@nodatachat/mcp 0.4.1 → 0.4.2

package/README.md

@@ -39,6 +39,14 @@ Add the server to Claude Code in one command:
 claude mcp add nodata -- npx @nodatachat/mcp --api-key YOUR_API_KEY
 ```
 
+On **Windows**, native (non-WSL) `npx` needs the `cmd /c` wrapper:
+
+```cmd
+claude mcp add nodata -- cmd /c npx @nodatachat/mcp --api-key YOUR_API_KEY
+```
+
+After changing the server's config (e.g. adding a credential), **restart Claude Code** — the running server process keeps its old arguments until the session restarts.
+
 Or with a custom base URL (for self-hosted or staging):
 
 ```bash

package/dist/index.js

@@ -31,7 +31,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-const VERSION = "0.4.1";
+const VERSION = "0.4.2";
 const USAGE = `nodata-mcp v${VERSION} — NoData MCP server\n\n` +
     "  ADMIN mode:  nodata-mcp --api-key sk_live_...\n" +
     "  AGENT mode:  nodata-mcp --grant-token ndca-...\n" +
@@ -76,15 +76,26 @@ function parseArgs(argv) {
     baseUrl = baseUrl.replace(/\/+$/, "");
     return { apiKey, grantToken, baseUrl };
 }
-async function apiPost(baseUrl, bearer, path, body) {
-    const res = await fetch(`${baseUrl}${path}`, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/json",
-            Authorization: `Bearer ${bearer}`,
-        },
-        body: JSON.stringify(body),
-    });
+// Without a deadline a dead network turns a tool call into an indefinite hang
+// inside the MCP client; 30s comfortably covers a slow decide/retrieve.
+const REQUEST_TIMEOUT_MS = 30_000;
+async function doFetch(url, init) {
+    let res;
+    try {
+        res = await fetch(url, { ...init, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+    }
+    catch (err) {
+        const timedOut = err instanceof Error && err.name === "TimeoutError";
+        return {
+            ok: false,
+            status: 0,
+            body: {
+                error: timedOut
+                    ? `Request timed out after ${REQUEST_TIMEOUT_MS / 1000}s: ${url}`
+                    : `Network error reaching ${url}: ${err instanceof Error ? err.message : String(err)}`,
+            },
+        };
+    }
     let parsed;
     try {
         parsed = await res.json();
@@ -94,24 +105,26 @@ async function apiPost(baseUrl, bearer, path, body) {
     }
     return { ok: res.ok, status: res.status, body: parsed };
 }
+async function apiPost(baseUrl, bearer, path, body) {
+    return doFetch(`${baseUrl}${path}`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${bearer}`,
+        },
+        body: JSON.stringify(body),
+    });
+}
 async function apiGet(baseUrl, bearer, path, params) {
     const url = new URL(`${baseUrl}${path}`);
     for (const [key, val] of Object.entries(params)) {
         if (val !== undefined && val !== "")
             url.searchParams.set(key, val);
     }
-    const res = await fetch(url.toString(), {
+    return doFetch(url.toString(), {
         method: "GET",
         headers: { Authorization: `Bearer ${bearer}` },
     });
-    let parsed;
-    try {
-        parsed = await res.json();
-    }
-    catch {
-        parsed = { error: `Non-JSON response (HTTP ${res.status})` };
-    }
-    return { ok: res.ok, status: res.status, body: parsed };
 }
 function formatResult(resp) {
     const text = JSON.stringify(resp.body, null, 2);
@@ -261,6 +274,13 @@ function registerAdminTools(server, baseUrl, apiKey) {
 }
 function registerAgentTool(server, baseUrl, grantToken) {
     const handle = handleFromGrant(grantToken);
+    if (!handle) {
+        // decide/retrieve are bearer-only and still work; read/use need the handle.
+        // Say so at startup instead of surprising the agent mid-conversation.
+        console.error("nodata-mcp: warning — could not derive an agent handle from the grant token " +
+            "(expected ndca-<jwt> with a 'handle' claim). nodata_decide/nodata_retrieve will work; " +
+            "nodata_read/nodata_use will fail until a valid grant token is provided.");
+    }
     // ── Access Compute · the "may I?" oracle (P0) ───────────────────────
     // Returns ONLY a decision + a signed proof, never any content. A planner
     // calls this to learn what it can reach BEFORE moving data: allow, degrade
@@ -370,6 +390,9 @@ const SETUP_TEXT = "This NoData server is connected but has NO credential yet, s
     "                 claude mcp add nodata -- npx @nodatachat/mcp --api-key sk_live_YOUR_KEY\n" +
     "   Or keep the command credential-free and set the env var instead:\n" +
     "                 claude mcp add nodata --env NODATA_API_KEY=sk_live_YOUR_KEY -- npx @nodatachat/mcp\n\n" +
+    "   IMPORTANT: after changing the config, RESTART the MCP client (e.g. exit and reopen\n" +
+    "   Claude Code) — this server process was spawned with the old config and a config edit\n" +
+    "   does not affect it. Until the restart it will keep answering in setup mode.\n\n" +
     "3. (Agent mode) If you were handed a grant token (ndca-...), use --grant-token ndca-YOUR_GRANT\n" +
     "   (or NODATA_GRANT_TOKEN) instead of an API key — the server then exposes only the\n" +
     "   decide/retrieve/read/use tools scoped to that grant.\n\n" +

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@nodatachat/mcp",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "NoData MCP Server — govern data for AI agents: decide (may I?) + retrieve (authorized context) + read + secret-blind invoke, plus admin governance/encrypt/decrypt/deliver",
   "bin": {
-    "nodata-mcp": "./dist/index.js"
+    "nodata-mcp": "dist/index.js"
   },
   "type": "module",
   "scripts": {