@omnistreams/mcp-server 0.1.0

package/README.md

@@ -0,0 +1,81 @@
+# @omnistreams/mcp-server
+
+A [Model Context Protocol](https://modelcontextprotocol.io) server that bridges
+the **OmniStream** REST API to MCP clients such as **Claude Desktop**, **Claude
+Code** and **Cursor**. It lets an AI assistant read your inbox and send messages
+on your behalf through natural language.
+
+## Tools
+
+| Tool | Description | Endpoint |
+|---|---|---|
+| `list_conversations` | List conversations (filter by status / assigned agent, paginated) | `GET /api/conversations` |
+| `get_conversation` | Fetch one conversation by UUID | `GET /api/conversations/{id}` |
+| `list_messages` | List messages in a conversation (cursor paginated) | `GET /api/conversations/{id}/messages` |
+| `send_message` | Send an outbound message (text or rich content) | `POST /api/conversations/{id}/messages` |
+| `list_contacts` | List / search contacts (by name, phone, email, tag) | `GET /api/contacts` |
+| `search_messages` | Full-text search across messages | `GET /api/messages/search` |
+| `list_templates` | List WhatsApp templates (filter by status / category / WABA) | `GET /api/wa-templates` |
+
+All read tools are marked read-only. `send_message` is the only mutating tool.
+
+## Setup
+
+### 1. Create an API key
+
+In OmniStream, go to **Developer → API Keys** and create a **REST** key
+(requires the `developer.access` permission). Copy the key — it is shown once.
+
+> **Tip:** lock the key to your server's IP using the key's **Allowed IPs**
+> field so a leaked key cannot be used from anywhere else.
+
+### 2. Configure the server
+
+The server is configured entirely through environment variables:
+
+| Variable | Required | Default | Description |
+|---|---|---|---|
+| `OMNISTREAM_API_KEY` | ✅ | — | REST API key (`os_..._...`) |
+| `OMNISTREAM_BASE_URL` | | `http://localhost:3000` | API gateway base URL |
+| `OMNISTREAM_TIMEOUT_MS` | | `30000` | Per-request timeout (ms) |
+
+### 3. Add it to your MCP client
+
+**Claude Desktop / Claude Code** (`claude_desktop_config.json` or `.mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "omnistream": {
+      "command": "npx",
+      "args": ["-y", "@omnistreams/mcp-server"],
+      "env": {
+        "OMNISTREAM_API_KEY": "os_xxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
+        "OMNISTREAM_BASE_URL": "https://your-omnistream-host"
+      }
+    }
+  }
+}
+```
+
+Once configured, ask your assistant things like *"list my open WhatsApp
+conversations"* or *"reply to conversation <id> with 'On my way!'"*.
+
+## Local development
+
+```bash
+npm install
+npm run dev        # run from source over stdio
+npm run build      # compile to dist/
+npm test           # unit tests (vitest)
+npm run typecheck  # type-check only
+```
+
+## Security notes
+
+- The API key is sent as the `X-API-Key` header on every request; it is never
+  logged. Diagnostic output goes to **stderr** so it cannot corrupt the MCP
+  JSON-RPC stream on stdout.
+- Requests inherit the RBAC of the key's owning agent — the server cannot do
+  anything the agent could not do in the UI.
+- Combine with the API key **IP allow list** for defense in depth.

package/dist/client.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Minimal, dependency-free HTTP client for the OmniStream REST API.
+ *
+ * Authenticates with an API key via the `X-API-Key` header (see the OmniStream
+ * OpenAPI spec). The `fetch` implementation is injectable so the client can be
+ * unit-tested without a network.
+ */
+/** Query parameters; `undefined`/`null` values are omitted from the URL. */
+export type Query = Record<string, string | number | boolean | undefined | null>;
+/** Error thrown for non-2xx responses (and network/timeout failures). */
+export declare class OmnistreamApiError extends Error {
+    /** HTTP status code, or 0 for network/timeout errors. */
+    readonly status: number;
+    /** Parsed error body, when the response carried one. */
+    readonly body?: unknown | undefined;
+    constructor(
+    /** HTTP status code, or 0 for network/timeout errors. */
+    status: number, message: string, 
+    /** Parsed error body, when the response carried one. */
+    body?: unknown | undefined);
+}
+/** Construction options for {@link OmnistreamClient}. */
+export interface OmnistreamClientOptions {
+    apiKey: string;
+    baseUrl: string;
+    requestTimeoutMs?: number;
+    /** Injectable fetch (defaults to the global). */
+    fetchImpl?: typeof fetch;
+}
+interface RequestOptions {
+    query?: Query;
+    body?: unknown;
+}
+/**
+ * Serialize a query object into a `?a=1&b=2` string, skipping nullish values.
+ * Returns an empty string when there is nothing to append.
+ */
+export declare function buildQueryString(query?: Query): string;
+export declare class OmnistreamClient {
+    private readonly apiKey;
+    private readonly baseUrl;
+    private readonly requestTimeoutMs;
+    private readonly fetchImpl;
+    constructor(options: OmnistreamClientOptions);
+    /** GET `path` with optional query parameters. */
+    get<T>(path: string, query?: Query): Promise<T>;
+    /** POST `path` with a JSON body. */
+    post<T>(path: string, body?: unknown): Promise<T>;
+    /**
+     * Issue a request and parse the JSON response.
+     *
+     * @throws {@link OmnistreamApiError} on non-2xx status, timeout, or network failure.
+     */
+    request<T>(method: string, path: string, options?: RequestOptions): Promise<T>;
+}
+export {};

package/dist/client.js

@@ -0,0 +1,129 @@
+/**
+ * Minimal, dependency-free HTTP client for the OmniStream REST API.
+ *
+ * Authenticates with an API key via the `X-API-Key` header (see the OmniStream
+ * OpenAPI spec). The `fetch` implementation is injectable so the client can be
+ * unit-tested without a network.
+ */
+/** Error thrown for non-2xx responses (and network/timeout failures). */
+export class OmnistreamApiError extends Error {
+    status;
+    body;
+    constructor(
+    /** HTTP status code, or 0 for network/timeout errors. */
+    status, message, 
+    /** Parsed error body, when the response carried one. */
+    body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = "OmnistreamApiError";
+    }
+}
+/**
+ * Serialize a query object into a `?a=1&b=2` string, skipping nullish values.
+ * Returns an empty string when there is nothing to append.
+ */
+export function buildQueryString(query) {
+    if (!query)
+        return "";
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(query)) {
+        if (value === undefined || value === null)
+            continue;
+        params.append(key, String(value));
+    }
+    const qs = params.toString();
+    return qs ? `?${qs}` : "";
+}
+export class OmnistreamClient {
+    apiKey;
+    baseUrl;
+    requestTimeoutMs;
+    fetchImpl;
+    constructor(options) {
+        this.apiKey = options.apiKey;
+        this.baseUrl = options.baseUrl.replace(/\/+$/, "");
+        this.requestTimeoutMs = options.requestTimeoutMs ?? 30_000;
+        const f = options.fetchImpl ?? globalThis.fetch;
+        if (!f) {
+            throw new Error("No fetch implementation available (Node >= 18 required).");
+        }
+        // Bind so a passed-in global fetch keeps its expected `this`.
+        this.fetchImpl = f.bind(globalThis);
+    }
+    /** GET `path` with optional query parameters. */
+    get(path, query) {
+        return this.request("GET", path, { query });
+    }
+    /** POST `path` with a JSON body. */
+    post(path, body) {
+        return this.request("POST", path, { body });
+    }
+    /**
+     * Issue a request and parse the JSON response.
+     *
+     * @throws {@link OmnistreamApiError} on non-2xx status, timeout, or network failure.
+     */
+    async request(method, path, options = {}) {
+        const url = `${this.baseUrl}${path}${buildQueryString(options.query)}`;
+        const headers = { "X-API-Key": this.apiKey };
+        const hasBody = options.body !== undefined;
+        if (hasBody)
+            headers["Content-Type"] = "application/json";
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.requestTimeoutMs);
+        let res;
+        try {
+            res = await this.fetchImpl(url, {
+                method,
+                headers,
+                body: hasBody ? JSON.stringify(options.body) : undefined,
+                signal: controller.signal,
+            });
+        }
+        catch (err) {
+            const reason = err instanceof Error && err.name === "AbortError"
+                ? `Request timed out after ${this.requestTimeoutMs}ms`
+                : `Network error: ${err instanceof Error ? err.message : String(err)}`;
+            throw new OmnistreamApiError(0, reason);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        const text = await res.text();
+        let parsed;
+        try {
+            parsed = text ? JSON.parse(text) : undefined;
+        }
+        catch {
+            parsed = text;
+        }
+        if (!res.ok) {
+            throw new OmnistreamApiError(res.status, extractErrorMessage(parsed, res.status), parsed);
+        }
+        return parsed;
+    }
+}
+/**
+ * Pull a human-readable message out of an OmniStream error envelope
+ * (`{ error: { message } }`), falling back to a plain string body or the
+ * status code.
+ */
+function extractErrorMessage(body, status) {
+    if (typeof body === "string" && body.trim())
+        return body.trim();
+    if (body && typeof body === "object") {
+        const err = body.error;
+        if (typeof err === "string")
+            return err;
+        if (err && typeof err === "object" && typeof err.message === "string") {
+            return err.message;
+        }
+        const msg = body.message;
+        if (typeof msg === "string")
+            return msg;
+    }
+    return `HTTP ${status}`;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,yEAAyE;AACzE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB;IAGA;IALlB;IACE,yDAAyD;IACzC,MAAc,EAC9B,OAAe;IACf,wDAAwD;IACxC,IAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,WAAM,GAAN,MAAM,CAAQ;QAGd,SAAI,GAAJ,IAAI,CAAU;QAG9B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAgBD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QACpD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,OAAO,gBAAgB;IACV,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,gBAAgB,CAAS;IACzB,SAAS,CAAe;IAEzC,YAAY,OAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QAC3D,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,8DAA8D;QAC9D,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,iDAAiD;IACjD,GAAG,CAAI,IAAY,EAAE,KAAa;QAChC,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAI,IAAY,EAAE,IAAc;QAClC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,UAA0B,EAAE;QACzE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAA2B,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC;QAC3C,IAAI,OAAO;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAE1D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAE1E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBAC9B,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACxD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACV,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;gBAC/C,CAAC,CAAC,2BAA2B,IAAI,CAAC,gBAAgB,IAAI;gBACtD,CAAC,CAAC,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,kBAAkB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,MAAW,CAAC;IACrB,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,IAAa,EAAE,MAAc;IACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,GAAG,GAAI,IAA4B,CAAC,KAAK,CAAC;QAChD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QACxC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAQ,GAA6B,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjG,OAAQ,GAA2B,CAAC,OAAO,CAAC;QAC9C,CAAC;QACD,MAAM,GAAG,GAAI,IAA8B,CAAC,OAAO,CAAC;QACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;IAC1C,CAAC;IACD,OAAO,QAAQ,MAAM,EAAE,CAAC;AAC1B,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Configuration loading for the OmniStream MCP server.
+ *
+ * All settings come from environment variables so the server can be launched by
+ * any MCP client (Claude Desktop, Cursor, …) via a simple `env` block.
+ */
+/** Resolved, validated configuration for the MCP server. */
+export interface OmnistreamMcpConfig {
+    /** REST API key sent as the `X-API-Key` header on every request. */
+    apiKey: string;
+    /** Base URL of the OmniStream API gateway, without a trailing slash. */
+    baseUrl: string;
+    /** Per-request timeout in milliseconds. */
+    requestTimeoutMs: number;
+}
+/**
+ * Build a validated {@link OmnistreamMcpConfig} from environment variables.
+ *
+ * @param env - environment to read from (defaults to `process.env`; injectable for tests).
+ * @throws Error when `OMNISTREAM_API_KEY` is missing or the timeout is not a positive integer.
+ */
+export declare function loadConfig(env?: NodeJS.ProcessEnv): OmnistreamMcpConfig;

package/dist/config.js

@@ -0,0 +1,29 @@
+/**
+ * Configuration loading for the OmniStream MCP server.
+ *
+ * All settings come from environment variables so the server can be launched by
+ * any MCP client (Claude Desktop, Cursor, …) via a simple `env` block.
+ */
+const DEFAULT_BASE_URL = "http://localhost:3000";
+const DEFAULT_TIMEOUT_MS = 30_000;
+/**
+ * Build a validated {@link OmnistreamMcpConfig} from environment variables.
+ *
+ * @param env - environment to read from (defaults to `process.env`; injectable for tests).
+ * @throws Error when `OMNISTREAM_API_KEY` is missing or the timeout is not a positive integer.
+ */
+export function loadConfig(env = process.env) {
+    const apiKey = env.OMNISTREAM_API_KEY?.trim();
+    if (!apiKey) {
+        throw new Error("OMNISTREAM_API_KEY is required. Create a REST API key in OmniStream → Developer → API Keys.");
+    }
+    // Strip any trailing slashes so `baseUrl + "/api/..."` never doubles up.
+    const baseUrl = (env.OMNISTREAM_BASE_URL?.trim() || DEFAULT_BASE_URL).replace(/\/+$/, "");
+    const timeoutRaw = env.OMNISTREAM_TIMEOUT_MS?.trim();
+    const requestTimeoutMs = timeoutRaw ? Number.parseInt(timeoutRaw, 10) : DEFAULT_TIMEOUT_MS;
+    if (!Number.isFinite(requestTimeoutMs) || requestTimeoutMs <= 0) {
+        throw new Error(`OMNISTREAM_TIMEOUT_MS must be a positive integer (got "${timeoutRaw}").`);
+    }
+    return { apiKey, baseUrl, requestTimeoutMs };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACjD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAE1F,MAAM,UAAU,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IACrD,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,0DAA0D,UAAU,KAAK,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC/C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * OmniStream MCP server entry point.
+ *
+ * Reads configuration from the environment, builds an authenticated REST
+ * client, registers the OmniStream tools and serves them over stdio — the
+ * transport used by Claude Desktop, Cursor and most MCP clients.
+ */
+export {};

package/dist/index.js

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+/**
+ * OmniStream MCP server entry point.
+ *
+ * Reads configuration from the environment, builds an authenticated REST
+ * client, registers the OmniStream tools and serves them over stdio — the
+ * transport used by Claude Desktop, Cursor and most MCP clients.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { loadConfig } from "./config.js";
+import { OmnistreamClient } from "./client.js";
+import { registerTools } from "./tools.js";
+/** Package version, kept in sync with package.json. */
+const VERSION = "0.1.0";
+async function main() {
+    const config = loadConfig();
+    const client = new OmnistreamClient({
+        apiKey: config.apiKey,
+        baseUrl: config.baseUrl,
+        requestTimeoutMs: config.requestTimeoutMs,
+    });
+    const server = new McpServer({ name: "omnistream", version: VERSION });
+    registerTools(server, client);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    // Log to stderr — stdout is reserved for the MCP JSON-RPC stream.
+    console.error(`OmniStream MCP server v${VERSION} running (base URL: ${config.baseUrl})`);
+}
+main().catch((err) => {
+    console.error(`Fatal: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,uDAAuD;AACvD,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,kEAAkE;IAClE,OAAO,CAAC,KAAK,CAAC,0BAA0B,OAAO,uBAAuB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,18 @@
+/**
+ * MCP tool definitions for OmniStream.
+ *
+ * Each tool maps to one OmniStream REST endpoint. Results are returned as
+ * pretty-printed JSON text; failures surface the API error message with
+ * `isError: true` so the model can react instead of the call throwing.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type OmnistreamClient } from "./client.js";
+/**
+ * Register every OmniStream tool on the given MCP server.
+ *
+ * @param server - the MCP server instance.
+ * @param client - an authenticated OmniStream REST client.
+ */
+export declare function registerTools(server: McpServer, client: OmnistreamClient): void;
+/** Names of all registered tools — exported for tests and documentation. */
+export declare const TOOL_NAMES: readonly ["list_conversations", "get_conversation", "list_messages", "send_message", "list_contacts", "search_messages", "list_templates"];

package/dist/tools.js

@@ -0,0 +1,163 @@
+/**
+ * MCP tool definitions for OmniStream.
+ *
+ * Each tool maps to one OmniStream REST endpoint. Results are returned as
+ * pretty-printed JSON text; failures surface the API error message with
+ * `isError: true` so the model can react instead of the call throwing.
+ */
+import { z } from "zod";
+import { OmnistreamApiError } from "./client.js";
+/** Wrap a successful value as a JSON text result. */
+function jsonResult(data) {
+    return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+}
+/** Wrap an error as an `isError` text result (never throws out of a tool). */
+function errorResult(err) {
+    const message = err instanceof OmnistreamApiError
+        ? `OmniStream API error (${err.status}): ${err.message}`
+        : err instanceof Error
+            ? err.message
+            : String(err);
+    return { content: [{ type: "text", text: message }], isError: true };
+}
+/** Run an async producer, converting success/failure into a tool result. */
+async function run(fn) {
+    try {
+        return jsonResult(await fn());
+    }
+    catch (err) {
+        return errorResult(err);
+    }
+}
+const READ_ONLY = { readOnlyHint: true };
+/**
+ * Register every OmniStream tool on the given MCP server.
+ *
+ * @param server - the MCP server instance.
+ * @param client - an authenticated OmniStream REST client.
+ */
+export function registerTools(server, client) {
+    server.registerTool("list_conversations", {
+        title: "List conversations",
+        description: "List conversations in the inbox. Supports filtering by status and assigned agent, with pagination.",
+        inputSchema: {
+            status: z
+                .enum(["open", "pending", "resolved", "expired"])
+                .optional()
+                .describe("Filter by conversation status."),
+            assigned_agent_id: z.string().optional().describe("Filter by assigned agent UUID."),
+            page: z.number().int().min(1).optional().describe("1-based page number (default 1)."),
+            per_page: z
+                .number()
+                .int()
+                .min(1)
+                .max(100)
+                .optional()
+                .describe("Items per page (1-100, default 20)."),
+        },
+        annotations: READ_ONLY,
+    }, async (args) => run(() => client.get("/api/conversations", args)));
+    server.registerTool("get_conversation", {
+        title: "Get a conversation",
+        description: "Fetch a single conversation (with its contact) by UUID.",
+        inputSchema: {
+            conversation_id: z.string().describe("Conversation UUID."),
+        },
+        annotations: READ_ONLY,
+    }, async ({ conversation_id }) => run(() => client.get(`/api/conversations/${encodeURIComponent(conversation_id)}`)));
+    server.registerTool("list_messages", {
+        title: "List messages in a conversation",
+        description: "List messages in a conversation, newest first, using cursor pagination.",
+        inputSchema: {
+            conversation_id: z.string().describe("Conversation UUID."),
+            cursor: z.string().optional().describe("MongoDB ObjectId hex cursor from a previous page."),
+            limit: z
+                .number()
+                .int()
+                .min(1)
+                .max(100)
+                .optional()
+                .describe("Max messages to return (1-100, default 50)."),
+        },
+        annotations: READ_ONLY,
+    }, async ({ conversation_id, cursor, limit }) => run(() => client.get(`/api/conversations/${encodeURIComponent(conversation_id)}/messages`, {
+        cursor,
+        limit,
+    })));
+    server.registerTool("send_message", {
+        title: "Send a message",
+        description: "Send an outbound message in a conversation. For a plain text message pass `text`; for richer types (image, etc.) pass a raw `content` object. The message is queued and delivered via WhatsApp/Instagram/Email by the sender service.",
+        inputSchema: {
+            conversation_id: z.string().describe("Conversation UUID to send into."),
+            type: z
+                .string()
+                .default("text")
+                .describe("Message type: 'text', 'image', 'document', etc. (default 'text')."),
+            text: z.string().optional().describe("Text body — used when `type` is 'text'."),
+            content: z
+                .record(z.any())
+                .optional()
+                .describe('Raw content object (e.g. {"url":"...","caption":"..."}). Overrides `text` when provided.'),
+        },
+        annotations: { readOnlyHint: false },
+    }, async ({ conversation_id, type, text, content }) => run(() => {
+        const resolvedContent = content ?? (text !== undefined ? { text } : undefined);
+        if (resolvedContent === undefined) {
+            throw new Error("Provide either `text` (for a text message) or a `content` object.");
+        }
+        return client.post(`/api/conversations/${encodeURIComponent(conversation_id)}/messages`, { type, content: resolvedContent });
+    }));
+    server.registerTool("list_contacts", {
+        title: "List/search contacts",
+        description: "List contacts, optionally searching by name/phone/email and filtering by tag.",
+        inputSchema: {
+            search: z.string().optional().describe("Search by name, phone, or email (case-insensitive)."),
+            tag: z.string().optional().describe("Filter by a single tag."),
+            page: z.number().int().min(1).optional().describe("1-based page number (default 1)."),
+            per_page: z
+                .number()
+                .int()
+                .min(1)
+                .max(100)
+                .optional()
+                .describe("Items per page (1-100, default 20)."),
+        },
+        annotations: READ_ONLY,
+    }, async (args) => run(() => client.get("/api/contacts", args)));
+    server.registerTool("search_messages", {
+        title: "Search messages",
+        description: "Full-text search of message content across all conversations.",
+        inputSchema: {
+            q: z.string().describe("Search query (message text)."),
+            limit: z.number().int().min(1).max(100).optional().describe("Max results (default 20)."),
+        },
+        annotations: READ_ONLY,
+    }, async ({ q, limit }) => run(() => client.get("/api/messages/search", { q, limit })));
+    server.registerTool("list_templates", {
+        title: "List WhatsApp templates",
+        description: "List WhatsApp message templates, optionally filtered by status, category or WABA.",
+        inputSchema: {
+            status: z
+                .enum(["APPROVED", "PENDING", "REJECTED", "PAUSED", "DISABLED"])
+                .optional()
+                .describe("Filter by template review status."),
+            category: z
+                .enum(["MARKETING", "UTILITY", "AUTHENTICATION"])
+                .optional()
+                .describe("Filter by template category."),
+            waba_id: z.string().optional().describe("Filter by WhatsApp Business Account ID."),
+        },
+        annotations: READ_ONLY,
+    }, async (args) => run(() => client.get("/api/wa-templates", args)));
+}
+/** Names of all registered tools — exported for tests and documentation. */
+export const TOOL_NAMES = [
+    "list_conversations",
+    "get_conversation",
+    "list_messages",
+    "send_message",
+    "list_contacts",
+    "search_messages",
+    "list_templates",
+];
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAyB,MAAM,aAAa,CAAC;AAExE,qDAAqD;AACrD,SAAS,UAAU,CAAC,IAAa;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,8EAA8E;AAC9E,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,OAAO,GACX,GAAG,YAAY,kBAAkB;QAC/B,CAAC,CAAC,yBAAyB,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE;QACxD,CAAC,CAAC,GAAG,YAAY,KAAK;YACpB,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,GAAG,CAAC,EAA0B;IAC3C,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,EAAE,YAAY,EAAE,IAAI,EAAW,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,MAAwB;IACvE,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,oGAAoG;QACtG,WAAW,EAAE;YACX,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;iBAChD,QAAQ,EAAE;iBACV,QAAQ,CAAC,gCAAgC,CAAC;YAC7C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;YACrF,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,qCAAqC,CAAC;SACnD;QACD,WAAW,EAAE,SAAS;KACvB,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAClE,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,yDAAyD;QACtE,WAAW,EAAE;YACX,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;SAC3D;QACD,WAAW,EAAE,SAAS;KACvB,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAC5B,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CACrF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE;YACX,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YAC3F,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6CAA6C,CAAC;SAC3D;QACD,WAAW,EAAE,SAAS;KACvB,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAC3C,GAAG,CAAC,GAAG,EAAE,CACP,MAAM,CAAC,GAAG,CAAC,sBAAsB,kBAAkB,CAAC,eAAe,CAAC,WAAW,EAAE;QAC/E,MAAM;QACN,KAAK;KACN,CAAC,CACH,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,uOAAuO;QACzO,WAAW,EAAE;YACX,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YACvE,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,OAAO,CAAC,MAAM,CAAC;iBACf,QAAQ,CAAC,mEAAmE,CAAC;YAChF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YAC/E,OAAO,EAAE,CAAC;iBACP,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;iBACf,QAAQ,EAAE;iBACV,QAAQ,CACP,0FAA0F,CAC3F;SACJ;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;KACrC,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CACjD,GAAG,CAAC,GAAG,EAAE;QACP,MAAM,eAAe,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAChB,sBAAsB,kBAAkB,CAAC,eAAe,CAAC,WAAW,EACpE,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CACnC,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,+EAA+E;QAC5F,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;YAC7F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YAC9D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;YACrF,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,qCAAqC,CAAC;SACnD;QACD,WAAW,EAAE,SAAS;KACvB,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAC7D,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE;YACX,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACzF;QACD,WAAW,EAAE,SAAS;KACvB,EACD,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CACpF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,mFAAmF;QAChG,WAAW,EAAE;YACX,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;iBAC/D,QAAQ,EAAE;iBACV,QAAQ,CAAC,mCAAmC,CAAC;YAChD,QAAQ,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;iBAChD,QAAQ,EAAE;iBACV,QAAQ,CAAC,8BAA8B,CAAC;YAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SACnF;QACD,WAAW,EAAE,SAAS;KACvB,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,gBAAgB;CACR,CAAC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@omnistreams/mcp-server",
+  "version": "0.1.0",
+  "description": "Model Context Protocol (MCP) server for OmniStream — lets Claude, Cursor and other MCP clients send messages and manage conversations, contacts and templates via the OmniStream REST API.",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "omnistreams-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "prepublishOnly": "npm run build",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^3.25.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0",
+    "vitest": "^3.2.0"
+  }
+}