@noresponse/mcp 0.5.4 → 0.5.5

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.5.5
+
+* `SDK.integrations.create()`: 
+  *  `request.platform.enum(supabase)` **Added**
+  *  `response.platform.enum(supabase)` **Added** (Breaking ⚠️)
+* `SDK.integrations.list()`:  `response.items[].platform.enum(supabase)` **Added** (Breaking ⚠️)
+* `SDK.integrations.rotate()`:  `response.platform.enum(supabase)` **Added** (Breaking ⚠️)
+
 ## 0.5.4
 
 * `SDK.assessments.create()`:  `response.account.risk.reasons[].code` **Changed** (Breaking ⚠️)

package/bin/mcp-server.js

@@ -48104,9 +48104,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "0.5.4",
+    sdkVersion: "0.5.5",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/mcp-typescript 0.5.4 internal 1 @noresponse/mcp"
+    userAgent: "noresponse-sdk/mcp-typescript 0.5.5 internal 1 @noresponse/mcp"
   };
 });
 
@@ -53691,7 +53691,8 @@ var init_integrationplatform = __esm(() => {
   init_zod();
   IntegrationPlatform$zodSchema = _enum([
     "workos",
-    "auth0"
+    "auth0",
+    "supabase"
   ]).describe("The authentication provider that calls the endpoint.");
 });
 
@@ -53702,10 +53703,10 @@ var init_integrationrequest = __esm(() => {
   init_integrationhookpoint();
   init_integrationplatform();
   IntegrationRequest$zodSchema = object({
-    hook_points: array(IntegrationHookPoint$zodSchema).optional().describe("The provider events the endpoint scores. Default both: pre_registration (WorkOS user registration Action, Auth0 pre-user-registration trigger) and post_login (WorkOS authentication Action, Auth0 post-login trigger). An event that is not listed is answered allow without an assessment."),
+    hook_points: array(IntegrationHookPoint$zodSchema).optional().describe("The provider events the endpoint scores. Default every hook point the platform has: pre_registration (WorkOS user registration Action, Auth0 pre-user-registration trigger, Supabase Before User Created hook) and post_login (WorkOS authentication Action, Auth0 post-login trigger). Supabase has only pre_registration, so a Supabase integration that lists post_login is refused. An event that is not listed is answered allow without an assessment."),
     platform: IntegrationPlatform$zodSchema.describe("The authentication provider that calls the endpoint."),
-    signing_secret: string2().optional().describe("The WorkOS Actions signing secret, as the WorkOS dashboard shows it: 16 to 256 printable ASCII characters with no spaces. It is stored sealed and is not returned.")
-  }).describe("POST /v1/integrations body. Registers a hosted endpoint for one authentication provider. The workspace is the API key that signs the request, so the body has no workspace field and refuses one like any other unknown member. A WorkOS integration needs signing_secret, the Actions secret shown in the WorkOS dashboard, which NoResponse uses to verify each Action request and to sign its answer. An Auth0 integration sends no signing_secret: NoResponse generates the shared secret and returns it once.");
+    signing_secret: string2().optional().describe("The WorkOS Actions signing secret or the Supabase hook secret, as the provider's dashboard shows it: 16 to 256 printable ASCII characters with no spaces. It is stored sealed and is not returned.")
+  }).describe("POST /v1/integrations body. Registers a hosted endpoint for one authentication provider. The workspace is the API key that signs the request, so the body has no workspace field and refuses one like any other unknown member. A WorkOS integration needs signing_secret, the Actions secret shown in the WorkOS dashboard, which NoResponse uses to verify each Action request and to sign its answer. A Supabase integration needs signing_secret, the hook secret Supabase generates for a Before User Created HTTPS hook (v1,whsec_ and base64), which NoResponse uses to verify each call. An Auth0 integration sends no signing_secret: NoResponse generates the shared secret and returns it once.");
 });
 
 // src/funcs/integrationsCreate.ts
@@ -53788,7 +53789,7 @@ var init_integrationsCreate2 = __esm(() => {
     name: "create_integration",
     description: `Register a hosted provider integration.
 
-Registers a WorkOS or Auth0 integration and returns its hosted endpoint, url, so a sign-up or sign-in is scored with no server of your own. For WorkOS, send the Actions signing secret from the WorkOS dashboard and point the user registration and authentication Actions at url. For Auth0, the answer's secret is the shared secret of the NoResponse Auth0 Action, shown once: store it as an Action secret. hook_points defaults to both pre_registration and post_login; an event that is not listed is allowed without an assessment. The endpoint waits for the full assessment for at most 2.5 seconds (WorkOS) or 4.5 seconds (Auth0), denies only when risk.block is true and allows on any failure. Requires the integrations scope; at most 10 per account. Not idempotent: a retry after a lost answer registers another integration.`,
+Registers a WorkOS, Auth0 or Supabase integration and returns its hosted endpoint, url, so a sign-up or sign-in is scored with no server of your own. For WorkOS, send the Actions signing secret from the WorkOS dashboard and point the user registration and authentication Actions at url. For Supabase, send the hook secret Supabase generates (v1,whsec_...) and set url as the Before User Created hook's HTTPS endpoint. For Auth0, the answer's secret is the shared secret of the NoResponse Auth0 Action, shown once: store it as an Action secret. hook_points defaults to every hook point the platform has (Supabase has only pre_registration); an event that is not listed is allowed without an assessment. The endpoint waits for the full assessment for at most 2.5 seconds (WorkOS, Supabase) or 4.5 seconds (Auth0), denies only when risk.block is true and allows on any failure. Requires the integrations scope; at most 10 per account. Not idempotent: a retry after a lost answer registers another integration.`,
     annotations: {
       title: "Register a hosted provider integration",
       destructiveHint: false,
@@ -54086,8 +54087,8 @@ var IntegrationRotationRequest$zodSchema;
 var init_integrationrotationrequest = __esm(() => {
   init_zod();
   IntegrationRotationRequest$zodSchema = object({
-    signing_secret: string2().optional().describe("The WorkOS Actions signing secret, as the WorkOS dashboard shows it: 16 to 256 printable ASCII characters with no spaces. It is stored sealed and is not returned.")
-  }).describe("POST /v1/integrations/{integration_id}/rotate body. For an Auth0 integration send {}: NoResponse generates a new shared secret and returns it once. For a WorkOS integration send the new signing_secret after regenerating it in the WorkOS dashboard. Either way the previous secret is still accepted for 24 hours, so the provider can be switched over without a refused call.");
+    signing_secret: string2().optional().describe("The WorkOS Actions signing secret or the Supabase hook secret, as the provider's dashboard shows it: 16 to 256 printable ASCII characters with no spaces. It is stored sealed and is not returned.")
+  }).describe("POST /v1/integrations/{integration_id}/rotate body. For an Auth0 integration send {}: NoResponse generates a new shared secret and returns it once. For a WorkOS or Supabase integration send the new signing_secret after regenerating it in the provider's dashboard. Either way the previous secret is still accepted for 24 hours, so the provider can be switched over without a refused call.");
 });
 
 // src/models/rotateintegrationsecretop.ts
@@ -54215,7 +54216,7 @@ var init_integrationsRotate2 = __esm(() => {
     name: "rotate_integration_secret",
     description: `Replace an integration's secret.
 
-For Auth0, send {} and the answer's secret is the new shared secret, shown once. For WorkOS, regenerate the Actions secret in the WorkOS dashboard and send it as signing_secret. The replaced secret is still accepted for 24 hours (previous_secret_expires_at). Requires the integrations scope. Not idempotent: a retry after a lost answer rotates again.`,
+For Auth0, send {} and the answer's secret is the new shared secret, shown once. For WorkOS, regenerate the Actions secret in the WorkOS dashboard and send it as signing_secret; for Supabase, generate a new hook secret in the Supabase dashboard and send it as signing_secret. The replaced secret is still accepted for 24 hours (previous_secret_expires_at). Requires the integrations scope. Not idempotent: a retry after a lost answer rotates again.`,
     annotations: {
       title: "Rotate a hosted provider integration's signing secret",
       destructiveHint: false,
@@ -56219,7 +56220,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "NoResponse",
-    version: "0.5.4"
+    version: "0.5.5"
   });
   const getClient = deps.getSDK || (() => new NoResponseCore({
     security: deps.security,
@@ -56383,7 +56384,7 @@ Revokes a key of the signing key's environment at once: its next request answers
       name: "create_integration",
       description: `Register a hosted provider integration.
 
-Registers a WorkOS or Auth0 integration and returns its hosted endpoint, url, so a sign-up or sign-in is scored with no server of your own. For WorkOS, send the Actions signing secret from the WorkOS dashboard and point the user registration and authentication Actions at url. For Auth0, the answer's secret is the shared secret of the NoResponse Auth0 Action, shown once: store it as an Action secret. hook_points defaults to both pre_registration and post_login; an event that is not listed is allowed without an assessment. The endpoint waits for the full assessment for at most 2.5 seconds (WorkOS) or 4.5 seconds (Auth0), denies only when risk.block is true and allows on any failure. Requires the integrations scope; at most 10 per account. Not idempotent: a retry after a lost answer registers another integration.`
+Registers a WorkOS, Auth0 or Supabase integration and returns its hosted endpoint, url, so a sign-up or sign-in is scored with no server of your own. For WorkOS, send the Actions signing secret from the WorkOS dashboard and point the user registration and authentication Actions at url. For Supabase, send the hook secret Supabase generates (v1,whsec_...) and set url as the Before User Created hook's HTTPS endpoint. For Auth0, the answer's secret is the shared secret of the NoResponse Auth0 Action, shown once: store it as an Action secret. hook_points defaults to every hook point the platform has (Supabase has only pre_registration); an event that is not listed is allowed without an assessment. The endpoint waits for the full assessment for at most 2.5 seconds (WorkOS, Supabase) or 4.5 seconds (Auth0), denies only when risk.block is true and allows on any failure. Requires the integrations scope; at most 10 per account. Not idempotent: a retry after a lost answer registers another integration.`
     },
     {
       name: "list_integrations",
@@ -56401,7 +56402,7 @@ Removes the integration and its secrets; its endpoint answers 404 from then on,
       name: "rotate_integration_secret",
       description: `Replace an integration's secret.
 
-For Auth0, send {} and the answer's secret is the new shared secret, shown once. For WorkOS, regenerate the Actions secret in the WorkOS dashboard and send it as signing_secret. The replaced secret is still accepted for 24 hours (previous_secret_expires_at). Requires the integrations scope. Not idempotent: a retry after a lost answer rotates again.`
+For Auth0, send {} and the answer's secret is the new shared secret, shown once. For WorkOS, regenerate the Actions secret in the WorkOS dashboard and send it as signing_secret; for Supabase, generate a new hook secret in the Supabase dashboard and send it as signing_secret. The replaced secret is still accepted for 24 hours (previous_secret_expires_at). Requires the integrations scope. Not idempotent: a retry after a lost answer rotates again.`
     },
     {
       name: "list_webhook_endpoints",
@@ -64956,7 +64957,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.5.4"
+    currentVersion: "0.5.5"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -64964,5 +64965,5 @@ export {
   app
 };
 
-//# debugId=E832E0D7E32B5D3864756E2164756E21
+//# debugId=2367DD60D5FC400A64756E2164756E21
 //# sourceMappingURL=mcp-server.js.map