@lessie/mcp-server 0.0.1

package/README.md

@@ -0,0 +1,57 @@
+# Lessie MCP
+
+将 [Lessie](https://lessie.com) 接入 Claude Desktop，通过自然语言操作你的 Lessie 账号。
+
+## 前置条件
+
+- [Claude Desktop](https://claude.ai/download)
+- [Node.js](https://nodejs.org) 18+
+- Lessie API Key（登录 Lessie → 设置 → 开发者 → API Keys）
+
+## 安装
+
+打开 Claude Desktop 配置文件：
+
+| 系统    | 路径                                                        |
+| ------- | ----------------------------------------------------------- |
+| macOS   | `~/Library/Application Support/Claude/claude_desktop_config.json` |
+| Windows | `%APPDATA%\Claude\claude_desktop_config.json`               |
+
+在 `mcpServers` 中添加以下内容，将 `sk-live-v1-你的Key` 替换为你的 API Key：
+
+```json
+{
+  "mcpServers": {
+    "lessie": {
+      "command": "npx",
+      "args": ["-y", "lessie-mcp"],
+      "env": {
+        "SAAS_BASE_URL": "https://api.lessie.com",
+        "SAAS_API_KEY": "sk-live-v1-你的Key"
+      }
+    }
+  }
+}
+```
+
+保存后**完全退出并重新打开** Claude Desktop。
+
+## 验证
+
+在对话中发送：
+
+> 查看我的 Lessie 账号信息
+
+## 可用工具
+
+| 工具              | 说明                                     |
+| ----------------- | ---------------------------------------- |
+| `get_account_info` | 查看当前账号详情（用户名、邮箱、状态、角色等） |
+
+## 常见问题
+
+**工具列表中没有 lessie？**
+检查配置文件 JSON 格式是否正确，然后完全退出并重启 Claude Desktop。
+
+**报错 `Failed to exchange API key for JWT: 401`？**
+API Key 无效或已被吊销，请在 Lessie 设置页重新生成。

package/dist/index.js

@@ -0,0 +1,80 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+// ── 环境变量 ──────────────────────────────────────────────────────────────────
+const BASE_URL = process.env.SAAS_BASE_URL;
+const API_KEY = process.env.SAAS_API_KEY;
+if (!BASE_URL) {
+    console.error("Error: SAAS_BASE_URL is not set");
+    process.exit(1);
+}
+if (!API_KEY) {
+    console.error("Error: SAAS_API_KEY is not set");
+    process.exit(1);
+}
+let jwtCache = null;
+/**
+ * 获取有效的 JWT token。
+ * 若缓存不存在或距过期不足 60 秒，则重新向 /auth/token 换取。
+ */
+async function getJwt() {
+    const now = Date.now();
+    const REFRESH_BEFORE_MS = 60 * 1000;
+    if (jwtCache && jwtCache.expiry - now > REFRESH_BEFORE_MS) {
+        return jwtCache.token;
+    }
+    const res = await fetch(`${BASE_URL}/auth/token`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ apiKey: API_KEY }),
+    });
+    if (!res.ok) {
+        throw new Error(`Failed to exchange API key for JWT: ${res.status} ${res.statusText}`);
+    }
+    const data = (await res.json());
+    jwtCache = {
+        token: data.token,
+        expiry: now + data.expiresIn * 1000,
+    };
+    return jwtCache.token;
+}
+// ── 通用请求封装 ───────────────────────────────────────────────────────────────
+async function api(method, path, body) {
+    const token = await getJwt();
+    const res = await fetch(`${BASE_URL}${path}`, {
+        method,
+        headers: {
+            "Authorization": `Bearer ${token}`,
+            "Content-Type": "application/json",
+        },
+        body: body !== undefined ? JSON.stringify(body) : undefined,
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        throw new Error(`API error ${res.status} ${res.statusText}${text ? `: ${text}` : ""}`);
+    }
+    if (res.status === 204)
+        return undefined;
+    return res.json();
+}
+// ── 工具结果辅助函数 ───────────────────────────────────────────────────────────
+function textResult(data) {
+    return {
+        content: [{ type: "text", text: JSON.stringify(data, null, 2) }],
+    };
+}
+// ── MCP Server ────────────────────────────────────────────────────────────────
+const server = new McpServer({
+    name: "lessie-mcp",
+    version: "1.0.0",
+});
+// ── 工具定义 ──────────────────────────────────────────────────────────────────
+// 命名规范：下划线分隔，动词开头（如 list_xxx、get_xxx、create_xxx）。
+// 写入类工具在 description 中注明"执行前请向用户确认"。
+// 账号信息
+server.tool("get_account_info", "查看当前 Lessie 账号的详细信息，包括用户名、邮箱、账号状态、角色、邀请码等。", {}, async () => {
+    const data = await api("GET", "/agent/account/info");
+    return textResult(data);
+});
+// ── 启动 ──────────────────────────────────────────────────────────────────────
+const transport = new StdioServerTransport();
+await server.connect(transport);

package/dist/server/auth.js

@@ -0,0 +1,36 @@
+import { createHash, randomBytes } from "node:crypto";
+import jwt from "jsonwebtoken";
+const JWT_SECRET = process.env.JWT_SECRET || "change-me-in-production";
+const JWT_EXPIRES_IN = 3600; // 1 hour
+// ── API Key 生成 ─────────────────────────────────────────────────────────────
+export function generateApiKey() {
+    const rawKey = "sk-live-v1-" + randomBytes(24).toString("base64url");
+    const keyHash = hashApiKey(rawKey);
+    const keyHint = rawKey.slice(0, 20) + "...";
+    return { rawKey, keyHash, keyHint };
+}
+export function hashApiKey(rawKey) {
+    return createHash("sha256").update(rawKey).digest("hex");
+}
+// ── JWT 签发 ─────────────────────────────────────────────────────────────────
+export function signJwt(payload) {
+    const token = jwt.sign(payload, JWT_SECRET, { expiresIn: JWT_EXPIRES_IN });
+    return { token, expiresIn: JWT_EXPIRES_IN };
+}
+// ── JWT 验证中间件（登录态保护） ──────────────────────────────────────────────
+export function requireAuth(req, res, next) {
+    const header = req.headers.authorization;
+    if (!header?.startsWith("Bearer ")) {
+        res.status(401).json({ error: "Missing or invalid Authorization header" });
+        return;
+    }
+    const token = header.slice(7);
+    try {
+        const decoded = jwt.verify(token, JWT_SECRET);
+        req.user = decoded;
+        next();
+    }
+    catch {
+        res.status(401).json({ error: "Invalid or expired token" });
+    }
+}

package/dist/server/db.js

@@ -0,0 +1,5 @@
+import pg from "pg";
+const pool = new pg.Pool({
+    connectionString: process.env.DATABASE_URL,
+});
+export default pool;

package/dist/server/index.js

@@ -0,0 +1,11 @@
+import express from "express";
+import apiKeysRouter from "./routes/api-keys.js";
+import authTokenRouter from "./routes/auth-token.js";
+const app = express();
+const PORT = parseInt(process.env.PORT || "3000", 10);
+app.use(express.json());
+app.use("/api-keys", apiKeysRouter);
+app.use("/auth/token", authTokenRouter);
+app.listen(PORT, () => {
+    console.log(`Server listening on port ${PORT}`);
+});

package/dist/server/routes/api-keys.js

@@ -0,0 +1,78 @@
+import { Router } from "express";
+import pool from "../db.js";
+import { generateApiKey, requireAuth } from "../auth.js";
+const router = Router();
+router.use(requireAuth);
+const MAX_KEYS_PER_USER = 10;
+// POST /api-keys — 创建 API Key
+router.post("/", async (req, res) => {
+    try {
+        const userId = req.user.sub;
+        const { name, scopes } = req.body;
+        if (!name || typeof name !== "string" || name.trim().length === 0) {
+            res.status(400).json({ error: "name is required" });
+            return;
+        }
+        const validScopes = scopes ?? ["read"];
+        const countResult = await pool.query("SELECT COUNT(*) FROM api_keys WHERE user_id = $1 AND revoked_at IS NULL", [userId]);
+        if (parseInt(countResult.rows[0].count, 10) >= MAX_KEYS_PER_USER) {
+            res.status(400).json({ error: `Maximum ${MAX_KEYS_PER_USER} active API keys allowed` });
+            return;
+        }
+        const { rawKey, keyHash, keyHint } = generateApiKey();
+        await pool.query(`INSERT INTO api_keys (user_id, name, key_hash, key_hint, scopes)
+       VALUES ($1, $2, $3, $4, $5)`, [userId, name.trim(), keyHash, keyHint, validScopes]);
+        res.status(201).json({
+            key: rawKey,
+            hint: keyHint,
+            name: name.trim(),
+            scopes: validScopes,
+        });
+    }
+    catch (err) {
+        console.error("POST /api-keys error:", err);
+        res.status(500).json({ error: "Internal server error" });
+    }
+});
+// GET /api-keys — 列出 API Keys
+router.get("/", async (req, res) => {
+    try {
+        const userId = req.user.sub;
+        const result = await pool.query(`SELECT id, name, key_hint, scopes, last_used_at, created_at
+       FROM api_keys
+       WHERE user_id = $1 AND revoked_at IS NULL
+       ORDER BY created_at DESC`, [userId]);
+        res.json(result.rows.map((row) => ({
+            id: row.id,
+            name: row.name,
+            keyHint: row.key_hint,
+            scopes: row.scopes,
+            lastUsedAt: row.last_used_at,
+            createdAt: row.created_at,
+        })));
+    }
+    catch (err) {
+        console.error("GET /api-keys error:", err);
+        res.status(500).json({ error: "Internal server error" });
+    }
+});
+// DELETE /api-keys/:id — 吊销 API Key（软删除）
+router.delete("/:id", async (req, res) => {
+    try {
+        const userId = req.user.sub;
+        const { id } = req.params;
+        const result = await pool.query(`UPDATE api_keys SET revoked_at = now()
+       WHERE id = $1 AND user_id = $2 AND revoked_at IS NULL
+       RETURNING id`, [id, userId]);
+        if (result.rowCount === 0) {
+            res.status(404).json({ error: "API key not found" });
+            return;
+        }
+        res.status(204).send();
+    }
+    catch (err) {
+        console.error("DELETE /api-keys/:id error:", err);
+        res.status(500).json({ error: "Internal server error" });
+    }
+});
+export default router;

package/dist/server/routes/auth-token.js

@@ -0,0 +1,41 @@
+import { Router } from "express";
+import pool from "../db.js";
+import { hashApiKey, signJwt } from "../auth.js";
+const router = Router();
+// POST /auth/token — API Key 换取 JWT（无需登录态）
+router.post("/", async (req, res) => {
+    try {
+        const { apiKey } = req.body;
+        if (!apiKey || typeof apiKey !== "string") {
+            res.status(401).json({ error: "Invalid credentials" });
+            return;
+        }
+        const keyHash = hashApiKey(apiKey);
+        const result = await pool.query(`SELECT id, user_id, scopes, expires_at
+       FROM api_keys
+       WHERE key_hash = $1 AND revoked_at IS NULL`, [keyHash]);
+        if (result.rowCount === 0) {
+            res.status(401).json({ error: "Invalid credentials" });
+            return;
+        }
+        const row = result.rows[0];
+        if (row.expires_at && new Date(row.expires_at) < new Date()) {
+            res.status(401).json({ error: "Invalid credentials" });
+            return;
+        }
+        // 异步更新 last_used_at，不阻塞响应
+        pool.query("UPDATE api_keys SET last_used_at = now() WHERE id = $1", [row.id]).catch((err) => console.error("Failed to update last_used_at:", err));
+        const { token, expiresIn } = signJwt({
+            sub: row.user_id,
+            scopes: row.scopes ?? ["read"],
+            via: "api_key",
+            kid: row.id,
+        });
+        res.json({ token, expiresIn });
+    }
+    catch (err) {
+        console.error("POST /auth/token error:", err);
+        res.status(500).json({ error: "Internal server error" });
+    }
+});
+export default router;

package/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@lessie/mcp-server",
+  "version": "0.0.1",
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.10.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.4.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}