@shipstatic/mcp 0.6.0 → 0.7.0-beta.1

package/README.md

@@ -85,12 +85,12 @@ Same config format — `npx @shipstatic/mcp`. Works with any MCP-compatible clie
 
 ## Free API key — permanent deployments
 
-`SHIP_API_KEY` is optional. Without it, deploys behave like the hosted endpoint (public, claim URL, 3-day expiry). With it, you get permanent deployments, the full toolset, and bigger limits.
+`SHIP_TOKEN` is optional. Without it, deploys behave like the hosted endpoint (public, claim URL, 3-day expiry). With it, you get permanent deployments, the full toolset, and bigger limits.
 
-Get a free key at [my.shipstatic.com/api-key](https://my.shipstatic.com/api-key):
+Get a free API key at [my.shipstatic.com/api-key](https://my.shipstatic.com/api-key):
 
 ```bash
-claude mcp add shipstatic -e SHIP_API_KEY=ship-... -- npx @shipstatic/mcp
+claude mcp add shipstatic -e SHIP_TOKEN=ship-... -- npx @shipstatic/mcp
 ```
 
 ## Tools

package/dist/call.js

@@ -1,10 +1,8 @@
-import { isShipError, ErrorType } from '@shipstatic/ship';
+import { ErrorType, isShipError } from '@shipstatic/ship';
 export async function call(fn) {
     try {
         const result = await fn();
-        const text = result === undefined
-            ? 'Done.'
-            : JSON.stringify(result, null, 2);
+        const text = result === undefined ? 'Done.' : JSON.stringify(result, null, 2);
         return { content: [{ type: 'text', text }] };
     }
     catch (error) {
@@ -15,10 +13,12 @@ function handleError(error) {
     if (isShipError(error)) {
         let message = error.message;
         if (error.isType(ErrorType.Authentication)) {
-            message += '\n\nHint: Set a free SHIP_API_KEY environment variable in your MCP server configuration.';
+            message +=
+                '\n\nHint: Set a free SHIP_TOKEN environment variable in your MCP server configuration.';
         }
         if (error.isType(ErrorType.Forbidden)) {
-            message += '\n\nHint: This action is not permitted. Likely cause: plan limits reached or the account is terminated. Stop retrying — the user needs to upgrade or contact support at https://my.shipstatic.com.';
+            message +=
+                '\n\nHint: This action is not permitted. Likely cause: plan limits reached or the account is terminated. Stop retrying — the user needs to upgrade or contact support at https://my.shipstatic.com.';
         }
         if (error.isType(ErrorType.Validation) && error.details) {
             message += `\n\nDetails: ${safeStringify(error.details)}`;

package/dist/index.js

@@ -3,9 +3,14 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import Ship from '@shipstatic/ship';
 import { createServer } from './server.js';
 async function main() {
-    // SHIP_API_KEY is optional — without it, deployments are public (3-day expiry).
+    // SHIP_TOKEN is optional — without it, deployments are public (3-day expiry).
     // The SDK coerces empty strings to undefined, so we can pass through directly.
-    const ship = new Ship({ apiKey: process.env.SHIP_API_KEY });
+    //
+    // One credential slot, any platform token: the value's prefix says what it
+    // is (`ship-` API key, `deploy-` deploy token, anything else an opaque
+    // bearer) and the server classifies it. MCP never has to know which kind it
+    // holds.
+    const ship = new Ship({ token: process.env.SHIP_TOKEN });
     const server = createServer(ship);
     const transport = new StdioServerTransport();
     await server.connect(transport);

package/dist/server.d.ts

@@ -1,3 +1,3 @@
-import type Ship from '@shipstatic/ship';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type Ship from '@shipstatic/ship';
 export declare function createServer(ship: Ship): McpServer;

package/dist/server.js

@@ -1,21 +1,36 @@
-import { LABEL_CONSTRAINTS, PASSWORD_CONSTRAINTS } from '@shipstatic/ship';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { createRequire } from 'node:module';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { LABEL_CONSTRAINTS, PASSWORD_CONSTRAINTS } from '@shipstatic/ship';
 import { z } from 'zod';
 import { call } from './call.js';
 const { version } = createRequire(import.meta.url)('../package.json');
 const OPEN_WORLD = { openWorldHint: true };
-const READ = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, ...OPEN_WORLD };
+const READ = {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    ...OPEN_WORLD,
+};
 const CREATE = { readOnlyHint: false, destructiveHint: false, ...OPEN_WORLD };
-const WRITE = { readOnlyHint: false, destructiveHint: false, idempotentHint: true, ...OPEN_WORLD };
-const DESTRUCTIVE = { readOnlyHint: false, destructiveHint: true, idempotentHint: true, ...OPEN_WORLD };
+const WRITE = {
+    readOnlyHint: false,
+    destructiveHint: false,
+    idempotentHint: true,
+    ...OPEN_WORLD,
+};
+const DESTRUCTIVE = {
+    readOnlyHint: false,
+    destructiveHint: true,
+    idempotentHint: true,
+    ...OPEN_WORLD,
+};
 const INSTRUCTIONS = `ShipStatic deploys static websites instantly. Free, no account required.
 
 To deploy: call deployments_upload with the build output directory path. The site is live immediately. To make the site private, pass \`password\` — visitors must unlock before viewing, including on any custom domains pointing at it.
 
-Without SHIP_API_KEY, deployments are public and expire in 3 days. The response includes a claim URL — always show the deployment URL and the claim URL to the user so they can keep the site permanently.
+Without SHIP_TOKEN, deployments are public and expire in 3 days. The response includes a claim URL — always show the deployment URL and the claim URL to the user so they can keep the site permanently.
 
-With SHIP_API_KEY configured, deployments go to the user's account and never expire. Listing, managing, and domain operations also require SHIP_API_KEY.
+With SHIP_TOKEN configured, deployments go to the user's account and never expire. Listing, managing, and domain operations also require SHIP_TOKEN.
 
 Concepts:
 - Deployment: an immutable set of files with an instant URL (e.g. happy-cat-abc1234.shipstatic.com). No setup needed.
@@ -31,12 +46,20 @@ export function createServer(ship) {
     });
     // Deployments
     server.registerTool('deployments_upload', {
-        description: 'Deploy a static site instantly — free, no account or API key required. Returns the live URL, file count, and size. Without SHIP_API_KEY, the response includes a claim URL (site expires in 3 days) — always show both the deployment URL and claim URL to the user. To make the site private, pass `password`; always show the password to the user if you set one.',
+        description: 'Deploy a static site instantly — free, no account or API key required. Returns the live URL, file count, and size. Without SHIP_TOKEN, the response includes a claim URL (site expires in 3 days) — always show both the deployment URL and claim URL to the user. To make the site private, pass `password`; always show the password to the user if you set one.',
         annotations: CREATE,
         inputSchema: {
-            path: z.string().describe('Absolute path to the build output directory to deploy (e.g. "/Users/me/project/dist")'),
-            labels: z.array(z.string()).optional().describe(`Labels for organizing deployments (e.g. ["production", "v1.2"]). Lowercase, ${LABEL_CONSTRAINTS.MIN_LENGTH}-${LABEL_CONSTRAINTS.MAX_LENGTH} chars, allows . _ - separators.`),
-            password: z.string().optional().describe(`Optional password to gate the deployment behind an unlock prompt (${PASSWORD_CONSTRAINTS.MIN_LENGTH}–${PASSWORD_CONSTRAINTS.MAX_LENGTH} characters; whitespace significant). Visitors must enter this password before viewing the site, including on any custom domains pointing at it.`),
+            path: z
+                .string()
+                .describe('Absolute path to the build output directory to deploy (e.g. "/Users/me/project/dist")'),
+            labels: z
+                .array(z.string())
+                .optional()
+                .describe(`Labels for organizing deployments (e.g. ["production", "v1.2"]). Lowercase, ${LABEL_CONSTRAINTS.MIN_LENGTH}-${LABEL_CONSTRAINTS.MAX_LENGTH} chars, allows . _ - separators.`),
+            password: z
+                .string()
+                .optional()
+                .describe(`Optional password to gate the deployment behind an unlock prompt (${PASSWORD_CONSTRAINTS.MIN_LENGTH}–${PASSWORD_CONSTRAINTS.MAX_LENGTH} characters; whitespace significant). Visitors must enter this password before viewing the site, including on any custom domains pointing at it.`),
         },
     }, ({ path, labels, password }) => call(() => ship.deployments.upload(path, { labels, password, via: 'mcp' })));
     server.registerTool('deployments_list', {
@@ -47,22 +70,30 @@ export function createServer(ship) {
         description: 'Get deployment details including URL, status, file count, size, labels, and password protection state.',
         annotations: READ,
         inputSchema: {
-            deployment: z.string().describe('Deployment hostname (e.g. "happy-cat-abc1234.shipstatic.com"). Returned by deployments_upload or deployments_list.'),
+            deployment: z
+                .string()
+                .describe('Deployment hostname (e.g. "happy-cat-abc1234.shipstatic.com"). Returned by deployments_upload or deployments_list.'),
         },
     }, ({ deployment }) => call(() => ship.deployments.get(deployment)));
     server.registerTool('deployments_set', {
         description: 'Update deployment labels. Replaces all existing labels.',
         annotations: WRITE,
         inputSchema: {
-            deployment: z.string().describe('Deployment hostname (e.g. "happy-cat-abc1234.shipstatic.com"). Use deployments_list to find deployments.'),
-            labels: z.array(z.string()).describe('Labels to set. Replaces all existing labels. Pass empty array to clear.'),
+            deployment: z
+                .string()
+                .describe('Deployment hostname (e.g. "happy-cat-abc1234.shipstatic.com"). Use deployments_list to find deployments.'),
+            labels: z
+                .array(z.string())
+                .describe('Labels to set. Replaces all existing labels. Pass empty array to clear.'),
         },
     }, ({ deployment, labels }) => call(() => ship.deployments.set(deployment, { labels })));
     server.registerTool('deployments_remove', {
         description: 'Permanently delete a deployment and its files. You MUST confirm with the user before calling this tool, referencing the deployment.',
         annotations: DESTRUCTIVE,
         inputSchema: {
-            deployment: z.string().describe('Deployment hostname to delete (e.g. "happy-cat-abc1234.shipstatic.com")'),
+            deployment: z
+                .string()
+                .describe('Deployment hostname to delete (e.g. "happy-cat-abc1234.shipstatic.com")'),
         },
     }, ({ deployment }) => call(() => ship.deployments.remove(deployment)));
     // Domains
@@ -71,8 +102,14 @@ export function createServer(ship) {
         annotations: WRITE,
         inputSchema: {
             domain: z.string().describe('Domain name (e.g. "www.example.com" or "blog.example.com")'),
-            deployment: z.string().optional().describe('Deployment to serve on this domain (e.g. "happy-cat-abc1234.shipstatic.com"). Omit to reserve the domain without linking.'),
-            labels: z.array(z.string()).optional().describe('Labels for organizing domains (e.g. ["production"]).'),
+            deployment: z
+                .string()
+                .optional()
+                .describe('Deployment to serve on this domain (e.g. "happy-cat-abc1234.shipstatic.com"). Omit to reserve the domain without linking.'),
+            labels: z
+                .array(z.string())
+                .optional()
+                .describe('Labels for organizing domains (e.g. ["production"]).'),
         },
     }, ({ domain, deployment, labels }) => call(() => ship.domains.set(domain, { deployment, labels })));
     server.registerTool('domains_list', {
@@ -83,42 +120,54 @@ export function createServer(ship) {
         description: 'Get domain details including URL, linked deployment, verification status, and labels.',
         annotations: READ,
         inputSchema: {
-            domain: z.string().describe('Domain name (e.g. "www.example.com"). Use domains_list to find names.'),
+            domain: z
+                .string()
+                .describe('Domain name (e.g. "www.example.com"). Use domains_list to find names.'),
         },
     }, ({ domain }) => call(() => ship.domains.get(domain)));
     server.registerTool('domains_records', {
         description: 'Get the DNS records the user needs to configure at their DNS provider. Call after domains_set. You MUST show the returned records to the user.',
         annotations: READ,
         inputSchema: {
-            domain: z.string().describe('Domain name. Must be a domain previously created with domains_set.'),
+            domain: z
+                .string()
+                .describe('Domain name. Must be a domain previously created with domains_set.'),
         },
     }, ({ domain }) => call(() => ship.domains.records(domain)));
     server.registerTool('domains_dns', {
         description: 'Look up the DNS provider for a domain (e.g. Cloudflare, Namecheap). Helps the user know where to configure their DNS records.',
         annotations: READ,
         inputSchema: {
-            domain: z.string().describe('Domain name to look up DNS provider for (e.g. "www.example.com")'),
+            domain: z
+                .string()
+                .describe('Domain name to look up DNS provider for (e.g. "www.example.com")'),
         },
     }, ({ domain }) => call(() => ship.domains.dns(domain)));
     server.registerTool('domains_share', {
         description: 'Get a shareable DNS setup hash for a domain. The hash can be shared with the user so they can view the required DNS records without needing an API key.',
         annotations: READ,
         inputSchema: {
-            domain: z.string().describe('Domain name to generate a share link for. Must be a domain previously created with domains_set.'),
+            domain: z
+                .string()
+                .describe('Domain name to generate a share link for. Must be a domain previously created with domains_set.'),
         },
     }, ({ domain }) => call(() => ship.domains.share(domain)));
     server.registerTool('domains_validate', {
         description: 'Check if a domain name is valid and available before creating it. Returns the normalized form and availability.',
         annotations: READ,
         inputSchema: {
-            domain: z.string().describe('Domain name to check (e.g. "www.example.com"). Call before domains_set to check availability.'),
+            domain: z
+                .string()
+                .describe('Domain name to check (e.g. "www.example.com"). Call before domains_set to check availability.'),
         },
     }, ({ domain }) => call(() => ship.domains.validate(domain)));
     server.registerTool('domains_verify', {
         description: 'Trigger DNS verification for a custom domain. Call after the user has configured DNS records from domains_records. Verification is asynchronous — the domain status updates once DNS propagates.',
         annotations: WRITE,
         inputSchema: {
-            domain: z.string().describe('Domain name to verify DNS for. Must be a domain previously created with domains_set.'),
+            domain: z
+                .string()
+                .describe('Domain name to verify DNS for. Must be a domain previously created with domains_set.'),
         },
     }, ({ domain }) => call(() => ship.domains.verify(domain)));
     server.registerTool('domains_remove', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipstatic/mcp",
-  "version": "0.6.0",
+  "version": "0.7.0-beta.1",
   "mcpName": "com.shipstatic/mcp",
   "description": "ShipStatic MCP — deploy static websites from AI agents. Full toolset incl. custom domains. Free hosted endpoint at mcp.shipstatic.com — no install.",
   "type": "module",
@@ -9,6 +9,16 @@
   "bin": {
     "shipstatic-mcp": "./dist/index.js"
   },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "prepare": "git config core.hooksPath scripts/githooks",
+    "test": "vitest",
+    "typecheck": "tsc -p tsconfig.check.json --noEmit",
+    "lint": "biome check .",
+    "format": "biome format --write .",
+    "coverage": "vitest --run --coverage"
+  },
   "files": [
     "dist",
     "README.md"
@@ -45,20 +55,16 @@
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@shipstatic/ship": "^0.9.6",
+    "@shipstatic/ship": "2.0.0-beta.2",
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@shipstatic/types": "^0.9.8",
+    "@biomejs/biome": "2.5.5",
+    "@shipstatic/types": "2.5.0-beta.0",
     "@types/node": "^25.6.0",
-    "husky": "^9.1.7",
+    "@vitest/coverage-v8": "4.1.10",
     "typescript": "^6.0.2",
-    "vitest": "^4.1.4"
+    "vitest": "4.1.10"
   },
-  "scripts": {
-    "build": "tsc",
-    "clean": "rm -rf dist",
-    "test": "vitest",
-    "typecheck": "tsc --noEmit -p tsconfig.test.json"
-  }
-}
+  "packageManager": "pnpm@10.12.4"
+}