@rapay/mcp-server 1.1.11 → 1.2.0

package/dist/handlers.d.ts

@@ -26,14 +26,10 @@ export interface SendArgs {
     business_purpose: string;
     user_confirmed?: boolean;
 }
-export interface SubscribeArgs {
-    price_id: string;
-    customer_email: string;
-}
 export interface HistoryArgs {
     limit?: number;
 }
-export type ToolArgs = SendArgs | SubscribeArgs | HistoryArgs | Record<string, never>;
+export type ToolArgs = SendArgs | HistoryArgs | Record<string, never>;
 /**
  * Execute a tool and return the result
  *

package/dist/handlers.js

@@ -37,7 +37,6 @@ const CLI_PATH = (() => {
 const MAX_OUTPUT_SIZE = 1024 * 1024; // 1MB
 const RATE_LIMITS = {
     ra_send: { windowMs: 60000, maxCalls: 1 },
-    ra_subscribe: { windowMs: 60000, maxCalls: 1 },
     ra_refund: { windowMs: 60000, maxCalls: 5 },
     ra_balance: { windowMs: 60000, maxCalls: 10 },
     ra_history: { windowMs: 60000, maxCalls: 10 },
@@ -176,11 +175,6 @@ function validateBusinessPurpose(purpose) {
         throw new ValidationError("Business purpose appears to be invalid. Please provide a real description of goods or services rendered.");
     }
 }
-/**
- * RFC 5322 simplified email regex (stricter than basic check)
- * Validates common email formats while rejecting edge cases
- */
-const EMAIL_REGEX = /^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)+$/;
 /**
  * Validate ra_send arguments (defense-in-depth)
  * MCP SDK validates schema, this is additional layer
@@ -223,36 +217,6 @@ function validateSendArgs(args) {
     // P2P/Compliance validation (mirrors CLI validation.rs)
     validateBusinessPurpose(args.business_purpose);
 }
-/**
- * Validate ra_subscribe arguments
- */
-function validateSubscribeArgs(args) {
-    // Price ID validation
-    if (typeof args.price_id !== "string") {
-        throw new ValidationError("Price ID must be a string");
-    }
-    // Check for ASCII-only to prevent homoglyph attacks
-    if (!/^[\x00-\x7F]+$/.test(args.price_id)) {
-        throw new ValidationError("Price ID contains invalid characters (ASCII only)");
-    }
-    if (!/^price_[a-zA-Z0-9]+$/.test(args.price_id)) {
-        throw new ValidationError("Invalid price ID format (expected price_xxx)");
-    }
-    // Email validation (RFC 5322 simplified, Stripe validates further)
-    if (typeof args.customer_email !== "string") {
-        throw new ValidationError("Customer email must be a string");
-    }
-    if (args.customer_email.length > 254) {
-        throw new ValidationError("Email address too long");
-    }
-    // Check for ASCII-only to prevent IDN homograph attacks
-    if (!/^[\x00-\x7F]+$/.test(args.customer_email)) {
-        throw new ValidationError("Email contains invalid characters (ASCII only)");
-    }
-    if (!EMAIL_REGEX.test(args.customer_email)) {
-        throw new ValidationError("Invalid email format");
-    }
-}
 /**
  * Validate ra_history arguments
  */
@@ -302,9 +266,6 @@ export async function handleToolCall(toolName, args) {
             case "ra_send":
                 result = await executeSend(args);
                 break;
-            case "ra_subscribe":
-                result = await executeSubscribe(args);
-                break;
             case "ra_refund":
                 result = await executeRefund();
                 break;
@@ -555,21 +516,6 @@ async function executeSend(args) {
     ];
     return executeCliCommand(cliArgs);
 }
-/**
- * Execute ra subscribe command
- */
-async function executeSubscribe(args) {
-    // Validate inputs (defense-in-depth, MCP SDK also validates)
-    validateSubscribeArgs(args);
-    const cliArgs = [
-        "subscribe",
-        args.price_id,
-        args.customer_email,
-        "--json",
-        "--confirm", // Skip CLI confirmation (MCP client handles approval)
-    ];
-    return executeCliCommand(cliArgs);
-}
 /**
  * Execute ra refund command (opens Stripe Dashboard)
  */

package/dist/index.d.ts

@@ -13,5 +13,5 @@
  * - Privacy preserved (dumb pipe model intact)
  * - No blockers
  */
-export declare const SERVER_VERSION = "1.1.11";
+export declare const SERVER_VERSION = "1.2.0";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -23,7 +23,7 @@ import { checkForUpdates } from "./version-check.js";
  * Server metadata
  */
 const SERVER_NAME = "rapay-mcp";
-export const SERVER_VERSION = "1.1.11";
+export const SERVER_VERSION = "1.2.0";
 /**
  * Initialize MCP server
  */
@@ -37,7 +37,7 @@ const server = new Server({
 });
 /**
  * Handle tools/list request
- * Returns all 6 MVP tools with their schemas
+ * Returns all 5 MVP tools with their schemas
  */
 server.setRequestHandler(ListToolsRequestSchema, async () => {
     return {

package/dist/tools.d.ts

@@ -1,15 +1,17 @@
 /**
  * Ra Pay MCP Server - Tool Definitions
  *
- * 6 MVP Tools (Perplexity-approved):
- * - 3 Payment Operations (SENSITIVE)
+ * 5 MVP Tools:
+ * - 2 Payment Operations (SENSITIVE)
  * - 3 Query Operations (Read-only)
  *
+ * Note: ra_subscribe removed in v1.2.0 for compliance (Session 53)
+ *
  * @see MCP-SERVER-PLAN.md for full specification
  */
 import type { Tool } from "@modelcontextprotocol/sdk/types.js";
 /**
- * All 6 MVP tools combined
+ * All 5 MVP tools combined
  */
 export declare const TOOLS: Tool[];
 /**

package/dist/tools.js

@@ -1,10 +1,12 @@
 /**
  * Ra Pay MCP Server - Tool Definitions
  *
- * 6 MVP Tools (Perplexity-approved):
- * - 3 Payment Operations (SENSITIVE)
+ * 5 MVP Tools:
+ * - 2 Payment Operations (SENSITIVE)
  * - 3 Query Operations (Read-only)
  *
+ * Note: ra_subscribe removed in v1.2.0 for compliance (Session 53)
+ *
  * @see MCP-SERVER-PLAN.md for full specification
  */
 import { createHash } from "crypto";
@@ -59,27 +61,6 @@ const PAYMENT_TOOLS = [
             required: ["amount", "recipient_id", "business_purpose", "user_confirmed"],
         },
     },
-    {
-        name: "ra_subscribe",
-        description: "SENSITIVE: Create a subscription for a customer. Sets up recurring payments using a Stripe price. " +
-            "Requires explicit user confirmation. Use 'ra create-price' to create prices first.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                price_id: {
-                    type: "string",
-                    description: "Stripe price ID (format: price_xxx). Create prices with 'ra create-price' command.",
-                    pattern: "^price_[a-zA-Z0-9]+$",
-                },
-                customer_email: {
-                    type: "string",
-                    description: "Customer email address for the subscription",
-                    format: "email",
-                },
-            },
-            required: ["price_id", "customer_email"],
-        },
-    },
     {
         name: "ra_refund",
         description: "SENSITIVE: Open Stripe Dashboard to process refunds. " +
@@ -135,13 +116,13 @@ const QUERY_TOOLS = [
     },
 ];
 /**
- * All 6 MVP tools combined
+ * All 5 MVP tools combined
  */
 export const TOOLS = [...PAYMENT_TOOLS, ...QUERY_TOOLS];
 /**
  * Tool names that require user confirmation (SENSITIVE operations)
  */
-export const SENSITIVE_TOOLS = new Set(["ra_send", "ra_subscribe", "ra_refund"]);
+export const SENSITIVE_TOOLS = new Set(["ra_send", "ra_refund"]);
 /**
  * Check if a tool is a sensitive payment operation
  */
@@ -163,9 +144,9 @@ export function isSensitiveTool(toolName) {
  * 2. Run: RAPAY_DEBUG=1 node dist/index.js (will log computed hash)
  * 3. Update this constant with the new hash
  *
- * Last updated: 2026-01-22 (Session 37 security hardening)
+ * Last updated: 2026-02-01 (Session 53 subscription removal)
  */
-const EXPECTED_TOOL_HASH = "ee4a73f2ffc66b24";
+const EXPECTED_TOOL_HASH = "c5a4650ce2990d65";
 /**
  * Compute the integrity hash of the tool definitions
  * Hash is based on tool names and their input schemas (deterministic)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rapay/mcp-server",
-  "version": "1.1.11",
+  "version": "1.2.0",
   "description": "Ra Pay MCP Server for Claude Desktop and Claude Code - AI Agent Payment Infrastructure",
   "type": "module",
   "main": "dist/index.js",
@@ -38,7 +38,7 @@
     "node": ">=18.0.0"
   },
   "peerDependencies": {
-    "@rapay/cli": "^1.3.0"
+    "@rapay/cli": "^1.4.0"
   },
   "peerDependenciesMeta": {
     "@rapay/cli": {