@mobilenext/mobile-mcp 0.0.50 → 0.0.52

package/README.md

@@ -350,6 +350,31 @@ Or add the standard config under `mcpServers` in your settings as shown above.
 
 [Read more in our wiki](https://github.com/mobile-next/mobile-mcp/wiki)! 🚀
 
+### SSE Server Mode
+
+By default, Mobile MCP runs over stdio. To start an SSE server instead, use the `--listen` flag:
+
+```bash
+npx @mobilenext/mobile-mcp@latest --listen 3000
+```
+
+This binds to `localhost:3000`. To bind to a specific interface:
+
+```bash
+npx @mobilenext/mobile-mcp@latest --listen 0.0.0.0:3000
+```
+
+Then configure your MCP client to connect to `http://<host>:3000/mcp`.
+
+#### Authorization
+
+To require Bearer token authorization on the SSE server, set the `MOBILEMCP_AUTH` environment variable:
+
+```bash
+MOBILEMCP_AUTH=my-secret-token npx @mobilenext/mobile-mcp@latest --listen 3000
+```
+
+When set, all requests must include the header `Authorization: Bearer my-secret-token`.
 
 ### 🛠️ How to Use 📝
 
@@ -435,6 +460,30 @@ When launched, Mobile MCP can connect to:
 
 Make sure you have your mobile platform SDKs (Xcode, Android SDK) installed and configured properly before running Mobile Next Mobile MCP.
 
+### Telemetry
+
+Mobile MCP collects anonymous usage telemetry via PostHog. To disable it, set the `MOBILEMCP_DISABLE_TELEMETRY` environment variable:
+
+```bash
+MOBILEMCP_DISABLE_TELEMETRY=1 npx @mobilenext/mobile-mcp@latest
+```
+
+For json configurations:
+
+```json
+{
+  "mcpServers": {
+    "mobile-mcp": {
+      "command": "npx",
+      "args": ["-y", "@mobilenext/mobile-mcp@latest"],
+      "env": {
+        "MOBILEMCP_DISABLE_TELEMETRY": "1"
+      }
+    }
+  }
+}
+```
+
 ### Running in "headless" mode on Simulators/Emulators
 
 When you do not have a real device connected to your machine, you can run Mobile MCP with an emulator or simulator in the background.

package/lib/index.js

@@ -10,9 +10,34 @@ const server_1 = require("./server");
 const logger_1 = require("./logger");
 const express_1 = __importDefault(require("express"));
 const commander_1 = require("commander");
-const startSseServer = async (port) => {
+const startSseServer = async (host, port) => {
     const app = (0, express_1.default)();
     const server = (0, server_1.createMcpServer)();
+    const authToken = process.env.MOBILEMCP_AUTH;
+    if (!authToken) {
+        (0, logger_1.error)("WARNING: MOBILEMCP_AUTH is not set. The SSE server will accept unauthenticated connections. Set MOBILEMCP_AUTH to require Bearer token authentication.");
+    }
+    if (authToken) {
+        app.use((req, res, next) => {
+            if (req.headers.authorization !== `Bearer ${authToken}`) {
+                res.status(401).json({ error: "Unauthorized" });
+                return;
+            }
+            next();
+        });
+    }
+    // Block cross-origin requests — MCP clients are not browsers
+    app.use((req, res, next) => {
+        if (req.headers.origin) {
+            res.status(403).json({ error: "Cross-origin requests are not allowed" });
+            return;
+        }
+        if (req.method === "OPTIONS") {
+            res.status(403).end();
+            return;
+        }
+        next();
+    });
     let transport = null;
     app.post("/mcp", (req, res) => {
         if (transport) {
@@ -21,13 +46,17 @@ const startSseServer = async (port) => {
     });
     app.get("/mcp", (req, res) => {
         if (transport) {
-            transport.close();
+            res.status(409).json({ error: "Another client is already connected. Disconnect the existing client first." });
+            return;
         }
         transport = new sse_js_1.SSEServerTransport("/mcp", res);
+        transport.onclose = () => {
+            transport = null;
+        };
         server.connect(transport);
     });
-    app.listen(port, () => {
-        (0, logger_1.error)(`mobile-mcp ${(0, server_1.getAgentVersion)()} sse server listening on http://localhost:${port}/mcp`);
+    app.listen(port, host, () => {
+        (0, logger_1.error)(`mobile-mcp ${(0, server_1.getAgentVersion)()} sse server listening on http://${host}:${port}/mcp`);
     });
 };
 const startStdioServer = async () => {
@@ -46,12 +75,28 @@ const startStdioServer = async () => {
 const main = async () => {
     commander_1.program
         .version((0, server_1.getAgentVersion)())
-        .option("--port <port>", "Start SSE server on this port")
+        .option("--listen <listen>", "Start SSE server on [host:]port")
         .option("--stdio", "Start stdio server (default)")
         .parse(process.argv);
     const options = commander_1.program.opts();
-    if (options.port) {
-        await startSseServer(+options.port);
+    if (options.listen) {
+        const listen = options.listen.trim();
+        const lastColon = listen.lastIndexOf(":");
+        let host = "localhost";
+        let rawPort;
+        if (lastColon > 0) {
+            host = listen.substring(0, lastColon);
+            rawPort = listen.substring(lastColon + 1);
+        }
+        else {
+            rawPort = listen;
+        }
+        const port = Number.parseInt(rawPort, 10);
+        if (!host || !rawPort || !Number.isInteger(port) || port < 1 || port > 65535) {
+            (0, logger_1.error)(`Invalid --listen value "${listen}". Expected [host:]port with port 1-65535.`);
+            process.exit(1);
+        }
+        await startSseServer(host, port);
     }
     else {
         await startStdioServer();

package/lib/mobilecli.js

@@ -51,7 +51,7 @@ class Mobilecli {
             // We're inside node_modules, go to the last node_modules in the path
             const nodeModulesParts = pathParts.slice(0, lastNodeModulesIndex + 1);
             const lastNodeModulesPath = nodeModulesParts.join(node_path_1.sep);
-            const mobilecliPath = (0, node_path_1.join)(lastNodeModulesPath, "@mobilenext", "mobilecli", "bin", binaryName);
+            const mobilecliPath = (0, node_path_1.join)(lastNodeModulesPath, "mobilecli", "bin", binaryName);
             if ((0, node_fs_1.existsSync)(mobilecliPath)) {
                 return mobilecliPath;
             }
@@ -59,7 +59,7 @@ class Mobilecli {
         // Not in node_modules, look one directory up from current script
         const scriptDir = (0, node_path_1.dirname)(__filename);
         const parentDir = (0, node_path_1.dirname)(scriptDir);
-        const mobilecliPath = (0, node_path_1.join)(parentDir, "node_modules", "@mobilenext", "mobilecli", "bin", binaryName);
+        const mobilecliPath = (0, node_path_1.join)(parentDir, "node_modules", "mobilecli", "bin", binaryName);
         if ((0, node_fs_1.existsSync)(mobilecliPath)) {
             return mobilecliPath;
         }

package/lib/server.js

@@ -78,6 +78,9 @@ const createMcpServer = () => {
         }));
     };
     const posthog = async (event, properties) => {
+        if (process.env.MOBILEMCP_DISABLE_TELEMETRY) {
+            return;
+        }
         try {
             const url = "https://us.i.posthog.com/i/v0/e/";
             const api_key = "phc_KHRTZmkDsU7A8EbydEK8s4lJpPoTDyyBhSlwer694cS";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mobilenext/mobile-mcp",
   "mcpName": "io.github.mobile-next/mobile-mcp",
-  "version": "0.0.50",
+  "version": "0.0.52",
   "description": "Mobile MCP",
   "repository": {
     "type": "git",
@@ -34,7 +34,7 @@
     "zod-to-json-schema": "3.25.0"
   },
   "optionalDependencies": {
-    "@mobilenext/mobilecli": "0.1.60"
+    "mobilecli": "0.2.0"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.2.0",