@quidli/connect-mcp 0.5.9 → 0.6.2

package/README.md

@@ -34,23 +34,23 @@ See [Choose how to connect](#choose-how-to-connect) below for API keys, x402 wal
 
 Then ask your agent:
 
-> Resolve the Farcaster handle `ahn.eth` to a wallet.
+> Resolve the GitHub handle `justinquidli` to a wallet.
 
 ```json
 {
   "status": "completed",
   "results": [
     {
-      "type": "farcaster",
-      "value": "ahn.eth",
-      "ethWalletAddress": "0x07De92Ce6474D718c80e696516bf0bE53290fF5E",
+      "type": "github",
+      "value": "justinquidli",
+      "ethWalletAddress": "0x6a48ADE3bE3F9f0b8B4c9af61Bb654A219311699",
       "solWalletAddress": "9DD2CqPKZJoo7ZRgCXxJNMjhzfgVihSKtkZpn8qnEWK9"
     }
   ]
 }
 ```
 
-Resolves across Telegram, Discord, Farcaster, X, GitHub, LinkedIn, email and phone — and generates a wallet for people who have never used Quidli.
+Resolves across GitHub, X, Telegram, Discord, LinkedIn, Farcaster, email and phone — and generates a wallet for people who have never used Quidli.
 
 Lookup, scores, and price run without a key under a shared anonymous quota. Add a [Connect API key](https://connect.quid.li) for higher limits, your own profile (`connect_me`), and Smart Send.
 
@@ -371,8 +371,14 @@ mistake.
 | `connect_scores_by_account`  | Scores for one linked account                             |
 | `connect_scores_by_username` | Scores by Connect username                                |
 | `connect_me`                 | API key owner profile, scores, and linked accounts — **API key only** |
-| `connect_drop`               | Smart Send (batch token transfer) — **API key only**      |
+| `connect_drop`               | Smart Send (EVM batch or Solana SOL/SPL) — **API key only** |
 | `connect_drop_balance`       | Smart Send wallet balances on a chain — **API key only**  |
 
 
-Ask your client to use these tools when you need Connect data or actions.
+Ask your client to use these tools when you need Connect data or actions.
+
+## Contributing
+
+This repository is a read-only mirror, regenerated on every release — changes
+committed here are overwritten. Please open an issue rather than a pull request.
+See [CONTRIBUTING.md](CONTRIBUTING.md).

package/dist/mount.d.ts

@@ -1,4 +1,4 @@
-import type { IRouter } from 'express';
+import type { IRouter, Request } from 'express';
 import { AnonymousToolQuota } from './anonymous-quota.js';
 export { resolveRequestHost } from './request-host.js';
 export interface ConnectMcpMountOptions {
@@ -8,4 +8,5 @@ export interface ConnectMcpMountOptions {
 }
 export declare function resolveEmbeddedApiBaseUrl(port: number, env?: NodeJS.ProcessEnv): string;
 export declare function isConnectMcpHost(hostname: string, env?: NodeJS.ProcessEnv): boolean;
+export declare function normalizeAcceptHeader(req: Pick<Request, 'headers'>): void;
 export declare function mountConnectMcpHttp(router: IRouter, options: ConnectMcpMountOptions): void;

package/dist/mount.js

@@ -39,6 +39,35 @@ export function isConnectMcpHost(hostname, env = process.env) {
         normalized === 'mcp.staging.connect.quid.li' ||
         normalized.endsWith('.mcp.connect.quid.li'));
 }
+// The MCP SDK's StreamableHTTPServerTransport requires the Accept header to
+// name BOTH application/json and text/event-stream literally, and rejects
+// anything else with 406. That is stricter than HTTP content negotiation: a
+// wildcard Accept (the default for curl, fetch and most HTTP libraries, and
+// for clients that omit the header entirely) does accept both, but is still
+// refused. Directory health checkers and plain HTTP integrators hit this.
+//
+// So rewrite the header to the canonical form whenever the client's own Accept
+// already permits both types (absent, wildcard, or the relevant type
+// wildcards). A client that genuinely accepts neither is left alone and still
+// gets its 406.
+const CANONICAL_ACCEPT = 'application/json, text/event-stream';
+export function normalizeAcceptHeader(req) {
+    const raw = req.headers.accept;
+    const value = Array.isArray(raw) ? raw.join(',') : (raw ?? '');
+    // No Accept header means "anything" per RFC 9110.
+    if (!value.trim()) {
+        req.headers.accept = CANONICAL_ACCEPT;
+        return;
+    }
+    const types = value
+        .split(',')
+        .map((part) => part.split(';')[0].trim().toLowerCase())
+        .filter(Boolean);
+    const permits = (type) => types.includes(type) || types.includes('*/*') || types.includes(`${type.split('/')[0]}/*`);
+    if (permits('application/json') && permits('text/event-stream')) {
+        req.headers.accept = CANONICAL_ACCEPT;
+    }
+}
 export function mountConnectMcpHttp(router, options) {
     const { baseUrl } = options;
     const env = options.env ?? process.env;
@@ -50,6 +79,7 @@ export function mountConnectMcpHttp(router, options) {
     // No in-memory session map, so Cloud Run restarts / multiple instances
     // never cause "Missing or invalid MCP session" errors.
     router.all('/', async (req, res) => {
+        normalizeAcceptHeader(req);
         const gate = gateHostedMcpRequest(req, { env, anonymousQuota });
         if (!gate.ok) {
             sendJsonRpcError(res, gate.status, gate.message, {

package/dist/schemas.d.ts

@@ -83,15 +83,15 @@ export declare const dropInputSchema: {
     chainId: z.ZodNumber;
     tokenContract: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     recipients: z.ZodArray<z.ZodObject<{
-        type: z.ZodEnum<["email", "phone", "telegram", "discord", "farcaster", "twitter", "github", "linkedin", "slack", "wallet", "username"]>;
+        type: z.ZodEnum<["email", "phone", "telegram", "discord", "farcaster", "twitter", "github", "wallet"]>;
         id: z.ZodOptional<z.ZodString>;
         username: z.ZodOptional<z.ZodString>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        type: z.ZodEnum<["email", "phone", "telegram", "discord", "farcaster", "twitter", "github", "linkedin", "slack", "wallet", "username"]>;
+        type: z.ZodEnum<["email", "phone", "telegram", "discord", "farcaster", "twitter", "github", "wallet"]>;
         id: z.ZodOptional<z.ZodString>;
         username: z.ZodOptional<z.ZodString>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        type: z.ZodEnum<["email", "phone", "telegram", "discord", "farcaster", "twitter", "github", "linkedin", "slack", "wallet", "username"]>;
+        type: z.ZodEnum<["email", "phone", "telegram", "discord", "farcaster", "twitter", "github", "wallet"]>;
         id: z.ZodOptional<z.ZodString>;
         username: z.ZodOptional<z.ZodString>;
     }, z.ZodTypeAny, "passthrough">>, "many">;

package/dist/schemas.js

@@ -16,6 +16,23 @@ const recipientTypeSchema = z.enum([
     'username',
 ]);
 const exposureRecipientTypeSchema = recipientTypeSchema;
+const dropSocialTypeSchema = z.enum([
+    'email',
+    'phone',
+    'telegram',
+    'discord',
+    'farcaster',
+    'twitter',
+    'github',
+]);
+const dropRecipientTypeSchema = z.enum([...dropSocialTypeSchema.options, 'wallet']);
+const dropRecipientSchema = z
+    .object({
+    type: dropRecipientTypeSchema,
+    id: z.string().optional(),
+    username: z.string().optional(),
+})
+    .passthrough();
 /** Unified recipient — API validates fully; MCP forwards JSON. */
 export const linkedAccountSchema = z
     .object({
@@ -83,25 +100,25 @@ export const scoresByUsernameInputSchema = {
     username: z.string().min(1),
 };
 export const dropBalanceInputSchema = {
-    chainId: z.number().int().describe('EVM chain ID (Smart Send supported chains only)'),
+    chainId: z.number().int().describe('EVM chain ID or 1399811149 for Solana mainnet (Smart Send)'),
 };
 export const dropInputSchema = {
     idempotencyKey: z.string().uuid(),
-    chainId: z.number().int().describe('EVM chain ID (Smart Send supported chains only)'),
+    chainId: z.number().int().describe('EVM chain ID or 1399811149 for Solana mainnet'),
     tokenContract: z
         .string()
         .nullable()
         .optional()
-        .describe('ERC-20 contract address. Omit or null for the chain native token (ETH, POL, AVAX). Do not use the zero address.'),
+        .describe('EVM ERC-20 contract or Solana SPL mint. Omit or null for the native token (ETH/POL/AVAX, or SOL on 1399811149). Do not use the zero address.'),
     recipients: z
-        .array(linkedAccountSchema)
+        .array(dropRecipientSchema)
         .min(1)
-        .describe('Wallet or social recipients (all wallet or all social, no mix). Optional amountInWei per recipient uses the same smallest-unit rules as amountInWeiPerRecipient.'),
+        .describe('Wallet or social recipients (all wallet or all social, no mix). Social types: email, phone, telegram, discord, farcaster, twitter, github (numeric id or username). linkedin and slack are not supported — use connect_lookup first, then type wallet. Optional amountInWei per recipient uses the same smallest-unit rules as amountInWeiPerRecipient. On EVM, wallet ids are 0x addresses; on Solana, base58 pubkeys. Social lookup payouts use ethWalletAddress on EVM and solWalletAddress on Solana.'),
     amountInWeiPerRecipient: z
         .string()
         .optional()
         .nullable()
-        .describe('Uniform amount in smallest units (wei). Native ETH uses 18 decimals; ERC-20 uses token decimals from connect_drop_balance (USDC usually 6). Omit when setting amountInWei on each recipient.'),
+        .describe('Uniform amount in smallest units. Native ETH uses 18 decimals; SOL uses 9; ERC-20/SPL uses token decimals from connect_drop_balance (USDC usually 6). Omit when setting amountInWei on each recipient.'),
     ignoreFailedRecipients: z
         .boolean()
         .optional()

package/dist/tools/register.js

@@ -31,7 +31,7 @@ const SPENDS_FUNDS = {
 };
 export function registerTools(server, client) {
     server.tool('connect_get_price', 'Get public x402 list prices for lookup and scores (reference only; live paywall amounts are in 402 responses).', {}, READ_ONLY, async () => client.request({ method: 'GET', path: '/price', authenticated: false }));
-    server.tool('connect_get_chains', 'List product chains with per-feature compatibility. lookup is true for EVM catalog chains and Solana; drop is true only for Smart Send EVM chains (use those chainIds for connect_drop / connect_drop_balance).', {}, READ_ONLY, async () => client.request({ method: 'GET', path: '/chains', authenticated: false }));
+    server.tool('connect_get_chains', 'List product chains with per-feature compatibility. lookup is true for EVM catalog chains and Solana; drop is true for Smart Send EVM chains and Solana (chainId 1399811149 for connect_drop / connect_drop_balance).', {}, READ_ONLY, async () => client.request({ method: 'GET', path: '/chains', authenticated: false }));
     server.tool('connect_lookup', 'Resolve social identities to EVM and Solana wallet addresses. Resolving a recipient who has no wallet provisions one for them, so this is read-only for the caller but not for the recipient. If status is processing, retry the same payload.', lookupInputSchema, READ_ONLY, async ({ recipients }) => client.request({
         method: 'POST',
         path: '/lookup',
@@ -42,7 +42,7 @@ export function registerTools(server, client) {
         path: '/lookup/exposed',
         body: { recipient },
     }));
-    server.tool('connect_scores_batch', 'Batch scores for linked accounts or Connect usernames. Optional filter excludes users below minScore (quidli 0–100, neynar/lens 0–1, ethos 0–2800).', scoresBatchInputSchema, READ_ONLY, async ({ users, filter }) => client.request({
+    server.tool('connect_scores_batch', 'Batch scores for linked accounts or Connect usernames. One result per request user. Optional filter sets passedFilter (quidli 0–100, neynar/lens 0–1, ethos 0–2800).', scoresBatchInputSchema, READ_ONLY, async ({ users, filter }) => client.request({
         method: 'POST',
         path: '/scores',
         body: { users, ...(filter ? { filter } : {}) },
@@ -59,7 +59,10 @@ export function registerTools(server, client) {
         method: 'GET',
         path: '/account/me',
     }));
-    server.tool('connect_drop', 'Execute a Smart Send (batch native or ERC-20 transfer). Omit tokenContract or set it to null for the chain native token (ETH on 1/8453/10/42161/480, POL on 137, AVAX on 43114); pass the ERC-20 contract address otherwise — do not use the zero address. Amounts are smallest-unit integer strings; use connect_drop_balance decimals (native ETH = 18, USDC usually 6). Returns 201 when submitted or 202 when recipients still processing — retry with the same idempotencyKey.', dropInputSchema, SPENDS_FUNDS, async ({ ignoreFailedRecipients, ...body }) => client.request({
+    server.tool('connect_drop', 'Execute a Smart Send from the API key owner Connect embedded wallet. EVM: batch native or ERC-20 (need native gas plus the token). Solana (chainId 1399811149): SOL or SPL from the Solana embedded wallet; packs up to 20 native or 10 SPL recipients per transaction. Social recipient types: email, phone, telegram, discord, farcaster, twitter, github (id or username). linkedin and slack are not on /drop — use connect_lookup first, then type wallet. After connect_lookup, EVM payouts use ethWalletAddress (never solWalletAddress); Solana payouts use solWalletAddress (never ethWalletAddress). Social types on /drop resolve server-side; for type wallet, pass the resolved payout address for the target chain. Omit tokenContract or set it to null for the native token; pass an ERC-20 contract or SPL mint otherwise — do not use the zero address. Amounts are smallest-unit integer strings (ETH 18 decimals, SOL 9, USDC usually 6). ' +
+        'Solana native (tokenContract null): no ATA. Sending to a recipient without an existing funded account requires amount ≥ 890880 lamports (rent-exempt minimum for a system account); that SOL stays with the recipient. Below that the tx fails. Sender also pays a ~5000-lamport fee. ' +
+        'Solana SPL: tokens sit in Associated Token Accounts (ATA), not on the wallet pubkey. Recipients need not already hold the token — the API prepends CreateIdempotent. The sender (not the recipient) pays ~2039280 lamports (~0.002039 SOL) rent per newly created dest ATA, plus tx fees, on top of the token amount (which can be as small as 1 unit). A 400 "Insufficient funds" on SPL is often missing SOL for ATA rent, not missing USDC. Token-2022 is not supported; USDC mint is EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v. ' +
+        'Always call connect_drop_balance first. Returns 201 when submitted or 202 when recipients still processing — retry with the same idempotencyKey.', dropInputSchema, SPENDS_FUNDS, async ({ ignoreFailedRecipients, ...body }) => client.request({
         method: 'POST',
         path: '/drop',
         body,
@@ -68,7 +71,9 @@ export function registerTools(server, client) {
             ? { ignoreFailedRecipients: 'true' }
             : undefined,
     }));
-    server.tool('connect_drop_balance', 'Get native and ERC-20 balances for the API key owner Smart Send embedded wallet on a chain. Use before connect_drop to verify gas and token funds.', dropBalanceInputSchema, READ_ONLY, async ({ chainId }) => client.request({
+    server.tool('connect_drop_balance', 'Get native and token balances for the API key owner Smart Send embedded wallet on a chain. Always call before connect_drop. Zero balances are omitted, so a missing token means balance 0. ' +
+        'EVM: confirm native gas plus the ERC-20 being sent. ' +
+        'Solana (chainId 1399811149): SOL in this response is spendable lamports on the wallet pubkey (rent locked in existing token accounts is not included). Native SOL drop to a recipient without an existing funded account: amount itself must be ≥ 890880 lamports and sender SOL must cover amount + ~5000 lamports fee. SPL drop: token balance ≥ total amount, and SOL ≥ tx fee + ~2039280 lamports (~0.002039 SOL) per recipient that may need a new Associated Token Account — even when sending USDC. Insufficient SOL for ATA rent fails before the token transfer.', dropBalanceInputSchema, READ_ONLY, async ({ chainId }) => client.request({
         method: 'GET',
         path: '/drop/balance',
         requireApiKey: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quidli/connect-mcp",
-  "version": "0.5.9",
+  "version": "0.6.2",
   "description": "MCP server for agent identity and reputation: resolve social handles to wallet addresses, score onchain reputation, and send USDC from any MCP client.",
   "keywords": [
     "mcp",
@@ -55,7 +55,7 @@
     "./http": "./dist/http.js"
   },
   "scripts": {
-    "build": "tsc && chmod +x dist/index.js dist/index-http.js",
+    "build": "tsc && node --input-type=commonjs -e \"const fs=require('fs'); for (const f of ['dist/index.js','dist/index-http.js']) fs.chmodSync(f, 0o755)\"",
     "prepublishOnly": "npm run build",
     "start": "node dist/index.js",
     "start:http": "node dist/index-http.js",