@mrfentmen/rss-mcp 1.0.0 → 1.0.2

package/README.md

@@ -17,3 +17,21 @@ npm run build
 node dist/index.js
 ```
 
+<!-- paywall -->
+## Premium tools
+
+These tools need a license key:
+
+* `search_feed`
+* `feed_info`
+
+Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-rss-mcp and set it in your MCP client config:
+
+```json
+"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
+```
+
+The key is checked against MCP Marketplace, cached for 24 hours, and keeps
+working offline once one check has succeeded. Every other tool on this server
+stays free.
+<!-- /paywall -->

package/dist/api.js

@@ -71,3 +71,55 @@ export async function feedJson(args) {
             .map((item, i) => `${i + 1}. ${item.title ?? 'untitled'} | ${(item.pubDate ?? '').slice(0, 16)}${item.link ? `\n   ${item.link}` : ''}`)
             .join('\n');
 }
+// ---- muxC tools:
+const RSS_UA = "mrfentmen-rss-mcp/1.0 (https://github.com/mrfentmen)";
+class Rss2JsonError extends Error {
+}
+/** rss2json is a free public endpoint, so the feed is read the same way its siblings are. */
+async function feed(rssUrl, limit) {
+    const res = await fetch(`https://api.rss2json.com/v1/api.json?rss_url=${encodeURIComponent(rssUrl)}&count=${limit}`, {
+        headers: { "User-Agent": RSS_UA, Accept: "application/json" },
+        signal: AbortSignal.timeout(30000),
+    });
+    if (!res.ok)
+        throw new Rss2JsonError(`rss2json returned ${res.status} for that feed`);
+    const d = (await res.json());
+    if (d.status !== "ok")
+        throw new Rss2JsonError(`rss2json could not read that feed: ${d.message ?? d.status}`);
+    return d;
+}
+/** Find items across a feed by word, which is how you pull one story out of a busy site. */
+export async function searchFeed(args) {
+    const url = (args.url ?? "").trim();
+    if (!url)
+        throw new Rss2JsonError("Provide the feed url to search");
+    const query = (args.query ?? "").trim().toLowerCase();
+    if (!query)
+        throw new Rss2JsonError("Provide a word or phrase to look for in the feed's items");
+    const limit = Math.max(1, Math.min(args.limit ?? 20, 100));
+    const d = await feed(url, Math.min(limit * 3, 100));
+    const items = d.items ?? [];
+    const hits = items.filter((i) => `${i.title ?? ""} ${i.description ?? ""} ${i.content ?? ""}`.toLowerCase().includes(query));
+    if (!hits.length)
+        return `None of ${items.length} items in ${d.title ?? url} mention "${query}".`;
+    return `${hits.length} of ${items.length} items in ${d.title ?? url} mention "${query}":\n` +
+        hits.slice(0, limit).map((i, n) => `${n + 1}. ${String(i.title ?? "untitled").replace(/<[^>]*>/g, " ").replace(/\s+/g, " ").trim()}\n   ${String(i.pubDate ?? "").slice(0, 25)}\n   ${i.link ?? ""}`).join("\n");
+}
+/** A feed's own metadata and channel image, which the item list does not show. */
+export async function feedInfo(args) {
+    const url = (args.url ?? "").trim();
+    if (!url)
+        throw new Rss2JsonError("Provide a feed url to describe");
+    const d = await feed(url, 1);
+    return [
+        `Feed: ${d.title ?? "untitled"}`,
+        d.description ? `about: ${String(d.description).replace(/<[^>]*>/g, " ").replace(/\s+/g, " ").trim().slice(0, 300)}` : null,
+        d.link ? `site: ${d.link}` : null,
+        d.feedUrl ? `feed url: ${d.feedUrl}` : null,
+        d.image ? `image: ${d.image}` : null,
+        `items available: ${d.items?.length ?? 0} (rss2json caps a single call at 100)`,
+        d.copyright ? `copyright: ${d.copyright}` : null,
+    ]
+        .filter(Boolean)
+        .join("\n");
+}

package/dist/license.js

@@ -0,0 +1,79 @@
+// Premium tools on this server need a license key bought from MCP Marketplace.
+// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
+// that is not listed in PREMIUM keeps working without a key.
+const SLUG = "rss-mcp";
+// Tools that need a key. Everything else is free.
+const PREMIUM = new Set([
+    "search_feed",
+    "feed_info",
+]);
+const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
+// The license check calls the marketplace's verify endpoint directly instead of
+// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
+// check it makes is rejected by Supabase before it reaches the function. The
+// publishable key below is public by design - it ships in mcp-marketplace.io's
+// own JavaScript and only ever reaches their licence check.
+const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
+const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
+const OK_CACHE_MS = 60 * 60 * 1000;
+const BAD_CACHE_MS = 60 * 1000;
+const seen = new Map();
+const REASONS = {
+    missing_key: "no key is set",
+    invalid_format: "that key is not a valid MCP Marketplace key",
+    not_found: "that key was not found",
+    revoked: "that key has been revoked",
+    rotated: "that key was rotated, use your new one",
+    expired: "that key has expired, renew it",
+    rate_limited: "there were too many checks just now, try again shortly",
+    network_error: "the license server could not be reached",
+};
+function blocked(tool, reason) {
+    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
+    return `"${tool}" needs a license key, but ${why}. ` +
+        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
+}
+async function verify(key) {
+    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
+        method: "POST",
+        headers: {
+            apikey: PUBLISHABLE_KEY,
+            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ key, slug: SLUG }),
+        // an unusable key answers 400 with a JSON body, so read the body either way
+        signal: AbortSignal.timeout(15000),
+    });
+    const data = (await res.json());
+    if (typeof data?.valid !== "boolean")
+        return { valid: false, reason: "unexpected_response" };
+    return data;
+}
+/**
+ * Returns null when the caller may run the tool, or a short message telling
+ * them how to get a key.
+ *
+ * A good key is remembered for an hour, so a busy session does not hit the
+ * license server on every call and keeps working through a brief outage.
+ */
+export async function premiumRequired(tool) {
+    if (!PREMIUM.has(tool))
+        return null;
+    const key = process.env.MCP_LICENSE_KEY;
+    if (!key)
+        return blocked(tool, "missing_key");
+    const hit = seen.get(key);
+    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
+        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
+    }
+    let result;
+    try {
+        result = await verify(key);
+    }
+    catch {
+        result = { valid: false, reason: "network_error" };
+    }
+    seen.set(key, { ...result, at: Date.now() });
+    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
+}

package/dist/server.js

@@ -1,6 +1,7 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
-import { readFeed, feedJson } from './api.js';
+import { readFeed, feedJson, searchFeed, feedInfo } from './api.js';
+import { premiumRequired } from "./license.js";
 const text = (value) => ({ content: [{ type: 'text', text: value }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -33,5 +34,41 @@ export function createServer() {
             return textError(error(e));
         }
     });
+    server.registerTool("search_feed", {
+        title: "Search feed",
+        description: "Find items inside an RSS feed by word or phrase, which is how you pull one story out of a busy site instead of reading the whole feed.",
+        inputSchema: z.object({ url: z.string().describe("Feed url."), query: z.string().describe("Word or phrase to look for."), limit: z.number().describe("Max matches.").optional() }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: search_feed ----
+        const paywallMessage = await premiumRequired("search_feed");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await searchFeed(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("feed_info", {
+        title: "Feed info",
+        description: "A feed's own channel metadata: title, description, site link, image and item count, which reading its items does not show.",
+        inputSchema: z.object({ url: z.string().describe("Feed url."), }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: feed_info ----
+        const paywallMessage = await premiumRequired("feed_info");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await feedInfo(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
     return server;
 }

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.0",
+  "version": "1.0.2",
   "type": "module",
   "repository": {
     "type": "git",