@relipay/mcp 0.1.0-beta.0

package/AGENTS.md

@@ -0,0 +1,67 @@
+# AGENTS.md — `@relipay/mcp`
+
+You are an AI agent connected to ReliPay via this MCP server. This file tells you what's safe to do and what's deliberately not exposed.
+
+## What this server is
+
+A [Model Context Protocol](https://modelcontextprotocol.io) server that lets you introspect a ReliPay deployment over stdio. Wired into Claude Desktop / Cursor / Claude Code via:
+
+```json
+{
+  "mcpServers": {
+    "relipay": {
+      "command": "npx",
+      "args": ["-y", "@relipay/mcp"],
+      "env": {
+        "RELIPAY_URL": "https://relipay.example.com",
+        "SUPER_ADMIN_KEY": "..."
+      }
+    }
+  }
+}
+```
+
+The server reads `RELIPAY_URL` and `SUPER_ADMIN_KEY` from its env. Both are required — the server exits with a clear stderr message if either is missing.
+
+## Tools today (read-only by design)
+
+| Tool | What it does |
+|---|---|
+| `list_tenants` | All Tenants in the deployment |
+| `list_applications` | Applications, optionally filtered by `tenantId` |
+| `get_application` | One Application by id (with authConfig + billingConfig, no secrets) |
+| `list_plans` | Plans for an Application; `includeInactive` for archived ones |
+| `list_coupons` | Coupons for an Application; `includeInactive` for deactivated ones |
+| `list_api_keys` | Active API keys for an Application — metadata only, hash never returned |
+
+## Why no write tools yet
+
+Production agents shouldn't accidentally mint a live API key, refund a real payment, or deactivate a plan that's currently selling. Write tools (mint API key, create plan, refund payment, deactivate coupon) ship behind explicit opt-in scopes in a future commit. For now: introspection only.
+
+If a user asks you to *do* a thing that's not a `list_*` / `get_*` here, your job is to:
+
+1. Help them figure out what to do via the read-only tools.
+2. Tell them to run the operation via `relipay <command>` (the CLI) or the Panel.
+3. Never suggest they manually craft API calls if a CLI command exists for it.
+
+## Errors
+
+Every tool error is a JSON object with `error: { code, message, fix?, statusCode? }` in the response content (with `isError: true`). The `fix` field is the most useful — read it first, surface it to the user.
+
+Notable codes:
+
+- `TOOL_NOT_FOUND` — name doesn't match the registry. Call `list_tools`.
+- `TOOL_ARGS_INVALID` — your input failed Zod validation. Check `inputSchema`.
+- `APPLICATION_NOT_FOUND`, `TENANT_NOT_FOUND` — ids don't exist; list first.
+- `ADMIN_AUTH_INVALID` — `SUPER_ADMIN_KEY` env is wrong. Tell the user to check their MCP config.
+
+## Money rule
+
+`amount` fields throughout ReliPay are **integers in the smallest currency unit** (cents/paise/sen). If you render `999 USD/MONTH`, format it as `$9.99/month`. Never assume a `.00` decimal — `100` is `$1.00` in USD but `¥100` (a hundred whole yen) in JPY.
+
+## What NOT to do
+
+- Don't combine multiple read calls into a single response without telling the user what you ran. Be explicit ("ran list_applications, then list_plans for app_xyz").
+- Don't suggest mutating operations as inline `curl` commands. The CLI exists.
+- Don't leak `metadata` content as commentary — it may contain operator-private notes.
+- Don't try to enumerate other Tenants when the user asks about "their" data. Restrict to the Tenant they identified themselves with.

package/README.md

@@ -0,0 +1,58 @@
+# @relipay/mcp
+
+A [Model Context Protocol](https://modelcontextprotocol.io) server for ReliPay. Lets Claude Desktop, Cursor, and Claude Code introspect a deployment directly — no screenshots, no copy-paste from the panel.
+
+> **For AI agents**: see [AGENTS.md](./AGENTS.md) for what's safe to call.
+
+## Install in Claude Desktop
+
+`~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) or the equivalent on your platform:
+
+```json
+{
+  "mcpServers": {
+    "relipay": {
+      "command": "npx",
+      "args": ["-y", "@relipay/mcp"],
+      "env": {
+        "RELIPAY_URL": "https://relipay.example.com",
+        "SUPER_ADMIN_KEY": "your-admin-key-here"
+      }
+    }
+  }
+}
+```
+
+Restart Claude Desktop. The server appears under "MCP servers"; tools are available as `mcp__relipay__list_applications`, etc.
+
+## Install in Cursor
+
+Settings → MCP → Add Server. Same `command` / `args` / `env` shape.
+
+## Install in Claude Code
+
+`.claude/mcp.json` in your repo:
+
+```json
+{
+  "mcpServers": {
+    "relipay": {
+      "command": "npx",
+      "args": ["-y", "@relipay/mcp"],
+      "env": { "RELIPAY_URL": "...", "SUPER_ADMIN_KEY": "..." }
+    }
+  }
+}
+```
+
+## Tools (read-only)
+
+- `list_tenants`
+- `list_applications`, `get_application`
+- `list_plans`, `list_coupons`, `list_api_keys`
+
+Write tools (mint key, create plan, refund) deliberately deferred — see [AGENTS.md](./AGENTS.md).
+
+## License
+
+MIT.

package/dist/client.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Admin-API client used by every MCP tool. Mirrors `packages/cli/src/lib/api.ts`
+ * but is decoupled (the MCP server doesn't depend on the CLI).
+ */
+export interface AdminClientConfig {
+    apiUrl: string;
+    adminKey: string;
+}
+export declare class AdminApiError extends Error {
+    readonly code: string;
+    readonly fix: string | undefined;
+    readonly statusCode: number;
+    constructor(args: {
+        code: string;
+        message: string;
+        fix?: string;
+        statusCode: number;
+    });
+}
+export declare class AdminClient {
+    private readonly cfg;
+    constructor(cfg: AdminClientConfig);
+    request<T>(method: string, path: string, body?: unknown): Promise<T>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,SAAgB,UAAU,EAAE,MAAM,CAAC;gBACvB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;CAOtF;AAED,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,iBAAiB;IAK7C,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;CAqB3E"}

package/dist/client.js

@@ -0,0 +1,45 @@
+/**
+ * Admin-API client used by every MCP tool. Mirrors `packages/cli/src/lib/api.ts`
+ * but is decoupled (the MCP server doesn't depend on the CLI).
+ */
+export class AdminApiError extends Error {
+    code;
+    fix;
+    statusCode;
+    constructor(args) {
+        super(args.message);
+        this.name = 'AdminApiError';
+        this.code = args.code;
+        this.fix = args.fix;
+        this.statusCode = args.statusCode;
+    }
+}
+export class AdminClient {
+    cfg;
+    constructor(cfg) {
+        this.cfg = cfg;
+        if (!cfg.apiUrl)
+            throw new Error('AdminClient: apiUrl is required.');
+        if (!cfg.adminKey)
+            throw new Error('AdminClient: adminKey is required.');
+    }
+    async request(method, path, body) {
+        const res = await fetch(`${this.cfg.apiUrl.replace(/\/$/, '')}${path}`, {
+            method,
+            headers: {
+                Authorization: `Bearer ${this.cfg.adminKey}`,
+                ...(body !== undefined ? { 'Content-Type': 'application/json' } : {}),
+            },
+            ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+        });
+        const json = (await res.json().catch(() => ({})));
+        if (!res.ok || ('success' in json && json.success === false)) {
+            const err = 'error' in json
+                ? json.error
+                : { code: 'UNKNOWN_ERROR', message: `HTTP ${res.status}` };
+            throw new AdminApiError({ ...err, statusCode: res.status });
+        }
+        return json.data;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,IAAI,CAAS;IACb,GAAG,CAAqB;IACxB,UAAU,CAAS;IACnC,YAAY,IAAyE;QACnF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,GAAsB;QAAtB,QAAG,GAAH,GAAG,CAAmB;QACjD,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAC3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;YACtE,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC5C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE;YACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAE/B,CAAC;QAClB,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,GAAG,GACP,OAAO,IAAI,IAAI;gBACb,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/D,MAAM,IAAI,aAAa,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAQ,IAAmC,CAAC,IAAI,CAAC;IACnD,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+/**
+ * @relipay/mcp — Model Context Protocol server.
+ *
+ * Speaks MCP over stdio, exposing read-only tools for ReliPay introspection
+ * (Applications, Plans, Coupons, API keys, Tenants). Designed to be wired
+ * into Claude Desktop, Cursor, and Claude Code so an AI agent can answer
+ * "what plans does this app have?" or "is this user's API key revoked?"
+ * without screenshots.
+ *
+ * Read-only by design — write tools (mint key, refund payment, create plan)
+ * ship behind explicit opt-in scopes in a future commit. Production agents
+ * shouldn't accidentally mutate state.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG"}

package/dist/index.js

@@ -0,0 +1,113 @@
+#!/usr/bin/env node
+/**
+ * @relipay/mcp — Model Context Protocol server.
+ *
+ * Speaks MCP over stdio, exposing read-only tools for ReliPay introspection
+ * (Applications, Plans, Coupons, API keys, Tenants). Designed to be wired
+ * into Claude Desktop, Cursor, and Claude Code so an AI agent can answer
+ * "what plans does this app have?" or "is this user's API key revoked?"
+ * without screenshots.
+ *
+ * Read-only by design — write tools (mint key, refund payment, create plan)
+ * ship behind explicit opt-in scopes in a future commit. Production agents
+ * shouldn't accidentally mutate state.
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { zodToJsonSchema } from './lib/zod-to-json-schema.js';
+import { AdminClient, AdminApiError } from './client.js';
+import { tools } from './tools.js';
+const apiUrl = process.env.RELIPAY_URL ?? '';
+const adminKey = process.env.SUPER_ADMIN_KEY ?? '';
+if (!apiUrl || !adminKey) {
+    process.stderr.write(`[relipay-mcp] missing required env: RELIPAY_URL and SUPER_ADMIN_KEY must both be set.\n` +
+        `[relipay-mcp] fix: configure these in the MCP client (Claude Desktop config, Cursor MCP settings, …)\n`);
+    process.exit(1);
+}
+const client = new AdminClient({ apiUrl, adminKey });
+const server = new Server({ name: 'relipay-mcp', version: '0.0.0' }, { capabilities: { tools: {} } });
+server.setRequestHandler(ListToolsRequestSchema, () => ({
+    tools: tools.map((t) => ({
+        name: t.name,
+        description: t.description,
+        inputSchema: zodToJsonSchema(t.inputSchema),
+    })),
+}));
+server.setRequestHandler(CallToolRequestSchema, async (req) => {
+    const tool = tools.find((t) => t.name === req.params.name);
+    if (!tool) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        error: {
+                            code: 'TOOL_NOT_FOUND',
+                            message: `Unknown tool: ${req.params.name}`,
+                            fix: 'Call list_tools to see what is available.',
+                        },
+                    }, null, 2),
+                },
+            ],
+            isError: true,
+        };
+    }
+    const parsed = tool.inputSchema.safeParse(req.params.arguments ?? {});
+    if (!parsed.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        error: {
+                            code: 'TOOL_ARGS_INVALID',
+                            message: 'Tool arguments failed validation.',
+                            fix: 'Re-call with arguments matching inputSchema. Issues: ' +
+                                parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; '),
+                        },
+                    }, null, 2),
+                },
+            ],
+            isError: true,
+        };
+    }
+    try {
+        const result = await tool.execute(client, parsed.data);
+        return {
+            content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (err) {
+        if (err instanceof AdminApiError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            error: { code: err.code, message: err.message, fix: err.fix, statusCode: err.statusCode },
+                        }, null, 2),
+                    },
+                ],
+                isError: true,
+            };
+        }
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        error: {
+                            code: 'TOOL_EXECUTION_FAILED',
+                            message: err instanceof Error ? err.message : String(err),
+                        },
+                    }, null, 2),
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+const transport = new StdioServerTransport();
+void server.connect(transport);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;AAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;AAEnD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yFAAyF;QACvF,wGAAwG,CAC3G,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAErD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,EACzC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;KAC5C,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,KAAK,EAAE;4BACL,IAAI,EAAE,gBAAgB;4BACtB,OAAO,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;4BAC3C,GAAG,EAAE,2CAA2C;yBACjD;qBACF,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,KAAK,EAAE;4BACL,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EAAE,mCAAmC;4BAC5C,GAAG,EAAE,uDAAuD;gCAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;yBACjF;qBACF,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE;yBAC1F,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,KAAK,EAAE;4BACL,IAAI,EAAE,uBAAuB;4BAC7B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;yBAC1D;qBACF,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/dist/lib/zod-to-json-schema.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Tiny Zod → JSON Schema shim sufficient for MCP tool input descriptors.
+ *
+ * The MCP `tools/list` response wants each tool's `inputSchema` as a JSON
+ * Schema object. We only use a small Zod subset (objects of strings /
+ * booleans / optionals with descriptions), so reaching for `zod-to-json-schema`
+ * as a full dependency is overkill — this 30-line implementation covers it
+ * and stays auditable. If the tool surface grows, swap in the npm package.
+ */
+import { z } from 'zod';
+interface JsonSchema {
+    type: string;
+    properties?: Record<string, JsonSchema>;
+    required?: string[];
+    description?: string;
+    items?: JsonSchema;
+}
+export declare function zodToJsonSchema(schema: z.ZodTypeAny): JsonSchema;
+export {};
+//# sourceMappingURL=zod-to-json-schema.d.ts.map

package/dist/lib/zod-to-json-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-to-json-schema.d.ts","sourceRoot":"","sources":["../../src/lib/zod-to-json-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,UAAU,CA0BhE"}

package/dist/lib/zod-to-json-schema.js

@@ -0,0 +1,60 @@
+/**
+ * Tiny Zod → JSON Schema shim sufficient for MCP tool input descriptors.
+ *
+ * The MCP `tools/list` response wants each tool's `inputSchema` as a JSON
+ * Schema object. We only use a small Zod subset (objects of strings /
+ * booleans / optionals with descriptions), so reaching for `zod-to-json-schema`
+ * as a full dependency is overkill — this 30-line implementation covers it
+ * and stays auditable. If the tool surface grows, swap in the npm package.
+ */
+import { z } from 'zod';
+export function zodToJsonSchema(schema) {
+    // Object — the common top-level case for tool args.
+    if (schema instanceof z.ZodObject) {
+        const shape = schema.shape;
+        const properties = {};
+        const required = [];
+        for (const [key, value] of Object.entries(shape)) {
+            const inner = unwrap(value);
+            properties[key] = zodToJsonSchema(inner.schema);
+            if (inner.description)
+                properties[key].description = inner.description;
+            if (!inner.optional)
+                required.push(key);
+        }
+        return {
+            type: 'object',
+            properties,
+            ...(required.length > 0 && { required }),
+        };
+    }
+    if (schema instanceof z.ZodString)
+        return { type: 'string' };
+    if (schema instanceof z.ZodNumber)
+        return { type: 'number' };
+    if (schema instanceof z.ZodBoolean)
+        return { type: 'boolean' };
+    if (schema instanceof z.ZodArray) {
+        return { type: 'array', items: zodToJsonSchema(schema.element) };
+    }
+    // Fallback — let MCP receive an open object.
+    return { type: 'object' };
+}
+function unwrap(s) {
+    let optional = false;
+    let description;
+    let cur = s;
+    // Unwrap z.optional() and pick up .describe() metadata.
+    while (true) {
+        description = description ?? cur.description;
+        if (cur instanceof z.ZodOptional) {
+            optional = true;
+            cur = cur.unwrap();
+        }
+        else {
+            break;
+        }
+    }
+    return { schema: cur, optional, description };
+}
+//# sourceMappingURL=zod-to-json-schema.js.map

package/dist/lib/zod-to-json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-to-json-schema.js","sourceRoot":"","sources":["../../src/lib/zod-to-json-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,oDAAoD;IACpD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAqC,CAAC;QAC3D,MAAM,UAAU,GAA+B,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,WAAW;gBAAE,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YACvE,IAAI,CAAC,KAAK,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC7D,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC7D,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,MAAM,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,6CAA6C;IAC7C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,MAAM,CAAC,CAAe;IAK7B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,WAA+B,CAAC;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,wDAAwD;IACxD,OAAO,IAAI,EAAE,CAAC;QACZ,WAAW,GAAG,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC;QAC7C,IAAI,GAAG,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAChD,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,18 @@
+/**
+ * MCP tool registry. Each tool is a `(client, args) → result` function with
+ * a Zod-described input schema. The server (index.ts) wires them up.
+ *
+ * Today every tool is **read-only** by design — write tools (mint API key,
+ * create plan, refund payment) ship behind an explicit opt-in scope so an
+ * agent can't accidentally mutate production. See AGENTS.md.
+ */
+import { z } from 'zod';
+import type { AdminClient } from './client.js';
+export interface ToolDefinition<TArgs extends z.ZodRawShape> {
+    name: string;
+    description: string;
+    inputSchema: z.ZodObject<TArgs>;
+    execute: (client: AdminClient, args: z.infer<z.ZodObject<TArgs>>) => Promise<unknown>;
+}
+export declare const tools: Array<ToolDefinition<z.ZodRawShape>>;
+//# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,WAAW,cAAc,CAAC,KAAK,SAAS,CAAC,CAAC,WAAW;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvF;AA0BD,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAiEtD,CAAC"}

package/dist/tools.js

@@ -0,0 +1,71 @@
+/**
+ * MCP tool registry. Each tool is a `(client, args) → result` function with
+ * a Zod-described input schema. The server (index.ts) wires them up.
+ *
+ * Today every tool is **read-only** by design — write tools (mint API key,
+ * create plan, refund payment) ship behind an explicit opt-in scope so an
+ * agent can't accidentally mutate production. See AGENTS.md.
+ */
+import { z } from 'zod';
+const ListApplicationsArgs = z.object({
+    tenantId: z.string().optional().describe('Optional Tenant id to filter by.'),
+});
+const GetApplicationArgs = z.object({
+    applicationId: z.string().describe('Application id (cuid).'),
+});
+const ListPlansArgs = z.object({
+    applicationId: z.string().describe('Application id to list plans for.'),
+    includeInactive: z.boolean().optional().describe('If true, include deactivated plans.'),
+});
+const ListCouponsArgs = z.object({
+    applicationId: z.string().describe('Application id to list coupons for.'),
+    includeInactive: z.boolean().optional(),
+});
+const ListApiKeysArgs = z.object({
+    applicationId: z.string().describe('Application id to list active API keys for.'),
+});
+const ListTenantsArgs = z.object({});
+export const tools = [
+    {
+        name: 'list_tenants',
+        description: 'List all Tenants. Tenants are the outer multi-tenancy unit (one per ReliPay customer). Use this when the user asks "what tenants exist" or to find a tenantId to drill into.',
+        inputSchema: ListTenantsArgs,
+        execute: (c) => c.request('GET', '/api/v1/admin/tenants'),
+    },
+    {
+        name: 'list_applications',
+        description: 'List Applications, optionally filtered by Tenant. An Application is one project under a Tenant; every domain row in ReliPay carries an applicationId. Use this to find the applicationId for subsequent calls.',
+        inputSchema: ListApplicationsArgs,
+        execute: (c, args) => {
+            const path = args.tenantId
+                ? `/api/v1/admin/applications?tenantId=${encodeURIComponent(args.tenantId)}`
+                : '/api/v1/admin/applications';
+            return c.request('GET', path);
+        },
+    },
+    {
+        name: 'get_application',
+        description: 'Fetch one Application by id, including its authConfig and billingConfig (no secrets).',
+        inputSchema: GetApplicationArgs,
+        execute: (c, args) => c.request('GET', `/api/v1/admin/applications/${encodeURIComponent(args.applicationId)}`),
+    },
+    {
+        name: 'list_plans',
+        description: 'List Plans for an Application. Amount is always in the smallest currency unit (cents/paise/sen) — never floats.',
+        inputSchema: ListPlansArgs,
+        execute: (c, args) => c.request('GET', `/api/v1/admin/applications/${encodeURIComponent(args.applicationId)}/plans${args.includeInactive ? '?includeInactive=true' : ''}`),
+    },
+    {
+        name: 'list_coupons',
+        description: 'List discount coupons for an Application. PERCENT discounts use basis-points × 10 (1500 = 15%); AMOUNT discounts use the smallest currency unit.',
+        inputSchema: ListCouponsArgs,
+        execute: (c, args) => c.request('GET', `/api/v1/admin/applications/${encodeURIComponent(args.applicationId)}/coupons${args.includeInactive ? '?includeInactive=true' : ''}`),
+    },
+    {
+        name: 'list_api_keys',
+        description: 'List active API keys for an Application. Returns metadata only — the raw key value is unrecoverable after creation, by design.',
+        inputSchema: ListApiKeysArgs,
+        execute: (c, args) => c.request('GET', `/api/v1/admin/applications/${encodeURIComponent(args.applicationId)}/api-keys`),
+    },
+];
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CAC7E,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CAC7D,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACvE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACxF,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACzE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAClF,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,KAAK,GAAyC;IACzD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,8KAA8K;QAChL,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,uBAAuB,CAAC;KAC1D;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,gNAAgN;QAClN,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;gBACxB,CAAC,CAAC,uCAAuC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAC5E,CAAC,CAAC,4BAA4B,CAAC;YACjC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,uFAAuF;QACzF,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CACnB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;KAC3F;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,iHAAiH;QACnH,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CACnB,CAAC,CAAC,OAAO,CACP,KAAK,EACL,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,SAClE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EACnD,EAAE,CACH;KACJ;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,kJAAkJ;QACpJ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CACnB,CAAC,CAAC,OAAO,CACP,KAAK,EACL,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,WAClE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EACnD,EAAE,CACH;KACJ;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,gIAAgI;QAClI,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CACnB,CAAC,CAAC,OAAO,CACP,KAAK,EACL,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAChF;KACJ;CACF,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@relipay/mcp",
+  "version": "0.1.0-beta.0",
+  "description": "Model Context Protocol server for ReliPay — lets Claude Desktop / Cursor / Claude Code introspect a deployment.",
+  "type": "module",
+  "bin": {
+    "relipay-mcp": "./dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "AGENTS.md",
+    "README.md"
+  ],
+  "keywords": [
+    "relipay",
+    "mcp",
+    "model-context-protocol",
+    "ai"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "zod": "^3.23.8",
+    "@relipay/shared-types": "0.1.0-beta.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.9.0",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.5"
+  },
+  "publishConfig": {
+    "access": "public",
+    "tag": "beta"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && chmod +x dist/index.js",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "echo \"(eslint not yet wired)\"",
+    "test": "vitest run"
+  }
+}