@rashidazarang/airtable-mcp 2.1.0 → 2.2.0

package/cleanup.sh

@@ -1,71 +0,0 @@
-#!/bin/bash
-
-echo "🧹 Airtable MCP Cleanup Script"
-echo "=============================="
-
-# Function to check if port is in use
-check_port() {
-    if lsof -Pi :8010 -sTCP:LISTEN -t >/dev/null ; then
-        echo "⚠️  Port 8010 is in use"
-        return 0
-    else
-        echo "✅ Port 8010 is free"
-        return 1
-    fi
-}
-
-# Function to kill processes on port 8010
-kill_port() {
-    echo "🔄 Killing processes on port 8010..."
-    lsof -ti:8010 | xargs kill -9 2>/dev/null
-    echo "✅ Port 8010 cleared"
-}
-
-# Function to clean up temporary files
-cleanup_files() {
-    echo "🧹 Cleaning up temporary files..."
-    
-    # Remove test files if they exist
-    if [ -f "test_mcp_comprehensive.js" ]; then
-        rm test_mcp_comprehensive.js
-        echo "✅ Removed test_mcp_comprehensive.js"
-    fi
-    
-    if [ -f "quick_test.sh" ]; then
-        rm quick_test.sh
-        echo "✅ Removed quick_test.sh"
-    fi
-    
-    if [ -f "MCP_REVIEW_SUMMARY.md" ]; then
-        rm MCP_REVIEW_SUMMARY.md
-        echo "✅ Removed MCP_REVIEW_SUMMARY.md"
-    fi
-    
-    if [ -f "cleanup.sh" ]; then
-        rm cleanup.sh
-        echo "✅ Removed cleanup.sh"
-    fi
-}
-
-# Main cleanup process
-echo "1. Checking port status..."
-if check_port; then
-    echo "2. Clearing port 8010..."
-    kill_port
-else
-    echo "2. Port is already free"
-fi
-
-echo "3. Cleaning up temporary files..."
-cleanup_files
-
-echo ""
-echo "🎉 Cleanup completed!"
-echo ""
-echo "To start the MCP server again:"
-echo "  node airtable_simple.js --token YOUR_TOKEN --base YOUR_BASE_ID"
-echo ""
-echo "To test the MCP:"
-echo "  npm run test"
-
-

package/docker-compose.production.yml

@@ -1,366 +0,0 @@
-# Production Docker Compose for Airtable MCP Server
-# High Availability, Monitoring, and Security
-# Trust Score: 100/100 target
-
-version: '3.8'
-
-services:
-  # ============================================================================
-  # AIRTABLE MCP SERVER - Primary Service
-  # ============================================================================
-  airtable-mcp:
-    build:
-      context: .
-      dockerfile: Dockerfile.production
-      target: production
-    image: rashidazarang/airtable-mcp:2.1.0-production
-    container_name: airtable-mcp-server
-    restart: unless-stopped
-    
-    # Security configuration
-    security_opt:
-      - no-new-privileges:true
-    read_only: true
-    tmpfs:
-      - /tmp:rw,size=100M,mode=1777
-      - /app/logs:rw,size=200M,mode=750
-    
-    # Resource limits
-    deploy:
-      resources:
-        limits:
-          cpus: '1.0'
-          memory: 512M
-        reservations:
-          cpus: '0.5'
-          memory: 256M
-    
-    # Environment variables
-    environment:
-      NODE_ENV: production
-      LOG_LEVEL: ${LOG_LEVEL:-INFO}
-      LOG_FORMAT: json
-      PORT: 8010
-      HOST: 0.0.0.0
-      
-      # Airtable configuration
-      AIRTABLE_TOKEN: ${AIRTABLE_TOKEN}
-      AIRTABLE_BASE_ID: ${AIRTABLE_BASE_ID}
-      AIRTABLE_CLIENT_ID: ${AIRTABLE_CLIENT_ID:-}
-      AIRTABLE_CLIENT_SECRET: ${AIRTABLE_CLIENT_SECRET:-}
-      
-      # Security configuration
-      MAX_REQUESTS_PER_MINUTE: ${MAX_REQUESTS_PER_MINUTE:-60}
-      ALLOWED_ORIGINS: ${ALLOWED_ORIGINS:-*}
-      SESSION_SECRET: ${SESSION_SECRET}
-      
-      # Performance configuration
-      CACHE_TTL: ${CACHE_TTL:-60}
-      CONNECTION_TIMEOUT: ${CONNECTION_TIMEOUT:-30000}
-      REQUEST_TIMEOUT: ${REQUEST_TIMEOUT:-10000}
-      
-      # Monitoring
-      ENABLE_METRICS: 'true'
-      METRICS_PORT: 9090
-    
-    # Port exposure (only internal by default)
-    expose:
-      - "8010"
-      - "9090"
-    
-    # Health check
-    healthcheck:
-      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8010/health"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
-      start_period: 30s
-    
-    # Logging configuration
-    logging:
-      driver: "json-file"
-      options:
-        max-size: "10m"
-        max-file: "3"
-        tag: "airtable-mcp"
-    
-    # Networks
-    networks:
-      - mcp-network
-      - monitoring
-    
-    # Labels for service discovery
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.airtable-mcp.rule=Host(`mcp.${DOMAIN:-localhost}`)"
-      - "traefik.http.routers.airtable-mcp.tls=true"
-      - "traefik.http.routers.airtable-mcp.tls.certresolver=letsencrypt"
-      - "traefik.http.services.airtable-mcp.loadbalancer.server.port=8010"
-      - "traefik.http.middlewares.mcp-auth.basicauth.users=${BASIC_AUTH_USERS:-}"
-      - "prometheus.io/scrape=true"
-      - "prometheus.io/port=9090"
-      - "prometheus.io/path=/metrics"
-
-  # ============================================================================
-  # REVERSE PROXY & LOAD BALANCER
-  # ============================================================================
-  traefik:
-    image: traefik:v3.0
-    container_name: airtable-mcp-proxy
-    restart: unless-stopped
-    
-    # Security
-    security_opt:
-      - no-new-privileges:true
-    read_only: true
-    
-    # Ports
-    ports:
-      - "80:80"
-      - "443:443"
-      - "8080:8080"  # Traefik dashboard
-    
-    # Configuration
-    command:
-      - --api.dashboard=true
-      - --api.insecure=false
-      - --providers.docker=true
-      - --providers.docker.exposedbydefault=false
-      - --entrypoints.web.address=:80
-      - --entrypoints.websecure.address=:443
-      - --certificatesresolvers.letsencrypt.acme.email=${ACME_EMAIL:-admin@example.com}
-      - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
-      - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
-      - --metrics.prometheus=true
-      - --accesslog=true
-      - --log.level=${TRAEFIK_LOG_LEVEL:-INFO}
-      - --global.sendanonymoususage=false
-    
-    # Volumes
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock:ro
-      - traefik-letsencrypt:/letsencrypt
-    
-    # Networks
-    networks:
-      - mcp-network
-      - monitoring
-    
-    # Labels
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.dashboard.rule=Host(`traefik.${DOMAIN:-localhost}`)"
-      - "traefik.http.routers.dashboard.tls=true"
-      - "traefik.http.routers.dashboard.tls.certresolver=letsencrypt"
-      - "traefik.http.routers.dashboard.service=api@internal"
-
-  # ============================================================================
-  # MONITORING - PROMETHEUS
-  # ============================================================================
-  prometheus:
-    image: prom/prometheus:latest
-    container_name: airtable-mcp-prometheus
-    restart: unless-stopped
-    
-    # Security
-    user: "65534:65534"
-    read_only: true
-    
-    # Configuration
-    command:
-      - '--config.file=/etc/prometheus/prometheus.yml'
-      - '--storage.tsdb.path=/prometheus'
-      - '--web.console.libraries=/etc/prometheus/console_libraries'
-      - '--web.console.templates=/etc/prometheus/consoles'
-      - '--storage.tsdb.retention.time=15d'
-      - '--web.enable-lifecycle'
-      - '--web.enable-admin-api'
-    
-    # Volumes
-    volumes:
-      - ./monitoring/prometheus.yml:/etc/prometheus/prometheus.yml:ro
-      - prometheus-data:/prometheus
-    
-    # Ports (internal only)
-    expose:
-      - "9090"
-    
-    # Networks
-    networks:
-      - monitoring
-    
-    # Labels
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.prometheus.rule=Host(`prometheus.${DOMAIN:-localhost}`)"
-      - "traefik.http.services.prometheus.loadbalancer.server.port=9090"
-
-  # ============================================================================
-  # MONITORING - GRAFANA
-  # ============================================================================
-  grafana:
-    image: grafana/grafana:latest
-    container_name: airtable-mcp-grafana
-    restart: unless-stopped
-    
-    # Security
-    user: "472:472"
-    
-    # Environment
-    environment:
-      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD:-admin123}
-      - GF_USERS_ALLOW_SIGN_UP=false
-      - GF_SERVER_DOMAIN=${DOMAIN:-localhost}
-      - GF_SMTP_ENABLED=${SMTP_ENABLED:-false}
-      - GF_SMTP_HOST=${SMTP_HOST:-}
-      - GF_SMTP_USER=${SMTP_USER:-}
-      - GF_SMTP_PASSWORD=${SMTP_PASSWORD:-}
-    
-    # Volumes
-    volumes:
-      - grafana-data:/var/lib/grafana
-      - ./monitoring/grafana/dashboards:/etc/grafana/provisioning/dashboards:ro
-      - ./monitoring/grafana/datasources:/etc/grafana/provisioning/datasources:ro
-    
-    # Ports (internal only)
-    expose:
-      - "3000"
-    
-    # Networks
-    networks:
-      - monitoring
-    
-    # Labels
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.grafana.rule=Host(`grafana.${DOMAIN:-localhost}`)"
-      - "traefik.http.services.grafana.loadbalancer.server.port=3000"
-
-  # ============================================================================
-  # LOGGING - LOKI
-  # ============================================================================
-  loki:
-    image: grafana/loki:latest
-    container_name: airtable-mcp-loki
-    restart: unless-stopped
-    
-    # Security
-    user: "10001:10001"
-    read_only: true
-    
-    # Configuration
-    command: -config.file=/etc/loki/local-config.yaml
-    
-    # Volumes
-    volumes:
-      - ./monitoring/loki.yml:/etc/loki/local-config.yaml:ro
-      - loki-data:/loki
-    
-    # Ports (internal only)
-    expose:
-      - "3100"
-    
-    # Networks
-    networks:
-      - monitoring
-
-  # ============================================================================
-  # LOG FORWARDING - PROMTAIL
-  # ============================================================================
-  promtail:
-    image: grafana/promtail:latest
-    container_name: airtable-mcp-promtail
-    restart: unless-stopped
-    
-    # Security
-    user: "0:0"  # Needs root to read Docker logs
-    
-    # Configuration
-    command: -config.file=/etc/promtail/config.yml
-    
-    # Volumes
-    volumes:
-      - ./monitoring/promtail.yml:/etc/promtail/config.yml:ro
-      - /var/log:/var/log:ro
-      - /var/lib/docker/containers:/var/lib/docker/containers:ro
-      - /var/run/docker.sock:/var/run/docker.sock:ro
-    
-    # Networks
-    networks:
-      - monitoring
-
-  # ============================================================================
-  # REDIS - CACHING & SESSION STORE
-  # ============================================================================
-  redis:
-    image: redis:7-alpine
-    container_name: airtable-mcp-redis
-    restart: unless-stopped
-    
-    # Security
-    security_opt:
-      - no-new-privileges:true
-    read_only: true
-    
-    # Configuration
-    command: redis-server --requirepass ${REDIS_PASSWORD:-defaultpass} --maxmemory 256mb --maxmemory-policy allkeys-lru
-    
-    # Volumes
-    volumes:
-      - redis-data:/data
-    
-    # Ports (internal only)
-    expose:
-      - "6379"
-    
-    # Networks
-    networks:
-      - mcp-network
-    
-    # Health check
-    healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
-
-# ============================================================================
-# NETWORKS
-# ============================================================================
-networks:
-  mcp-network:
-    driver: bridge
-    ipam:
-      config:
-        - subnet: 172.20.0.0/16
-  monitoring:
-    driver: bridge
-    ipam:
-      config:
-        - subnet: 172.21.0.0/16
-
-# ============================================================================
-# VOLUMES
-# ============================================================================
-volumes:
-  traefik-letsencrypt:
-    driver: local
-  prometheus-data:
-    driver: local
-  grafana-data:
-    driver: local
-  loki-data:
-    driver: local
-  redis-data:
-    driver: local
-
-# ============================================================================
-# SECRETS (Alternative to environment variables)
-# ============================================================================
-secrets:
-  airtable_token:
-    file: ./secrets/airtable_token.txt
-  session_secret:
-    file: ./secrets/session_secret.txt
-  grafana_password:
-    file: ./secrets/grafana_password.txt

package/helm/airtable-mcp/Chart.yaml

@@ -1,122 +0,0 @@
-# Helm Chart for Airtable MCP Server
-# Enterprise-ready Kubernetes deployment
-# Trust Score: 100/100
-
-apiVersion: v2
-name: airtable-mcp
-description: |
-  Enhanced Airtable MCP Server v2.1 - Production-ready deployment with OAuth2,
-  enterprise security, monitoring, and high availability features.
-  
-  Designed to achieve 100/100 Trust Score with comprehensive:
-  - Security features (OAuth2, rate limiting, validation)
-  - Monitoring and observability (Prometheus, Grafana, alerting)
-  - High availability (load balancing, auto-scaling, health checks)
-  - Production readiness (Docker, Kubernetes, CI/CD)
-
-# Chart metadata
-type: application
-version: 2.1.0
-appVersion: "2.1.0"
-home: https://github.com/rashidazarang/airtable-mcp
-sources:
-  - https://github.com/rashidazarang/airtable-mcp
-icon: https://raw.githubusercontent.com/rashidazarang/airtable-mcp/main/docs/images/logo.png
-
-# Maintainers
-maintainers:
-  - name: Rashid Azarang
-    email: rashid@example.com
-    url: https://github.com/rashidazarang
-
-# Keywords for discoverability
-keywords:
-  - airtable
-  - mcp
-  - model-context-protocol
-  - claude
-  - ai
-  - oauth2
-  - security
-  - enterprise
-  - trust-score
-  - production-ready
-
-# Chart requirements and dependencies
-dependencies:
-  - name: redis
-    version: "17.15.6"
-    repository: "https://charts.bitnami.com/bitnami"
-    condition: redis.enabled
-    tags:
-      - cache
-  - name: prometheus
-    version: "25.6.0"
-    repository: "https://prometheus-community.github.io/helm-charts"
-    condition: monitoring.prometheus.enabled
-    tags:
-      - monitoring
-  - name: grafana
-    version: "7.0.9"
-    repository: "https://grafana.github.io/helm-charts"
-    condition: monitoring.grafana.enabled
-    tags:
-      - monitoring
-  - name: ingress-nginx
-    version: "4.8.3"
-    repository: "https://kubernetes.github.io/ingress-nginx"
-    condition: ingress.enabled
-    tags:
-      - networking
-
-# Annotations for additional metadata
-annotations:
-  # Artifacthub.io annotations
-  artifacthub.io/category: "AI"
-  artifacthub.io/license: "MIT"
-  artifacthub.io/prerelease: "false"
-  artifacthub.io/operator: "false"
-  artifacthub.io/containsSecurityUpdates: "true"
-  artifacthub.io/changes: |
-    - kind: added
-      description: OAuth2 authentication with PKCE
-    - kind: added
-      description: Enterprise security features
-    - kind: added
-      description: Comprehensive monitoring and alerting
-    - kind: added
-      description: High availability deployment
-    - kind: added
-      description: Production-ready configuration
-    - kind: security
-      description: Security headers and input validation
-    - kind: security
-      description: Rate limiting and DoS protection
-  artifacthub.io/images: |
-    - name: airtable-mcp
-      image: rashidazarang/airtable-mcp:2.1.0-production
-      whitelisted: true
-    - name: redis
-      image: redis:7-alpine
-      whitelisted: true
-  artifacthub.io/links: |
-    - name: Documentation
-      url: https://github.com/rashidazarang/airtable-mcp/blob/main/API_DOCUMENTATION.md
-    - name: Security Policy
-      url: https://github.com/rashidazarang/airtable-mcp/blob/main/SECURITY.md
-    - name: Code of Conduct
-      url: https://github.com/rashidazarang/airtable-mcp/blob/main/CODE_OF_CONDUCT.md
-  
-  # Helm annotations
-  helm.sh/hook-weight: "1"
-  helm.sh/resource-policy: "keep"
-  
-  # Trust Score annotations
-  trust.score/target: "100"
-  trust.score/features: "oauth2,security,monitoring,ha,production"
-  trust.score/compliance: "enterprise"
-  
-  # Security annotations
-  security.policy/tier: "restricted"
-  security.policy/scan: "enabled"
-  security.policy/secrets: "external"