@seatable/mcp-seatable 1.1.2 → 1.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -131,7 +131,7 @@ SEATABLE_SERVER_URL=https://your-seatable-server.com \
|
|
|
131
131
|
PORT=3000 npx -y @seatable/mcp-seatable --sse
|
|
132
132
|
```
|
|
133
133
|
|
|
134
|
-
Clients pass their API token via `Authorization: Bearer <token>` on session initialization. The server validates the token against SeaTable and applies rate limits (60 req/min per token, 120/min per IP,
|
|
134
|
+
Clients pass their API token via `Authorization: Bearer <token>` on session initialization. The server validates the token against SeaTable and applies rate limits (60 req/min per token, 120/min per IP, 20 concurrent connections per token).
|
|
135
135
|
|
|
136
136
|
**OAuth support:** Managed mode also exposes OAuth 2.0 endpoints (`/authorize` and `/token`), enabling OAuth-compatible clients like ChatGPT to connect. During the OAuth flow, the user enters their SeaTable API token, which is then used as the access token — no external OAuth provider required.
|
|
137
137
|
|
|
@@ -168,7 +168,7 @@ The security characteristics differ significantly between transport modes:
|
|
|
168
168
|
| **Network exposure** | None (local process) | TCP port, **no auth** | TCP port, Bearer auth |
|
|
169
169
|
| **Authentication** | Not needed (local) | None | Bearer token or OAuth 2.0, validated against SeaTable |
|
|
170
170
|
| **Rate limiting** | None | None | Per-token, per-IP, global |
|
|
171
|
-
| **Connection limits** | N/A | None |
|
|
171
|
+
| **Connection limits** | N/A | None | 20 concurrent sessions per token |
|
|
172
172
|
| **Data scope** | All configured bases | All configured bases | One base per client token |
|
|
173
173
|
|
|
174
174
|
> **⚠️ Warning:** Selfhosted HTTP mode (`--sse` / `--http`) has **no authentication**. Anyone who can reach the port gets full access to all configured bases, including write and delete operations. Only run it in trusted networks (localhost, Docker-internal) or behind a reverse proxy that handles authentication. For untrusted networks, use **managed mode** instead.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ratelimit/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,KAAK,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;CACjB;AAID,qBAAa,gBAAgB;IACzB,QAAQ,CAAC,QAAQ,uBAA2C;IAC5D,QAAQ,CAAC,KAAK,uBAA4C;IAC1D,QAAQ,CAAC,MAAM,uBAA6C;IAC5D,QAAQ,CAAC,WAAW,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ratelimit/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,KAAK,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;CACjB;AAID,qBAAa,gBAAgB;IACzB,QAAQ,CAAC,QAAQ,uBAA2C;IAC5D,QAAQ,CAAC,KAAK,uBAA4C;IAC1D,QAAQ,CAAC,MAAM,uBAA6C;IAC5D,QAAQ,CAAC,WAAW,oBAA4B;IAEhD,OAAO,CAAC,eAAe,CAAC,CAAgC;;IASxD,KAAK,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,GAAG,eAAe;IA8B9E,OAAO,CAAC,OAAO;IAMf,OAAO,IAAI,IAAI;CAMlB"}
|
package/dist/ratelimit/index.js
CHANGED
|
@@ -9,7 +9,7 @@ export class RateLimitManager {
|
|
|
9
9
|
perToken = new SlidingWindowLimiter(60, ONE_MINUTE);
|
|
10
10
|
perIp = new SlidingWindowLimiter(120, ONE_MINUTE);
|
|
11
11
|
global = new SlidingWindowLimiter(5000, ONE_MINUTE);
|
|
12
|
-
connections = new ConnectionCounter(
|
|
12
|
+
connections = new ConnectionCounter(20);
|
|
13
13
|
cleanupInterval;
|
|
14
14
|
constructor() {
|
|
15
15
|
this.cleanupInterval = setInterval(() => this.cleanup(), 60_000);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ratelimit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAYvD,MAAM,UAAU,GAAG,MAAM,CAAA;AAEzB,MAAM,OAAO,gBAAgB;IAChB,QAAQ,GAAG,IAAI,oBAAoB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IACnD,KAAK,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACjD,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACnD,WAAW,GAAG,IAAI,iBAAiB,CAAC,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ratelimit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAYvD,MAAM,UAAU,GAAG,MAAM,CAAA;AAEzB,MAAM,OAAO,gBAAgB;IAChB,QAAQ,GAAG,IAAI,oBAAoB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IACnD,KAAK,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACjD,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACnD,WAAW,GAAG,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAExC,eAAe,CAAiC;IAExD;QACI,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;QAChE,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAA;QAChC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAoC;QACtC,eAAe;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAChD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAA;YACnE,sBAAsB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAA;QAC5G,CAAC;QAED,eAAe;QACf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAA;YACnE,sBAAsB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAA;QACpG,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACnD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAA;gBACtE,sBAAsB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;gBACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAA;YAC1G,CAAC;QACL,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC;IAEO,OAAO;QACX,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;QACvB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;IACzB,CAAC;IAED,OAAO;QACH,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YACnC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAA;QACpC,CAAC;IACL,CAAC;CACJ"}
|