@modelcontextprotocol/inspector 2.9.0 → 2.10.1

package/clients/web/dist/assets/{prism-light-leP1dqtE.js → prism-light-B0A727v7.js}

@@ -1,4 +1,4 @@
-import{a as e,c as t,d as n,i as r,l as i,n as a,o,r as s,s as c,t as l,u}from"./index-DgXruQhz.js";function d(e,n){if(e==null)return{};var r,i,a=t(e,n);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(i=0;i<o.length;i++)r=o[i],n.indexOf(r)===-1&&{}.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}function f(e,t){(t==null||t>e.length)&&(t=e.length);for(var n=0,r=Array(t);n<t;n++)r[n]=e[n];return r}function p(e){if(Array.isArray(e))return f(e)}function m(e){if(typeof Symbol<`u`&&e[Symbol.iterator]!=null||e[`@@iterator`]!=null)return Array.from(e)}function h(e,t){if(e){if(typeof e==`string`)return f(e,t);var n={}.toString.call(e).slice(8,-1);return n===`Object`&&e.constructor&&(n=e.constructor.name),n===`Map`||n===`Set`?Array.from(e):n===`Arguments`||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?f(e,t):void 0}}function g(){throw TypeError(`Invalid attempt to spread non-iterable instance.
+import{a as e,c as t,d as n,i as r,l as i,n as a,o,r as s,s as c,t as l,u}from"./index-DgDEc2gL.js";function d(e,n){if(e==null)return{};var r,i,a=t(e,n);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(i=0;i<o.length;i++)r=o[i],n.indexOf(r)===-1&&{}.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}function f(e,t){(t==null||t>e.length)&&(t=e.length);for(var n=0,r=Array(t);n<t;n++)r[n]=e[n];return r}function p(e){if(Array.isArray(e))return f(e)}function m(e){if(typeof Symbol<`u`&&e[Symbol.iterator]!=null||e[`@@iterator`]!=null)return Array.from(e)}function h(e,t){if(e){if(typeof e==`string`)return f(e,t);var n={}.toString.call(e).slice(8,-1);return n===`Object`&&e.constructor&&(n=e.constructor.name),n===`Map`||n===`Set`?Array.from(e):n===`Arguments`||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?f(e,t):void 0}}function g(){throw TypeError(`Invalid attempt to spread non-iterable instance.
 In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function _(e){return p(e)||m(e)||h(e)||g()}function v(e){"@babel/helpers - typeof";return v=typeof Symbol==`function`&&typeof Symbol.iterator==`symbol`?function(e){return typeof e}:function(e){return e&&typeof Symbol==`function`&&e.constructor===Symbol&&e!==Symbol.prototype?`symbol`:typeof e},v(e)}function y(e,t){if(v(e)!=`object`||!e)return e;var n=e[Symbol.toPrimitive];if(n!==void 0){var r=n.call(e,t||`default`);if(v(r)!=`object`)return r;throw TypeError(`@@toPrimitive must return a primitive value.`)}return(t===`string`?String:Number)(e)}function b(e){var t=y(e,`string`);return v(t)==`symbol`?t:t+``}function x(e,t,n){return(t=b(t))in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}var S=n(u());function C(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),n.push.apply(n,r)}return n}function w(e){for(var t=1;t<arguments.length;t++){var n=arguments[t]==null?{}:arguments[t];t%2?C(Object(n),!0).forEach(function(t){x(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):C(Object(n)).forEach(function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))})}return e}function T(e){var t=e.length;if(t===0||t===1)return e;if(t===2)return[e[0],e[1],`${e[0]}.${e[1]}`,`${e[1]}.${e[0]}`];if(t===3)return[e[0],e[1],e[2],`${e[0]}.${e[1]}`,`${e[0]}.${e[2]}`,`${e[1]}.${e[0]}`,`${e[1]}.${e[2]}`,`${e[2]}.${e[0]}`,`${e[2]}.${e[1]}`,`${e[0]}.${e[1]}.${e[2]}`,`${e[0]}.${e[2]}.${e[1]}`,`${e[1]}.${e[0]}.${e[2]}`,`${e[1]}.${e[2]}.${e[0]}`,`${e[2]}.${e[0]}.${e[1]}`,`${e[2]}.${e[1]}.${e[0]}`];if(t>=4)return[e[0],e[1],e[2],e[3],`${e[0]}.${e[1]}`,`${e[0]}.${e[2]}`,`${e[0]}.${e[3]}`,`${e[1]}.${e[0]}`,`${e[1]}.${e[2]}`,`${e[1]}.${e[3]}`,`${e[2]}.${e[0]}`,`${e[2]}.${e[1]}`,`${e[2]}.${e[3]}`,`${e[3]}.${e[0]}`,`${e[3]}.${e[1]}`,`${e[3]}.${e[2]}`,`${e[0]}.${e[1]}.${e[2]}`,`${e[0]}.${e[1]}.${e[3]}`,`${e[0]}.${e[2]}.${e[1]}`,`${e[0]}.${e[2]}.${e[3]}`,`${e[0]}.${e[3]}.${e[1]}`,`${e[0]}.${e[3]}.${e[2]}`,`${e[1]}.${e[0]}.${e[2]}`,`${e[1]}.${e[0]}.${e[3]}`,`${e[1]}.${e[2]}.${e[0]}`,`${e[1]}.${e[2]}.${e[3]}`,`${e[1]}.${e[3]}.${e[0]}`,`${e[1]}.${e[3]}.${e[2]}`,`${e[2]}.${e[0]}.${e[1]}`,`${e[2]}.${e[0]}.${e[3]}`,`${e[2]}.${e[1]}.${e[0]}`,`${e[2]}.${e[1]}.${e[3]}`,`${e[2]}.${e[3]}.${e[0]}`,`${e[2]}.${e[3]}.${e[1]}`,`${e[3]}.${e[0]}.${e[1]}`,`${e[3]}.${e[0]}.${e[2]}`,`${e[3]}.${e[1]}.${e[0]}`,`${e[3]}.${e[1]}.${e[2]}`,`${e[3]}.${e[2]}.${e[0]}`,`${e[3]}.${e[2]}.${e[1]}`,`${e[0]}.${e[1]}.${e[2]}.${e[3]}`,`${e[0]}.${e[1]}.${e[3]}.${e[2]}`,`${e[0]}.${e[2]}.${e[1]}.${e[3]}`,`${e[0]}.${e[2]}.${e[3]}.${e[1]}`,`${e[0]}.${e[3]}.${e[1]}.${e[2]}`,`${e[0]}.${e[3]}.${e[2]}.${e[1]}`,`${e[1]}.${e[0]}.${e[2]}.${e[3]}`,`${e[1]}.${e[0]}.${e[3]}.${e[2]}`,`${e[1]}.${e[2]}.${e[0]}.${e[3]}`,`${e[1]}.${e[2]}.${e[3]}.${e[0]}`,`${e[1]}.${e[3]}.${e[0]}.${e[2]}`,`${e[1]}.${e[3]}.${e[2]}.${e[0]}`,`${e[2]}.${e[0]}.${e[1]}.${e[3]}`,`${e[2]}.${e[0]}.${e[3]}.${e[1]}`,`${e[2]}.${e[1]}.${e[0]}.${e[3]}`,`${e[2]}.${e[1]}.${e[3]}.${e[0]}`,`${e[2]}.${e[3]}.${e[0]}.${e[1]}`,`${e[2]}.${e[3]}.${e[1]}.${e[0]}`,`${e[3]}.${e[0]}.${e[1]}.${e[2]}`,`${e[3]}.${e[0]}.${e[2]}.${e[1]}`,`${e[3]}.${e[1]}.${e[0]}.${e[2]}`,`${e[3]}.${e[1]}.${e[2]}.${e[0]}`,`${e[3]}.${e[2]}.${e[0]}.${e[1]}`,`${e[3]}.${e[2]}.${e[1]}.${e[0]}`]}var E={};function D(e){if(e.length===0||e.length===1)return e;var t=e.join(`.`);return E[t]||(E[t]=T(e)),E[t]}function O(e){var t=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},n=arguments.length>2?arguments[2]:void 0;return D(e.filter(function(e){return e!==`token`})).reduce(function(e,t){return w(w({},e),n[t])},t)}function k(e){return e.join(` `)}function A(e,t){var n=0;return function(r){return n+=1,r.map(function(r,i){return j({node:r,stylesheet:e,useInlineStyles:t,key:`code-segment-${n}-${i}`})})}}function j(e){var t=e.node,n=e.stylesheet,r=e.style,a=r===void 0?{}:r,o=e.useInlineStyles,s=e.key,c=t.properties,l=t.type,u=t.tagName,d=t.value;if(l===`text`)return d;if(u){var f=A(n,o),p;if(!o)p=w(w({},c),{},{className:k(c.className)});else{var m=Object.keys(n).reduce(function(e,t){return t.split(`.`).forEach(function(t){e.includes(t)||e.push(t)}),e},[]),h=c.className&&c.className.includes(`token`)?[`token`]:[],g=c.className&&h.concat(c.className.filter(function(e){return!m.includes(e)}));p=w(w({},c),{},{className:k(g)||void 0,style:O(c.className,Object.assign({},c.style,a),n)})}var _=f(t.children);return S.createElement(u,i({key:s},p),_)}}var M=(function(e,t){return e.listLanguages().indexOf(t)!==-1}),ee=[`language`,`children`,`style`,`customStyle`,`codeTagProps`,`useInlineStyles`,`showLineNumbers`,`showInlineLineNumbers`,`startingLineNumber`,`lineNumberContainerStyle`,`lineNumberStyle`,`wrapLines`,`wrapLongLines`,`lineProps`,`renderer`,`PreTag`,`CodeTag`,`code`,`astGenerator`];function N(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),n.push.apply(n,r)}return n}function P(e){for(var t=1;t<arguments.length;t++){var n=arguments[t]==null?{}:arguments[t];t%2?N(Object(n),!0).forEach(function(t){x(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):N(Object(n)).forEach(function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))})}return e}var F=/\n/g;function I(e){return e.match(F)}function L(e){var t=e.lines,n=e.startingLineNumber,r=e.style;return t.map(function(e,t){var i=t+n;return S.createElement(`span`,{key:`line-${t}`,className:`react-syntax-highlighter-line-number`,style:typeof r==`function`?r(i):r},`${i}
 `)})}function te(e){var t=e.codeString,n=e.codeStyle,r=e.containerStyle,i=r===void 0?{float:`left`,paddingRight:`10px`}:r,a=e.numberStyle,o=a===void 0?{}:a,s=e.startingLineNumber;return S.createElement(`code`,{style:Object.assign({},n,i)},L({lines:t.replace(/\n$/,``).split(`
 `),style:o,startingLineNumber:s}))}function R(e){return`${e.toString().length}.25em`}function z(e,t){return{type:`element`,tagName:`span`,properties:{key:`line-number--${e}`,className:[`comment`,`linenumber`,`react-syntax-highlighter-line-number`],style:t},children:[{type:`text`,value:e}]}}function B(e,t,n){var r={display:`inline-block`,minWidth:R(n),paddingRight:`1em`,textAlign:`right`,userSelect:`none`},i=typeof e==`function`?e(t):e;return P(P({},r),i)}function V(e){var t=e.children,n=e.lineNumber,r=e.lineNumberStyle,i=e.largestLineNumber,a=e.showInlineLineNumbers,o=e.lineProps,s=o===void 0?{}:o,c=e.className,l=c===void 0?[]:c,u=e.showLineNumbers,d=e.wrapLongLines,f=e.wrapLines,p=f!==void 0&&f?P({},typeof s==`function`?s(n):s):{};if(p.className=p.className?[].concat(_(p.className.trim().split(/\s+/)),_(l)):l,n&&a){var m=B(r,n,i);t.unshift(z(n,m))}return d&u&&(p.style=P({display:`flex`},p.style)),{type:`element`,tagName:`span`,properties:p,children:t}}function H(e){var t=arguments.length>1&&arguments[1]!==void 0?arguments[1]:[],n=arguments.length>2&&arguments[2]!==void 0?arguments[2]:[];e.length===void 0&&(e=[e]);for(var r=0;r<e.length;r++){var i=e[r];if(i.type===`text`)n.push(V({children:[i],className:_(new Set(t))}));else if(i.children){var a=t.concat(i.properties?.className||[]);H(i.children,a).forEach(function(e){return n.push(e)})}}return n}function ne(e,t,n,r,i,a,o,s,c){var l,u=H(e.value),d=[],f=-1,p=0;function m(e,a){return V({children:e,lineNumber:a,lineNumberStyle:s,largestLineNumber:o,showInlineLineNumbers:i,lineProps:n,className:arguments.length>2&&arguments[2]!==void 0?arguments[2]:[],showLineNumbers:r,wrapLongLines:c,wrapLines:t})}function h(e,t){if(r&&t&&i){var n=B(s,t,o);e.unshift(z(t,n))}return e}function g(e,n){var r=arguments.length>2&&arguments[2]!==void 0?arguments[2]:[];return t||r.length>0?m(e,n,r):h(e,n)}for(var _=function(){var e=u[p],t=e.children[0].value;if(I(t)){var n=t.split(`

package/clients/web/dist/index.html

@@ -8,7 +8,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
     <link href="https://fonts.googleapis.com/css2?family=Fredoka:wght@300..700&family=Roboto+Mono:ital,wght@0,100..700;1,100..700&display=swap" rel="stylesheet" />
     <title>MCP Inspector</title>
-    <script type="module" crossorigin src="/assets/index-DgXruQhz.js"></script>
+    <script type="module" crossorigin src="/assets/index-DgDEc2gL.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-dqp8Sd8W.css">
   </head>
   <body>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelcontextprotocol/inspector",
-  "version": "2.9.0",
+  "version": "2.10.1",
   "description": "The Model Context Protocol Inspector",
   "keywords": [
     "MCP",
@@ -18,7 +18,9 @@
   "author": "The MCP Maintainers and Community",
   "type": "module",
   "bin": {
-    "mcp-inspector": "./clients/launcher/build/index.js"
+    "inspector": "./clients/launcher/build/index.js",
+    "mcp-inspector": "./clients/launcher/build/index.js",
+    "mcpdo": "./clients/mcpdo/build/mcp-bin.js"
   },
   "files": [
     "clients/launcher/build",
@@ -26,21 +28,26 @@
     "clients/web/dist",
     "clients/web/static",
     "clients/cli/build",
+    "clients/mcpdo/build",
     "clients/tui/build",
-    "scripts/install-clients.mjs"
+    "scripts/install-clients.mjs",
+    "skills/mcpdo"
   ],
   "scripts": {
     "web": "node clients/launcher/build/index.js --web",
     "build:web:runner": "cd clients/web && npm run build:runner",
     "web:dev": "npm run build:web:runner && node clients/launcher/build/index.js --web --dev",
-    "build": "npm run build:web && npm run build:cli && npm run build:tui && npm run build:launcher",
+    "build": "npm run build:web && npm run build:cli && npm run build:mcpdo && npm run build:tui && npm run build:launcher",
     "build:cli": "cd clients/cli && npm run build",
+    "build:mcpdo": "cd clients/mcpdo && npm run build",
+    "build:mcpdo:dev": "cd clients/mcpdo && npm run build:dev",
     "build:tui": "cd clients/tui && npm run build",
     "build:web": "cd clients/web && npm run build",
     "build:launcher": "cd clients/launcher && npm run build",
     "local:gate": "node scripts/gate-lease.mjs npm run local:gate:stages",
-    "local:gate:stages": "npm run local:validate && npm run verify:skills:cli && npm run coverage && npm run verify:build-gate && npm run verify:bundle-externals && npm run smoke && npm run smoke:web:firefox && npm run local:storybook",
-    "local:validate": "npm run validate:guards && npm run validate:core && cd clients/web && npm run check && cd ../cli && npm run check && cd ../tui && npm run check && cd ../launcher && npm run check",
+    "local:gate:stages": "npm run local:validate && npm run local:dco && npm run verify:skills:cli && npm run coverage && npm run verify:build-gate && npm run verify:bundle-externals && npm run smoke && npm run smoke:web:firefox && npm run local:storybook",
+    "local:validate": "npm run validate:guards && npm run validate:core && cd clients/web && npm run check && cd ../cli && npm run check && cd ../mcpdo && npm run check && cd ../tui && npm run check && cd ../launcher && npm run check",
+    "local:dco": "node scripts/dco-check.mjs --base origin/v2/main --exclude origin/main",
     "local:storybook": "cd clients/web && npx playwright install chromium && npm run test:storybook",
     "verify:build-gate": "node scripts/verify-build-gate.mjs",
     "verify:bundle-externals": "node scripts/verify-bundle-externals.mjs",
@@ -48,7 +55,25 @@
     "verify:skills": "node scripts/verify-skills.mjs",
     "verify:skills:cli": "node scripts/verify-skills-cli.mjs",
     "test:scripts": "node --test \"scripts/**/*.test.mjs\"",
-    "validate": "npm run validate:guards && npm run validate:core && npm run validate:web && npm run validate:cli && npm run validate:tui && npm run validate:launcher",
+    "pr:review-request": "node scripts/pr-review-request.mjs",
+    "pr:review-wait": "node scripts/pr-review-wait.mjs",
+    "pr:review-fetch": "node scripts/pr-review-fetch.mjs",
+    "pr:link": "node scripts/pr-link-issue.mjs",
+    "dco:check": "node scripts/dco-check.mjs",
+    "pr:upload": "node scripts/pr-upload-screenshot.mjs",
+    "board:status": "node scripts/board-card-status.mjs",
+    "board:add": "node scripts/board-card-add.mjs",
+    "board:delete": "node scripts/board-card-delete.mjs",
+    "board:find-draft": "node scripts/board-draft-find.mjs",
+    "board:snapshot": "node scripts/board-snapshot.mjs",
+    "board:sweep": "node scripts/board-sweep.mjs",
+    "board:audit": "node scripts/board-audit.mjs",
+    "board:recover": "node scripts/board-recover.mjs",
+    "advisory:fork": "node scripts/advisory-fork.mjs",
+    "release:notes": "node scripts/release-notes.mjs",
+    "release:tag": "node scripts/release-tag.mjs",
+    "action:resolve-pin": "node scripts/action-pin-resolve.mjs",
+    "validate": "npm run validate:guards && npm run validate:core && npm run validate:web && npm run validate:cli && npm run validate:mcpdo && npm run validate:tui && npm run validate:launcher",
     "validate:guards": "npm run verify:install-fresh && npm run verify:format-coverage && npm run verify:skills && npm run verify:typecheck-coverage && npm run verify:dep-lockstep && npm run verify:test-timeouts && npm run verify:action-pins && npm run test:scripts",
     "verify:format-coverage": "node scripts/verify-format-coverage.mjs",
     "verify:dep-lockstep": "node scripts/verify-dep-lockstep.mjs",
@@ -64,18 +89,21 @@
     "format:check:scripts": "prettier --check \"scripts/**/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",
     "format:shared": "prettier --write \"test-servers/src/**/*.{ts,tsx,mts,cts}\" vitest.shared.mts vitest.setup.shared.mts eslint.config.js",
     "format:check:shared": "prettier --check \"test-servers/src/**/*.{ts,tsx,mts,cts}\" vitest.shared.mts vitest.setup.shared.mts eslint.config.js",
-    "format": "npm run format:core && npm run format:scripts && npm run format:shared && cd clients/web && npm run format && cd ../cli && npm run format && cd ../tui && npm run format && cd ../launcher && npm run format",
+    "format": "npm run format:core && npm run format:scripts && npm run format:shared && cd clients/web && npm run format && cd ../cli && npm run format && cd ../mcpdo && npm run format && cd ../tui && npm run format && cd ../launcher && npm run format",
     "validate:cli": "cd clients/cli && npm run validate",
+    "validate:mcpdo": "cd clients/mcpdo && npm run validate",
     "validate:tui": "cd clients/tui && npm run validate",
     "validate:web": "cd clients/web && npm run validate",
     "validate:launcher": "cd clients/launcher && npm run validate",
-    "coverage": "npm run coverage:web && npm run coverage:cli && npm run coverage:tui && npm run coverage:launcher",
+    "coverage": "npm run coverage:web && npm run coverage:cli && npm run coverage:mcpdo && npm run coverage:tui && npm run coverage:launcher",
     "coverage:cli": "cd clients/cli && npm run test:coverage",
+    "coverage:mcpdo": "cd clients/mcpdo && npm run test:coverage",
     "coverage:tui": "cd clients/tui && npm run test:coverage",
     "coverage:web": "cd clients/web && npm run test:coverage",
     "coverage:launcher": "cd clients/launcher && npm run test:coverage",
-    "smoke": "npm run smoke:launcher && npm run smoke:cli && npm run smoke:tui && npm run smoke:web && npm run smoke:web:chromium && npm run smoke:web:tabs",
+    "smoke": "npm run smoke:launcher && npm run smoke:cli && npm run smoke:mcpdo && npm run smoke:tui && npm run smoke:web && npm run smoke:web:chromium && npm run smoke:web:tabs",
     "smoke:cli": "node scripts/smoke-cli.mjs",
+    "smoke:mcpdo": "node scripts/smoke-mcpdo.mjs",
     "smoke:tui": "node scripts/smoke-tui.mjs",
     "smoke:web": "node scripts/smoke-web.mjs",
     "smoke:web:browser": "node scripts/install-smoke-browser.mjs && node scripts/smoke-web-browser.mjs",
@@ -90,13 +118,15 @@
     "pack:verify": "node scripts/install-smoke-browser.mjs chromium && node scripts/pack-and-verify.mjs",
     "prepack": "npm run build",
     "postinstall": "node scripts/install-clients.mjs",
-    "skills:eval": "node scripts/skill-eval.mjs"
+    "skills:eval": "node scripts/skill-eval.mjs",
+    "skills:eval:mcpdo": "node scripts/skill-eval-mcpdo.mjs"
   },
   "dependencies": {
     "@hono/node-server": "^2.0.12",
     "@modelcontextprotocol/client": "2.2.0",
     "@modelcontextprotocol/core": "2.2.0",
     "@modelcontextprotocol/ext-apps": "^2.0.0",
+    "@modelcontextprotocol/ext-tasks": "^0.2.2",
     "@modelcontextprotocol/server": "2.2.0",
     "@napi-rs/keyring": "^1.3.0",
     "@vitejs/plugin-react": "^6.0.0",

package/scripts/install-clients.mjs

@@ -27,7 +27,7 @@ import { dirname, join, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const repoRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const CLIENTS = ["web", "cli", "tui", "launcher"];
+const CLIENTS = ["web", "cli", "mcpdo", "tui", "launcher"];
 
 if (process.env.INSPECTOR_SKIP_CLIENT_INSTALL) {
   console.log(

package/skills/mcpdo/SKILL.md

@@ -0,0 +1,165 @@
+---
+name: mcpdo
+description: Access MCP (Model Context Protocol) servers and their tools, resources, and prompts through the mcpdo CLI — connections it holds extend your capabilities alongside any built-in MCP support. Use this skill for any question or task about MCP servers, connections, or tools (e.g. "what MCP servers am I connected to?", "what MCP tools do I have?"), and whenever a task requires inspecting, testing, or scripting against an MCP server (stdio or HTTP) rather than writing custom client code.
+disable-model-invocation: false
+---
+
+# mcpdo — MCP Inspector connection CLI
+
+Connect to an MCP server once, then run many commands against that named
+connection.
+
+```bash
+mcpdo servers/list                           # catalog entries you can connect
+mcpdo connect entry-name                     # connect a catalog entry
+mcpdo connect https://example.com/mcp        # ad-hoc HTTP/SSE target
+mcpdo connect node server.js                 # ad-hoc stdio target
+
+mcpdo connections/list                       # open connections
+mcpdo @entry-name tools/list
+mcpdo @entry-name tools/call <toolName> arg:=value
+mcpdo @entry-name resources/list
+mcpdo @entry-name resources/read <uri>
+mcpdo @entry-name prompts/list
+
+mcpdo --connection entry-name tools/list     # flag form of @entry-name
+
+mcpdo disconnect entry-name
+```
+
+The canonical flow is `servers/list` → `connect <entry>` → `@entry <command>`.
+Run `mcpdo help` or `mcpdo <command> --help` for the full, authoritative list of
+commands and flags (auth management, elicitation controls, daemon control, and
+more).
+
+## How to think about mcpdo
+
+- **Connections extend your toolset.** Treat every open connection's tools,
+  resources, and prompts as part of your available capabilities: when facing a
+  task (or before saying "I can't do that"), check `mcpdo connections/list`
+  and the connected servers' `tools/list`, and call those tools mid-task like
+  any built-in tool.
+- **Answer capability questions with it.** "What MCP servers/tools do I have?"
+  includes mcpdo connections (`connections/list`) and catalog entries that are
+  connectable but not connected (`servers/list`).
+- **Don't auto-connect.** Catalog entries don't describe capabilities, and
+  connecting can start an auth flow involving the human. Connect when the user
+  directs it, or when a task clearly needs it — and say so first.
+- **Inspect via commands, not the filesystem.** Entries, connections, auth
+  state, and daemon state all have read commands; never list or read
+  `~/.mcp-inspector` directly. The one exception is _editing_ the catalog
+  (below).
+- **Make it always-on (optional).** Skills load only on demand; for standing
+  awareness of mcpdo in a project, append `mcpdo agent-help --instructions`
+  output to the project's `CLAUDE.md`/`AGENTS.md`. (`mcpdo agent-help`
+  prints this guide; `--skill-path` prints the installable skill file's
+  path.)
+
+## The catalog
+
+- `servers/list` / `servers/show <name>` read the **catalog**: the writable
+  entry file at `~/.mcp-inspector/mcp.json` (standard `mcpServers` shape),
+  overridable per shell via `--catalog <path>` or `MCP_CATALOG_PATH`.
+  `servers/list` prints the resolved source path.
+- `servers/*` shows entries on disk; `connections/*` shows live daemon state.
+  Two shells with different catalogs share the same connections.
+- There are no CLI edit commands, by design: add or remove entries by editing
+  the catalog file directly. `mcpdo connect entry --config path/to/mcp.json`
+  instead connects an entry from a read-only foreign config file.
+
+## Conventions
+
+- `--format json` outputs JSON; the default, `--format text`, is
+  human-readable.
+- Always qualify commands with `@name` or `--connection <name>` (shorthand
+  `--conn`) from an agent shell: with non-interactive (non-TTY) stdin, mcpdo
+  requires an explicit connection and errors without one. Omitting it falls
+  back to the most-recently-used connection only on an interactive TTY, or
+  anywhere when `MCP_ALLOW_DEFAULT_CONNECTION=1` is set.
+- Connections persist across separate `mcpdo` invocations and **self-heal**: a
+  dropped transport (expired session, exited stdio child) transparently
+  re-dials on next use with stored credentials. Don't monitor or reconnect
+  manually; only an `auth_required` error needs action (re-run `connect`).
+  `mcpdo disconnect` ends one connection; `mcpdo daemon stop` resets
+  everything.
+- The `[legacy]` / `[modern]` era tag on `connections/list` is the negotiated
+  protocol generation (`legacy` = classic `initialize` handshake — current and
+  fine, not deprecated). Informational only.
+
+## Auth
+
+- Auth is automatic at connect time and stored for reuse (`mcpdo auth/list` /
+  `mcpdo auth/clear`). `auth/list` shows each stored URL with the catalog or
+  connection names it is "known as" and a `● live` marker when a current
+  connection holds it, so the store entries line up with the servers you use.
+  `auth/clear` accepts either the store URL or one of those friendly names
+  (`mcpdo auth/clear hosted-everything`); a name that resolves to no URL (a
+  stdio server) or to more than one URL is rejected with guidance. EMA IdP
+  login records lead with their bare issuer URL and carry a trailing
+  `enterprise IdP login` marker, and clear by that bare issuer URL
+  (`mcpdo auth/clear https://idp.example.com`). Run `connect` as its **own
+  command** — never chained with `&&`, `;`, or a follow-on
+  `tools/list`/`connections/show`. A connect that needs sign-in exits 0 while
+  the connection is still unusable, so a chained command runs against a
+  not-yet-connected server, errors, and clutters the output you relay to the
+  user. Connect, check whether it returned `pendingAuth`, and only then decide
+  the next step. When a
+  browser sign-in is needed and stdin is non-TTY,
+  `connect` exits 0 immediately with `pendingAuth: true` and an `authUrl`.
+  The connection is **not** connected and **not** usable until the user signs
+  in — exit 0 is not success here. Show that `authUrl` to the user as literal
+  plain text as the **last thing in your reply**, ask them to open it, sign in,
+  and tell you when they're done, then **end your turn and wait**. Do not retry
+  the command, poll, sleep, or say you are connected: the user can't see your
+  message until the turn ends, so any further tool call in the same turn only
+  delays the link reaching them. Once the user says they have signed in, run
+  `connections/show @name` to complete the sign-in, then continue the original
+  task. (`connections/show @name` completes a finished sign-in itself and
+  reprints the `authUrl` if you need to show it again; `connections/list` stays
+  read-only but reports `pendingAuthSignedIn: true` — "signed in — completing on
+  next use" — once the user's part is done.) Never reconnect to fix a pending
+  sign-in.
+- To force a fresh sign-in on an already-open connection, `mcpdo disconnect
+  <name> --clear-auth` (`-c`) tears it down and clears its stored tokens in one
+  step, so the next plain `connect` re-triggers the browser flow. Prefer it over
+  a separate `disconnect` + `auth/clear <url>` — it takes the connection name
+  (not the URL) and closes the window where the live connection keeps working on
+  in-memory tokens. `connect <name> --relogin` (`-r`) is the equivalent when you
+  are reconnecting anyway.
+- Enterprise-managed auth (EMA) works the same way. `mcpdo auth/ema-login`
+  from a non-TTY shell exits 0 immediately with `pendingLogin: true` and an
+  `authUrl`. Show that `authUrl` to the user as literal plain text as the last
+  thing in your reply, ask them to sign in and tell you when they're done, then
+  end your turn and wait — do not poll while they are signing in. Once they
+  confirm, run `mcpdo auth/ema-status`; `loginState` reads `logged_in` once the
+  sign-in has completed in the background. After that, connects to EMA servers
+  mint
+  tokens silently with no further sign-in. Connecting to an EMA server
+  *without* a prior IdP login parks like any other pending sign-in, with the
+  IdP link as its `authUrl`. `mcpdo auth/ema-logout` clears local EMA state
+  only; when the IdP advertises an end-session endpoint the output includes a
+  URL to end the IdP browser session too — relay it to the user, who may
+  ignore it if they only meant to reset local state.
+- Tokens live in the OS keychain when one is available. On keychain-less
+  hosts mcpdo falls back to the shared secrets file (never the in-memory
+  store — mcpdo is multi-process, so a per-process store can't carry a token
+  from the sign-in helper to the daemon). `MCP_INSPECTOR_SECRET_STORE`
+  (`keyring|file|memory`) still overrides explicitly.
+
+## Elicitations (server asks a question mid-call)
+
+- On an interactive TTY, mcpdo prompts inline. From an agent shell (non-TTY or
+  `--format json`), the **command returns immediately** (exit 0) with an
+  `elicitationPending` payload carrying the question, schema, and an
+  `elicitationId`; the underlying MCP **tool call stays parked** on the daemon
+  awaiting your response. Never wait on or time-box the mcpdo command itself —
+  it has already exited; the pending work lives daemon-side.
+- Answer with `mcpdo elicitation/respond <elicitationId> field:=value ...`
+  (repeat if the server asks again), or end it with `--decline` or `--cancel`.
+  For URL-mode elicitations, relay the URL to the user, then confirm with
+  `elicitation/respond <id> --done` (or `--cancel`; URL mode has no decline).
+  The response returns the
+  final tool result.
+- Parked calls expire after 10 minutes; one parked call per connection. Pass
+  `--elicit off` on `connect` to have well-behaved servers fall back to their
+  own defaults instead of asking.