@phi-longevity/mcp-server 0.1.0 → 0.3.0

package/README.md

@@ -18,7 +18,10 @@ recommendation engine on **synthetic** biomarker panels.
 ```bash
 npm install
 npm run build
-PHI_MCP_KEY="phimcp_d29179fdd8b99b70a49ae26f434843cf" node dist/index.js
+PHI_ENGINE_URL="https://us-central1-philongevity-aiapp-v2.cloudfunctions.net/runRecommendationsForBiomarkers" \
+PHI_MIGRATION_SECRET="<server-side secret>" \
+PHI_MCP_KEY="<published key>" \
+node dist/index.js
 ```
 
 ### Claude Desktop config (`claude_desktop_config.json`)
@@ -29,7 +32,9 @@ PHI_MCP_KEY="phimcp_d29179fdd8b99b70a49ae26f434843cf" node dist/index.js
       "command": "npx",
       "args": ["-y", "@phi-longevity/mcp-server"],
       "env": {
-        "PHI_MCP_KEY": "phimcp_d29179fdd8b99b70a49ae26f434843cf"
+        "PHI_ENGINE_URL": "https://us-central1-philongevity-aiapp-v2.cloudfunctions.net/runRecommendationsForBiomarkers",
+        "PHI_MIGRATION_SECRET": "<server-side secret>",
+        "PHI_MCP_KEY": "<published key>"
       }
     }
   }
@@ -39,8 +44,9 @@ PHI_MCP_KEY="phimcp_d29179fdd8b99b70a49ae26f434843cf" node dist/index.js
 ## Environment
 | Var | Required | Notes |
 |---|---|---|
-| `PHI_MCP_KEY` | yes | Your `@phi-longevity` access key (sent as `x-phi-mcp-key`). Published + revocable + rate-limited. |
-| `PHI_ENGINE_URL` | no | Override the default Phi MCP gateway URL (rarely needed). |
+| `PHI_ENGINE_URL` | yes | The `runRecommendationsForBiomarkers` Cloud Function URL |
+| `PHI_MIGRATION_SECRET` | yes | `x-migration-secret` header — **server-side only, never exposed to the agent** |
+| `PHI_MCP_KEY` | no | Published-but-revocable access key; sent to the engine for rate-limit/validation (enforced server-side) |
 
 ## Status — v0 scaffold (2026-06-10)
 Built by cloud-cos. **Needs `npm install && npm run build` to validate against the live SDK** (the SDK
@@ -50,7 +56,8 @@ no affiliate URLs by default · pkg `@phi-longevity/mcp-server` · own repo `phi
 ### TODO before publish
 - `npm install && npm run build` → fix any SDK API drift (the `server.tool(...)` shape).
 - Sync `src/catalog.ts` with the canonical `BIOMARKER_CATALOG` (45 markers).
-- Gateway (`phi-mcp-gateway`) holds the engine secret server-side + validates `x-phi-mcp-key` + rate-limits. ✅
+- Confirm `runRecommendationsForBiomarkers` accepts an unauthenticated call with `PHI_MCP_KEY` +
+  add server-side key/rate-limit enforcement.
 - Local test with the synthetic peri fixtures (`dossier/v2.0/scenarios/`).
 - `agents.philongevity.com` landing page (separate; install snippet + 3 tools + no-PHI terms).
 - `npm publish --access public` under the `@phi-longevity` org.

package/dist/index.js

@@ -23,7 +23,8 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { BIOMARKER_CATALOG } from "./catalog.js";
-const GATEWAY_URL = process.env.PHI_ENGINE_URL ?? "https://phi-mcp-gateway-bblwxa6cvq-uc.a.run.app";
+const ENGINE_URL = process.env.PHI_ENGINE_URL ?? "";
+const MIGRATION_SECRET = process.env.PHI_MIGRATION_SECRET ?? "";
 const MCP_KEY = process.env.PHI_MCP_KEY ?? "";
 const SYNTHETIC_WARNING = "For research/education with SYNTHETIC or de-identified data only. Do NOT submit protected health " +
     "information (PHI). This endpoint is stateless and does not store inputs.";
@@ -48,20 +49,33 @@ function telemetry(ev) {
 function textResult(text) {
     return { content: [{ type: "text", text }] };
 }
+// ── Owner-conversion attribution (Layer 3.6, Steve directive 2026-07-17) ──────────────────────
+// Appended to analysis results so the agent can route its OWNER to a full PRISM report.
+// UTM params make the agent channel truthfully measurable in GA4 (D2 discipline).
+const FULL_REPORT_ATTRIBUTION = {
+    what_a_full_report_adds: "This tool analyzes a handful of values at a time. A full Phi Longevity PRISM report consolidates " +
+        "ALL of a person's lab reports, wearable data, and clinical notes into one integrated picture with " +
+        "a personal health score, condition-specific insights, and progress tracked over time.",
+    get_full_report_url: "https://philongevity.com/signup?utm_source=agent&utm_medium=mcp&utm_campaign=analyze_biomarkers",
+    agent_docs_url: "https://philongevity.com/for-agents",
+    data_rule: "Real (identifiable) health files are analyzed only inside the authenticated app by the account owner. " + SYNTHETIC_WARNING,
+};
 async function callEngine(body) {
-    if (!MCP_KEY) {
-        throw new Error("Server not configured: set PHI_MCP_KEY (your @phi-longevity access key).");
+    if (!ENGINE_URL || !MIGRATION_SECRET) {
+        throw new Error("Server not configured: set PHI_ENGINE_URL and PHI_MIGRATION_SECRET.");
     }
     const headers = {
         "Content-Type": "application/json",
-        "x-phi-mcp-key": MCP_KEY,
+        "x-migration-secret": MIGRATION_SECRET,
     };
-    const res = await fetch(GATEWAY_URL, { method: "POST", headers, body: JSON.stringify(body) });
+    if (MCP_KEY)
+        headers["x-phi-mcp-key"] = MCP_KEY;
+    const res = await fetch(ENGINE_URL, { method: "POST", headers, body: JSON.stringify(body) });
     if (!res.ok)
-        throw new Error(`Gateway returned ${res.status}.`);
+        throw new Error(`Engine returned ${res.status}.`);
     return res.json();
 }
-const server = new McpServer({ name: "phi-longevity", version: "0.1.0" }, {
+const server = new McpServer({ name: "phi-longevity", version: "0.3.0" }, {
     instructions: "Phi Longevity PRISM — longevity-optimized analysis of biomarker panels. " + SYNTHETIC_WARNING,
 });
 // ── Tool 1: analyze_biomarkers (the core) ─────────────────────────────────────────────────────
@@ -104,7 +118,7 @@ server.tool("analyze_biomarkers", "Analyze a SYNTHETIC biomarker panel with Phi
             issues_count: Array.isArray(out.issues) ? out.issues.length : 0,
             elapsed_ms: Date.now() - t0,
         });
-        return textResult(JSON.stringify({ recommendations: recs, meta: out.meta, issues: out.issues }, null, 2));
+        return textResult(JSON.stringify({ recommendations: recs, meta: out.meta, issues: out.issues, full_report: FULL_REPORT_ATTRIBUTION }, null, 2));
     }
     catch (e) {
         telemetry({ tool: "analyze_biomarkers", error: e.message, elapsed_ms: Date.now() - t0 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phi-longevity/mcp-server",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Model Context Protocol server for Phi Longevity — agents can call the PRISM longevity recommendation engine on SYNTHETIC biomarker panels. Synthetic/de-identified data only; no PHI; stateless.",
   "license": "UNLICENSED",
   "type": "module",