@mcp-use/cli 3.3.2 → 3.4.0-canary.1

package/dist/commands/auth.d.ts

@@ -15,6 +15,13 @@ export declare function loginCommand(options?: {
     silent?: boolean;
     apiKey?: string;
     org?: string;
+    /**
+     * A pre-approved OAuth device code (RFC 8628). When provided, skip requesting
+     * a new code + opening a browser and poll the token endpoint directly. Used by
+     * the web onboarding flow, which creates and approves the code, then embeds it
+     * in the agent's prompt.
+     */
+    deviceCode?: string;
 }): Promise<void>;
 /**
  * Logout command - revokes API key and deletes config

package/dist/commands/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAoB,OAAO,EAAE,MAAM,iBAAiB,CAAC;AA8FjE;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,OAAO,EAAE,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,GAAG,IAAI,CAUhB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,OAAO,EAAE,EACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA2CzB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,CAAC,EAAE;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAiLhB;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAwBnD;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAqDnD"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAoB,OAAO,EAAE,MAAM,iBAAiB,CAAC;AA8FjE;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,OAAO,EAAE,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,GAAG,IAAI,CAUhB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,OAAO,EAAE,EACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA2CzB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,CAAC,EAAE;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2LhB;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAwBnD;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAqDnD"}

package/dist/commands/deploy.d.ts

@@ -26,6 +26,11 @@ interface DeployOptions {
     region?: "US" | "EU" | "APAC";
     buildCommand?: string;
     startCommand?: string;
+    /**
+     * Upload local source without connecting the user's GitHub. Uses the
+     * platform-managed org and a tarball instead of pushing to a user repo.
+     */
+    noGithub?: boolean;
 }
 export declare function deployCommand(options: DeployOptions): Promise<void>;
 export {};

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,SAAS,EACV,MAAM,iBAAiB,CAAC;AA+FzB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAuB/C;AA0CD,UAAU,aAAa;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAueD,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA2vBzE"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,SAAS,EACV,MAAM,iBAAiB,CAAC;AAgGzB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAuB/C;AA0CD,UAAU,aAAa;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAmmBD,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAixBzE"}

package/dist/index.cjs

@@ -1389,6 +1389,80 @@ var McpUseAPI = class _McpUseAPI {
       body: JSON.stringify(body)
     });
   }
+  /** Multipart helper: POST/PUT a tarball + fields without the JSON Content-Type. */
+  async uploadMultipart(endpoint, form, timeout = 12e4) {
+    const url = `${this.baseUrl}${endpoint}`;
+    const headers = {
+      "x-mcp-creation-location": "cli"
+    };
+    if (this.apiKey) headers["x-api-key"] = this.apiKey;
+    if (this.orgId) headers["x-profile-id"] = this.orgId;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers,
+        body: form,
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      if (response.status === 401) throw new ApiUnauthorizedError();
+      if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`API request failed: ${response.status} ${errorText}`);
+      }
+      return response.json();
+    } catch (error) {
+      clearTimeout(timeoutId);
+      if (error.name === "AbortError") {
+        throw new Error(`Request timeout after ${timeout / 1e3}s.`);
+      }
+      throw error;
+    }
+  }
+  /**
+   * Create a server from a source tarball deployed into the platform-managed
+   * GitHub org (no user GitHub connection required).
+   */
+  async createServerFromManagedUpload(input) {
+    const form = new FormData();
+    form.set(
+      "sourceFile",
+      new Blob([new Uint8Array(input.tarball)], { type: "application/gzip" }),
+      "source.tar.gz"
+    );
+    form.set("organizationId", input.organizationId);
+    form.set("managed", "true");
+    form.set("name", input.name);
+    form.set("repoName", input.repoName);
+    form.set("private", "true");
+    form.set("branch", input.branch ?? "main");
+    form.set("commitMessage", input.commitMessage ?? "Deploy from mcp-use CLI");
+    if (input.port != null) form.set("port", String(input.port));
+    if (input.env && Object.keys(input.env).length > 0) {
+      form.set("env", JSON.stringify(input.env));
+    }
+    return this.uploadMultipart("/servers", form);
+  }
+  /** Push a new source tarball as a commit on an existing server's repo. */
+  async pushSourceToServer(serverId, input) {
+    const form = new FormData();
+    form.set(
+      "sourceFile",
+      new Blob([new Uint8Array(input.tarball)], { type: "application/gzip" }),
+      "source.tar.gz"
+    );
+    form.set("branch", input.branch ?? "main");
+    form.set(
+      "commitMessage",
+      input.commitMessage ?? "Redeploy from mcp-use CLI"
+    );
+    return this.uploadMultipart(
+      `/servers/${encodeURIComponent(serverId)}/source`,
+      form
+    );
+  }
   async listServers(params) {
     const response = await this.request(`/servers${buildPaginationQuery(params)}`);
     return normalizePaginatedResponse(response, params);
@@ -1707,7 +1781,7 @@ async function loginCommand(options) {
       }
       return;
     }
-    if (await isLoggedIn()) {
+    if (!options?.deviceCode && await isLoggedIn()) {
       let needsReauth = false;
       try {
         await (await McpUseAPI.create()).testAuth();
@@ -1737,29 +1811,33 @@ async function loginCommand(options) {
     }
     console.log(source_default.cyan.bold("Logging in to Manufact cloud...\n"));
     const authBaseUrl = await getAuthBaseUrl();
-    const deviceResp = await requestDeviceCode(authBaseUrl);
-    const {
-      device_code,
-      user_code,
-      verification_uri,
-      verification_uri_complete,
-      interval
-    } = deviceResp;
-    const displayCode = user_code.length === 8 ? `${user_code.slice(0, 4)}-${user_code.slice(4)}` : user_code;
-    console.log(source_default.white("  Visit: ") + source_default.cyan(verification_uri));
-    console.log(source_default.white("  Code:  ") + source_default.bold.white(displayCode));
-    console.log();
-    const urlToOpen = verification_uri_complete || verification_uri;
-    try {
-      await open_default(urlToOpen);
-      console.log(source_default.gray("  Browser opened. Waiting for approval..."));
-    } catch {
-      console.log(source_default.gray("  Open the URL above in your browser."));
+    let device_code;
+    let interval;
+    if (options?.deviceCode) {
+      device_code = options.deviceCode.trim();
+      interval = 2;
+      console.log(source_default.gray("  Authenticating with provided device code..."));
+    } else {
+      const deviceResp = await requestDeviceCode(authBaseUrl);
+      device_code = deviceResp.device_code;
+      interval = deviceResp.interval || 5;
+      const { user_code, verification_uri, verification_uri_complete } = deviceResp;
+      const displayCode = user_code.length === 8 ? `${user_code.slice(0, 4)}-${user_code.slice(4)}` : user_code;
+      console.log(source_default.white("  Visit: ") + source_default.cyan(verification_uri));
+      console.log(source_default.white("  Code:  ") + source_default.bold.white(displayCode));
+      console.log();
+      const urlToOpen = verification_uri_complete || verification_uri;
+      try {
+        await open_default(urlToOpen);
+        console.log(source_default.gray("  Browser opened. Waiting for approval..."));
+      } catch {
+        console.log(source_default.gray("  Open the URL above in your browser."));
+      }
     }
     const accessToken = await pollForDeviceToken(
       authBaseUrl,
       device_code,
-      interval || 5
+      interval
     );
     console.log(source_default.gray("\n  Creating persistent API key..."));
     const api = await McpUseAPI.create();
@@ -4714,6 +4792,49 @@ ${MCP_USE_DIR}
   }
 }
 
+// src/utils/tarball.ts
+var import_tar = require("tar");
+var EXCLUDE_DIRS = /* @__PURE__ */ new Set([
+  ".git",
+  "node_modules",
+  "dist",
+  "build",
+  ".next",
+  ".turbo",
+  ".vercel",
+  ".cache",
+  "coverage",
+  ".mcp-use"
+]);
+async function packProjectTarball(projectDir, prefix = "app") {
+  const stream = (0, import_tar.create)(
+    {
+      gzip: true,
+      cwd: projectDir,
+      prefix,
+      portable: true,
+      filter: (entryPath) => {
+        const segments = entryPath.split(/[/\\]/).filter((s) => s && s !== ".");
+        if (segments.some((seg) => EXCLUDE_DIRS.has(seg))) return false;
+        const base = segments[segments.length - 1] ?? "";
+        if (base === ".DS_Store") return false;
+        if (base === ".env" || base.startsWith(".env.")) return false;
+        return true;
+      }
+    },
+    ["."]
+  );
+  const chunks = [];
+  for await (const chunk of stream) {
+    chunks.push(Buffer.from(chunk));
+  }
+  return Buffer.concat(chunks);
+}
+function sanitizeRepoName(name) {
+  const cleaned = name.trim().replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^[-.]+|[-.]+$/g, "").slice(0, 80);
+  return cleaned || "mcp-server";
+}
+
 // src/commands/deploy.ts
 async function parseEnvFile(filePath) {
   try {
@@ -5215,6 +5336,106 @@ Opening browser...`));
     return { ok: false, api: client };
   }
 }
+async function deployViaManagedUpload(api, options, ctx) {
+  const { cwd, organizationId } = ctx;
+  const projectDir = options.rootDir ? import_node_path8.default.resolve(cwd, options.rootDir) : cwd;
+  try {
+    await import_node_fs10.promises.access(projectDir);
+  } catch {
+    console.log(source_default.red(`\u2717 Project directory not found: ${projectDir}`));
+    process.exit(1);
+  }
+  const isMcp = await isMcpProject(projectDir);
+  if (!isMcp && !options.yes) {
+    console.log(
+      source_default.yellow("\u26A0\uFE0F  This doesn't look like an MCP server project.")
+    );
+    const shouldContinue = await prompt(
+      source_default.white("Continue anyway? (y/n): ")
+    );
+    if (!shouldContinue) process.exit(0);
+    console.log();
+  }
+  const envVars = await buildEnvVars(options);
+  const branch = "main";
+  const projectName = options.name || await getProjectName(projectDir);
+  console.log(source_default.gray("Packaging project source..."));
+  const tarball = await packProjectTarball(projectDir);
+  console.log(
+    source_default.gray(
+      `  Archive size: ${(tarball.length / 1024 / 1024).toFixed(2)} MB`
+    )
+  );
+  if (tarball.length > 80 * 1024 * 1024) {
+    console.log(
+      source_default.red(
+        "\u2717 Project archive exceeds 80 MB. Add large/derived files to .gitignore and retry."
+      )
+    );
+    process.exit(1);
+  }
+  const existingLink = !options.new ? await getProjectLink(cwd) : null;
+  let serverId = existingLink?.serverId;
+  if (serverId) {
+    try {
+      const linked = await api.getServer(serverId);
+      if (linked.organizationId !== organizationId) serverId = void 0;
+    } catch {
+      serverId = void 0;
+    }
+  }
+  let deploymentId;
+  if (serverId) {
+    console.log(source_default.gray("Uploading source and redeploying..."));
+    if (Object.keys(envVars).length > 0) {
+      await syncEnvVarsToServer(api, serverId, envVars);
+    }
+    await api.pushSourceToServer(serverId, {
+      tarball,
+      branch,
+      commitMessage: "Redeploy from mcp-use CLI"
+    });
+    const dep = await api.createDeployment({
+      serverId,
+      branch,
+      trigger: "redeploy"
+    });
+    deploymentId = dep.id;
+    await saveProjectLink(cwd, {
+      deploymentId: dep.id,
+      deploymentName: projectName,
+      serverId,
+      linkedAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+  } else {
+    console.log(source_default.gray("Uploading source (no GitHub required)..."));
+    const result = await api.createServerFromManagedUpload({
+      organizationId,
+      name: projectName,
+      repoName: sanitizeRepoName(projectName),
+      tarball,
+      branch,
+      commitMessage: "Deploy from mcp-use CLI",
+      port: options.port,
+      env: Object.keys(envVars).length > 0 ? envVars : void 0
+    });
+    deploymentId = result.deploymentId ?? void 0;
+    if (result.server?.id && deploymentId) {
+      await saveProjectLink(cwd, {
+        deploymentId,
+        deploymentName: projectName,
+        serverId: result.server.id,
+        linkedAt: (/* @__PURE__ */ new Date()).toISOString()
+      });
+    }
+  }
+  if (!deploymentId) {
+    console.log(source_default.red("\u2717 No deployment was created."));
+    process.exit(1);
+  }
+  console.log(source_default.green("\u2713 Deployment created: ") + source_default.gray(deploymentId));
+  await displayDeploymentProgress(api, deploymentId, { yes: options.yes });
+}
 async function deployCommand(options) {
   try {
     const cwd = process.cwd();
@@ -5332,6 +5553,22 @@ async function deployCommand(options) {
     }
     api = await ensureApiSessionForDeploy(api, options, resolvedOrgId);
     console.log(source_default.cyan.bold("\n\u{1F680} Deploying to Manufact cloud...\n"));
+    let useNoGithubDeploy = !!options.noGithub;
+    if (!useNoGithubDeploy && !options.new) {
+      const link = await getProjectLink(cwd);
+      if (link?.serverId) {
+        try {
+          const linked = await api.getServer(link.serverId);
+          if (linked.connectedRepository?.isManaged) useNoGithubDeploy = true;
+        } catch {
+        }
+      }
+    }
+    if (useNoGithubDeploy) {
+      const organizationId = resolvedOrgId ?? await api.resolveOrganizationId();
+      await deployViaManagedUpload(api, options, { cwd, organizationId });
+      return;
+    }
     const reauth = () => promptReauthenticateOn401(options, resolvedOrgId);
     let ghConn = await getGitHubConnectionStatusWith401Retry(
       api,
@@ -6953,7 +7190,7 @@ var import_node_os6 = require("os");
 var import_node_path9 = require("path");
 var import_node_stream = require("stream");
 var import_promises6 = require("stream/promises");
-var import_tar = require("tar");
+var import_tar2 = require("tar");
 var REPO_OWNER = "mcp-use";
 var REPO_NAME = "mcp-use";
 var REPO_BRANCH = "main";
@@ -6995,7 +7232,7 @@ async function addSkillsToProject(projectPath) {
     }
     await (0, import_promises6.pipeline)(
       import_node_stream.Readable.fromWeb(response.body),
-      (0, import_tar.extract)({
+      (0, import_tar2.extract)({
         cwd: tempDir,
         filter: (path11) => path11.includes("/skills/"),
         strip: 1
@@ -9396,18 +9633,27 @@ Looked for:
 program.command("login").description("Login to Manufact cloud").option(
   "--api-key <key>",
   "Login with an API key directly (non-interactive, for CI/CD)"
-).option("--org <slug|id|name>", "Select an organization non-interactively").action(async (opts) => {
-  try {
-    await loginCommand({ apiKey: opts.apiKey, org: opts.org });
-    process.exit(0);
-  } catch (error) {
-    console.error(
-      source_default.red.bold("\n\u2717 Login failed:"),
-      source_default.red(error instanceof Error ? error.message : "Unknown error")
-    );
-    process.exit(1);
+).option("--org <slug|id|name>", "Select an organization non-interactively").option(
+  "--device-code <code>",
+  "Authenticate with a pre-approved device code (non-interactive; e.g. from the web onboarding flow)"
+).action(
+  async (opts) => {
+    try {
+      await loginCommand({
+        apiKey: opts.apiKey,
+        org: opts.org,
+        deviceCode: opts.deviceCode
+      });
+      process.exit(0);
+    } catch (error) {
+      console.error(
+        source_default.red.bold("\n\u2717 Login failed:"),
+        source_default.red(error instanceof Error ? error.message : "Unknown error")
+      );
+      process.exit(1);
+    }
   }
-});
+);
 program.command("logout").description("Logout from Manufact cloud").action(async () => {
   await logoutCommand();
 });
@@ -9442,6 +9688,9 @@ program.command("deploy").description("Deploy MCP server from GitHub to Manufact
 ).option(
   "--start-command <cmd>",
   "Custom start command (overrides auto-detection)"
+).option(
+  "--no-github",
+  "Upload local source without connecting GitHub (repo hosted in the platform-managed org)"
 ).action(async (options) => {
   await deployCommand({
     open: options.open,
@@ -9456,7 +9705,8 @@ program.command("deploy").description("Deploy MCP server from GitHub to Manufact
     yes: options.yes,
     region: options.region,
     buildCommand: options.buildCommand,
-    startCommand: options.startCommand
+    startCommand: options.startCommand,
+    noGithub: options.github === false
   });
 });
 program.addCommand(createClientCommand());