@ory/mcp-server 1.5.3 → 1.7.0

package/dist/connected-project.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The Ory Network project the Ory Agent plugins are connected to.
+ *
+ * Connecting a plugin writes the project to the shared plugin config
+ * (`config.json` in the `@ory/argus` data directory), and `ORY_PROJECT_URL` /
+ * `ORY_SDK_URL` / `ORY_PROJECT_ID` override it, with the same precedence
+ * `@ory/argus` uses. This server reads only those fields, so it follows the
+ * connected project without depending on the plugin runtime, and the `ory` CLI
+ * is pointed at it with `--project` rather than with its own selected project.
+ */
+export interface ConnectedProject {
+    /** Slug-based project URL, e.g. `https://<slug>.projects.oryapis.com`. */
+    url?: string;
+    /** Value for the CLI's `--project` flag: the project id, or the slug from the URL. */
+    cliProject?: string;
+}
+/**
+ * The project slug in a project URL: the label before `projects` in
+ * `<slug>.projects.<domain>`, which covers production, staging, and local
+ * Ory Network hosts. Custom domains carry no slug and yield `undefined`.
+ */
+export declare function projectSlugFromUrl(url: string): string | undefined;
+/** Read on every call: the plugin can be connected or switched while this server runs. */
+export declare function connectedProject(): ConnectedProject;

package/dist/connected-project.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * The Ory Network project the Ory Agent plugins are connected to.
+ *
+ * Connecting a plugin writes the project to the shared plugin config
+ * (`config.json` in the `@ory/argus` data directory), and `ORY_PROJECT_URL` /
+ * `ORY_SDK_URL` / `ORY_PROJECT_ID` override it, with the same precedence
+ * `@ory/argus` uses. This server reads only those fields, so it follows the
+ * connected project without depending on the plugin runtime, and the `ory` CLI
+ * is pointed at it with `--project` rather than with its own selected project.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.projectSlugFromUrl = projectSlugFromUrl;
+exports.connectedProject = connectedProject;
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+/** The shared plugin data directory, as `getDataDir` in `@ory/argus` resolves it. */
+function pluginDataDir() {
+    const xdg = process.env.XDG_CONFIG_HOME?.trim();
+    if (xdg)
+        return path.join(xdg, "ory-agent-plugins");
+    if (process.platform === "win32") {
+        const appData = process.env.APPDATA?.trim() || path.join(os.homedir(), "AppData", "Roaming");
+        return path.join(appData, "ory-agent-plugins");
+    }
+    return path.join(os.homedir(), ".config", "ory-agent-plugins");
+}
+function readPluginConfig() {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(path.join(pluginDataDir(), "config.json"), "utf-8"));
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function nonEmpty(value) {
+    return typeof value === "string" && value.trim() !== "" ? value.trim() : undefined;
+}
+/**
+ * The project slug in a project URL: the label before `projects` in
+ * `<slug>.projects.<domain>`, which covers production, staging, and local
+ * Ory Network hosts. Custom domains carry no slug and yield `undefined`.
+ */
+function projectSlugFromUrl(url) {
+    try {
+        const labels = new URL(url).hostname.toLowerCase().split(".");
+        return labels.length >= 3 && labels[1] === "projects" && labels[0] ? labels[0] : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Read on every call: the plugin can be connected or switched while this server runs. */
+function connectedProject() {
+    const envUrl = nonEmpty(process.env.ORY_PROJECT_URL) ?? nonEmpty(process.env.ORY_SDK_URL);
+    const envId = nonEmpty(process.env.ORY_PROJECT_ID);
+    // An env URL names a project the config file's id may not belong to.
+    const file = envUrl ? {} : readPluginConfig();
+    const url = envUrl ?? nonEmpty(file.projectUrl);
+    const id = envId ?? nonEmpty(file.projectId);
+    return { url, cliProject: id ?? (url ? projectSlugFromUrl(url) : undefined) };
+}

package/dist/executor.d.ts

@@ -22,11 +22,17 @@ export declare function runOryCommand(args: string[]): Promise<ExecResult>;
 /**
  * Build the common args appended to every ory command.
  * Adds --format json and optional --project / --workspace flags.
+ *
+ * The project defaults to `ORY_PROJECT`, then to the project the Ory Agent
+ * plugins are connected to, so the CLI follows the connected project instead of
+ * its own selected one. Commands that take no `--project` flag (workspaces)
+ * pass `projectScoped: false`.
  */
 export declare function buildCommonArgs(params: {
     project?: string;
     workspace?: string;
     format?: boolean;
+    projectScoped?: boolean;
 }): string[];
 /**
  * Helper to format an ory command result as an MCP tool response.

package/dist/executor.js

@@ -50,6 +50,7 @@ const fs = __importStar(require("node:fs"));
 const os = __importStar(require("node:os"));
 const path = __importStar(require("node:path"));
 const node_util_1 = require("node:util");
+const connected_project_js_1 = require("./connected-project.js");
 const logger_js_1 = require("./logger.js");
 const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
 const ORY_BINARY = process.env.ORY_CLI_PATH ?? "ory";
@@ -88,7 +89,9 @@ async function runOryCommand(args) {
         if (execErr.killed || execErr.signal === "SIGTERM") {
             return {
                 stdout: "",
-                stderr: `Command timed out after ${TIMEOUT}ms. Increase ORY_CLI_TIMEOUT if needed.`,
+                stderr: `Command timed out after ${TIMEOUT}ms. If the ory CLI opened a browser to sign in, ` +
+                    "this server cannot wait for it: run 'ory auth' in a terminal, then retry. " +
+                    "Otherwise increase ORY_CLI_TIMEOUT.",
                 exitCode: 124,
             };
         }
@@ -106,13 +109,20 @@ async function runOryCommand(args) {
 /**
  * Build the common args appended to every ory command.
  * Adds --format json and optional --project / --workspace flags.
+ *
+ * The project defaults to `ORY_PROJECT`, then to the project the Ory Agent
+ * plugins are connected to, so the CLI follows the connected project instead of
+ * its own selected one. Commands that take no `--project` flag (workspaces)
+ * pass `projectScoped: false`.
  */
 function buildCommonArgs(params) {
     const args = [];
     if (params.format !== false) {
         args.push("--format", "json");
     }
-    const project = params.project ?? process.env.ORY_PROJECT;
+    const project = params.projectScoped === false
+        ? undefined
+        : params.project ?? process.env.ORY_PROJECT ?? (0, connected_project_js_1.connectedProject)().cliProject;
     const workspace = params.workspace ?? process.env.ORY_WORKSPACE;
     if (project)
         args.push("--project", project);

package/dist/tools/api.d.ts

@@ -21,7 +21,8 @@ export declare function resetProjectUrlCache(): void;
  * exfiltrate the Ory Network admin token.
  *
  * Trusted origins:
- * - The origin of the env-configured project URL (ORY_PROJECT_URL / ORY_SDK_URL).
+ * - The origin of the connected project URL (ORY_PROJECT_URL / ORY_SDK_URL, or
+ *   the project the Ory Agent plugins are connected to).
  * - Ory Network hosts over https: *.projects.oryapis.com / *.oryapis.com
  *   (and oryapis.com itself) and api.console.ory.sh.
  * - Loopback hosts (localhost / 127.0.0.1 / ::1) over http or https on any

package/dist/tools/api.js

@@ -6,12 +6,14 @@ exports.executeApiCall = executeApiCall;
 exports.registerApiTools = registerApiTools;
 const zod_1 = require("zod");
 const logger_js_1 = require("../logger.js");
+const connected_project_js_1 = require("../connected-project.js");
 const executor_js_1 = require("../executor.js");
 const HTTP_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
 const TIMEOUT = Number(process.env.ORY_HTTP_TIMEOUT) || 30_000;
 const MAX_RESPONSE_SIZE = 5 * 1024 * 1024; // 5 MB
 /**
- * The project URL, resolved from the `ory` CLI's selected project.
+ * The project URL, resolved from the `ory` CLI's selected project. This is the
+ * fallback when no project is connected (see {@link connectedProject}).
  *
  * `ORY_PROJECT_URL` / `ORY_SDK_URL` are **security-half** values: a project only
  * sets them to connect Ory Agent Security. `ory_api_request` is a DX-half tool,
@@ -85,9 +87,9 @@ function resetProjectUrlCache() {
     cliProjectUrl = undefined;
 }
 async function resolveBaseUrl(explicit) {
-    const fromEnv = explicit ?? process.env.ORY_PROJECT_URL ?? process.env.ORY_SDK_URL;
-    if (fromEnv)
-        return fromEnv;
+    const configured = explicit ?? (0, connected_project_js_1.connectedProject)().url;
+    if (configured)
+        return configured;
     const pending = (cliProjectUrl ??= resolveProjectUrlFromCli());
     const resolved = await pending;
     // Only a real answer sticks; see above.
@@ -107,7 +109,8 @@ function resolveEnvApiKey() {
  * exfiltrate the Ory Network admin token.
  *
  * Trusted origins:
- * - The origin of the env-configured project URL (ORY_PROJECT_URL / ORY_SDK_URL).
+ * - The origin of the connected project URL (ORY_PROJECT_URL / ORY_SDK_URL, or
+ *   the project the Ory Agent plugins are connected to).
  * - Ory Network hosts over https: *.projects.oryapis.com / *.oryapis.com
  *   (and oryapis.com itself) and api.console.ory.sh.
  * - Loopback hosts (localhost / 127.0.0.1 / ::1) over http or https on any
@@ -127,10 +130,9 @@ function isTrustedOryOrigin(target) {
         if (hostname === "api.console.ory.sh")
             return true;
     }
-    // Same origin as the env-configured project URL.
-    for (const configured of [process.env.ORY_PROJECT_URL, process.env.ORY_SDK_URL]) {
-        if (!configured)
-            continue;
+    // Same origin as the connected project URL.
+    const configured = (0, connected_project_js_1.connectedProject)().url;
+    if (configured) {
         try {
             if (new URL(configured).origin === target.origin)
                 return true;
@@ -283,7 +285,7 @@ async function executeApiCall(params) {
 function registerApiTools(server) {
     server.registerTool("ory_api_request", {
         title: "Ory REST API Request",
-        description: "Make an authenticated request against the Ory Network REST API. Use this for endpoints not exposed by the dedicated tools (e.g. self-service flows, identity sessions, recovery codes, consent challenges, trusted JWT issuers, schemas). The base URL defaults to ORY_PROJECT_URL and authentication uses ORY_API_KEY as a Bearer token unless overridden. The full API reference is at https://ory.com/docs/reference/api.",
+        description: "Make an authenticated request against the Ory Network REST API. Use this for endpoints not exposed by the dedicated tools (e.g. self-service flows, identity sessions, recovery codes, consent challenges, trusted JWT issuers, schemas). The base URL defaults to the connected project (ORY_PROJECT_URL, or the project the Ory Agent plugins are connected to) and authentication uses ORY_API_KEY as a Bearer token unless overridden. The full API reference is at https://ory.com/docs/reference/api.",
         inputSchema: {
             method: zod_1.z
                 .enum(HTTP_METHODS)
@@ -294,7 +296,7 @@ function registerApiTools(server) {
             base_url: zod_1.z
                 .string()
                 .optional()
-                .describe("Override the base URL. Defaults to ORY_PROJECT_URL or ORY_SDK_URL env var. " +
+                .describe("Override the base URL. Defaults to ORY_PROJECT_URL / ORY_SDK_URL, then the connected project, then the ory CLI's selected project. " +
                 "The env-configured API key is only attached automatically when the URL targets a trusted Ory host " +
                 "(the configured project URL origin, *.oryapis.com, api.console.ory.sh over https, or localhost)."),
             query: zod_1.z

package/dist/tools/workspaces.js

@@ -9,7 +9,7 @@ function registerWorkspaceTools(server) {
         description: "List Ory Network workspaces accessible to the current account.",
         inputSchema: {},
     }, async () => {
-        const args = ["list", "workspaces", ...(0, executor_js_1.buildCommonArgs)({})];
+        const args = ["list", "workspaces", ...(0, executor_js_1.buildCommonArgs)({ projectScoped: false })];
         return (0, executor_js_1.execOryTool)(args);
     });
     server.registerTool("ory_get_workspace", {
@@ -19,7 +19,7 @@ function registerWorkspaceTools(server) {
             id: zod_1.z.string().describe("Workspace ID"),
         },
     }, async (params) => {
-        const args = ["get", "workspace", params.id, ...(0, executor_js_1.buildCommonArgs)({})];
+        const args = ["get", "workspace", params.id, ...(0, executor_js_1.buildCommonArgs)({ projectScoped: false })];
         return (0, executor_js_1.execOryTool)(args);
     });
     server.registerTool("ory_create_workspace", {
@@ -34,7 +34,7 @@ function registerWorkspaceTools(server) {
             "workspace",
             "--name",
             params.name,
-            ...(0, executor_js_1.buildCommonArgs)({}),
+            ...(0, executor_js_1.buildCommonArgs)({ projectScoped: false }),
         ];
         return (0, executor_js_1.execOryTool)(args);
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/mcp-server",
-  "version": "1.5.3",
+  "version": "1.7.0",
   "description": "MCP server exposing the Ory CLI and Ory Network REST API as tools for AI agents to manage identities, OAuth2 clients, permissions, projects, and configuration",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -55,8 +55,8 @@
     "!dist/**/*.tsbuildinfo"
   ],
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "zod": "^4.4.3"
+    "@modelcontextprotocol/sdk": "^1.32.2",
+    "zod": "^4.6.7"
   },
   "engines": {
     "node": ">=22"