@o-t-p-y/mcp 0.3.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OTPy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,101 @@
+# @o-t-p-y/mcp
+
+Official Model Context Protocol (MCP) server for [OTPy.ir](https://otpy.ir) — interact with your OTPy account, inspect usage, send test codes, and manage keys directly from AI assistants.
+
+## Two credentials
+
+This server can use up to two different OTPy credentials, each for a different purpose:
+
+| Credential | Env var / flag | What it's for |
+|---|---|---|
+| **API key** (project-scoped) | `OTPY_API_KEY` / `--api-key` | Read/write access to OTP-related endpoints: `get_usage`, `send_test_otp`, `verify_test_otp`, `get_integration_snippet`. This is the same `otpy_...` key you use to send real OTPs from your product. |
+| **User key** (user-scoped) | `OTPY_USER_KEY` / `--user-key` | Real, server-verified scope gating for write- and billing-sensitive tools (see below). This is a separate `otpy_uk_...` secret, obtained from the **Integrate** tab on [dash.otpy.ir](https://dash.otpy.ir). |
+
+You do not strictly need a user key to use the read-only tools (`get_usage`, `get_integration_snippet`) — only the API key is required for those. But any tool that requires the `write` or `billing` scope (see below) is denied outright if no user key is configured.
+
+## Installation / Setup
+
+### Cursor
+
+Add to your `.cursor/mcp.json` or Cursor Settings → MCP:
+
+```json
+{
+  "mcpServers": {
+    "otpy": {
+      "command": "npx",
+      "args": ["-y", "@o-t-p-y/mcp"],
+      "env": {
+        "OTPY_API_KEY": "otpy_your_api_key_here",
+        "OTPY_USER_KEY": "otpy_uk_your_user_key_here"
+      }
+    }
+  }
+}
+```
+
+### Claude Desktop
+
+Add to `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "otpy": {
+      "command": "npx",
+      "args": ["-y", "@o-t-p-y/mcp"],
+      "env": {
+        "OTPY_API_KEY": "otpy_your_api_key_here",
+        "OTPY_USER_KEY": "otpy_uk_your_user_key_here"
+      }
+    }
+  }
+}
+```
+
+You can also copy the pre-configured MCP snippet directly from the **Integrate** tab on [dash.otpy.ir](https://dash.otpy.ir).
+
+## Scope model (`user_keys`)
+
+Every user key has exactly two independently toggleable scopes, `write` and `billing`, plus a `root` flag that is always *derived* as `write AND billing` — it is never set directly. There is no third, separately-grantable permission.
+
+| Scope | Grants |
+|---|---|
+| `write` | `send_test_otp`, `verify_test_otp`, `create_api_key` |
+| `billing` | `get_balance`, `list_api_keys` |
+| `root` (derived: `write` and `billing` both true) | Everything above — not a separate scope, just shorthand for "has both". |
+
+Create a user key with the scopes you need on the **Integrate** tab of [dash.otpy.ir](https://dash.otpy.ir) (create/list/revoke and toggling `write`/`billing` all live there). The raw `otpy_uk_...` secret is shown exactly once at creation time — copy it into `OTPY_USER_KEY` immediately.
+
+### How scope verification actually works
+
+Every call to a `write`- or `billing`-gated tool makes a **real, live network request** to `GET /v1/user-keys/self` on the OTPy API, presenting your configured `OTPY_USER_KEY` as a Bearer token. The API hashes it and looks up the *live* row in the `user_keys` table — the same credential's scopes can never be spoofed or bypassed locally. If the key has been revoked or its scopes downgraded on the dashboard, the very next tool call reflects that immediately; there is no local caching of scopes.
+
+**There is no client-side override of any kind.** Earlier versions of this server had a local `OTPY_MCP_WRITE` / `--write` flag that only ever lived in this process's own config — it was never verified against the server, so anyone with shell/env access to their own MCP client could set it and bypass write-tool gating entirely. That flag has been removed outright (not deprecated, not silently downgraded to "restrict only" — deleted). If you still have `OTPY_MCP_WRITE`/`--write` set in an old config, it is now a complete no-op: `parseConfig` doesn't read it at all, and the only thing that can grant write/billing access is a real `user_key` with the matching scope, verified over the network on every call.
+
+If no `OTPY_USER_KEY` is configured at all, every `write`/`billing`-gated tool is denied (fails closed) — only the unscoped read tools (`get_usage`, `get_integration_snippet`) keep working with just an API key.
+
+### Project grants
+
+A user key can optionally be restricted to specific projects (`user_project_grants`, set on the same Integrate tab). The rule:
+
+- **Zero grant rows** → unrestricted: the key can act on any project its owner can reach.
+- **One or more grant rows** → restricted to exactly those project ids.
+
+Whenever a tool call includes a `project_id` argument, the server checks this alongside the write/billing scope check (same live network call) and denies the call if the presented user key isn't granted access to that project.
+
+## Tools
+
+| Tool | Required scope | Description |
+|---|---|---|
+| `get_usage` | none | Daily quota and free/paid usage breakdown |
+| `get_balance` | `billing` | Current wallet balance and pricing details |
+| `list_api_keys` | `billing` | List project API keys and limits |
+| `get_integration_snippet` | none | Generate copyable code snippets |
+| `send_test_otp` | `write` | Send a test OTP code to a phone number |
+| `verify_test_otp` | `write` | Verify a test OTP code |
+| `create_api_key` | `write` | Create a new API key with custom limits |
+
+## License
+
+MIT © [OTPy.ir](https://otpy.ir)

package/dist/index.d.ts

@@ -0,0 +1,176 @@
+#!/usr/bin/env node
+export declare const SERVER_VERSION: string;
+export interface McpServerConfig {
+    apiKey: string;
+    userKey: string;
+    baseUrl: string;
+}
+export declare function parseConfig(args?: string[], env?: Record<string, string | undefined>): McpServerConfig;
+export declare const TOOLS: ({
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            project_id?: undefined;
+            language?: undefined;
+            phone?: undefined;
+            code?: undefined;
+            name?: undefined;
+            limit_daily_otp?: undefined;
+            limit_weekly_otp?: undefined;
+            limit_monthly_otp?: undefined;
+        };
+        required: never[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            project_id: {
+                type: string;
+                description: string;
+            };
+            language?: undefined;
+            phone?: undefined;
+            code?: undefined;
+            name?: undefined;
+            limit_daily_otp?: undefined;
+            limit_weekly_otp?: undefined;
+            limit_monthly_otp?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            language: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            project_id?: undefined;
+            phone?: undefined;
+            code?: undefined;
+            name?: undefined;
+            limit_daily_otp?: undefined;
+            limit_weekly_otp?: undefined;
+            limit_monthly_otp?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            phone: {
+                type: string;
+                description: string;
+            };
+            project_id?: undefined;
+            language?: undefined;
+            code?: undefined;
+            name?: undefined;
+            limit_daily_otp?: undefined;
+            limit_weekly_otp?: undefined;
+            limit_monthly_otp?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            phone: {
+                type: string;
+                description: string;
+            };
+            code: {
+                type: string;
+                description: string;
+            };
+            project_id?: undefined;
+            language?: undefined;
+            name?: undefined;
+            limit_daily_otp?: undefined;
+            limit_weekly_otp?: undefined;
+            limit_monthly_otp?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            project_id: {
+                type: string;
+                description: string;
+            };
+            name: {
+                type: string;
+                description: string;
+            };
+            limit_daily_otp: {
+                type: string;
+                description: string;
+            };
+            limit_weekly_otp: {
+                type: string;
+                description: string;
+            };
+            limit_monthly_otp: {
+                type: string;
+                description: string;
+            };
+            language?: undefined;
+            phone?: undefined;
+            code?: undefined;
+        };
+        required: string[];
+    };
+})[];
+export interface UserKeyScopes {
+    write: boolean;
+    billing: boolean;
+    root: boolean;
+    enabled: boolean;
+}
+export type ScopeVerification = {
+    ok: true;
+    scopes: UserKeyScopes;
+    projectAllowed: boolean | null;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Real, server-verified scope check -- a live network call to
+ * GET /v1/user-keys/self (packages/db/migrations/0018_user_key_authenticate.sql
+ * via apps/api/src/routes/v1/user-keys.ts), never a client-side-only flag.
+ *
+ * When no `userKey` is configured at all, this deliberately returns "ok" with
+ * every scope false rather than an error -- read-only tools (get_usage,
+ * get_integration_snippet) must keep working with only a project api_key
+ * configured, and write/billing tools must be denied (not crash) with a
+ * clear message telling the operator to configure OTPY_USER_KEY.
+ */
+export declare function verifyUserKeyScopes(config: McpServerConfig, fetchFn?: typeof fetch, projectId?: string): Promise<ScopeVerification>;
+export declare function handleToolCall(name: string, args: Record<string, unknown>, config: McpServerConfig, fetchFn?: typeof fetch): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: boolean;
+}>;
+export declare function startMcpServer(config?: McpServerConfig, input?: NodeJS.ReadableStream, output?: NodeJS.WritableStream): void;

package/dist/index.js

@@ -0,0 +1,404 @@
+#!/usr/bin/env node
+import { createInterface } from "node:readline";
+import { createRequire } from "node:module";
+// Single source of truth for the server version: package.json. Read at runtime
+// (rootDir is src/, so a static JSON import of ../package.json would break tsc).
+export const SERVER_VERSION = createRequire(import.meta.url)("../package.json").version;
+export function parseConfig(args = process.argv.slice(2), env = process.env) {
+    const apiKeyArgIdx = args.indexOf("--api-key");
+    const apiKey = (apiKeyArgIdx !== -1 && args[apiKeyArgIdx + 1]) ||
+        env.OTPY_API_KEY ||
+        "";
+    const userKeyArgIdx = args.indexOf("--user-key");
+    const userKey = (userKeyArgIdx !== -1 && args[userKeyArgIdx + 1]) ||
+        env.OTPY_USER_KEY ||
+        "";
+    const baseUrlArgIdx = args.indexOf("--base-url");
+    const baseUrl = (baseUrlArgIdx !== -1 && args[baseUrlArgIdx + 1]) ||
+        env.OTPY_BASE_URL ||
+        "https://api.otpy.ir";
+    return { apiKey, userKey, baseUrl };
+}
+export const TOOLS = [
+    {
+        name: "get_usage",
+        description: "Get today's OTP usage statistics (free used, free quota, paid count, daily limit).",
+        inputSchema: {
+            type: "object",
+            properties: {},
+            required: [],
+        },
+    },
+    {
+        name: "get_balance",
+        description: "Get the current wallet balance for a project. Requires a user_key with the 'billing' scope (see README).",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_id: { type: "string", description: "Project ID." },
+            },
+            required: ["project_id"],
+        },
+    },
+    {
+        name: "list_api_keys",
+        description: "List active API keys and their configured quota limits for the project. Requires a user_key with the 'billing' scope (see README).",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_id: { type: "string", description: "Project ID." },
+            },
+            required: ["project_id"],
+        },
+    },
+    {
+        name: "get_integration_snippet",
+        description: "Get ready-to-use code integration snippet for a specific language (nodejs, python, go, php, curl, csharp).",
+        inputSchema: {
+            type: "object",
+            properties: {
+                language: {
+                    type: "string",
+                    enum: ["nodejs", "python", "go", "php", "curl", "csharp"],
+                    description: "Target programming language.",
+                },
+            },
+            required: ["language"],
+        },
+    },
+    {
+        name: "send_test_otp",
+        description: "Send a test login OTP to a phone number. Requires a user_key with the 'write' scope, verified live against the OTPy API (see README).",
+        inputSchema: {
+            type: "object",
+            properties: {
+                phone: { type: "string", description: "Iranian phone number in format 09xxxxxxxxx." },
+            },
+            required: ["phone"],
+        },
+    },
+    {
+        name: "verify_test_otp",
+        description: "Verify a test OTP code for a phone number. Requires a user_key with the 'write' scope, verified live against the OTPy API (see README).",
+        inputSchema: {
+            type: "object",
+            properties: {
+                phone: { type: "string", description: "Iranian phone number in format 09xxxxxxxxx." },
+                code: { type: "string", description: "6-digit OTP code." },
+            },
+            required: ["phone", "code"],
+        },
+    },
+    {
+        name: "create_api_key",
+        description: "Create a new API key with optional daily/weekly/monthly limits. Requires a user_key with the 'write' scope, verified live against the OTPy API (see README).",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_id: { type: "string", description: "Project ID." },
+                name: { type: "string", description: "Key name." },
+                limit_daily_otp: { type: "number", description: "Optional daily OTP limit." },
+                limit_weekly_otp: { type: "number", description: "Optional weekly OTP limit." },
+                limit_monthly_otp: { type: "number", description: "Optional monthly OTP limit." },
+            },
+            required: ["project_id", "name"],
+        },
+    },
+];
+// Tools requiring the `write` scope on the presented user_key.
+const WRITE_TOOLS = ["send_test_otp", "verify_test_otp", "create_api_key"];
+// Tools requiring the `billing` scope on the presented user_key.
+// Mapping per the plan: billing -> get_balance/list_api_keys/topup endpoints.
+// `root` is never a separate gate -- it is just "has both write AND billing".
+const BILLING_TOOLS = ["get_balance", "list_api_keys"];
+/**
+ * Real, server-verified scope check -- a live network call to
+ * GET /v1/user-keys/self (packages/db/migrations/0018_user_key_authenticate.sql
+ * via apps/api/src/routes/v1/user-keys.ts), never a client-side-only flag.
+ *
+ * When no `userKey` is configured at all, this deliberately returns "ok" with
+ * every scope false rather than an error -- read-only tools (get_usage,
+ * get_integration_snippet) must keep working with only a project api_key
+ * configured, and write/billing tools must be denied (not crash) with a
+ * clear message telling the operator to configure OTPY_USER_KEY.
+ */
+export async function verifyUserKeyScopes(config, fetchFn = globalThis.fetch, projectId) {
+    if (!config.userKey) {
+        return {
+            ok: true,
+            scopes: { write: false, billing: false, root: false, enabled: false },
+            projectAllowed: null,
+        };
+    }
+    try {
+        const url = new URL(`${config.baseUrl}/v1/user-keys/self`);
+        if (projectId)
+            url.searchParams.set("project_id", projectId);
+        const res = await fetchFn(url.toString(), {
+            headers: { authorization: `Bearer ${config.userKey}` },
+        });
+        if (res.status === 401) {
+            return { ok: false, reason: "The configured user_key was rejected (invalid, unknown, or revoked)." };
+        }
+        if (!res.ok) {
+            return { ok: false, reason: `Scope verification request failed with status ${res.status}.` };
+        }
+        const data = (await res.json());
+        if (typeof data.write !== "boolean" || typeof data.billing !== "boolean") {
+            return { ok: false, reason: "Scope verification response was malformed." };
+        }
+        return {
+            ok: true,
+            scopes: {
+                write: data.write,
+                billing: data.billing,
+                root: Boolean(data.root),
+                enabled: Boolean(data.enabled),
+            },
+            projectAllowed: typeof data.project_allowed === "boolean" ? data.project_allowed : null,
+        };
+    }
+    catch (err) {
+        return { ok: false, reason: `Network error while verifying user_key scopes: ${String(err)}` };
+    }
+}
+function scopeDeniedResult(text) {
+    return { isError: true, content: [{ type: "text", text }] };
+}
+export async function handleToolCall(name, args, config, fetchFn = globalThis.fetch) {
+    const needsWrite = WRITE_TOOLS.includes(name);
+    const needsBilling = BILLING_TOOLS.includes(name);
+    if (needsWrite || needsBilling) {
+        const projectId = typeof args.project_id === "string" ? args.project_id : undefined;
+        const verification = await verifyUserKeyScopes(config, fetchFn, projectId);
+        if (!verification.ok) {
+            return scopeDeniedResult(`❌ Could not verify this MCP connection's user_key scopes: ${verification.reason}\nConfigure a valid user_key (OTPY_USER_KEY / --user-key), obtained from the "Integrate" tab on https://dash.otpy.ir.`);
+        }
+        if (!verification.scopes.enabled) {
+            return scopeDeniedResult(`❌ No valid user_key is configured for this MCP connection.\nThis tool requires a user_key with the required scope. Create one on the "Integrate" tab at https://dash.otpy.ir and set OTPY_USER_KEY (or --user-key).`);
+        }
+        if (needsWrite && !verification.scopes.write) {
+            return scopeDeniedResult(`❌ This MCP connection's user_key does not have the 'write' scope.\nWrite actions (sending test OTPs, creating/modifying keys) require a user_key with write enabled. Configure this on the "Integrate" tab at https://dash.otpy.ir.`);
+        }
+        if (needsBilling && !verification.scopes.billing) {
+            return scopeDeniedResult(`❌ This MCP connection's user_key does not have the 'billing' scope.\nBilling-related reads (balance, API key listing) require a user_key with billing enabled. Configure this on the "Integrate" tab at https://dash.otpy.ir.`);
+        }
+        if (projectId && verification.projectAllowed === false) {
+            return scopeDeniedResult(`❌ This MCP connection's user_key is not granted access to project ${projectId}.\nEither omit project_id, or grant this user_key access to that project on the "Integrate" tab at https://dash.otpy.ir.`);
+        }
+    }
+    if (name === "get_usage") {
+        if (!config.apiKey) {
+            return { isError: true, content: [{ type: "text", text: "Error: OTPY_API_KEY is not configured." }] };
+        }
+        try {
+            const res = await fetchFn(`${config.baseUrl}/v1/usage`, {
+                headers: { authorization: `Bearer ${config.apiKey}` },
+            });
+            const data = await res.json();
+            return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+        }
+        catch (err) {
+            return { isError: true, content: [{ type: "text", text: `Network error: ${String(err)}` }] };
+        }
+    }
+    if (name === "get_balance") {
+        const projectId = typeof args.project_id === "string" && args.project_id ? args.project_id : null;
+        if (!projectId) {
+            return { isError: true, content: [{ type: "text", text: "Error: project_id is required." }] };
+        }
+        try {
+            const url = new URL(`${config.baseUrl}/v1/mcp-scope/balance`);
+            url.searchParams.set("project_id", projectId);
+            const res = await fetchFn(url.toString(), {
+                headers: { authorization: `Bearer ${config.userKey}` },
+            });
+            const data = await res.json();
+            return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+        }
+        catch (err) {
+            return { isError: true, content: [{ type: "text", text: `Network error: ${String(err)}` }] };
+        }
+    }
+    if (name === "get_integration_snippet") {
+        const lang = String(args.language || "nodejs");
+        const key = config.apiKey || "otpy_your_api_key";
+        let snippet = "";
+        if (lang === "python") {
+            snippet = `import requests\nres = requests.post("https://api.otpy.ir/v1/otp/send", json={"phone": "09123456789"}, headers={"Authorization": "Bearer ${key}"})\nprint(res.json())`;
+        }
+        else if (lang === "curl") {
+            snippet = `curl -X POST https://api.otpy.ir/v1/otp/send -H "Authorization: Bearer ${key}" -H "Content-Type: application/json" -d '{"phone": "09123456789"}'`;
+        }
+        else if (lang === "go") {
+            snippet = `package main\n\nimport (\n\t"bytes"\n\t"encoding/json"\n\t"fmt"\n\t"net/http"\n)\n\nfunc main() {\n\tpayload, _ := json.Marshal(map[string]string{"phone": "09123456789"})\n\treq, _ := http.NewRequest("POST", "https://api.otpy.ir/v1/otp/send", bytes.NewBuffer(payload))\n\treq.Header.Set("Authorization", "Bearer ${key}")\n\treq.Header.Set("Content-Type", "application/json")\n\tresp, err := http.DefaultClient.Do(req)\n\tif err != nil {\n\t\tpanic(err)\n\t}\n\tdefer resp.Body.Close()\n\tvar result map[string]any\n\tjson.NewDecoder(resp.Body).Decode(&result)\n\tfmt.Println(result)\n}`;
+        }
+        else if (lang === "php") {
+            snippet = `<?php\nuse Illuminate\\Support\\Facades\\Http;\n\n$response = Http::withToken('${key}')\n    ->acceptJson()\n    ->post('https://api.otpy.ir/v1/otp/send', [\n        'phone' => '09123456789',\n    ]);\n\nreturn $response->json();`;
+        }
+        else if (lang === "csharp") {
+            snippet = `using System.Net.Http;\nusing System.Net.Http.Headers;\nusing System.Text;\n\nusing var client = new HttpClient();\nclient.DefaultRequestHeaders.Authorization =\n    new AuthenticationHeaderValue("Bearer", "${key}");\n\nvar content = new StringContent(\n    "{\\"phone\\":\\"09123456789\\"}",\n    Encoding.UTF8,\n    "application/json");\n\nvar response = await client.PostAsync("https://api.otpy.ir/v1/otp/send", content);\nvar body = await response.Content.ReadAsStringAsync();\nConsole.WriteLine(body);`;
+        }
+        else {
+            snippet = `import { OtpyClient } from "@o-t-p-y/sdk";\nconst otpy = new OtpyClient({ apiKey: "${key}" });\nawait otpy.sendOtp("09123456789");`;
+        }
+        return { content: [{ type: "text", text: snippet }] };
+    }
+    if (name === "send_test_otp") {
+        const phone = String(args.phone || "");
+        if (!/^09\d{9}$/.test(phone)) {
+            return { isError: true, content: [{ type: "text", text: "Invalid phone format. Expected 09xxxxxxxxx." }] };
+        }
+        try {
+            const res = await fetchFn(`${config.baseUrl}/v1/otp/send`, {
+                method: "POST",
+                headers: {
+                    authorization: `Bearer ${config.apiKey}`,
+                    "content-type": "application/json",
+                },
+                body: JSON.stringify({ phone }),
+            });
+            const data = await res.json();
+            return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+        }
+        catch (err) {
+            return { isError: true, content: [{ type: "text", text: `Network error: ${String(err)}` }] };
+        }
+    }
+    if (name === "verify_test_otp") {
+        const phone = String(args.phone || "");
+        const code = String(args.code || "");
+        try {
+            const res = await fetchFn(`${config.baseUrl}/v1/otp/verify`, {
+                method: "POST",
+                headers: {
+                    authorization: `Bearer ${config.apiKey}`,
+                    "content-type": "application/json",
+                },
+                body: JSON.stringify({ phone, code }),
+            });
+            const data = await res.json();
+            return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+        }
+        catch (err) {
+            return { isError: true, content: [{ type: "text", text: `Network error: ${String(err)}` }] };
+        }
+    }
+    if (name === "list_api_keys") {
+        const projectId = typeof args.project_id === "string" && args.project_id ? args.project_id : null;
+        if (!projectId) {
+            return { isError: true, content: [{ type: "text", text: "Error: project_id is required." }] };
+        }
+        try {
+            const res = await fetchFn(`${config.baseUrl}/v1/mcp-scope/projects/${projectId}/api-keys`, {
+                headers: { authorization: `Bearer ${config.userKey}` },
+            });
+            const data = await res.json();
+            return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+        }
+        catch (err) {
+            return { isError: true, content: [{ type: "text", text: `Network error: ${String(err)}` }] };
+        }
+    }
+    if (name === "create_api_key") {
+        const projectId = typeof args.project_id === "string" && args.project_id ? args.project_id : null;
+        if (!projectId) {
+            return { isError: true, content: [{ type: "text", text: "Error: project_id is required." }] };
+        }
+        const body = { name: String(args.name ?? "") };
+        for (const key of ["limit_daily_otp", "limit_weekly_otp", "limit_monthly_otp"]) {
+            if (typeof args[key] === "number")
+                body[key] = args[key];
+        }
+        try {
+            const res = await fetchFn(`${config.baseUrl}/v1/mcp-scope/projects/${projectId}/api-keys`, {
+                method: "POST",
+                headers: {
+                    authorization: `Bearer ${config.userKey}`,
+                    "content-type": "application/json",
+                },
+                body: JSON.stringify(body),
+            });
+            const data = await res.json();
+            return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+        }
+        catch (err) {
+            return { isError: true, content: [{ type: "text", text: `Network error: ${String(err)}` }] };
+        }
+    }
+    return { isError: true, content: [{ type: "text", text: `Unknown tool: ${name}` }] };
+}
+export function startMcpServer(config = parseConfig(), input = process.stdin, output = process.stdout) {
+    const rl = createInterface({ input, terminal: false });
+    rl.on("line", async (line) => {
+        const trimmed = line.trim();
+        if (!trimmed)
+            return;
+        let request;
+        try {
+            request = JSON.parse(trimmed);
+        }
+        catch {
+            output.write(JSON.stringify({
+                jsonrpc: "2.0",
+                id: null,
+                error: { code: -32700, message: "Parse error" },
+            }) + "\n");
+            return;
+        }
+        if (!request.method)
+            return;
+        if (request.method === "initialize") {
+            output.write(JSON.stringify({
+                jsonrpc: "2.0",
+                id: request.id,
+                result: {
+                    protocolVersion: "2024-11-05",
+                    capabilities: { tools: {} },
+                    serverInfo: {
+                        name: "otpy-mcp",
+                        version: SERVER_VERSION,
+                    },
+                },
+            }) + "\n");
+            return;
+        }
+        if (request.method === "notifications/initialized") {
+            return;
+        }
+        if (request.method === "ping") {
+            output.write(JSON.stringify({ jsonrpc: "2.0", id: request.id, result: {} }) + "\n");
+            return;
+        }
+        if (request.method === "tools/list") {
+            output.write(JSON.stringify({
+                jsonrpc: "2.0",
+                id: request.id,
+                result: { tools: TOOLS },
+            }) + "\n");
+            return;
+        }
+        if (request.method === "tools/call") {
+            const toolName = String(request.params?.name || "");
+            const toolArgs = (request.params?.arguments ||
+                {});
+            const res = await handleToolCall(toolName, toolArgs, config);
+            output.write(JSON.stringify({
+                jsonrpc: "2.0",
+                id: request.id,
+                result: res,
+            }) + "\n");
+            return;
+        }
+        output.write(JSON.stringify({
+            jsonrpc: "2.0",
+            id: request.id,
+            error: { code: -32601, message: `Method not found: ${request.method}` },
+        }) + "\n");
+    });
+}
+// Auto-start when executed directly
+if (import.meta.url === `file://${process.argv[1]}`) {
+    startMcpServer();
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,+EAA+E;AAC/E,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC;AAuBjH,MAAM,UAAU,WAAW,CACzB,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EACtC,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,MAAM,GACV,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;QAC/C,GAAG,CAAC,YAAY;QAChB,EAAE,CAAC;IAEL,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,OAAO,GACX,CAAC,aAAa,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QACjD,GAAG,CAAC,aAAa;QACjB,EAAE,CAAC;IAEL,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,OAAO,GACX,CAAC,aAAa,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QACjD,GAAG,CAAC,aAAa;QACjB,qBAAqB,CAAC;IAExB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,oFAAoF;QACjG,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,EAAE;SACb;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,0GAA0G;QAC5G,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;aAC3D;YACD,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,oIAAoI;QACtI,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;aAC3D;YACD,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,4GAA4G;QACzH,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC;oBACzD,WAAW,EAAE,8BAA8B;iBAC5C;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,uIAAuI;QACzI,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;aACtF;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,yIAAyI;QAC3I,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;gBACrF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;aAC3D;YACD,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;SAC5B;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,8JAA8J;QAChK,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;gBAC1D,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE;gBAClD,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBAC7E,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;gBAC/E,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;aAClF;YACD,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;SACjC;KACF;CACF,CAAC;AAEF,+DAA+D;AAC/D,MAAM,WAAW,GAAG,CAAC,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;AAC3E,iEAAiE;AACjE,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,aAAa,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;AAavD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAuB,EACvB,UAAwB,UAAU,CAAC,KAAK,EACxC,SAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;YACrE,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;QAC3D,IAAI,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAE7D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACxC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,OAAO,EAAE,EAAE;SACvD,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sEAAsE,EAAE,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;QAC/F,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAM7B,CAAC;QAEF,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAC7E,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;aAC/B;YACD,cAAc,EAAE,OAAO,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;SACxF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAChG,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,IAA6B,EAC7B,MAAuB,EACvB,UAAwB,UAAU,CAAC,KAAK;IAExC,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAElD,IAAI,UAAU,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAE3E,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,iBAAiB,CACtB,6DAA6D,YAAY,CAAC,MAAM,uHAAuH,CACxM,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,iBAAiB,CACtB,qNAAqN,CACtN,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7C,OAAO,iBAAiB,CACtB,qOAAqO,CACtO,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO,iBAAiB,CACtB,+NAA+N,CAChO,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,IAAI,YAAY,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YACvD,OAAO,iBAAiB,CACtB,qEAAqE,SAAS,0HAA0H,CACzM,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,EAAE,CAAC,EAAE,CAAC;QACxG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,WAAW,EAAE;gBACtD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE;aACtD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;YAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBACxC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,OAAO,EAAE,EAAE;aACvD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAmB,CAAC;QACjD,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,GAAG,4IAA4I,GAAG,wBAAwB,CAAC;QACpL,CAAC;aAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,GAAG,0EAA0E,GAAG,qEAAqE,CAAC;QAC/J,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,GAAG,2TAA2T,GAAG,6QAA6Q,CAAC;QACxlB,CAAC;aAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO,GAAG,kFAAkF,GAAG,kJAAkJ,CAAC;QACpP,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,GAAG,kNAAkN,GAAG,uSAAuS,CAAC;QACzgB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,sFAAsF,GAAG,2CAA2C,CAAC;QACjJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6CAA6C,EAAE,CAAC,EAAE,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,cAAc,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,gBAAgB,EAAE;gBAC3D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aACtC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,0BAA0B,SAAS,WAAW,EAAE;gBACzF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,OAAO,EAAE,EAAE;aACvD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,EAAE,CAAC;QAChG,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,mBAAmB,CAAU,EAAE,CAAC;YACxF,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,0BAA0B,SAAS,WAAW,EAAE;gBACzF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,CAAC,OAAO,EAAE;oBACzC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,SAA0B,WAAW,EAAE,EACvC,QAA+B,OAAO,CAAC,KAAK,EAC5C,SAAgC,OAAO,CAAC,MAAM;IAE9C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAEvD,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,OAAoF,CAAC;QACzF,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;aAChD,CAAC,GAAG,IAAI,CACV,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAE5B,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE;oBACN,eAAe,EAAE,YAAY;oBAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,UAAU,EAAE;wBACV,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,cAAc;qBACxB;iBACF;aACF,CAAC,GAAG,IAAI,CACV,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;aACzB,CAAC,GAAG,IAAI,CACV,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAE,OAAO,CAAC,MAA4B,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,CAAE,OAAO,CAAC,MAAkD,EAAE,SAAS;gBACtF,EAAE,CAA4B,CAAC;YAEjC,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE,GAAG;aACZ,CAAC,GAAG,IAAI,CACV,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,OAAO,CAAC,MAAM,EAAE,EAAE;SACxE,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oCAAoC;AACpC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD,cAAc,EAAE,CAAC;AACnB,CAAC"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@o-t-p-y/mcp",
+  "version": "0.3.2",
+  "type": "module",
+  "description": "OTPy MCP server — agent-driven integration path. Implemented in P5.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/o-t-p-y/mcp.git"
+  },
+  "bin": {
+    "otpy-mcp": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "typescript": "^5.7.2",
+    "vitest": "^3.2.4"
+  }
+}