/api/v1/manage/pages", {
+    return this.writeRequest("/api/v1/manage/pages", {
       method: "POST",
       body: JSON.stringify(data)
     });
   }
   async updatePage(slug, data) {
-    return this.request(`/api/v1/manage/pages/${slug}`, {
+    return this.writeRequest(`/api/v1/manage/pages/${slug}`, {
       method: "PUT",
       body: JSON.stringify(data)
     });
   }
   async deletePage(slug) {
-    return this.request(`/api/v1/manage/pages/${slug}`, {
+    return this.writeRequest(`/api/v1/manage/pages/${slug}`, {
       method: "DELETE"
     });
   }
   async publishPage(slug) {
-    return this.request(`/api/v1/manage/pages/${slug}/publish`, {
+    return this.writeRequest(`/api/v1/manage/pages/${slug}/publish`, {
       method: "PATCH"
     });
   }
@@ -12678,16 +12692,12 @@ var AtlasClient = class {
     const response = await fetch(`${this.baseUrl}/api/v1/manage/media/upload`, {
       method: "POST",
       headers: {
-        "X-API-Key": this.apiKey
+        "X-API-Key": this.apiKey,
+        "Idempotency-Key": crypto.randomUUID()
       },
       body: formData
     });
-    if (!response.ok) {
-      const error = await response.json().catch(() => ({}));
-      throw new Error(`Upload failed: ${response.status} - ${error.message || response.statusText}`);
-    }
-    const data = await response.json();
-    return data.data || data;
+    return this.handleResponse(response);
   }
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@latellu/atlas-mcp",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "publishConfig": {
     "access": "public"
   },