@prereason/mcp 0.1.7 → 0.1.10

package/CHANGELOG.md

@@ -1,42 +1,59 @@
-# Changelog
-
-## 0.1.7 (2026-03-04)
-
-- Pin `@modelcontextprotocol/sdk` to exact `1.27.1` (fixes transitive CVEs in hono and qs)
-- Update metric count from 26 to 30 (added 200D MA, distance from 200D MA, USDT market cap, USDT dominance)
-- Update `btc.momentum` description to reflect 200D MA support/resistance
-- Update `cross.regime` description to reflect USDT.D risk sentiment
-
-## 0.1.6 (2026-02-25)
-
-- Fix description wording: replace "trend signals" with "trend interpretation"
-- Add SECURITY.md with vulnerability reporting policy
-- Add GitHub Actions CI workflow for provenance-signed npm publishing
-- Public source repo at https://github.com/PreReason/mcp
-
-## 0.1.3 (2026-02-21)
-
-- Add `PREREASON_API_KEY` environment variable support (fixes Windows `cmd.exe` quoting crash)
-- Add `PREREASON_URL` environment variable for custom endpoint
-- Update all config examples to use `env` block (matches Stripe/Supabase pattern)
-- `--header` CLI args still supported for backward compatibility
-
-## 0.1.2 (2026-02-21)
-
-- Fix Windows path resolution issue in Claude Desktop (rename `.mjs` → `.js` bin entry)
-- Add Windows troubleshooting section in README
-
-## 0.1.1 (2026-02-21)
-
-- Add MIT LICENSE file
-- Enhance README with full template list, troubleshooting, and example prompts
-- Add CHANGELOG
-
-## 0.1.0 (2026-02-20)
-
-- Initial release
-- stdio-to-Streamable HTTP bridge for Claude Desktop
-- Default URL: `https://api.prereason.com/api/mcp`
-- `--header Key:Value` flag for API key authentication
-- `--help` and `--version` flags
-- 5 MCP tools: get_context, get_metric, list_templates, list_metrics, get_health
+# Changelog
+
+## 0.1.10 (2026-03-15)
+
+- Enable SLSA provenance attestation via GitHub Actions publish workflow
+- Fix workflow placement: move from `packages/mcp/.github/` to repo root `.github/workflows/`
+- Switch publish trigger to `workflow_dispatch` for manual control
+
+## 0.1.9 (2026-03-10)
+
+- Expand `socket.yml` to suppress all known-safe transitive dependency alerts from `@modelcontextprotocol/sdk`
+- Covers eval (ajv), shell (cross-spawn), filesystem (express/send), debug, dynamic require, unmaintained micro-packages, and more
+
+## 0.1.8 (2026-03-05)
+
+- Remove `createRequire` / dynamic `require('../package.json')` — hardcode version constants
+- Eliminates Socket.dev "Dynamic require" and "Filesystem access" findings from our code
+- Add `socket.yml` for GitHub PR alert suppression of expected behaviors (network access, env vars)
+
+## 0.1.7 (2026-03-04)
+
+- Pin `@modelcontextprotocol/sdk` to exact `1.27.1` (fixes transitive CVEs in hono and qs)
+- Update metric count from 26 to 30 (added 200D MA, distance from 200D MA, USDT market cap, USDT dominance)
+- Update `btc.momentum` description to reflect 200D MA support/resistance
+- Update `cross.regime` description to reflect USDT.D risk sentiment
+
+## 0.1.6 (2026-02-25)
+
+- Fix description wording: replace "trend signals" with "trend interpretation"
+- Add SECURITY.md with vulnerability reporting policy
+- Add GitHub Actions CI workflow for provenance-signed npm publishing
+- Public source repo at https://github.com/PreReason/mcp
+
+## 0.1.3 (2026-02-21)
+
+- Add `PREREASON_API_KEY` environment variable support (fixes Windows `cmd.exe` quoting crash)
+- Add `PREREASON_URL` environment variable for custom endpoint
+- Update all config examples to use `env` block (matches Stripe/Supabase pattern)
+- `--header` CLI args still supported for backward compatibility
+
+## 0.1.2 (2026-02-21)
+
+- Fix Windows path resolution issue in Claude Desktop (rename `.mjs` → `.js` bin entry)
+- Add Windows troubleshooting section in README
+
+## 0.1.1 (2026-02-21)
+
+- Add MIT LICENSE file
+- Enhance README with full template list, troubleshooting, and example prompts
+- Add CHANGELOG
+
+## 0.1.0 (2026-02-20)
+
+- Initial release
+- stdio-to-Streamable HTTP bridge for Claude Desktop
+- Default URL: `https://api.prereason.com/api/mcp`
+- `--header Key:Value` flag for API key authentication
+- `--help` and `--version` flags
+- 5 MCP tools: get_context, get_metric, list_templates, list_metrics, get_health

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 PreReason
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 PreReason
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,190 +1,190 @@
-# @prereason/mcp
-
-[![npm version](https://img.shields.io/npm/v/@prereason/mcp.svg)](https://www.npmjs.com/package/@prereason/mcp)
-[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
-
-MCP server for [PreReason](https://www.prereason.com): pre-analyzed Bitcoin and macro financial intelligence.
-
-PreReason returns pre-analyzed market context: trend interpretation, momentum analysis, cross-asset correlations, and more. Use it when your task needs to understand market conditions for decision-making, not raw price feeds.
-
-## Quick Start
-
-### Option 1: Direct HTTP (Claude Code, Cursor, Windsurf, etc.)
-
-Clients that support remote MCP servers can connect directly with no bridge package needed.
-
-```bash
-# Claude Code (CLI one-liner)
-claude mcp add prereason --transport http https://api.prereason.com/api/mcp
-```
-
-Or add to `.mcp.json` / your client's MCP config:
-
-```json
-{
-  "mcpServers": {
-    "prereason": {
-      "type": "http",
-      "url": "https://api.prereason.com/api/mcp",
-      "headers": {
-        "Authorization": "Bearer YOUR_API_KEY"
-      }
-    }
-  }
-}
-```
-
-### Option 2: stdio bridge (Claude Desktop and other stdio-only clients)
-
-**Requires [Node.js 18+](https://nodejs.org)**
-
-Add to your MCP client config (e.g. `claude_desktop_config.json`):
-
-```json
-{
-  "mcpServers": {
-    "prereason": {
-      "command": "npx",
-      "args": ["-y", "@prereason/mcp"],
-      "env": {
-        "PREREASON_API_KEY": "YOUR_API_KEY"
-      }
-    }
-  }
-}
-```
-
-Claude Desktop config file location:
-- **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
-- **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
-
-Restart your MCP client after editing the config. PreReason should appear with 5 tools.
-
-## Get an API Key
-
-1. Sign up at [prereason.com/signup](https://www.prereason.com/signup)
-2. Go to Dashboard > Settings > API Keys
-3. Copy your key (starts with `pr_live_`)
-
-## 5 MCP Tools
-
-| Tool | Auth | Description |
-|------|------|-------------|
-| `list_templates` | Open | List all 17 context templates with tier requirements |
-| `list_metrics` | Open | List all 30 available metrics (filterable by category) |
-| `get_health` | Open | API health check, version, account tier |
-| `get_context` | Required | Fetch a context template (markdown or JSON) |
-| `get_metric` | Required | Fetch a single metric with trend/signal/percentile |
-
-## 17 Context Templates
-
-### Free (6 templates)
-| Template | Description |
-|----------|-------------|
-| `btc.quick-check` | Minimal fast context: BTC + Net Liquidity + correlation |
-| `btc.context` | BTC + liquidity + hash ribbon + difficulty + momentum |
-| `macro.snapshot` | Fed balance, M2, treasury yields, VIX, net liquidity |
-| `cross.correlations` | BTC correlation matrix vs macro indicators |
-| `btc.pulse` | Volume, fees, mempool analysis |
-| `btc.grid-stress` | Epoch pace and difficulty adjustment forecast |
-
-### Basic - $19.99/mo (5 templates)
-| Template | Description |
-|----------|-------------|
-| `btc.momentum` | 200D MA support/resistance with 7d/30d/90d momentum and YTD percentiles |
-| `macro.liquidity` | Liquidity indicators with momentum analysis |
-| `btc.on-chain` | Hash rate, difficulty, fees, mempool health |
-| `cross.breadth` | Cross-asset breadth with SPY, DXY, VIX |
-| `btc.miner-survival` | Hashprice thermometer with miner stress scoring |
-
-### Pro - $49.99/mo (6 templates)
-| Template | Description |
-|----------|-------------|
-| `btc.full` | Complete market intelligence with all metrics and analysis |
-| `btc.factors` | Multi-factor attribution for BTC price movements |
-| `cross.regime` | Regime classification (risk-on/risk-off/transition) with USDT.D risk sentiment |
-| `fx.liquidity` | FX environment with DXY, treasury, and global liquidity |
-| `btc.energy` | Production cost model with gas input pressure |
-| `btc.treasury` | Corporate Bitcoin treasury intelligence from SEC filings |
-
-## Example Prompts
-
-Once connected, try prompts like:
-
-- "What's the current BTC regime?"
-- "Show me the macro snapshot"
-- "What does the full context template say about market conditions?"
-- "Get the bitcoin price metric with trend analysis"
-- "What's the hash ribbon signal right now?"
-- "List available templates"
-
-## Troubleshooting
-
-### "Server disconnected" error
-- Ensure Node.js 18+ is installed: `node --version`
-- Check your API key starts with `pr_live_`
-- Fully quit Claude Desktop (system tray > Quit) and reopen
-
-### Tools not appearing
-- Restart Claude Desktop after editing config
-- Verify JSON syntax: `node -e "JSON.parse(require('fs').readFileSync('path/to/config','utf8'))"`
-
-### Windows: "'C:\Program' is not recognized"
-
-If you still see this error, ensure you're using the `env` block (not `--header` args) as shown in Quick Start above. If the issue persists, install globally and use `node`:
-
-1. Run: `npm install -g @prereason/mcp`
-2. Use this config (replace `YOUR_USER` with your Windows username):
-
-```json
-{
-  "mcpServers": {
-    "prereason": {
-      "command": "node",
-      "args": [
-        "C:\\Users\\YOUR_USER\\AppData\\Roaming\\npm\\node_modules\\@prereason\\mcp\\bin\\cli.js"
-      ],
-      "env": {
-        "PREREASON_API_KEY": "YOUR_API_KEY"
-      }
-    }
-  }
-}
-```
-
-### Auth errors on get_context / get_metric
-- `list_templates`, `list_metrics`, and `get_health` work without a key
-- `get_context` and `get_metric` require a valid API key
-- Get a free key at [prereason.com/signup](https://www.prereason.com/signup)
-
-## Other MCP Clients
-
-If your client supports remote HTTP servers, use [Quick Start Option 1](#option-1-direct-http-claude-code-cursor-windsurf-etc) above. The stdio bridge package is only needed for clients that require stdio transport (e.g. Claude Desktop).
-
-## CLI Usage
-
-```bash
-# Using environment variable (recommended)
-PREREASON_API_KEY=pr_live_... npx @prereason/mcp
-
-# Using --header flag (backward compatible)
-npx @prereason/mcp --header "Authorization:Bearer YOUR_API_KEY"
-
-# Custom URL
-PREREASON_URL=https://custom.endpoint/mcp npx @prereason/mcp
-
-# Help
-npx @prereason/mcp --help
-```
-
-## Links
-
-- [Documentation](https://www.prereason.com/docs#mcp)
-- [Sign Up](https://www.prereason.com/signup)
-- [API Discovery](https://www.prereason.com/.well-known/mcp/server.json)
-- [Terms of Service](https://www.prereason.com/terms)
-- [Privacy Policy](https://www.prereason.com/privacy)
-
-## License
-
-MIT
+# @prereason/mcp
+
+[![npm version](https://img.shields.io/npm/v/@prereason/mcp.svg)](https://www.npmjs.com/package/@prereason/mcp)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
+
+MCP server for [PreReason](https://www.prereason.com): pre-analyzed Bitcoin and macro financial intelligence.
+
+PreReason returns pre-analyzed market context: trend interpretation, momentum analysis, cross-asset correlations, and more. Use it when your task needs to understand market conditions for decision-making, not raw price feeds.
+
+## Quick Start
+
+### Option 1: Direct HTTP (Claude Code, Cursor, Windsurf, etc.)
+
+Clients that support remote MCP servers can connect directly with no bridge package needed.
+
+```bash
+# Claude Code (CLI one-liner)
+claude mcp add prereason --transport http https://api.prereason.com/api/mcp
+```
+
+Or add to `.mcp.json` / your client's MCP config:
+
+```json
+{
+  "mcpServers": {
+    "prereason": {
+      "type": "http",
+      "url": "https://api.prereason.com/api/mcp",
+      "headers": {
+        "Authorization": "Bearer YOUR_API_KEY"
+      }
+    }
+  }
+}
+```
+
+### Option 2: stdio bridge (Claude Desktop and other stdio-only clients)
+
+**Requires [Node.js 18+](https://nodejs.org)**
+
+Add to your MCP client config (e.g. `claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "prereason": {
+      "command": "npx",
+      "args": ["-y", "@prereason/mcp"],
+      "env": {
+        "PREREASON_API_KEY": "YOUR_API_KEY"
+      }
+    }
+  }
+}
+```
+
+Claude Desktop config file location:
+- **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
+- **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
+
+Restart your MCP client after editing the config. PreReason should appear with 5 tools.
+
+## Get an API Key
+
+1. Sign up at [prereason.com/signup](https://www.prereason.com/signup)
+2. Go to Dashboard > Settings > API Keys
+3. Copy your key (starts with `pr_live_`)
+
+## 5 MCP Tools
+
+| Tool | Auth | Description |
+|------|------|-------------|
+| `list_templates` | Open | List all 17 context templates with tier requirements |
+| `list_metrics` | Open | List all 38 available metrics: 30 API + 8 mining/energy (filterable by category) |
+| `get_health` | Open | API health check, version, account tier |
+| `get_context` | Required | Fetch a context template (markdown or JSON) |
+| `get_metric` | Required | Fetch a single metric with trend/signal/percentile |
+
+## 17 Context Templates
+
+### Free (6 templates)
+| Template | Description |
+|----------|-------------|
+| `btc.quick-check` | Minimal fast context: BTC + Net Liquidity + correlation |
+| `btc.context` | BTC + liquidity + hash ribbon + difficulty + momentum |
+| `macro.snapshot` | Fed balance, M2, treasury yields, VIX, net liquidity |
+| `cross.correlations` | BTC correlation matrix vs macro indicators |
+| `btc.pulse` | Volume, fees, mempool analysis |
+| `btc.grid-stress` | Epoch pace and difficulty adjustment forecast |
+
+### Basic - $19.99/mo (5 templates)
+| Template | Description |
+|----------|-------------|
+| `btc.momentum` | 200D MA support/resistance with 7d/30d/90d momentum and YTD percentiles |
+| `macro.liquidity` | Liquidity indicators with momentum analysis |
+| `btc.on-chain` | Hash rate, difficulty, fees, mempool health |
+| `cross.breadth` | Cross-asset breadth with SPY, DXY, VIX |
+| `btc.miner-survival` | Hashprice thermometer with miner stress scoring |
+
+### Pro - $49.99/mo (6 templates)
+| Template | Description |
+|----------|-------------|
+| `btc.full` | Complete market intelligence with all metrics and analysis |
+| `btc.factors` | Multi-factor attribution for BTC price movements |
+| `cross.regime` | Regime classification (risk-on/risk-off/transition) with USDT.D risk sentiment |
+| `fx.liquidity` | FX environment with DXY, treasury, and global liquidity |
+| `btc.energy` | Production cost model with gas input pressure |
+| `btc.treasury` | Corporate Bitcoin treasury intelligence from SEC filings |
+
+## Example Prompts
+
+Once connected, try prompts like:
+
+- "What's the current BTC regime?"
+- "Show me the macro snapshot"
+- "What does the full context template say about market conditions?"
+- "Get the bitcoin price metric with trend analysis"
+- "What's the hash ribbon signal right now?"
+- "List available templates"
+
+## Troubleshooting
+
+### "Server disconnected" error
+- Ensure Node.js 18+ is installed: `node --version`
+- Check your API key starts with `pr_live_`
+- Fully quit Claude Desktop (system tray > Quit) and reopen
+
+### Tools not appearing
+- Restart Claude Desktop after editing config
+- Verify JSON syntax: `node -e "JSON.parse(require('fs').readFileSync('path/to/config','utf8'))"`
+
+### Windows: "'C:\Program' is not recognized"
+
+If you still see this error, ensure you're using the `env` block (not `--header` args) as shown in Quick Start above. If the issue persists, install globally and use `node`:
+
+1. Run: `npm install -g @prereason/mcp`
+2. Use this config (replace `YOUR_USER` with your Windows username):
+
+```json
+{
+  "mcpServers": {
+    "prereason": {
+      "command": "node",
+      "args": [
+        "C:\\Users\\YOUR_USER\\AppData\\Roaming\\npm\\node_modules\\@prereason\\mcp\\bin\\cli.js"
+      ],
+      "env": {
+        "PREREASON_API_KEY": "YOUR_API_KEY"
+      }
+    }
+  }
+}
+```
+
+### Auth errors on get_context / get_metric
+- `list_templates`, `list_metrics`, and `get_health` work without a key
+- `get_context` and `get_metric` require a valid API key
+- Get a free key at [prereason.com/signup](https://www.prereason.com/signup)
+
+## Other MCP Clients
+
+If your client supports remote HTTP servers, use [Quick Start Option 1](#option-1-direct-http-claude-code-cursor-windsurf-etc) above. The stdio bridge package is only needed for clients that require stdio transport (e.g. Claude Desktop).
+
+## CLI Usage
+
+```bash
+# Using environment variable (recommended)
+PREREASON_API_KEY=pr_live_... npx @prereason/mcp
+
+# Using --header flag (backward compatible)
+npx @prereason/mcp --header "Authorization:Bearer YOUR_API_KEY"
+
+# Custom URL
+PREREASON_URL=https://custom.endpoint/mcp npx @prereason/mcp
+
+# Help
+npx @prereason/mcp --help
+```
+
+## Links
+
+- [Documentation](https://www.prereason.com/docs#mcp)
+- [Sign Up](https://www.prereason.com/signup)
+- [API Discovery](https://www.prereason.com/.well-known/mcp/server.json)
+- [Terms of Service](https://www.prereason.com/terms)
+- [Privacy Policy](https://www.prereason.com/privacy)
+
+## License
+
+MIT

package/bin/cli.js

@@ -1,111 +1,109 @@
-#!/usr/bin/env node
-/**
- * @prereason/mcp — MCP bridge for Claude Desktop
- *
- * Connects Claude Desktop (stdio) to PreReason's Streamable HTTP MCP endpoint.
- *
- * Auth (preferred — works on all platforms):
- *   Set PREREASON_API_KEY env var in your MCP client config.
- *
- * Usage:
- *   npx @prereason/mcp
- *   npx @prereason/mcp [--header Key:Value]...
- *   npx @prereason/mcp <URL> [--header Key:Value]...
- *
- * Environment variables:
- *   PREREASON_API_KEY   Your API key (adds Authorization: Bearer header)
- *   PREREASON_URL       Override the default endpoint URL
- */
-
-import { createRequire } from 'node:module';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
-
-const DEFAULT_URL = 'https://api.prereason.com/api/mcp';
-
-// --- Help / Version ---
-if (process.argv.includes('--help') || process.argv.includes('-h')) {
-  const require = createRequire(import.meta.url);
-  const pkg = require('../package.json');
-  process.stderr.write(`${pkg.name} v${pkg.version}\n\n`);
-  process.stderr.write('Usage:\n');
-  process.stderr.write('  npx @prereason/mcp\n');
-  process.stderr.write('  npx @prereason/mcp [--header Key:Value]...\n\n');
-  process.stderr.write('Environment variables (recommended):\n');
-  process.stderr.write('  PREREASON_API_KEY    Your API key (adds Authorization: Bearer header)\n');
-  process.stderr.write('  PREREASON_URL        Override the default endpoint URL\n\n');
-  process.stderr.write('Options:\n');
-  process.stderr.write('  --header Key:Value   Add HTTP header (can be repeated)\n');
-  process.stderr.write('  --help, -h           Show this help\n');
-  process.stderr.write('  --version, -v        Show version\n\n');
-  process.stderr.write(`Default URL: ${DEFAULT_URL}\n`);
-  process.exit(0);
-}
-
-if (process.argv.includes('--version') || process.argv.includes('-v')) {
-  const require = createRequire(import.meta.url);
-  const pkg = require('../package.json');
-  process.stderr.write(`${pkg.version}\n`);
-  process.exit(0);
-}
-
-// --- Read environment variables (preferred, avoids Windows cmd.exe quoting issues) ---
-let urlArg = process.env.PREREASON_URL || DEFAULT_URL;
-const headers = {};
-
-if (process.env.PREREASON_API_KEY) {
-  headers['Authorization'] = `Bearer ${process.env.PREREASON_API_KEY}`;
-}
-
-// --- Parse CLI arguments (override env vars) ---
-for (let i = 2; i < process.argv.length; i++) {
-  if (process.argv[i] === '--header' && process.argv[i + 1]) {
-    const val = process.argv[++i];
-    const colonIdx = val.indexOf(':');
-    if (colonIdx > 0) {
-      headers[val.slice(0, colonIdx).trim()] = val.slice(colonIdx + 1).trim();
-    }
-  } else if (!process.argv[i].startsWith('-')) {
-    urlArg = process.argv[i];
-  }
-}
-
-const url = new URL(urlArg);
-
-// --- Create transports ---
-const stdio = new StdioServerTransport();
-const http = new StreamableHTTPClientTransport(url, {
-  requestInit: Object.keys(headers).length > 0 ? { headers } : undefined,
-});
-
-// --- Wire message routing ---
-stdio.onmessage = (msg) => {
-  http.send(msg).catch((e) => {
-    process.stderr.write(`[prereason:send] ${e.message}\n`);
-  });
-};
-
-http.onmessage = (msg) => {
-  stdio.send(msg).catch((e) => {
-    process.stderr.write(`[prereason:recv] ${e.message}\n`);
-  });
-};
-
-// --- Error handling ---
-stdio.onerror = (e) => process.stderr.write(`[prereason:stdio] ${e.message}\n`);
-http.onerror = (e) => process.stderr.write(`[prereason:http] ${e.message}\n`);
-
-// --- Graceful shutdown ---
-stdio.onclose = () => {
-  http.close();
-  process.exit(0);
-};
-
-http.onclose = () => {
-  stdio.close();
-  process.exit(0);
-};
-
-// --- Start ---
-await http.start();
-await stdio.start();
+#!/usr/bin/env node
+/**
+ * @prereason/mcp — MCP bridge for Claude Desktop
+ *
+ * Connects Claude Desktop (stdio) to PreReason's Streamable HTTP MCP endpoint.
+ *
+ * Auth (preferred — works on all platforms):
+ *   Set PREREASON_API_KEY env var in your MCP client config.
+ *
+ * Usage:
+ *   npx @prereason/mcp
+ *   npx @prereason/mcp [--header Key:Value]...
+ *   npx @prereason/mcp <URL> [--header Key:Value]...
+ *
+ * Environment variables:
+ *   PREREASON_API_KEY   Your API key (adds Authorization: Bearer header)
+ *   PREREASON_URL       Override the default endpoint URL
+ */
+
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
+
+// Keep in sync with package.json on each release
+const PKG_NAME = '@prereason/mcp';
+const PKG_VERSION = '0.1.10';
+const DEFAULT_URL = 'https://api.prereason.com/api/mcp';
+
+// --- Help / Version ---
+if (process.argv.includes('--help') || process.argv.includes('-h')) {
+  process.stderr.write(`${PKG_NAME} v${PKG_VERSION}\n\n`);
+  process.stderr.write('Usage:\n');
+  process.stderr.write('  npx @prereason/mcp\n');
+  process.stderr.write('  npx @prereason/mcp [--header Key:Value]...\n\n');
+  process.stderr.write('Environment variables (recommended):\n');
+  process.stderr.write('  PREREASON_API_KEY    Your API key (adds Authorization: Bearer header)\n');
+  process.stderr.write('  PREREASON_URL        Override the default endpoint URL\n\n');
+  process.stderr.write('Options:\n');
+  process.stderr.write('  --header Key:Value   Add HTTP header (can be repeated)\n');
+  process.stderr.write('  --help, -h           Show this help\n');
+  process.stderr.write('  --version, -v        Show version\n\n');
+  process.stderr.write(`Default URL: ${DEFAULT_URL}\n`);
+  process.exit(0);
+}
+
+if (process.argv.includes('--version') || process.argv.includes('-v')) {
+  process.stderr.write(`${PKG_VERSION}\n`);
+  process.exit(0);
+}
+
+// --- Read environment variables (preferred, avoids Windows cmd.exe quoting issues) ---
+let urlArg = process.env.PREREASON_URL || DEFAULT_URL;
+const headers = {};
+
+if (process.env.PREREASON_API_KEY) {
+  headers['Authorization'] = `Bearer ${process.env.PREREASON_API_KEY}`;
+}
+
+// --- Parse CLI arguments (override env vars) ---
+for (let i = 2; i < process.argv.length; i++) {
+  if (process.argv[i] === '--header' && process.argv[i + 1]) {
+    const val = process.argv[++i];
+    const colonIdx = val.indexOf(':');
+    if (colonIdx > 0) {
+      headers[val.slice(0, colonIdx).trim()] = val.slice(colonIdx + 1).trim();
+    }
+  } else if (!process.argv[i].startsWith('-')) {
+    urlArg = process.argv[i];
+  }
+}
+
+const url = new URL(urlArg);
+
+// --- Create transports ---
+const stdio = new StdioServerTransport();
+const http = new StreamableHTTPClientTransport(url, {
+  requestInit: Object.keys(headers).length > 0 ? { headers } : undefined,
+});
+
+// --- Wire message routing ---
+stdio.onmessage = (msg) => {
+  http.send(msg).catch((e) => {
+    process.stderr.write(`[prereason:send] ${e.message}\n`);
+  });
+};
+
+http.onmessage = (msg) => {
+  stdio.send(msg).catch((e) => {
+    process.stderr.write(`[prereason:recv] ${e.message}\n`);
+  });
+};
+
+// --- Error handling ---
+stdio.onerror = (e) => process.stderr.write(`[prereason:stdio] ${e.message}\n`);
+http.onerror = (e) => process.stderr.write(`[prereason:http] ${e.message}\n`);
+
+// --- Graceful shutdown ---
+stdio.onclose = () => {
+  http.close();
+  process.exit(0);
+};
+
+http.onclose = () => {
+  stdio.close();
+  process.exit(0);
+};
+
+// --- Start ---
+await http.start();
+await stdio.start();

package/package.json

@@ -1,45 +1,45 @@
-{
-  "name": "@prereason/mcp",
-  "version": "0.1.7",
-  "type": "module",
-  "description": "MCP server for pre-analyzed Bitcoin and macro financial intelligence. 17 context templates with trend interpretation, momentum analysis, and cross-asset correlations.",
-  "bin": {
-    "prereason-mcp": "./bin/cli.js"
-  },
-  "files": [
-    "bin",
-    "README.md",
-    "LICENSE",
-    "CHANGELOG.md"
-  ],
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "1.27.1"
-  },
-  "engines": {
-    "node": ">=18"
-  },
-  "keywords": [
-    "mcp",
-    "model-context-protocol",
-    "claude",
-    "bitcoin",
-    "macro",
-    "prereason",
-    "ai",
-    "llm",
-    "finance",
-    "crypto",
-    "financial-data",
-    "liquidity",
-    "ai-agent",
-    "trading",
-    "market-data",
-    "context-protocol"
-  ],
-  "license": "MIT",
-  "homepage": "https://www.prereason.com/docs#mcp",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/prereason/mcp"
-  }
-}
+{
+  "name": "@prereason/mcp",
+  "version": "0.1.10",
+  "type": "module",
+  "description": "MCP server for pre-analyzed Bitcoin and macro financial intelligence. 17 context templates with trend interpretation, momentum analysis, and cross-asset correlations.",
+  "bin": {
+    "prereason-mcp": "./bin/cli.js"
+  },
+  "files": [
+    "bin",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.27.1"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "claude",
+    "bitcoin",
+    "macro",
+    "prereason",
+    "ai",
+    "llm",
+    "finance",
+    "crypto",
+    "financial-data",
+    "liquidity",
+    "ai-agent",
+    "trading",
+    "market-data",
+    "context-protocol"
+  ],
+  "license": "MIT",
+  "homepage": "https://www.prereason.com/docs#mcp",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/PreReason/mcp"
+  }
+}