@ory/mcp-server 0.1.0

package/dist/tools/config.js

@@ -0,0 +1,146 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerConfigTools = registerConfigTools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+const projectParam = zod_1.z.string().optional().describe("Ory project ID or slug");
+const workspaceParam = zod_1.z.string().optional().describe("Ory workspace ID or name");
+function registerUpdateConfig(server, toolName, title, description, kind) {
+    server.registerTool(toolName, {
+        title,
+        description,
+        inputSchema: {
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("Configuration JSON content. Used if 'file' is not provided."),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to a configuration file on disk (takes precedence over content)."),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".json", (filePath) => {
+        const args = ["update", kind, "--file", filePath, ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+}
+function registerPatchConfig(server, toolName, title, description, kind) {
+    server.registerTool(toolName, {
+        title,
+        description,
+        inputSchema: {
+            add: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Keys to add (JSON-Patch add operations)"),
+            replace: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Keys to replace (JSON-Patch replace operations)"),
+            remove: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Keys to remove (JSON-Patch remove operations)"),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Optional configuration file to merge in"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["patch", kind, ...(0, executor_js_1.buildCommonArgs)(params)];
+        for (const op of params.add ?? [])
+            args.push("--add", op);
+        for (const op of params.replace ?? [])
+            args.push("--replace", op);
+        for (const op of params.remove ?? [])
+            args.push("--remove", op);
+        if (params.file)
+            args.push("--file", params.file);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+}
+function registerConfigTools(server) {
+    server.registerTool("ory_get_identity_config", {
+        title: "Get Identity Config",
+        description: "Get the Ory Identities (Kratos) configuration for an Ory Network project.",
+        inputSchema: {
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["get", "identity-config", ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_get_oauth2_config", {
+        title: "Get OAuth2 Config",
+        description: "Get the Ory OAuth2 & OpenID Connect (Hydra) configuration for an Ory Network project.",
+        inputSchema: {
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["get", "oauth2-config", ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_get_permission_config", {
+        title: "Get Permission Config",
+        description: "Get the Ory Permissions (Keto) configuration for an Ory Network project.",
+        inputSchema: {
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["get", "permission-config", ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    registerUpdateConfig(server, "ory_update_identity_config", "Update Identity Config", "Replace the Ory Identities (Kratos) configuration. WARNING: this overwrites the entire identity-config service block.", "identity-config");
+    registerPatchConfig(server, "ory_patch_identity_config", "Patch Identity Config", "Apply a JSON-Patch document to the Ory Identities (Kratos) configuration.", "identity-config");
+    registerUpdateConfig(server, "ory_update_oauth2_config", "Update OAuth2 Config", "Replace the Ory OAuth2 & OpenID Connect (Hydra) configuration. WARNING: this overwrites the entire oauth2-config service block.", "oauth2-config");
+    registerPatchConfig(server, "ory_patch_oauth2_config", "Patch OAuth2 Config", "Apply a JSON-Patch document to the Ory OAuth2 & OpenID Connect (Hydra) configuration.", "oauth2-config");
+    registerUpdateConfig(server, "ory_update_permission_config", "Update Permission Config", "Replace the Ory Permissions (Keto) configuration. WARNING: this overwrites the entire permission-config service block.", "permission-config");
+    registerPatchConfig(server, "ory_patch_permission_config", "Patch Permission Config", "Apply a JSON-Patch document to the Ory Permissions (Keto) configuration.", "permission-config");
+    server.registerTool("ory_update_opl", {
+        title: "Update OPL",
+        description: "Update the Ory Permission Language file in Ory Network. " +
+            "Provide OPL content as a string or a file path. " +
+            "WARNING: This overwrites existing namespace definitions.",
+        inputSchema: {
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("OPL file content as a string (used if file is not provided)"),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to OPL file on disk (takes precedence over content)"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".ts", (filePath) => {
+        const args = ["update", "opl", "--file", filePath, ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+    server.registerTool("ory_patch_opl", {
+        title: "Patch OPL",
+        description: "Patch the Ory Permission Language file in Ory Network. Provide OPL content as a string or a file path.",
+        inputSchema: {
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("OPL file content as a string (used if file is not provided)"),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to OPL file on disk (takes precedence over content)"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".ts", (filePath) => {
+        const args = ["patch", "opl", "--file", filePath, ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+}

package/dist/tools/event_streams.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerEventStreamTools(server: McpServer): void;

package/dist/tools/event_streams.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerEventStreamTools = registerEventStreamTools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+const projectParam = zod_1.z.string().optional().describe("Ory project ID or slug");
+const workspaceParam = zod_1.z.string().optional().describe("Ory workspace ID or name");
+const eventStreamFlags = {
+    type: zod_1.z
+        .enum(["sns", "https"])
+        .describe("Event stream destination type. 'sns' for AWS SNS topics, 'https' for generic HTTPS endpoints."),
+    aws_iam_role_arn: zod_1.z
+        .string()
+        .optional()
+        .describe("AWS IAM role ARN to assume when publishing to SNS (required for type=sns)"),
+    aws_sns_topic_arn: zod_1.z
+        .string()
+        .optional()
+        .describe("AWS SNS topic ARN (required for type=sns)"),
+    https_endpoint: zod_1.z
+        .string()
+        .optional()
+        .describe("HTTPS endpoint URL (required for type=https)"),
+};
+function appendEventStreamFlags(args, params) {
+    args.push("--type", params.type);
+    if (typeof params.aws_iam_role_arn === "string") {
+        args.push("--aws-iam-role-arn", params.aws_iam_role_arn);
+    }
+    if (typeof params.aws_sns_topic_arn === "string") {
+        args.push("--aws-sns-topic-arn", params.aws_sns_topic_arn);
+    }
+    if (typeof params.https_endpoint === "string") {
+        args.push("--https-endpoint", params.https_endpoint);
+    }
+}
+function registerEventStreamTools(server) {
+    server.registerTool("ory_list_event_streams", {
+        title: "List Event Streams",
+        description: "List event streams configured for an Ory Network project.",
+        inputSchema: {
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["list", "event-streams", ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_create_event_stream", {
+        title: "Create Event Stream",
+        description: "Create a new event stream that publishes Ory Network events to AWS SNS or an HTTPS endpoint.",
+        inputSchema: {
+            ...eventStreamFlags,
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["create", "event-stream", ...(0, executor_js_1.buildCommonArgs)(params)];
+        appendEventStreamFlags(args, params);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_update_event_stream", {
+        title: "Update Event Stream",
+        description: "Update the destination configuration for an existing event stream.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Event stream ID"),
+            ...eventStreamFlags,
+            project: projectParam,
+        },
+    }, async (params) => {
+        const args = [
+            "update",
+            "event-stream",
+            params.id,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        appendEventStreamFlags(args, params);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_delete_event_stream", {
+        title: "Delete Event Stream",
+        description: "Delete an event stream by ID. This action is irreversible.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Event stream ID"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "delete",
+            "event-stream",
+            params.id,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+}

package/dist/tools/identities.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerIdentityTools(server: McpServer): void;

package/dist/tools/identities.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerIdentityTools = registerIdentityTools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+const projectParam = zod_1.z.string().optional().describe("Ory project ID or slug");
+const workspaceParam = zod_1.z.string().optional().describe("Ory workspace ID or name");
+function registerIdentityTools(server) {
+    server.registerTool("ory_list_identities", {
+        title: "List Identities",
+        description: "List identities in the Ory project. Returns paginated JSON array of identity objects.",
+        inputSchema: {
+            project: projectParam,
+            workspace: workspaceParam,
+            page_size: zod_1.z
+                .number()
+                .int()
+                .positive()
+                .optional()
+                .describe("Maximum items per page (default 100)"),
+            page_token: zod_1.z
+                .string()
+                .optional()
+                .describe("Pagination token from previous response"),
+            consistency: zod_1.z
+                .enum(["strong", "eventual"])
+                .optional()
+                .describe("Read consistency. Defaults to eventual."),
+        },
+    }, async (params) => {
+        const args = ["list", "identities", ...(0, executor_js_1.buildCommonArgs)(params)];
+        if (params.page_size)
+            args.push("--page-size", String(params.page_size));
+        if (params.page_token)
+            args.push("--page-token", params.page_token);
+        if (params.consistency)
+            args.push("--consistency", params.consistency);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_get_identity", {
+        title: "Get Identity",
+        description: "Get full details about one or more identities by their ID(s).",
+        inputSchema: {
+            ids: zod_1.z
+                .array(zod_1.z.string())
+                .min(1)
+                .describe("One or more identity IDs to retrieve"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "get",
+            "identity",
+            ...params.ids,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_delete_identity", {
+        title: "Delete Identity",
+        description: "Delete one or more identities by their ID(s). This action is irreversible.",
+        inputSchema: {
+            ids: zod_1.z
+                .array(zod_1.z.string())
+                .min(1)
+                .describe("One or more identity IDs to delete"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "delete",
+            "identity",
+            ...params.ids,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_import_identities", {
+        title: "Import Identities",
+        description: "Import one or more identities from a JSON file or inline JSON content. The payload may be a single identity object or an array of identity objects.",
+        inputSchema: {
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("Identity JSON (single object or array). Used if 'file' is not provided."),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to JSON file on disk (takes precedence over content)."),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".json", (filePath) => {
+        const args = ["import", "identities", filePath, ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+    server.registerTool("ory_validate_identity", {
+        title: "Validate Identity",
+        description: "Validate one or more local identity definitions against the project's identity schema.",
+        inputSchema: {
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("Identity JSON (single object or array). Used if 'file' is not provided."),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to JSON file on disk (takes precedence over content)."),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".json", (filePath) => {
+        const args = ["validate", "identity", filePath, ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+}

package/dist/tools/jwk.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerJwkTools(server: McpServer): void;

package/dist/tools/jwk.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerJwkTools = registerJwkTools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+const projectParam = zod_1.z.string().optional().describe("Ory project ID or slug");
+const workspaceParam = zod_1.z.string().optional().describe("Ory workspace ID or name");
+function registerJwkTools(server) {
+    server.registerTool("ory_create_jwk", {
+        title: "Create JSON Web Key Set",
+        description: "Create a new JSON Web Key Set with a single JSON Web Key.",
+        inputSchema: {
+            set_id: zod_1.z.string().describe("Set ID for the JSON Web Key Set"),
+            algorithm: zod_1.z
+                .enum(["RS256", "RS512", "ES256", "ES512", "EdDSA"])
+                .optional()
+                .describe("Algorithm used to generate the key (default RS256)"),
+            use: zod_1.z
+                .enum(["sig", "enc"])
+                .optional()
+                .describe("Intended key use (default sig)"),
+            public_only: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Only return public keys"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["create", "jwk", params.set_id, ...(0, executor_js_1.buildCommonArgs)(params)];
+        if (params.algorithm)
+            args.push("--alg", params.algorithm);
+        if (params.use)
+            args.push("--use", params.use);
+        if (params.public_only === true)
+            args.push("--public");
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_get_jwk", {
+        title: "Get JSON Web Key Set",
+        description: "Get one or more JSON Web Key Sets by their set IDs.",
+        inputSchema: {
+            ids: zod_1.z.array(zod_1.z.string()).min(1).describe("One or more JSON Web Key Set IDs"),
+            public_only: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Only return public keys"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["get", "jwk", ...params.ids, ...(0, executor_js_1.buildCommonArgs)(params)];
+        if (params.public_only === true)
+            args.push("--public");
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_delete_jwk", {
+        title: "Delete JSON Web Key Set",
+        description: "Delete one or more JSON Web Key Sets by their IDs. This action is irreversible.",
+        inputSchema: {
+            ids: zod_1.z
+                .array(zod_1.z.string())
+                .min(1)
+                .describe("One or more JSON Web Key Set IDs to delete"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["delete", "jwk", ...params.ids, ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_import_jwk", {
+        title: "Import JSON Web Keys",
+        description: "Import JSON Web Keys into a key set from a JSON file or inline JSON content. Supports raw JWK or PEM/DER encoded data; if the set does not exist it will be created.",
+        inputSchema: {
+            set_id: zod_1.z.string().describe("Target JSON Web Key Set ID"),
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("JWK JSON content. Used if 'file' is not provided."),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to a JWK JSON file (takes precedence over content)."),
+            algorithm: zod_1.z
+                .string()
+                .optional()
+                .describe("Sets the 'alg' value if the imported key has none (required for PEM/DER)"),
+            use: zod_1.z
+                .enum(["sig", "enc"])
+                .optional()
+                .describe("Sets the 'use' value if the imported key has none (default sig)"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".json", (filePath) => {
+        const args = [
+            "import",
+            "jwk",
+            params.set_id,
+            filePath,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        if (params.algorithm)
+            args.push("--alg", params.algorithm);
+        if (params.use)
+            args.push("--use", params.use);
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+}

package/dist/tools/oauth2.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerOAuth2Tools(server: McpServer): void;