@nordsym/apiclaw 1.2.2 → 1.2.3

package/docs/PRD-customer-key-passthrough.md

@@ -0,0 +1,184 @@
+# PRD: Customer Key Passthrough
+
+**Status:** DRAFT — väntar på Gustavs attestering  
+**Datum:** 2026-02-26  
+**Författare:** Symbot  
+
+---
+
+## Problem
+
+CoAccept (och liknande SaaS-providers) vill att deras slutkunder (t.ex. hyresvärdar) ska kunna styra CoAccept via AI-agent. Men:
+
+1. Varje slutkund har egen CoAccept API-nyckel
+2. APIClaw sparar idag EN master key per provider
+3. Ingen mekanism för "denna request kommer från Kund X"
+
+---
+
+## Mål
+
+Möjliggöra att agent users skickar med sin egen provider-nyckel vid Direct Call — **utan sign-up friction**.
+
+---
+
+## Constraints (KRITISKA)
+
+| Constraint | Varför |
+|------------|--------|
+| **Ingen sign-up för agent user** | Friktion = death. Free credits + search ska vara friktionsfritt. |
+| **Search alltid gratis** | Hela databasen (19k APIs) sökbar utan login |
+| **Open APIs gratis** | Discovery + open API calls = $0 |
+| **Direct Call med free credits** | Agent user kan testa Direct Call utan betalning |
+
+---
+
+## Lösningsförslag
+
+### Option A: `customer_key` parameter (Rekommenderad)
+
+Agent skickar med sin egen nyckel i anropet:
+
+```typescript
+api_direct_call({
+  provider: "coaccept",
+  action: "send_reminder",
+  params: { tenant_id: "123" },
+  customer_key: "hyresvärdens-coaccept-api-key"  // <-- NY
+})
+```
+
+**Flow:**
+1. Agent anropar med `customer_key`
+2. APIClaw använder `customer_key` istället för master key
+3. CoAccept ser anropet som vanlig API-request från sin kund
+4. APIClaw loggar usage (för analytics, ej billing på kundens nyckel)
+
+**Fördelar:**
+- Ingen sign-up behövs
+- Agent user kontrollerar sin egen nyckel
+- Provider (CoAccept) ser sin vanliga kund
+- Bakåtkompatibelt (utan `customer_key` = master key används)
+
+**Nackdelar:**
+- Nyckel skickas i varje request (måste vara över HTTPS)
+- Agent user måste ha/få sin nyckel från providern
+
+---
+
+### Option B: Registered customer keys (mer enterprise)
+
+Agent user registrerar sin nyckel en gång i APIClaw dashboard, får tillbaka ett `customer_id`:
+
+```typescript
+api_direct_call({
+  provider: "coaccept",
+  action: "send_reminder",
+  params: { tenant_id: "123" },
+  customer_id: "cust_abc123"  // Referens till sparad nyckel
+})
+```
+
+**Fördelar:**
+- Nyckel skickas inte i varje request
+- Kan bygga usage tracking per customer
+- Möjliggör billing per customer senare
+
+**Nackdelar:**
+- Kräver sign-up/registration (BRYTER CONSTRAINT)
+- Mer komplext
+
+---
+
+## Rekommendation
+
+**Option A först.** 
+
+Enklast, friktionsfritt, löser CoAccept-caset direkt. Option B kan byggas senare som "enterprise mode" för de som vill.
+
+---
+
+## Implementation (Option A)
+
+### 1. MCP Tool Update
+
+```typescript
+// Befintlig
+api_direct_call(provider, action, params)
+
+// Ny
+api_direct_call(provider, action, params, customer_key?)
+```
+
+### 2. execute-dynamic.ts
+
+```typescript
+// I executeAction():
+const apiKey = args.customer_key || config.encryptedMasterKey;
+// Använd apiKey för auth header
+```
+
+### 3. Provider Config (optional flag)
+
+Provider kan välja att:
+- `allow_customer_keys: true` — tillåt passthrough
+- `require_customer_keys: true` — ENDAST customer keys (ingen master)
+
+CoAccept skulle sätta `require_customer_keys: true` eftersom varje hyresvärd måste autentisera sig själv.
+
+### 4. Logging
+
+Logga `customer_key_used: true/false` i usage logs (inte själva nyckeln).
+
+---
+
+## Vad som INTE ändras
+
+- ✅ Search — fortfarande gratis, ingen login
+- ✅ Open APIs — fortfarande gratis
+- ✅ Free credits — fortfarande tillgängliga
+- ✅ Master key Direct Call — funkar som innan (default)
+
+---
+
+## Scope för V1
+
+| Ingår | Ingår ej |
+|-------|----------|
+| `customer_key` parameter i MCP tool | Dashboard för att spara nycklar |
+| execute-dynamic.ts uppdatering | Per-customer billing |
+| Provider flag `allow_customer_keys` | Customer registration flow |
+| Usage logging | |
+
+---
+
+## Effort Estimate
+
+| Task | Tid |
+|------|-----|
+| MCP tool schema update | 30 min |
+| execute-dynamic.ts logic | 1h |
+| Provider config flag (Convex + UI) | 1h |
+| Testing | 30 min |
+| **Total** | ~3h |
+
+---
+
+## Öppna frågor
+
+1. **Ska vi validera customer_key format?** (Nej — provider's API gör det)
+2. **Rate limits på customer_key?** (V1: Nej. Providern hanterar det.)
+3. **Billing?** (V1: Ingen. Agent user betalar providern direkt.)
+
+---
+
+## Attestering
+
+- [ ] Gustav har läst och godkänt
+- [ ] Scope bekräftat
+- [ ] Constraints respekterade
+- [ ] Klart för implementation
+
+---
+
+*Väntar på din feedback, Gustav.* 🦞

package/landing/public/badges/available-on-apiclaw.svg

@@ -0,0 +1,14 @@
+<svg width="220" height="44" viewBox="0 0 220 44" xmlns="http://www.w3.org/2000/svg">
+  <defs>
+    <linearGradient id="bgGrad" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" style="stop-color:#0a0a0a"/>
+      <stop offset="100%" style="stop-color:#1a1a1a"/>
+    </linearGradient>
+  </defs>
+  <rect width="220" height="44" rx="8" fill="url(#bgGrad)" stroke="#333" stroke-width="1"/>
+  <text x="16" y="28" fill="#ef4444" font-family="system-ui, -apple-system, sans-serif" font-size="18">🦞</text>
+  <text x="44" y="27" fill="white" font-family="system-ui, -apple-system, sans-serif" font-size="13" font-weight="500">Available on</text>
+  <text x="44" y="27" fill="white" font-family="system-ui, -apple-system, sans-serif" font-size="13" font-weight="500">
+    <tspan x="130" font-weight="700" fill="#ef4444">APIClaw</tspan>
+  </text>
+</svg>

package/landing/scripts/generate-stats.js

@@ -2,6 +2,75 @@
 const fs = require('fs');
 const path = require('path');
 
+// Category mapping (consolidate similar ones)
+const categoryMap = {
+  'AI': 'AI & ML',
+  'AI & ML': 'AI & ML',
+  'AI/ML': 'AI & ML',
+  'Machine Learning': 'AI & ML',
+  'Authentication': 'Auth & Security',
+  'Auth': 'Auth & Security',
+  'Security': 'Auth & Security',
+  'Payment': 'Payments',
+  'Payments': 'Payments',
+  'Finance': 'Finance',
+  'Cryptocurrency': 'Finance',
+  'Currency': 'Finance',
+  'Health': 'Health & Fitness',
+  'Health & Fitness': 'Health & Fitness',
+  'Healthcare': 'Health & Fitness',
+  'Fitness': 'Health & Fitness',
+  'Social': 'Social & Communication',
+  'Social Media': 'Social & Communication',
+  'Communication': 'Social & Communication',
+  'Messaging': 'Social & Communication',
+  'Data': 'Data & Analytics',
+  'Data & Analytics': 'Data & Analytics',
+  'Analytics': 'Data & Analytics',
+  'Big Data': 'Data & Analytics',
+  'Cloud': 'Cloud & Infrastructure',
+  'Cloud Storage': 'Cloud & Infrastructure',
+  'Infrastructure': 'Cloud & Infrastructure',
+  'DevOps': 'Development',
+  'Development': 'Development',
+  'Development Tools': 'Development',
+  'Testing': 'Development',
+  'E-commerce': 'Commerce',
+  'Commerce': 'Commerce',
+  'Shopping': 'Commerce',
+  'Games': 'Entertainment',
+  'Gaming': 'Entertainment',
+  'Entertainment': 'Entertainment',
+  'Music': 'Entertainment',
+  'Video': 'Media',
+  'Media': 'Media',
+  'Photography': 'Media',
+  'News': 'News & Media',
+  'News & information': 'News & Media',
+  'Geo': 'Location & Maps',
+  'Geocoding': 'Location & Maps',
+  'Geolocation': 'Location & Maps',
+  'Maps': 'Location & Maps',
+  'Location': 'Location & Maps',
+  'Spatial': 'Location & Maps',
+  'Transportation': 'Travel & Transport',
+  'Travel': 'Travel & Transport',
+  'Logistics': 'Travel & Transport',
+  'Delivery-Tracking': 'Travel & Transport',
+  'Carsharing': 'Travel & Transport',
+  'Document': 'Documents & Files',
+  'Documents': 'Documents & Files',
+  'File Storage and Manipulation': 'Documents & Files',
+  'Web Scraping': 'Search & Scraping',
+  'Search': 'Search & Scraping',
+  'Text Analysis': 'Language & Text',
+  'Language': 'Language & Text',
+  'Dictionary': 'Language & Text',
+  'Vision Analysis': 'AI & ML',
+  'Art & Design': 'Design',
+  'Design': 'Design',
+};
+
 // Try local copy first (for Vercel), then parent directory (for local dev)
 const localRegistryPath = path.join(__dirname, '../src/lib/apis.json');
 const parentRegistryPath = path.join(__dirname, '../../src/registry/apis.json');
@@ -11,11 +80,13 @@ const outputPath = path.join(__dirname, '../src/lib/stats.json');
 try {
   const registry = JSON.parse(fs.readFileSync(registryPath, 'utf8'));
   
-  const categories = [...new Set(registry.apis.map(api => api.category))];
+  // Consolidate categories using the mapping
+  const consolidatedCategories = registry.apis.map(api => categoryMap[api.category] || api.category);
+  const uniqueCategories = [...new Set(consolidatedCategories)];
   
   const stats = {
     apiCount: registry.count,
-    categoryCount: categories.length,
+    categoryCount: uniqueCategories.length,
     lastUpdated: registry.lastUpdated || new Date().toISOString().split('T')[0],
     generatedAt: new Date().toISOString()
   };
@@ -32,8 +103,8 @@ try {
   console.error('Failed to generate stats:', err);
   // Write fallback stats
   const fallback = {
-    apiCount: 4518,
-    categoryCount: 93,
+    apiCount: 19176,
+    categoryCount: 58,
     lastUpdated: new Date().toISOString().split('T')[0],
     generatedAt: new Date().toISOString()
   };

package/landing/src/app/admin/page.tsx

@@ -4,7 +4,7 @@ import { useState, useEffect } from "react";
 import { Shield, Users, Zap, TrendingUp, Check, X, Clock, ExternalLink, RefreshCw, Eye } from "lucide-react";
 import Link from "next/link";
 
-const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || "https://brilliant-puffin-712.eu-west-1.convex.cloud";
+const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || "https://adventurous-avocet-799.convex.cloud";
 
 interface Stats {
   totalProviders: number;

package/landing/src/app/api/auth/magic-link/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 
-const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || "https://brilliant-puffin-712.eu-west-1.convex.cloud";
+const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || "https://adventurous-avocet-799.convex.cloud";
 
 export async function POST(req: NextRequest) {
   try {

package/landing/src/app/api/auth/session/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 
-const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || "https://brilliant-puffin-712.eu-west-1.convex.cloud";
+const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || "https://adventurous-avocet-799.convex.cloud";
 
 export async function POST(req: NextRequest) {
   try {

package/landing/src/app/api/auth/verify/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 
-const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || "https://brilliant-puffin-712.eu-west-1.convex.cloud";
+const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || "https://adventurous-avocet-799.convex.cloud";
 
 export async function POST(req: NextRequest) {
   try {

package/landing/src/app/api/og/route.tsx

@@ -52,17 +52,19 @@ export async function GET() {
         <div
           style={{
             display: 'flex',
-            gap: 40,
+            gap: 32,
             marginTop: 40,
             color: '#ef4444',
-            fontSize: 28,
+            fontSize: 26,
           }}
         >
           <span>{statsData.apiCount.toLocaleString()}+ APIs</span>
           <span>•</span>
-          <span>{statsData.categoryCount}+ Categories</span>
+          <span>{statsData.categoryCount} Categories</span>
           <span>•</span>
           <span>MCP Native</span>
+          <span>•</span>
+          <span>Direct Call</span>
         </div>
         <div
           style={{

package/landing/src/app/docs/page.tsx

@@ -35,8 +35,9 @@ export default function DocsPage() {
           </Link>
           <nav className="flex items-center gap-4 md:gap-6">
             <Link href="/" className="hidden sm:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">Home</Link>
-            <Link href="/providers" className="hidden md:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">Providers</Link>
-            <Link href="/earn" className="hidden md:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">Earn Credits</Link>
+            <span className="hidden md:block text-[var(--accent)] font-medium text-sm md:text-base">Docs</span>
+            <Link href="/providers/dashboard" className="hidden md:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">Providers</Link>
+            <Link href="/earn" className="hidden md:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">Earn</Link>
             <a 
               href="https://github.com/nordsym/apiclaw" 
               target="_blank"
@@ -192,7 +193,7 @@ export default function DocsPage() {
             {/* discover_apis */}
             <div className="bg-[var(--surface)] border border-[var(--border)] rounded-xl p-6">
               <h3 className="text-lg font-mono text-[var(--accent)] mb-2">discover_apis</h3>
-              <p className="text-[var(--text-secondary)] mb-4">Search 16,000+ APIs using natural language.</p>
+              <p className="text-[var(--text-secondary)] mb-4">Search 19,000+ APIs using natural language.</p>
               <pre className="bg-[var(--surface-elevated)] border border-[var(--border)] rounded-lg p-4 overflow-x-auto">
                 <code className="text-sm">
                   <span className="text-purple-600 dark:text-purple-400">discover_apis</span>({'{\n'}
@@ -310,7 +311,7 @@ export default function DocsPage() {
               </li>
               <li>
                 <strong>Email:</strong>{' '}
-                <a href="mailto:gustav@nordsym.com" className="text-[var(--accent)] hover:underline">gustav@nordsym.com</a>
+                <a href="mailto:symbot@nordsym.com" className="text-[var(--accent)] hover:underline">symbot@nordsym.com</a>
               </li>
             </ul>
           </div>

package/landing/src/app/earn/page.tsx

@@ -13,9 +13,9 @@ const EARN_CHANNELS = [
     credits: 500,
     cta: 'Star Repository',
     href: 'https://github.com/nordsym/apiclaw',
-    color: 'from-amber-500/20 to-yellow-500/10',
-    borderColor: 'hover:border-amber-500/50',
-    iconColor: 'text-amber-500',
+    color: 'from-red-500/20 to-orange-500/10',
+    borderColor: 'hover:border-red-500/50',
+    iconColor: 'text-red-500',
   },
   {
     id: 'twitter',
@@ -25,9 +25,9 @@ const EARN_CHANNELS = [
     credits: 250,
     cta: 'Follow Us',
     href: 'https://x.com/NordSym',
-    color: 'from-sky-500/20 to-sky-600/10',
-    borderColor: 'hover:border-sky-500/50',
-    iconColor: 'text-sky-500',
+    color: 'from-red-400/20 to-rose-500/10',
+    borderColor: 'hover:border-red-400/50',
+    iconColor: 'text-red-400',
   },
   {
     id: 'newsletter',
@@ -37,9 +37,9 @@ const EARN_CHANNELS = [
     credits: 100,
     cta: 'Subscribe',
     href: '#newsletter',
-    color: 'from-emerald-500/20 to-emerald-600/10',
-    borderColor: 'hover:border-emerald-500/50',
-    iconColor: 'text-emerald-500',
+    color: 'from-rose-500/20 to-red-500/10',
+    borderColor: 'hover:border-rose-500/50',
+    iconColor: 'text-rose-500',
   },
   {
     id: 'referral',
@@ -120,12 +120,15 @@ export default function EarnPage() {
             <Link href="/" className="hidden sm:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">
               Home
             </Link>
-            <Link href="/docs" className="text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">
+            <Link href="/docs" className="hidden md:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">
               Docs
             </Link>
-            <Link href="/providers" className="hidden md:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">
+            <Link href="/providers/dashboard" className="hidden md:block text-[var(--text-secondary)] hover:text-[var(--accent)] transition-colors text-sm md:text-base">
               Providers
             </Link>
+            <span className="text-[var(--accent)] font-medium text-sm md:text-base">
+              Earn
+            </span>
             <button
               onClick={toggleTheme}
               className="p-2 rounded-lg bg-[var(--surface)] border border-[var(--border)] hover:border-[var(--accent)]/50 transition-colors"

package/landing/src/app/globals.css

@@ -471,36 +471,37 @@ input[type="email"]::placeholder {
 
 /* Code preview */
 .code-preview {
-  background: linear-gradient(180deg, #141414 0%, #0d0d0d 100%);
-  border: 1px solid rgba(239, 68, 68, 0.3);
+  background: linear-gradient(180deg, #0f1419 0%, #080b0e 100%);
+  border: 1px solid rgba(0, 212, 255, 0.3);
   border-radius: 14px;
   overflow: hidden;
   font-family: 'JetBrains Mono', monospace;
   font-size: 13px;
   box-shadow: 
-    0 0 40px rgba(239, 68, 68, 0.25),
-    0 0 80px rgba(239, 68, 68, 0.1),
+    0 0 40px rgba(0, 212, 255, 0.15),
+    0 0 80px rgba(0, 212, 255, 0.05),
     0 8px 32px rgba(0, 0, 0, 0.5),
     inset 0 1px 0 rgba(255, 255, 255, 0.05);
   transition: all 0.3s ease;
 }
 
 .code-preview:hover {
-  border-color: rgba(239, 68, 68, 0.5);
-  transform: translateY(-4px);
+  border-color: rgba(0, 212, 255, 0.5);
+  transform: translateY(-2px);
   box-shadow: 
-    0 0 60px rgba(239, 68, 68, 0.35),
-    0 0 100px rgba(239, 68, 68, 0.15),
+    0 0 60px rgba(0, 212, 255, 0.25),
+    0 0 100px rgba(0, 212, 255, 0.1),
     0 16px 48px rgba(0, 0, 0, 0.6),
     inset 0 1px 0 rgba(255, 255, 255, 0.08);
 }
 
 .code-preview-header {
   padding: 10px 16px;
-  background: #141414;
-  border-bottom: 1px solid #262626;
-  color: #737373;
+  background: rgba(0, 212, 255, 0.05);
+  border-bottom: 1px solid rgba(0, 212, 255, 0.15);
+  color: #00D4FF;
   font-size: 12px;
+  font-weight: 500;
 }
 
 .code-preview-body {
@@ -514,10 +515,10 @@ input[type="email"]::placeholder {
 }
 
 .code-comment { color: #6b7280; }
-.code-string { color: #fbbf24; }
-.code-keyword { color: #f472b6; }
-.code-function { color: #60a5fa; }
-.code-property { color: #34d399; }
+.code-string { color: #00D4FF; }
+.code-keyword { color: #9370DB; }
+.code-function { color: #FF8C00; }
+.code-property { color: #00D4FF; }
 
 /* Logo animation */
 .logo-float {

package/landing/src/app/layout.tsx

@@ -18,13 +18,13 @@ export const metadata: Metadata = {
   },
   openGraph: {
     title: "APIClaw | The API Layer for AI Agents",
-    description: "Agents discover and evaluate APIs via MCP. Structured data. Ranked results. No more googling.",
+    description: `${statsData.apiCount.toLocaleString()}+ APIs. MCP native. Direct Call: providers self-serve their APIs for AI agents.`,
     type: "website",
     siteName: "APIClaw",
     locale: "en_US",
     images: [
       {
-        url: "/api/og",
+        url: "/api/og?v=2",
         width: 1200,
         height: 630,
         alt: "APIClaw - The API layer for AI agents",