@liangshanli/mcp-server-project-standards 1.0.0 → 1.2.0

package/README.md

@@ -2,6 +2,43 @@
 
 A MCP (Model Context Protocol) server for project standards management, designed for AI-assisted development to help teams maintain unified development standards and specifications across multiple machines.
 
+## 📋 Version Updates
+
+### v1.1.0 (2024-12-19)
+
+#### 🆕 New Features
+- **API Debug Tool Environment Variable Support**:
+  - `API_DEBUG_ALLOWED_METHODS` - Control allowed request methods (default: GET)
+  - `API_DEBUG_LOGIN_URL` - Set login API URL (default: /api/login)
+  - `API_DEBUG_LOGIN_METHOD` - Set login request method (default: POST)
+  - `API_DEBUG_LOGIN_BODY` - Set login request body (default: {"username":"","password":""})
+  - `API_DEBUG_LOGIN_DESCRIPTION` - Set login API description (default: Save returned token to common headers in debug tool, field name Authorization, field value Bearer token)
+
+#### 🔧 Feature Improvements
+- **Smart Login API Recognition**:
+  - Support for full URL and relative path matching
+  - Automatic login API recognition using environment variable configuration
+  - Non-login APIs strictly follow allowed method restrictions
+
+- **Error Handling Optimization**:
+  - Only request-related errors are saved to api.json
+  - Method validation errors don't pollute execution records
+  - More precise error classification and handling
+
+- **Dynamic Tool Description**:
+  - Display login authentication information based on environment variable configuration
+  - Real-time display of allowed request methods and usage instructions
+
+#### 🛡️ Security Enhancements
+- **Request Method Restrictions**: Default only allows GET requests to prevent accidental operations
+- **Login API Exception**: Login APIs can use methods configured in environment variables
+- **Flexible Configuration**: Can open more request methods as needed
+
+#### 📚 Documentation Updates
+- Added environment variable configuration instructions
+- Updated API debug tool usage guide
+- Improved login authentication flow documentation
+
 ## 🚀 Core Advantages
 
 ### 🎯 Solving Multi-Machine Development Chaos
@@ -73,9 +110,14 @@ The server uses the `./.setting/` directory to store configuration files by defa
 
 ### Environment Variables
 
-| Variable | Default | Description |
-|----------|---------|-------------|
-| CONFIG_DIR | ./.setting | Configuration file directory (contains config.json and api.json) |
+| Variable | Default | Description | Example |
+|----------|---------|-------------|---------|
+| CONFIG_DIR | ./.setting | Configuration file directory (contains config.json and api.json) | `export CONFIG_DIR="./config"` |
+| API_DEBUG_ALLOWED_METHODS | GET | Control allowed request methods (supports: GET,POST,PUT,DELETE,PATCH, etc.) | `export API_DEBUG_ALLOWED_METHODS="GET,POST"` |
+| API_DEBUG_LOGIN_URL | /api/login | Set login API URL | `export API_DEBUG_LOGIN_URL="/api/auth/login"` |
+| API_DEBUG_LOGIN_METHOD | POST | Set login request method | `export API_DEBUG_LOGIN_METHOD="POST"` |
+| API_DEBUG_LOGIN_BODY | {"username":"","password":""} | Set login request body | `export API_DEBUG_LOGIN_BODY='{"mobile":"","password":""}'` |
+| API_DEBUG_LOGIN_DESCRIPTION | Save returned token to common headers in debug tool, field name Authorization, field value Bearer token | Set login API description | `export API_DEBUG_LOGIN_DESCRIPTION="User Login API"` |
 
 ### Configuration Files
 
@@ -166,7 +208,12 @@ npm run dev
       "command": "npx",
       "args": ["@liangshanli/mcp-server-project-standards"],
       "env": {
-        "CONFIG_DIR": "./.setting"
+        "CONFIG_DIR": "./.setting",
+        "API_DEBUG_ALLOWED_METHODS": "GET,POST,PUT,DELETE",
+        "API_DEBUG_LOGIN_URL": "/api/login",
+        "API_DEBUG_LOGIN_METHOD": "POST",
+        "API_DEBUG_LOGIN_BODY": "{\"username\":\"\",\"password\":\"\"}",
+        "API_DEBUG_LOGIN_DESCRIPTION": "Save returned token to common headers in debug tool, field name Authorization, field value Bearer token"
       }
     }
   }
@@ -185,7 +232,12 @@ npm run dev
       "command": "npx",
       "args": ["@liangshanli/mcp-server-project-standards"],
       "env": {
-        "CONFIG_DIR": "./.setting"
+        "CONFIG_DIR": "./.setting",
+        "API_DEBUG_ALLOWED_METHODS": "GET,POST,PUT,DELETE",
+        "API_DEBUG_LOGIN_URL": "/api/login",
+        "API_DEBUG_LOGIN_METHOD": "POST",
+        "API_DEBUG_LOGIN_BODY": "{\"username\":\"\",\"password\":\"\"}",
+        "API_DEBUG_LOGIN_DESCRIPTION": "Save returned token to common headers in debug tool, field name Authorization, field value Bearer token"
       }
     }
   }

package/README.zh-CN.md

@@ -2,6 +2,43 @@
 
 一个基于 MCP（Model Context Protocol）协议的项目标准管理工具，专为 AI 辅助开发而设计，帮助团队在多台机器上保持统一的开发标准和规范。
 
+## 📋 版本更新说明
+
+### v1.1.0 (2024-12-19)
+
+#### 🆕 新增功能
+- **API 调试工具环境变量支持**：
+  - `API_DEBUG_ALLOWED_METHODS` - 控制允许的请求方法（默认：GET，支持：GET,POST,PUT,DELETE,PATCH等）
+  - `API_DEBUG_LOGIN_URL` - 设置登录接口 URL（默认：/api/login）
+  - `API_DEBUG_LOGIN_METHOD` - 设置登录请求方法（默认：POST）
+  - `API_DEBUG_LOGIN_BODY` - 设置登录请求体（默认：{"username":"","password":""}）
+  - `API_DEBUG_LOGIN_DESCRIPTION` - 设置登录接口说明（默认：将返回的token保存到调试工具中的公共header，字段名Authorization，字段值是Bearer token）
+
+#### 🔧 功能优化
+- **登录接口智能识别**：
+  - 支持完整 URL 和相对路径匹配
+  - 自动识别登录接口并使用环境变量配置
+  - 非登录接口严格遵循允许的方法限制
+
+- **错误处理优化**：
+  - 只有请求相关错误才保存到 api.json
+  - 方法验证错误不污染执行记录
+  - 更精确的错误分类和处理
+
+- **工具描述动态显示**：
+  - 根据环境变量配置显示登录认证信息
+  - 实时显示允许的请求方法和使用说明
+
+#### 🛡️ 安全增强
+- **请求方法限制**：默认只允许 GET 请求，防止误操作
+- **登录接口例外**：登录接口可使用环境变量中配置的方法
+- **灵活配置**：可根据需要开放更多请求方法
+
+#### 📚 文档更新
+- 添加了环境变量配置说明
+- 更新了 API 调试工具使用指南
+- 完善了登录认证流程文档
+
 ## 🚀 核心优势
 
 ### 🎯 解决多机器开发混乱问题
@@ -73,9 +110,14 @@ npm install
 
 ### 环境变量
 
-| 变量名 | 默认值 | 描述 |
-|--------|--------|------|
-| CONFIG_DIR | ./.setting | 配置文件目录（包含 config.json 和 api.json） |
+| 变量名 | 默认值 | 描述 | 示例 |
+|--------|--------|------|------|
+| CONFIG_DIR | ./.setting | 配置文件目录（包含 config.json 和 api.json） | `export CONFIG_DIR="./config"` |
+| API_DEBUG_ALLOWED_METHODS | GET | 控制允许的请求方法（支持：GET,POST,PUT,DELETE,PATCH等） | `export API_DEBUG_ALLOWED_METHODS="GET,POST"` |
+| API_DEBUG_LOGIN_URL | /api/login | 设置登录接口 URL | `export API_DEBUG_LOGIN_URL="/api/auth/login"` |
+| API_DEBUG_LOGIN_METHOD | POST | 设置登录请求方法 | `export API_DEBUG_LOGIN_METHOD="POST"` |
+| API_DEBUG_LOGIN_BODY | {"username":"","password":""} | 设置登录请求体 | `export API_DEBUG_LOGIN_BODY='{"mobile":"","password":""}'` |
+| API_DEBUG_LOGIN_DESCRIPTION | 将返回的token保存到调试工具中的公共header，字段名Authorization，字段值是Bearer token | 设置登录接口说明 | `export API_DEBUG_LOGIN_DESCRIPTION="用户登录接口"` |
 
 ### 配置文件
 
@@ -166,7 +208,12 @@ npm run dev
       "command": "npx",
       "args": ["@liangshanli/mcp-server-project-standards"],
       "env": {
-        "CONFIG_DIR": "./.setting"
+        "CONFIG_DIR": "./.setting",
+        "API_DEBUG_ALLOWED_METHODS": "GET,POST,PUT,DELETE",
+        "API_DEBUG_LOGIN_URL": "/api/login",
+        "API_DEBUG_LOGIN_METHOD": "POST",
+        "API_DEBUG_LOGIN_BODY": "{\"username\":\"\",\"password\":\"\"}",
+        "API_DEBUG_LOGIN_DESCRIPTION": "将返回的token保存到调试工具中的公共header，字段名Authorization，字段值是Bearer token"
       }
     }
   }
@@ -185,7 +232,12 @@ npm run dev
       "command": "npx",
       "args": ["@liangshanli/mcp-server-project-standards"],
       "env": {
-        "CONFIG_DIR": "./.setting"
+        "CONFIG_DIR": "./.setting",
+        "API_DEBUG_ALLOWED_METHODS": "GET,POST,PUT,DELETE",
+        "API_DEBUG_LOGIN_URL": "/api/login",
+        "API_DEBUG_LOGIN_METHOD": "POST",
+        "API_DEBUG_LOGIN_BODY": "{\"username\":\"\",\"password\":\"\"}",
+        "API_DEBUG_LOGIN_DESCRIPTION": "将返回的token保存到调试工具中的公共header，字段名Authorization，字段值是Bearer token"
       }
     }
   }
@@ -348,6 +400,10 @@ npm run dev
 - **执行记录**：无论成功失败都记录执行历史
 - **搜索功能**：支持按 URL 或描述搜索 API
 - **参数管理**：支持查询参数、请求体、自定义请求头等
+- **环境变量控制**：通过环境变量控制允许的请求方法和登录接口配置
+- **请求方法限制**：默认只允许 GET 请求，防止误操作
+- **登录接口智能识别**：自动识别登录接口并使用环境变量配置
+- **动态工具描述**：根据环境变量配置实时显示工具说明
 
 **🔐 特别说明 - 登录认证流程：**
 

package/bin/cli.js

@@ -28,9 +28,20 @@ function startServer() {
   const env = {
     ...process.env,
     // Set CONFIG_DIR if specified, otherwise use default
-    CONFIG_DIR: process.env.CONFIG_DIR || './.setting'
+    CONFIG_DIR: process.env.CONFIG_DIR || './.setting',
+    // API Debug environment variables
+    API_DEBUG_ALLOWED_METHODS: process.env.API_DEBUG_ALLOWED_METHODS || 'GET',
+    API_DEBUG_LOGIN_URL: process.env.API_DEBUG_LOGIN_URL || '/api/login',
+    API_DEBUG_LOGIN_METHOD: process.env.API_DEBUG_LOGIN_METHOD || 'POST',
+    API_DEBUG_LOGIN_BODY: process.env.API_DEBUG_LOGIN_BODY || '{"username":"","password":""}',
+    API_DEBUG_LOGIN_DESCRIPTION: process.env.API_DEBUG_LOGIN_DESCRIPTION || 'Save returned token to common headers in debug tool, field name Authorization, field value Bearer token'
   };
 
+  // Convert allowed methods to uppercase if specified
+  if (env.API_DEBUG_ALLOWED_METHODS) {
+    env.API_DEBUG_ALLOWED_METHODS = env.API_DEBUG_ALLOWED_METHODS.toUpperCase();
+  }
+
   writeLog('INFO', 'Starting MCP Project Standards server');
 
   server = spawn('node', [serverPath], {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@liangshanli/mcp-server-project-standards",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "MCP Project Standards server with project info, structure, API standards, development standards and custom tools",
   "main": "bin/cli.js",
   "bin": {

package/src/server-final.js

@@ -54,7 +54,7 @@ console.error('==============================================');
 class ProjectStandardsMCPServer {
   constructor() {
     this.name = 'project-standards-mcp-server';
-    this.version = '1.0.0';
+    this.version = '1.2.0';
     this.initialized = false;
     this.config = getConfig();
     this.needsProjectFolder = this.config === null;
@@ -498,16 +498,48 @@ class ProjectStandardsMCPServer {
               }
             );
           
+          // 构建 API 调试工具描述
+          let apiDebugDescription = 'API debugging tool for testing and executing API requests. Use URL to identify APIs instead of index numbers.';
+          
+          // 检查是否设置了登录接口环境变量
+          const loginUrl = process.env.API_DEBUG_LOGIN_URL;
+          const loginMethod = process.env.API_DEBUG_LOGIN_METHOD;
+          const loginDescription = process.env.API_DEBUG_LOGIN_DESCRIPTION;
+          const allowedMethods = process.env.API_DEBUG_ALLOWED_METHODS;
+          
+          if (loginUrl || loginMethod || allowedMethods) {
+            apiDebugDescription += '\n\n🔐 Login Authentication Configuration:';
+            
+            if (loginUrl) {
+              apiDebugDescription += `\n- Login URL: ${loginUrl}`;
+            }
+            if (loginMethod) {
+              apiDebugDescription += `\n- Login Method: ${loginMethod}`;
+            }
+            if (loginDescription) {
+              apiDebugDescription += `\n- Login Description: ${loginDescription}`;
+            }
+            if (allowedMethods) {
+              apiDebugDescription += `\n- Allowed Methods: ${allowedMethods}`;
+            }
+            
+            apiDebugDescription += '\n\n💡 Usage Instructions:';
+            apiDebugDescription += '\n- Use URL to identify APIs for execute and delete operations (not index numbers)';
+            apiDebugDescription += '\n- Login API automatically uses environment variable configuration';
+            apiDebugDescription += '\n- Non-login APIs must use allowed methods only';
+            apiDebugDescription += '\n- Common request headers are automatically updated after successful login';
+          }
+          
           tools.push({
             name: 'api_debug',
-            description: 'API debugging tool for testing and executing API requests',
+            description: apiDebugDescription,
             inputSchema: {
               type: 'object',
               properties: {
             action: {
               type: 'string',
               enum: ['get', 'set', 'delete', 'execute', 'updateBaseUrl', 'updateHeaders', 'deleteHeader', 'search'],
-              description: 'Action to perform: "get" to retrieve config, "set" to update config, "delete" to delete API, "execute" to execute API, "updateBaseUrl" to update base URL, "updateHeaders" to update headers, "deleteHeader" to delete specific header, "search" to search APIs by URL or description'
+              description: 'Action to perform: "get" to retrieve config, "set" to update config, "delete" to delete API by URL, "execute" to execute API by URL, "updateBaseUrl" to update base URL, "updateHeaders" to update headers, "deleteHeader" to delete specific header, "search" to search APIs by URL or description'
             },
                 config: {
                   type: 'object',
@@ -561,9 +593,9 @@ class ProjectStandardsMCPServer {
                     }
                   }
                 },
-            index: {
-              type: 'number',
-              description: 'Index of API to delete or execute (required for "delete" and "execute" actions)'
+            url: {
+              type: 'string',
+              description: 'URL of API to delete or execute (required for "delete" and "execute" actions)'
             },
             baseUrl: {
               type: 'string',
@@ -599,16 +631,16 @@ class ProjectStandardsMCPServer {
                 {
                   properties: {
                     action: { const: 'delete' },
-                    index: { type: 'number' }
+                    url: { type: 'string' }
                   },
-                  required: ['index']
+                  required: ['url']
                 },
                 {
                   properties: {
                     action: { const: 'execute' },
-                    index: { type: 'number' }
+                    url: { type: 'string' }
                   },
-                  required: ['index']
+                  required: ['url']
                 },
                 {
                   properties: {

package/src/utils/api_debug.js

@@ -1,6 +1,32 @@
 const fs = require('fs-extra');
 const path = require('path');
 
+// Get allowed methods from environment variable
+const getAllowedMethods = () => {
+  const allowedMethods = process.env.API_DEBUG_ALLOWED_METHODS || 'GET';
+  return allowedMethods.split(',').map(method => method.trim().toUpperCase());
+};
+
+// Get login URL from environment variable
+const getLoginUrl = () => {
+  return process.env.API_DEBUG_LOGIN_URL || '/api/login';
+};
+
+// Get login method from environment variable
+const getLoginMethod = () => {
+  return (process.env.API_DEBUG_LOGIN_METHOD || 'POST').toUpperCase();
+};
+
+// Get login body from environment variable
+const getLoginBody = () => {
+  return process.env.API_DEBUG_LOGIN_BODY || '{"username":"","password":""}';
+};
+
+// Get login description from environment variable
+const getLoginDescription = () => {
+  return process.env.API_DEBUG_LOGIN_DESCRIPTION || 'Save returned token to common headers in debug tool, field name Authorization, field value Bearer token';
+};
+
 // Get API debug config file path
 const getApiConfigPath = () => {
   const configDir = process.env.CONFIG_DIR || './.setting';
@@ -93,7 +119,7 @@ const detectContentType = (body) => {
  * @param {string} params.config.baseUrl - API 基础 URL
  * @param {Object} params.config.headers - 公共请求头
  * @param {Array} params.config.list - API 接口列表
- * @param {string} params.index - 要执行的接口索引（执行时必需）
+ * @param {string} params.url - 要执行的接口URL（执行时必需）
  * @param {string} params.baseUrl - 新的基础 URL（updateBaseUrl 时必需）
  * @param {Object} params.headers - 新的公共请求头（updateHeaders 时必需）
  * @param {string} params.headerName - 要删除的请求头名称（deleteHeader 时必需）
@@ -103,7 +129,7 @@ const detectContentType = (body) => {
  * @returns {Object} API 调试结果
  */
 async function api_debug(params, config, saveConfig) {
-  const { action, config: apiConfig, index } = params || {};
+  const { action, config: apiConfig, url } = params || {};
   
   if (!action) {
     throw new Error('Missing action parameter. Must be "get", "set", "delete", "execute", "updateBaseUrl", "updateHeaders", "deleteHeader", or "search"');
@@ -173,8 +199,8 @@ async function api_debug(params, config, saveConfig) {
       throw new Error(`Failed to update API debug config: ${err.message}`);
     }
   } else if (action === 'delete') {
-    if (!index && index !== 0) {
-      throw new Error('Missing index parameter for delete action');
+    if (!url) {
+      throw new Error('Missing url parameter for delete action');
     }
     
     try {
@@ -185,31 +211,36 @@ async function api_debug(params, config, saveConfig) {
         apiDebugConfig.list = [];
       }
       
-      // 删除指定索引的接口
-      if (index >= 0 && index < apiDebugConfig.list.length) {
-        const deletedItem = apiDebugConfig.list.splice(index, 1)[0];
-        
-        // 保存配置
-        const saved = saveApiConfig(apiDebugConfig);
-        if (!saved) {
-          throw new Error('Failed to save API configuration');
-        }
-        
+      // 查找并删除指定URL的接口
+      const originalLength = apiDebugConfig.list.length;
+      apiDebugConfig.list = apiDebugConfig.list.filter(item => item.url !== url);
+      
+      if (apiDebugConfig.list.length === originalLength) {
         return {
-          success: true,
-          message: `Successfully deleted API at index ${index}`,
-          deletedItem: deletedItem,
+          success: false,
+          message: `API with URL "${url}" not found`,
           timestamp: new Date().toISOString()
         };
-      } else {
-        throw new Error(`Invalid index: ${index}. Must be between 0 and ${apiDebugConfig.list.length - 1}`);
       }
+      
+      // 保存配置
+      const saved = saveApiConfig(apiDebugConfig);
+      if (!saved) {
+        throw new Error('Failed to save API configuration');
+      }
+      
+      return {
+        success: true,
+        message: `Successfully deleted API with URL: ${url}`,
+        deletedUrl: url,
+        timestamp: new Date().toISOString()
+      };
     } catch (err) {
       throw new Error(`Failed to delete API: ${err.message}`);
     }
   } else if (action === 'execute') {
-    if (!index && index !== 0) {
-      throw new Error('Missing index parameter for execute action');
+    if (!url) {
+      throw new Error('Missing url parameter for execute action');
     }
     
     try {
@@ -220,14 +251,54 @@ async function api_debug(params, config, saveConfig) {
         throw new Error('API list not found or invalid');
       }
       
-      if (index < 0 || index >= apiDebugConfig.list.length) {
-        throw new Error(`Invalid index: ${index}. Must be between 0 and ${apiDebugConfig.list.length - 1}`);
+      // 查找指定URL的接口
+      const apiItem = apiDebugConfig.list.find(item => item.url === url);
+      if (!apiItem) {
+        throw new Error(`API with URL "${url}" not found`);
       }
       
-      const apiItem = apiDebugConfig.list[index];
+      // 获取接口在列表中的索引（用于更新数据）
+      const itemIndex = apiDebugConfig.list.findIndex(item => item.url === url);
       const baseUrl = apiDebugConfig.baseUrl || '';
       const commonHeaders = apiDebugConfig.headers || {};
       
+      // 验证请求方法是否被允许
+      const allowedMethods = getAllowedMethods();
+      const requestMethod = (apiItem.method || 'GET').toUpperCase();
+      const loginUrl = getLoginUrl();
+      
+      // 判断是否为登录接口 - 支持完整 URL 和相对路径匹配
+      const isLoginRequest = (() => {
+        const apiUrl = apiItem.url;
+        const loginUrlPattern = loginUrl;
+        
+        // 如果登录 URL 是完整 URL，提取路径部分进行匹配
+        if (loginUrlPattern.startsWith('http://') || loginUrlPattern.startsWith('https://')) {
+          try {
+            const url = new URL(loginUrlPattern);
+            const loginPath = url.pathname;
+            // 匹配完整路径或去掉前导斜杠的路径
+            return apiUrl === loginPath || apiUrl === loginPath.replace(/^\//, '') || apiUrl === loginUrlPattern;
+          } catch (e) {
+            // 如果 URL 解析失败，回退到字符串匹配
+            return apiUrl === loginUrlPattern;
+          }
+        } else {
+          // 相对路径匹配
+          return apiUrl === loginUrlPattern || 
+                 apiUrl === loginUrlPattern.replace(/^\//, '') || 
+                 apiUrl.endsWith(loginUrlPattern) ||
+                 apiUrl.endsWith(loginUrlPattern.replace(/^\//, ''));
+        }
+      })();
+      
+      if (!allowedMethods.includes(requestMethod)) {
+        // 如果是登录接口，继续执行；否则返回错误
+        if (!isLoginRequest) {
+          throw new Error(`Method ${requestMethod} is not allowed. Allowed methods: ${allowedMethods.join(', ')}`);
+        }
+      }
+      
       // 构建完整 URL
       const fullUrl = baseUrl + apiItem.url;
       
@@ -291,64 +362,113 @@ async function api_debug(params, config, saveConfig) {
       
       const finalUrl = queryString ? `${fullUrl}?${queryString}` : fullUrl;
       
+      let success = true;
       let response;
       let responseData;
       let error = null;
-      let success = true;
       
+      // 请求处理部分 - 只有这部分出错才会保存到 api.json
       try {
-        // 执行请求
-        response = await fetch(finalUrl, {
-          method: apiItem.method || 'GET',
-          headers: headers,
-          body: body
-        });
         
-        // 获取响应数据
-        const contentType = response.headers.get('content-type');
+        // 如果是登录接口且方法不被允许，使用环境变量中的登录配置
+        if (isLoginRequest && !allowedMethods.includes(requestMethod)) {
+          const loginMethod = getLoginMethod();
+          const loginBody = getLoginBody();
+          
+          // 更新请求方法和请求体
+          apiItem.method = loginMethod;
+          if (loginBody) {
+            apiItem.body = loginBody;
+          }
+          
+          // 更新最终 URL 和方法
+          const updatedFinalUrl = queryString ? `${fullUrl}?${queryString}` : fullUrl;
+          
+          try {
+            response = await fetch(updatedFinalUrl, {
+              method: loginMethod,
+              headers: headers,
+              body: loginBody
+            });
+          } catch (fetchError) {
+            error = fetchError.message;
+            success = false;
+            response = null;
+          }
+        } else {
+          try {
+            // 执行请求
+            response = await fetch(finalUrl, {
+              method: apiItem.method || 'GET',
+              headers: headers,
+              body: body
+            });
+          } catch (fetchError) {
+            error = fetchError.message;
+            success = false;
+            response = null;
+          }
+        }
         
-        if (contentType && contentType.includes('application/json')) {
-          responseData = await response.json();
+        if (response) {
+          // 获取响应数据
+          const contentType = response.headers.get('content-type');
+          
+          if (contentType && contentType.includes('application/json')) {
+            responseData = await response.json();
+          } else {
+            responseData = await response.text();
+          }
+          
+          // 判断请求是否成功（HTTP 状态码 200-299 为成功）
+          const isHttpSuccess = response.status >= 200 && response.status < 300;
+          success = isHttpSuccess;
+          
+          // 记录响应信息
+          apiDebugConfig.list[itemIndex].data = responseData;
+          apiDebugConfig.list[itemIndex].status = response.status;
+          apiDebugConfig.list[itemIndex].statusText = response.statusText;
+          apiDebugConfig.list[itemIndex].responseHeaders = Object.fromEntries(response.headers.entries());
+          apiDebugConfig.list[itemIndex].lastExecuted = new Date().toISOString();
+          apiDebugConfig.list[itemIndex].success = isHttpSuccess;
+          apiDebugConfig.list[itemIndex].error = isHttpSuccess ? null : `HTTP ${response.status}: ${response.statusText}`;
         } else {
-          responseData = await response.text();
+          // 记录失败信息
+          success = false;
+          apiDebugConfig.list[itemIndex].data = null;
+          apiDebugConfig.list[itemIndex].status = null;
+          apiDebugConfig.list[itemIndex].statusText = null;
+          apiDebugConfig.list[itemIndex].responseHeaders = null;
+          apiDebugConfig.list[itemIndex].lastExecuted = new Date().toISOString();
+          apiDebugConfig.list[itemIndex].success = false;
+          apiDebugConfig.list[itemIndex].error = error;
         }
         
-        // 记录成功信息
-        apiDebugConfig.list[index].data = responseData;
-        apiDebugConfig.list[index].status = response.status;
-        apiDebugConfig.list[index].statusText = response.statusText;
-        apiDebugConfig.list[index].responseHeaders = Object.fromEntries(response.headers.entries());
-        apiDebugConfig.list[index].lastExecuted = new Date().toISOString();
-        apiDebugConfig.list[index].success = true;
-        apiDebugConfig.list[index].error = null;
+        // 去重处理：相同的 URL 只保留一份（保留最新的执行结果）
+        const urlMap = new Map();
+        apiDebugConfig.list.forEach(item => {
+          if (item.url) {
+            urlMap.set(item.url, item);
+          }
+        });
+        apiDebugConfig.list = Array.from(urlMap.values());
         
-      } catch (fetchError) {
-        // 记录失败信息
-        error = fetchError.message;
-        success = false;
+        // 无论成功还是失败，都保存配置
+        saveApiConfig(apiDebugConfig);
         
-        apiDebugConfig.list[index].data = null;
-        apiDebugConfig.list[index].status = null;
-        apiDebugConfig.list[index].statusText = null;
-        apiDebugConfig.list[index].responseHeaders = null;
-        apiDebugConfig.list[index].lastExecuted = new Date().toISOString();
-        apiDebugConfig.list[index].success = false;
-        apiDebugConfig.list[index].error = error;
-      }
-      
-      // 去重处理：相同的 URL 只保留一份（保留最新的执行结果）
-      const urlMap = new Map();
-      apiDebugConfig.list.forEach(item => {
-        if (item.url) {
-          urlMap.set(item.url, item);
+      } catch (requestError) {
+        // 只有请求相关的错误才保存到 api.json
+        try {
+          apiDebugConfig.list[itemIndex].lastExecuted = new Date().toISOString();
+          apiDebugConfig.list[itemIndex].success = false;
+          apiDebugConfig.list[itemIndex].error = requestError.message;
+          saveApiConfig(apiDebugConfig);
+        } catch (saveErr) {
+          console.error('Failed to save request error information:', saveErr.message);
         }
-      });
-      apiDebugConfig.list = Array.from(urlMap.values());
-      
-      // 无论成功还是失败，都保存配置
-      saveApiConfig(apiDebugConfig);
+      }
       
-      if (success) {
+      if (success && response) {
         return {
           success: true,
           message: `Successfully executed API: ${apiItem.description || apiItem.url}`,
@@ -376,7 +496,7 @@ async function api_debug(params, config, saveConfig) {
             headers: headers,
             body: body
           },
-          error: error,
+          error: error || (response ? `HTTP ${response.status}: ${response.statusText}` : 'Request failed'),
           timestamp: new Date().toISOString()
         };
       }
@@ -384,10 +504,11 @@ async function api_debug(params, config, saveConfig) {
       // 如果是在保存配置时出错，也要尝试记录错误信息
       try {
         const apiDebugConfig = loadApiConfig();
-        if (apiDebugConfig.list && apiDebugConfig.list[index]) {
-          apiDebugConfig.list[index].lastExecuted = new Date().toISOString();
-          apiDebugConfig.list[index].success = false;
-          apiDebugConfig.list[index].error = err.message;
+        const itemIndex = apiDebugConfig.list.findIndex(item => item.url === url);
+        if (apiDebugConfig.list && itemIndex >= 0) {
+          apiDebugConfig.list[itemIndex].lastExecuted = new Date().toISOString();
+          apiDebugConfig.list[itemIndex].success = false;
+          apiDebugConfig.list[itemIndex].error = err.message;
           saveApiConfig(apiDebugConfig);
         }
       } catch (saveErr) {