@prereason/mcp 0.2.1 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.3.0 (2026-04-12)
+
+### Added
+- OAuth 2.1 support for automatic API key provisioning on MCP connection
+- Server branding metadata (title, description, icons) for client connection cards
+- Centered README hero layout with improved visual hierarchy
+- Privacy Policy section in README
+- npm downloads and Node.js version badges
+
+### Security
+- Harden OAuth proxy endpoints with input validation, rate limiting, and timeout handling
+- Sanitize upstream error responses on token exchange
+
+### Fixed
+- HEAD /api/mcp returning 405 instead of 200
+- Metric count in README (38 -> 30)
+- cli.js version mismatch with package.json
+
 ## 0.2.1 (2026-03-30)
 
 - Add .mcp.json for Open Plugins / cursor.directory discovery

package/README.md

@@ -1,27 +1,49 @@
+<div align="center">
+
 # @prereason/mcp
 
 [![npm version](https://img.shields.io/npm/v/@prereason/mcp.svg)](https://www.npmjs.com/package/@prereason/mcp)
+[![npm downloads](https://img.shields.io/npm/dm/@prereason/mcp.svg)](https://www.npmjs.com/package/@prereason/mcp)
+[![node version](https://img.shields.io/node/v/@prereason/mcp.svg)](https://nodejs.org)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
-[![PreReason/mcp MCP server](https://glama.ai/mcp/servers/PreReason/mcp/badges/score.svg)](https://glama.ai/mcp/servers/PreReason/mcp)
+[![Glama Score](https://glama.ai/mcp/servers/PreReason/mcp/badges/score.svg)](https://glama.ai/mcp/servers/PreReason/mcp)
 
-MCP server for [PreReason](https://www.prereason.com) — the Context API for financial agents.
+**MCP server for [PreReason](https://www.prereason.com) - the Context API for financial agents.**
 
-PreReason returns pre-reasoned market briefings: trend signals, regime classification, confidence scores, cross-asset correlations, and causal narratives. Use it when your agent needs to reason about market conditions, not parse raw price feeds.
+Give your agent market context, not raw price feeds. 17 briefings covering BTC, macro,<br>
+cross-asset regimes, and liquidity - each with trend signals, confidence scores, and causal narratives.
 
-[![prereason-mcp MCP server](https://glama.ai/mcp/servers/PreReason/mcp/badges/card.svg)](https://glama.ai/mcp/servers/PreReason/mcp)
+</div>
 
 ## Quick Start
 
-### Option 1: Direct HTTP (Claude Code, Cursor, Windsurf, etc.)
+### Option 1: One-Click Connect (Claude.ai, ChatGPT, Cursor, Codex, Windsurf, VS Code Copilot)
+
+Clients that support MCP OAuth can connect with no API key setup required. Add the server URL and the client handles the rest - you'll be prompted to sign in or create a free account, and your API key is provisioned automatically.
+
+```json
+{
+  "mcpServers": {
+    "prereason": {
+      "type": "http",
+      "url": "https://api.prereason.com/api/mcp"
+    }
+  }
+}
+```
+
+No `Authorization` header needed - OAuth handles it.
+
+### Option 2: Direct HTTP with API Key (Claude Code, scripts, cron jobs)
 
-Clients that support remote MCP servers can connect directly with no bridge package needed.
+For CLI tools or when you want to use an existing API key:
 
 ```bash
 # Claude Code (CLI one-liner)
 claude mcp add prereason --transport http https://api.prereason.com/api/mcp
 ```
 
-Or add to `.mcp.json` / your client's MCP config:
+Or with an explicit key in your MCP config:
 
 ```json
 {
@@ -37,7 +59,7 @@ Or add to `.mcp.json` / your client's MCP config:
 }
 ```
 
-### Option 2: stdio bridge (Claude Desktop and other stdio-only clients)
+### Option 3: stdio bridge (Claude Desktop and other stdio-only clients)
 
 **Requires [Node.js 18+](https://nodejs.org)**
 
@@ -74,7 +96,7 @@ Restart your MCP client after editing the config. PreReason should appear with 5
 | Tool | Auth | Description |
 |------|------|-------------|
 | `list_briefings` | Open | List all 17 pre-reasoned market briefings with tier requirements |
-| `list_metrics` | Open | List all 38 available metrics: 30 API + 8 mining/energy (filterable by category) |
+| `list_metrics` | Open | List all 30 available metrics across bitcoin, macro, and calculated categories |
 | `get_health` | Open | API health check, version, account tier |
 | `get_context` | Required | Fetch a pre-reasoned market briefing (markdown or JSON) |
 | `get_metric` | Required | Fetch a single metric with trend/signal/percentile |
@@ -188,6 +210,10 @@ npx @prereason/mcp --help
 - [Terms of Service](https://www.prereason.com/terms)
 - [Privacy Policy](https://www.prereason.com/privacy)
 
+## Privacy Policy
+
+See [prereason.com/privacy](https://www.prereason.com/privacy) for data handling practices.
+
 ## License
 
-MIT
+MIT

package/bin/cli.js

@@ -22,7 +22,7 @@ import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/
 
 // Keep in sync with package.json on each release
 const PKG_NAME = '@prereason/mcp';
-const PKG_VERSION = '0.2.0';
+const PKG_VERSION = '0.3.1';
 const DEFAULT_URL = 'https://api.prereason.com/api/mcp';
 
 // --- Help / Version ---

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@prereason/mcp",
-  "version": "0.2.1",
-  "mcpName": "com.prereason/mcp",
+  "version": "0.3.1",
+  "mcpName": "io.github.PreReason/mcp",
   "type": "module",
   "description": "MCP server for PreReason — the Context API for financial agents. 17 pre-reasoned market briefings with trend signals, regime classification, confidence scores, and cross-asset correlations.",
   "bin": {
@@ -41,10 +41,21 @@
     "pre-reasoned",
     "context-protocol"
   ],
+  "author": {
+    "name": "PreReason",
+    "url": "https://www.prereason.com"
+  },
   "license": "MIT",
   "homepage": "https://www.prereason.com/docs#mcp",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/PreReason/mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/PreReason/mcp/issues"
+  },
+  "funding": {
+    "type": "individual",
+    "url": "https://www.prereason.com/signup"
   }
 }