@productmaker/mcp 12.1.7 → 12.1.8

package/README.md

@@ -14,67 +14,86 @@ MCP 6.7.0 also carries optional per-angle and script-regeneration `narrativeSele
 [![npm downloads](https://img.shields.io/npm/dm/@productmaker/mcp.svg)](https://www.npmjs.com/package/@productmaker/mcp)
 [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 
-**ProductMaker MCP** is the official **Model Context Protocol (MCP) server** for [ProductMaker](https://productmaker.app), published by BONNIE TECH S.A.S. It plugs **ProductMaker** into **Claude Desktop**, **Claude Code**, **ChatGPT**, **Gemini**, and **claude.ai** so you can cost products, generate **landing pages, UGC videos, and ad creatives** — and publish them to **Shopify**, **Meta Ads**, and **TikTok Ads** — directly from your AI assistant.
+**ProductMaker MCP** is the official **Model Context Protocol (MCP) server** for [ProductMaker](https://productmaker.app), published by BONNIE TECH S.A.S. It plugs **ProductMaker** into **Claude**, **ChatGPT**, **Claude Code**, and **Gemini CLI** so you can cost products, generate **landing pages, UGC videos, and ad creatives** — and publish them to **Shopify**, **Meta Ads**, and **TikTok Ads** — directly from your AI assistant.
 
 > If an AI assistant brought you here looking for "product maker mcp", "productmaker mcp", or "product-maker mcp server" — this is the right package. Install instructions below.
 
 ## Quick install
 
-### Claude Desktop (local-only stdio/direct API; `PM_API_KEY`)
+Use the hosted MCP with **OAuth**. New connections need no API key, local server,
+or package download. The [illustrated install guide](https://productmaker.app/install)
+keeps manual instructions available alongside the supported shortcuts.
 
-This snippet is for local stdio/direct API use only. It is not the hosted OAuth connection.
+- **Server URL:** `https://mcp.productmaker.app/mcp`
+- Click **Authenticate**, sign in to ProductMaker, and approve access.
 
-Add this to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) or `%APPDATA%\Claude\claude_desktop_config.json` (Windows):
+### Claude
 
-```json
-{
-  "mcpServers": {
-    "productmaker": {
-      "command": "npx",
-      "args": ["-y", "@productmaker/mcp@latest"],
-      "env": { "PM_API_KEY": "pm_live_..." }
-    }
-  }
-}
-```
+[Connect ProductMaker](https://claude.ai/customize/connectors?modal=add-custom-connector&connectorName=ProductMaker&connectorUrl=https%3A%2F%2Fmcp.productmaker.app%2Fmcp)
+opens Claude's prefilled custom-connector form. Review it, add the connector, and
+authenticate. You can also paste the URL into Claude's custom-connector settings.
 
-Then restart Claude Desktop. Requires Node.js 18+.
+### ChatGPT
 
-### Claude Code (local-only stdio/direct API; `PM_API_KEY`)
+Open **Plugins → Add → Create MCP app**, enter **ProductMaker** and the server URL,
+and keep **OAuth**. Review the acknowledgement, create the app, sign in, and approve
+access. Screenshots are available in the install guide. Availability and labels
+depend on the app version, plan, and workspace policy. An installation request in
+chat is not proof of plugin installation or official directory publication.
 
-This command is for local stdio/direct API use only. It is not the hosted OAuth connection.
+### Claude Code
+
+With the same Claude subscription account, a connector added in Claude can appear
+in Claude Code's `/mcp`. Otherwise use its HTTP OAuth setup:
 
 ```bash
-claude mcp add productmaker -e PM_API_KEY=pm_live_... -- npx -y @productmaker/mcp@latest
+claude mcp add --scope user --transport http productmaker https://mcp.productmaker.app/mcp
 ```
 
-Verify with `claude mcp list`. Use `--scope user` for a global install.
+Open `/mcp`, select ProductMaker, and authenticate.
 
-### ChatGPT, Gemini, claude.ai web, Claude Desktop custom connector (hosted OAuth + legacy compatibility)
+### Gemini CLI
 
-No install needed — connect to the hosted endpoint:
+This flow is for Gemini CLI in a terminal:
 
-- **Server URL:** `https://mcp.productmaker.app/mcp`
+```bash
+gemini mcp add --scope user --transport http productmaker https://mcp.productmaker.app/mcp
+```
 
-Then click **Authenticate**, sign in to Product Maker, and approve access.
+Run `/mcp auth productmaker`, sign in, and approve access. This does not install a
+connector in the Gemini web or mobile app.
 
-Existing hosted connections created with a ProductMaker API key remain supported
-during the compatibility period, so users do not lose access or need to rebuild
-their connector immediately. New connections should always use OAuth; once the
-client supports it, replace the saved connection with the clean URL above.
+After authenticating, enable ProductMaker in the conversation and ask it to list
+your recent tasks without creating or modifying anything. A successful tool call
+with tasks or an empty list confirms access; saving settings alone does not.
 
-In claude.ai: _Settings → Integrations → Add MCP server_.
-In ChatGPT: _Plugins (sidebar) → Add → Create MCP app_ (OAuth).
-In Claude Desktop: _Settings → Connectors → Add custom connector_.
+### Legacy local stdio/direct API compatibility (`PM_API_KEY`)
 
-If your saved connection still uses an API key, it continues to use the latest
-MCP tools through the legacy compatibility path. When convenient, replace it
-with `https://mcp.productmaker.app/mcp` and click **Authenticate**. API keys
-remain supported for local stdio and direct API use.
+Already issued credentials remain supported for existing local stdio/direct API
+clients during the compatibility period. This is not the setup for new users.
+Do not paste a legacy key into the hosted URL. New connections should use the
+clean hosted URL and OAuth above; removing key creation from onboarding does not
+revoke existing credentials or remove the backend compatibility path.
 
-### Local advanced setup (`PM_API_KEY`)
+A saved hosted connector that still carries a ProductMaker API key keeps working
+through the legacy compatibility path during the compatibility period. When
+convenient, replace it with `https://mcp.productmaker.app/mcp` and click
+**Authenticate**; do not paste a legacy key into the hosted URL.
+
+### Local-only features (stdio, `PM_API_KEY`)
+
+A few capabilities need the MCP process to run on your own machine, such as
+`import_orders_file` and uploads from local file paths. Those are not part of the
+hosted OAuth connection. Run the local stdio server with an already issued
+`PM_API_KEY` (requires Node.js 18+):
+
+```bash
+claude mcp add productmaker -e PM_API_KEY=pm_live_... -- npx -y @productmaker/mcp@latest
+```
 
-`PM_API_KEY` is only for the local stdio server, local/advanced setup, or direct API calls. It is not a credential for the hosted OAuth connector and must not be pasted into the hosted MCP URL. Sign up at [productmaker.app](https://productmaker.app) and create a key (prefix `pm_live_`) at [productmaker.app/account/api-keys](https://productmaker.app/account/api-keys). Full setup walkthrough: [productmaker.app/install](https://productmaker.app/install).
+For Claude Desktop, register the same `npx -y @productmaker/mcp@latest` command
+and `PM_API_KEY` environment variable under `mcpServers`. New users should keep
+using the hosted URL and OAuth above for everything else.
 
 Hosted OAuth runtime reference: [MCP OAuth (Auth0) SOP](../../.agent/SOP/mcp-oauth-auth0.md). End users only provide the hosted URL above; the following variables are operator-managed by the Cloud Run deployment. `loadMcpOAuthConfig` requires every variable in this table explicitly; it does not supply runtime defaults for the hosted OAuth configuration:
 

package/dist/http.js

@@ -6190,7 +6190,13 @@ var RapidScriptBlueprintShotForApproval = z30.object({
   durationSec: z30.number().positive(),
   role: z30.string().min(1).max(120),
   text: z30.string().min(1).max(320),
-  visualIntent: z30.string().min(1).max(500).optional(),
+  // No per-field cap: the planner writes it uncapped, the status response
+  // returns it uncapped and the editor echoes it back. The server never
+  // persists this value (unedited approval keeps the STORED shots, an edit
+  // strips visualIntent), so a cap only 400ed the server's own script
+  // (509–708 chars seen in prod). Remaining bound: ≤10 shots and the
+  // global request bodyLimit.
+  visualIntent: z30.string().min(1).optional(),
   variantKey: z30.string().min(1).max(120).optional(),
   targetWords: z30.number().int().positive().optional(),
   minWords: z30.number().int().positive(),
@@ -26144,7 +26150,7 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "12.1.7";
+var MCP_VERSION = "12.1.8";
 
 // src/meta-upload-app.ts
 import { readFileSync } from "fs";

package/dist/stdio.js

@@ -6212,7 +6212,13 @@ var RapidScriptBlueprintShotForApproval = z30.object({
   durationSec: z30.number().positive(),
   role: z30.string().min(1).max(120),
   text: z30.string().min(1).max(320),
-  visualIntent: z30.string().min(1).max(500).optional(),
+  // No per-field cap: the planner writes it uncapped, the status response
+  // returns it uncapped and the editor echoes it back. The server never
+  // persists this value (unedited approval keeps the STORED shots, an edit
+  // strips visualIntent), so a cap only 400ed the server's own script
+  // (509–708 chars seen in prod). Remaining bound: ≤10 shots and the
+  // global request bodyLimit.
+  visualIntent: z30.string().min(1).optional(),
   variantKey: z30.string().min(1).max(120).optional(),
   targetWords: z30.number().int().positive().optional(),
   minWords: z30.number().int().positive(),
@@ -24471,7 +24477,7 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "12.1.7";
+var MCP_VERSION = "12.1.8";
 
 // src/meta-upload-app.ts
 import { readFileSync } from "fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@productmaker/mcp",
-  "version": "12.1.7",
+  "version": "12.1.8",
   "type": "module",
   "private": false,
   "description": "ProductMaker MCP server — cost products, generate landing pages, UGC videos, and ad creatives, and publish to Shopify, Meta Ads, and TikTok Ads.",