@shortcut/mcp 0.12.0 → 0.13.0

package/README.md

@@ -125,6 +125,92 @@ Or you can edit the local JSON file directly:
   }
 ```
 
+## Available Tools
+
+### Stories
+
+- **get-story** - Get a single Shortcut story by ID
+- **search-stories** - Find Shortcut stories with filtering and search options
+- **get-story-branch-name** - Get the recommended branch name (based on workspace settings) for a specific story.
+- **create-story** - Create a new Shortcut story
+- **update-story** - Update an existing Shortcut story
+- **upload-file-to-story** - Upload a file and link it to a story
+- **assign-current-user-as-owner** - Assign the current user as the owner of a story
+- **unassign-current-user-as-owner** - Unassign the current user as the owner of a story
+- **create-story-comment** - Create a comment on a story
+- **add-task-to-story** - Add a task to a story
+- **update-task** - Update a task in a story
+- **add-relation-to-story** - Add a story relationship (relates to, blocks, duplicates, etc.)
+- **add-external-link-to-story** - Add an external link to a Shortcut story
+- **remove-external-link-from-story** - Remove an external link from a Shortcut story
+- **set-story-external-links** - Replace all external links on a story with a new set of links
+- **get-stories-by-external-link** - Find all stories that contain a specific external link
+
+### Epics
+
+- **get-epic** - Get a Shortcut epic by ID
+- **search-epics** - Find Shortcut epics with filtering and search options
+- **create-epic** - Create a new Shortcut epic
+
+### Iterations
+
+- **get-iteration-stories** - Get stories in a specific iteration by iteration ID
+- **get-iteration** - Get a Shortcut iteration by ID
+- **search-iterations** - Find Shortcut iterations with filtering and search options
+- **create-iteration** - Create a new Shortcut iteration with start/end dates
+- **get-active-iterations** - Get active iterations for the current user based on team memberships
+- **get-upcoming-iterations** - Get upcoming iterations for the current user based on team memberships
+
+### Objectives
+
+- **get-objective** - Get a Shortcut objective by ID
+- **search-objectives** - Find Shortcut objectives with filtering and search options
+
+### Teams
+
+- **get-team** - Get a Shortcut team by ID
+- **list-teams** - List all Shortcut teams
+
+### Workflows
+
+- **get-default-workflow** - Get the default workflow for a specific team or the workspace default
+- **get-workflow** - Get a Shortcut workflow by ID
+- **list-workflows** - List all Shortcut workflows
+
+### Users
+
+- **get-current-user** - Get the current user information
+- **get-current-user-teams** - Get a list of teams where the current user is a member
+- **list-users** - Get all workspace users
+
+### Documents
+
+- **create-document** - Create a new document in Shortcut with HTML content
+
+## Read-only mode
+
+You can run the MCP server in read-only mode by setting the `SHORTCUT_READONLY` environment variable to `true`. This will disable all tools that modify data in Shortcut.
+
+Example:
+
+```json
+{
+  "mcpServers": {
+    "shortcut": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "@shortcut/mcp@latest"
+      ],
+      "env": {
+        "SHORTCUT_API_TOKEN": "<YOUR_SHORTCUT_API_TOKEN>",
+        "SHORTCUT_READONLY": "true"
+      }
+    }
+  }
+}
+```
+
 ## Issues and Troubleshooting
 
 Before doing anything else, please make sure you are running the latest version!

package/dist/index.js

@@ -450,7 +450,7 @@ var ShortcutClientWrapper = class {
 //#endregion
 //#region package.json
 var name = "@shortcut/mcp";
-var version = "0.12.0";
+var version = "0.13.0";
 
 //#endregion
 //#region src/tools/base.ts
@@ -458,8 +458,9 @@ var version = "0.12.0";
 * Base class for all tools.
 */
 var BaseTools = class {
-	constructor(client$1) {
+	constructor(client$1, isReadonly$1 = false) {
 		this.client = client$1;
+		this.isReadonly = isReadonly$1;
 	}
 	renameEntityProps(entity) {
 		if (!entity || typeof entity !== "object") return entity;
@@ -791,12 +792,13 @@ var BaseTools = class {
 //#endregion
 //#region src/tools/documents.ts
 var DocumentTools = class DocumentTools extends BaseTools {
-	static create(client$1, server$1) {
-		const tools = new DocumentTools(client$1);
-		server$1.tool("create-document", "Create a new document in Shortcut with a title and content. Returns the document's id, title, and app_url. Note: Use HTML markup for the content (e.g., <p>, <h1>, <ul>, <strong>) rather than Markdown.", {
+	static create(client$1, server$1, isReadonly$1 = false) {
+		const tools = new DocumentTools(client$1, isReadonly$1);
+		if (!isReadonly$1) server$1.tool("create-document", "Create a new document in Shortcut with a title and content. Returns the document's id, title, and app_url. Note: Use HTML markup for the content (e.g., <p>, <h1>, <ul>, <strong>) rather than Markdown.", {
 			title: z.string().max(256).describe("The title for the new document (max 256 characters)"),
 			content: z.string().describe("The content for the new document in HTML format (e.g., <p>Hello</p>, <h1>Title</h1>, <ul><li>Item</li></ul>)")
 		}, async ({ title, content }) => await tools.createDocument(title, content));
+		return tools;
 	}
 	async createDocument(title, content) {
 		try {
@@ -874,8 +876,8 @@ const user = (field) => z.string().optional().describe(`Find entities where the
 //#endregion
 //#region src/tools/epics.ts
 var EpicTools = class EpicTools extends BaseTools {
-	static create(client$1, server$1) {
-		const tools = new EpicTools(client$1);
+	static create(client$1, server$1, isReadonly$1 = false) {
+		const tools = new EpicTools(client$1, isReadonly$1);
 		server$1.tool("get-epic", "Get a Shortcut epic by public ID", {
 			epicPublicId: z.number().positive().describe("The public ID of the epic to get"),
 			full: z.boolean().optional().default(false).describe("True to return all epic fields from the API. False to return a slim version that excludes uncommon fields")
@@ -909,7 +911,7 @@ var EpicTools = class EpicTools extends BaseTools {
 			completed: date(),
 			due: date()
 		}, async ({ nextPageToken,...params }) => await tools.searchEpics(params, nextPageToken));
-		server$1.tool("create-epic", "Create a new Shortcut epic.", {
+		if (!isReadonly$1) server$1.tool("create-epic", "Create a new Shortcut epic.", {
 			name: z.string().describe("The name of the epic"),
 			owner: z.string().optional().describe("The user ID of the owner of the epic"),
 			description: z.string().optional().describe("A description of the epic"),
@@ -944,8 +946,8 @@ var EpicTools = class EpicTools extends BaseTools {
 //#endregion
 //#region src/tools/iterations.ts
 var IterationTools = class IterationTools extends BaseTools {
-	static create(client$1, server$1) {
-		const tools = new IterationTools(client$1);
+	static create(client$1, server$1, isReadonly$1 = false) {
+		const tools = new IterationTools(client$1, isReadonly$1);
 		server$1.tool("get-iteration-stories", "Get stories in a specific iteration by iteration public ID", {
 			iterationPublicId: z.number().positive().describe("The public ID of the iteration"),
 			includeStoryDescriptions: z.boolean().optional().default(false).describe("Indicate whether story descriptions should be included. Including descriptions may take longer and will increase the size of the response.")
@@ -970,7 +972,7 @@ var IterationTools = class IterationTools extends BaseTools {
 			startDate: date(),
 			endDate: date()
 		}, async ({ nextPageToken,...params }) => await tools.searchIterations(params, nextPageToken));
-		server$1.tool("create-iteration", "Create a new Shortcut iteration", {
+		if (!isReadonly$1) server$1.tool("create-iteration", "Create a new Shortcut iteration", {
 			name: z.string().describe("The name of the iteration"),
 			startDate: z.string().describe("The start date of the iteration in YYYY-MM-DD format"),
 			endDate: z.string().describe("The end date of the iteration in YYYY-MM-DD format"),
@@ -1055,8 +1057,8 @@ var IterationTools = class IterationTools extends BaseTools {
 //#endregion
 //#region src/tools/objectives.ts
 var ObjectiveTools = class ObjectiveTools extends BaseTools {
-	static create(client$1, server$1) {
-		const tools = new ObjectiveTools(client$1);
+	static create(client$1, server$1, isReadonly$1 = false) {
+		const tools = new ObjectiveTools(client$1, isReadonly$1);
 		server$1.tool("get-objective", "Get a Shortcut objective by public ID", {
 			objectivePublicId: z.number().positive().describe("The public ID of the objective to get"),
 			full: z.boolean().optional().default(false).describe("True to return all objective fields from the API. False to return a slim version that excludes uncommon fields")
@@ -1103,8 +1105,8 @@ var ObjectiveTools = class ObjectiveTools extends BaseTools {
 //#endregion
 //#region src/tools/stories.ts
 var StoryTools = class StoryTools extends BaseTools {
-	static create(client$1, server$1) {
-		const tools = new StoryTools(client$1);
+	static create(client$1, server$1, isReadonly$1 = false) {
+		const tools = new StoryTools(client$1, isReadonly$1);
 		server$1.tool("get-story", "Get a Shortcut story by public ID", {
 			storyPublicId: z.number().positive().describe("The public ID of the story to get"),
 			full: z.boolean().optional().default(false).describe("True to return all story fields from the API. False to return a slim version that excludes uncommon fields")
@@ -1161,100 +1163,102 @@ var StoryTools = class StoryTools extends BaseTools {
 			due: date()
 		}, async ({ nextPageToken,...params }) => await tools.searchStories(params, nextPageToken));
 		server$1.tool("get-story-branch-name", "Get a valid branch name for a specific story.", { storyPublicId: z.number().positive().describe("The public Id of the story") }, async ({ storyPublicId }) => await tools.getStoryBranchName(storyPublicId));
-		server$1.tool("create-story", `Create a new Shortcut story. 
+		if (!isReadonly$1) {
+			server$1.tool("create-story", `Create a new Shortcut story. 
 Name is required, and either a Team or Workflow must be specified:
 - If only Team is specified, we will use the default workflow for that team.
 - If Workflow is specified, it will be used regardless of Team.
 The story will be added to the default state for the workflow.
 `, {
-			name: z.string().min(1).max(512).describe("The name of the story. Required."),
-			description: z.string().max(1e4).optional().describe("The description of the story"),
-			type: z.enum([
-				"feature",
-				"bug",
-				"chore"
-			]).default("feature").describe("The type of the story"),
-			owner: z.string().optional().describe("The user id of the owner of the story"),
-			epic: z.number().optional().describe("The epic id of the epic the story belongs to"),
-			iteration: z.number().optional().describe("The iteration id of the iteration the story belongs to"),
-			team: z.string().optional().describe("The team ID or mention name of the team the story belongs to. Required unless a workflow is specified."),
-			workflow: z.number().optional().describe("The workflow ID to add the story to. Required unless a team is specified.")
-		}, async ({ name: name$1, description, type, owner, epic, iteration, team, workflow }) => await tools.createStory({
-			name: name$1,
-			description,
-			type,
-			owner,
-			epic,
-			iteration,
-			team,
-			workflow
-		}));
-		server$1.tool("update-story", "Update an existing Shortcut story. Only provide fields you want to update. The story public ID will always be included in updates.", {
-			storyPublicId: z.number().positive().describe("The public ID of the story to update"),
-			name: z.string().max(512).optional().describe("The name of the story"),
-			description: z.string().max(1e4).optional().describe("The description of the story"),
-			type: z.enum([
-				"feature",
-				"bug",
-				"chore"
-			]).optional().describe("The type of the story"),
-			epic: z.number().nullable().optional().describe("The epic id of the epic the story belongs to, or null to unset"),
-			estimate: z.number().nullable().optional().describe("The point estimate of the story, or null to unset"),
-			iteration: z.number().nullable().optional().describe("The iteration id of the iteration the story belongs to, or null to unset"),
-			owner_ids: z.array(z.string()).optional().describe("Array of user UUIDs to assign as owners of the story"),
-			workflow_state_id: z.number().optional().describe("The workflow state ID to move the story to"),
-			labels: z.array(z.object({
-				name: z.string().describe("The name of the label"),
-				color: z.string().optional().describe("The color of the label"),
-				description: z.string().optional().describe("The description of the label")
-			})).optional().describe("Labels to assign to the story")
-		}, async (params) => await tools.updateStory(params));
-		server$1.tool("upload-file-to-story", "Upload a file and link it to a story.", {
-			storyPublicId: z.number().positive().describe("The public ID of the story"),
-			filePath: z.string().describe("The path to the file to upload")
-		}, async ({ storyPublicId, filePath }) => await tools.uploadFileToStory(storyPublicId, filePath));
-		server$1.tool("assign-current-user-as-owner", "Assign the current user as the owner of a story", { storyPublicId: z.number().positive().describe("The public ID of the story") }, async ({ storyPublicId }) => await tools.assignCurrentUserAsOwner(storyPublicId));
-		server$1.tool("unassign-current-user-as-owner", "Unassign the current user as the owner of a story", { storyPublicId: z.number().positive().describe("The public ID of the story") }, async ({ storyPublicId }) => await tools.unassignCurrentUserAsOwner(storyPublicId));
-		server$1.tool("create-story-comment", "Create a comment on a story", {
-			storyPublicId: z.number().positive().describe("The public ID of the story"),
-			text: z.string().min(1).describe("The text of the comment")
-		}, async (params) => await tools.createStoryComment(params));
-		server$1.tool("add-task-to-story", "Add a task to a story", {
-			storyPublicId: z.number().positive().describe("The public ID of the story"),
-			taskDescription: z.string().min(1).describe("The description of the task"),
-			taskOwnerIds: z.array(z.string()).optional().describe("Array of user IDs to assign as owners of the task")
-		}, async (params) => await tools.addTaskToStory(params));
-		server$1.tool("add-relation-to-story", "Add a story relationship to a story", {
-			storyPublicId: z.number().positive().describe("The public ID of the story"),
-			relatedStoryPublicId: z.number().positive().describe("The public ID of the related story"),
-			relationshipType: z.enum([
-				"relates to",
-				"blocks",
-				"blocked by",
-				"duplicates",
-				"duplicated by"
-			]).optional().default("relates to").describe("The type of relationship")
-		}, async (params) => await tools.addRelationToStory(params));
-		server$1.tool("update-task", "Update a task in a story", {
-			storyPublicId: z.number().positive().describe("The public ID of the story"),
-			taskPublicId: z.number().positive().describe("The public ID of the task"),
-			taskDescription: z.string().optional().describe("The description of the task"),
-			taskOwnerIds: z.array(z.string()).optional().describe("Array of user IDs to assign as owners of the task"),
-			isCompleted: z.boolean().optional().describe("Whether the task is completed or not")
-		}, async (params) => await tools.updateTask(params));
-		server$1.tool("add-external-link-to-story", "Add an external link to a Shortcut story", {
-			storyPublicId: z.number().positive().describe("The public ID of the story"),
-			externalLink: z.string().url().max(2048).describe("The external link URL to add")
-		}, async ({ storyPublicId, externalLink }) => await tools.addExternalLinkToStory(storyPublicId, externalLink));
-		server$1.tool("remove-external-link-from-story", "Remove an external link from a Shortcut story", {
-			storyPublicId: z.number().positive().describe("The public ID of the story"),
-			externalLink: z.string().url().max(2048).describe("The external link URL to remove")
-		}, async ({ storyPublicId, externalLink }) => await tools.removeExternalLinkFromStory(storyPublicId, externalLink));
+				name: z.string().min(1).max(512).describe("The name of the story. Required."),
+				description: z.string().max(1e4).optional().describe("The description of the story"),
+				type: z.enum([
+					"feature",
+					"bug",
+					"chore"
+				]).default("feature").describe("The type of the story"),
+				owner: z.string().optional().describe("The user id of the owner of the story"),
+				epic: z.number().optional().describe("The epic id of the epic the story belongs to"),
+				iteration: z.number().optional().describe("The iteration id of the iteration the story belongs to"),
+				team: z.string().optional().describe("The team ID or mention name of the team the story belongs to. Required unless a workflow is specified."),
+				workflow: z.number().optional().describe("The workflow ID to add the story to. Required unless a team is specified.")
+			}, async ({ name: name$1, description, type, owner, epic, iteration, team, workflow }) => await tools.createStory({
+				name: name$1,
+				description,
+				type,
+				owner,
+				epic,
+				iteration,
+				team,
+				workflow
+			}));
+			server$1.tool("update-story", "Update an existing Shortcut story. Only provide fields you want to update. The story public ID will always be included in updates.", {
+				storyPublicId: z.number().positive().describe("The public ID of the story to update"),
+				name: z.string().max(512).optional().describe("The name of the story"),
+				description: z.string().max(1e4).optional().describe("The description of the story"),
+				type: z.enum([
+					"feature",
+					"bug",
+					"chore"
+				]).optional().describe("The type of the story"),
+				epic: z.number().nullable().optional().describe("The epic id of the epic the story belongs to, or null to unset"),
+				estimate: z.number().nullable().optional().describe("The point estimate of the story, or null to unset"),
+				iteration: z.number().nullable().optional().describe("The iteration id of the iteration the story belongs to, or null to unset"),
+				owner_ids: z.array(z.string()).optional().describe("Array of user UUIDs to assign as owners of the story"),
+				workflow_state_id: z.number().optional().describe("The workflow state ID to move the story to"),
+				labels: z.array(z.object({
+					name: z.string().describe("The name of the label"),
+					color: z.string().optional().describe("The color of the label"),
+					description: z.string().optional().describe("The description of the label")
+				})).optional().describe("Labels to assign to the story")
+			}, async (params) => await tools.updateStory(params));
+			server$1.tool("upload-file-to-story", "Upload a file and link it to a story.", {
+				storyPublicId: z.number().positive().describe("The public ID of the story"),
+				filePath: z.string().describe("The path to the file to upload")
+			}, async ({ storyPublicId, filePath }) => await tools.uploadFileToStory(storyPublicId, filePath));
+			server$1.tool("assign-current-user-as-owner", "Assign the current user as the owner of a story", { storyPublicId: z.number().positive().describe("The public ID of the story") }, async ({ storyPublicId }) => await tools.assignCurrentUserAsOwner(storyPublicId));
+			server$1.tool("unassign-current-user-as-owner", "Unassign the current user as the owner of a story", { storyPublicId: z.number().positive().describe("The public ID of the story") }, async ({ storyPublicId }) => await tools.unassignCurrentUserAsOwner(storyPublicId));
+			server$1.tool("create-story-comment", "Create a comment on a story", {
+				storyPublicId: z.number().positive().describe("The public ID of the story"),
+				text: z.string().min(1).describe("The text of the comment")
+			}, async (params) => await tools.createStoryComment(params));
+			server$1.tool("add-task-to-story", "Add a task to a story", {
+				storyPublicId: z.number().positive().describe("The public ID of the story"),
+				taskDescription: z.string().min(1).describe("The description of the task"),
+				taskOwnerIds: z.array(z.string()).optional().describe("Array of user IDs to assign as owners of the task")
+			}, async (params) => await tools.addTaskToStory(params));
+			server$1.tool("update-task", "Update a task in a story", {
+				storyPublicId: z.number().positive().describe("The public ID of the story"),
+				taskPublicId: z.number().positive().describe("The public ID of the task"),
+				taskDescription: z.string().optional().describe("The description of the task"),
+				taskOwnerIds: z.array(z.string()).optional().describe("Array of user IDs to assign as owners of the task"),
+				isCompleted: z.boolean().optional().describe("Whether the task is completed or not")
+			}, async (params) => await tools.updateTask(params));
+			server$1.tool("add-relation-to-story", "Add a story relationship to a story", {
+				storyPublicId: z.number().positive().describe("The public ID of the story"),
+				relatedStoryPublicId: z.number().positive().describe("The public ID of the related story"),
+				relationshipType: z.enum([
+					"relates to",
+					"blocks",
+					"blocked by",
+					"duplicates",
+					"duplicated by"
+				]).optional().default("relates to").describe("The type of relationship")
+			}, async (params) => await tools.addRelationToStory(params));
+			server$1.tool("add-external-link-to-story", "Add an external link to a Shortcut story", {
+				storyPublicId: z.number().positive().describe("The public ID of the story"),
+				externalLink: z.string().url().max(2048).describe("The external link URL to add")
+			}, async ({ storyPublicId, externalLink }) => await tools.addExternalLinkToStory(storyPublicId, externalLink));
+			server$1.tool("remove-external-link-from-story", "Remove an external link from a Shortcut story", {
+				storyPublicId: z.number().positive().describe("The public ID of the story"),
+				externalLink: z.string().url().max(2048).describe("The external link URL to remove")
+			}, async ({ storyPublicId, externalLink }) => await tools.removeExternalLinkFromStory(storyPublicId, externalLink));
+			server$1.tool("set-story-external-links", "Replace all external links on a story with a new set of links", {
+				storyPublicId: z.number().positive().describe("The public ID of the story"),
+				externalLinks: z.array(z.string().url().max(2048)).describe("Array of external link URLs to set (replaces all existing links)")
+			}, async ({ storyPublicId, externalLinks }) => await tools.setStoryExternalLinks(storyPublicId, externalLinks));
+		}
 		server$1.tool("get-stories-by-external-link", "Find all stories that contain a specific external link", { externalLink: z.string().url().max(2048).describe("The external link URL to search for") }, async ({ externalLink }) => await tools.getStoriesByExternalLink(externalLink));
-		server$1.tool("set-story-external-links", "Replace all external links on a story with a new set of links", {
-			storyPublicId: z.number().positive().describe("The public ID of the story"),
-			externalLinks: z.array(z.string().url().max(2048)).describe("Array of external link URLs to set (replaces all existing links)")
-		}, async ({ storyPublicId, externalLinks }) => await tools.setStoryExternalLinks(storyPublicId, externalLinks));
 		return tools;
 	}
 	async assignCurrentUserAsOwner(storyPublicId) {
@@ -1433,8 +1437,8 @@ The story will be added to the default state for the workflow.
 //#endregion
 //#region src/tools/teams.ts
 var TeamTools = class TeamTools extends BaseTools {
-	static create(client$1, server$1) {
-		const tools = new TeamTools(client$1);
+	static create(client$1, server$1, isReadonly$1 = false) {
+		const tools = new TeamTools(client$1, isReadonly$1);
 		server$1.tool("get-team", "Get a Shortcut team by public ID", {
 			teamPublicId: z.string().describe("The public ID of the team to get"),
 			full: z.boolean().optional().default(false).describe("True to return all team fields from the API. False to return a slim version that excludes uncommon fields")
@@ -1457,11 +1461,11 @@ var TeamTools = class TeamTools extends BaseTools {
 //#endregion
 //#region src/tools/user.ts
 var UserTools = class UserTools extends BaseTools {
-	static create(client$1, server$1) {
-		const tools = new UserTools(client$1);
+	static create(client$1, server$1, isReadonly$1 = false) {
+		const tools = new UserTools(client$1, isReadonly$1);
 		server$1.tool("get-current-user", "Get the current user", async () => await tools.getCurrentUser());
 		server$1.tool("get-current-user-teams", "Get a list of teams where the current user is a member", async () => await tools.getCurrentUserTeams());
-		server$1.tool("list-members", "Get all members", async () => await tools.listMembers());
+		server$1.tool("list-users", "Get all users", async () => await tools.listMembers());
 		return tools;
 	}
 	async getCurrentUser() {
@@ -1490,8 +1494,8 @@ var UserTools = class UserTools extends BaseTools {
 //#endregion
 //#region src/tools/workflows.ts
 var WorkflowTools = class WorkflowTools extends BaseTools {
-	static create(client$1, server$1) {
-		const tools = new WorkflowTools(client$1);
+	static create(client$1, server$1, isReadonly$1 = false) {
+		const tools = new WorkflowTools(client$1, isReadonly$1);
 		server$1.tool("get-default-workflow", "Get the default workflow for a specific team or the global default if no team is specified.", { teamPublicId: z.string().optional().describe("The public ID of the team to get the default workflow for.") }, async ({ teamPublicId }) => await tools.getDefaultWorkflow(teamPublicId));
 		server$1.tool("get-workflow", "Get a Shortcut workflow by public ID", {
 			workflowPublicId: z.number().positive().describe("The public ID of the workflow to get"),
@@ -1530,10 +1534,11 @@ var WorkflowTools = class WorkflowTools extends BaseTools {
 //#endregion
 //#region src/server.ts
 let apiToken = process.env.SHORTCUT_API_TOKEN;
-if (process.argv.length === 3) {
-	const [name$1, token] = String(process.argv[2]).split("=");
-	if (name$1 === "SHORTCUT_API_TOKEN") apiToken = token;
-}
+let isReadonly = process.env.SHORTCUT_READONLY === "true";
+if (process.argv.length >= 3) process.argv.slice(2).map((arg) => arg.split("=")).forEach(([name$1, value]) => {
+	if (name$1 === "SHORTCUT_API_TOKEN") apiToken = value;
+	if (name$1 === "SHORTCUT_READONLY") isReadonly = value === "true";
+});
 if (!apiToken) {
 	console.error("SHORTCUT_API_TOKEN is required");
 	process.exit(1);
@@ -1543,14 +1548,14 @@ const server = new McpServer({
 	version
 });
 const client = new ShortcutClientWrapper(new ShortcutClient(apiToken));
-UserTools.create(client, server);
-StoryTools.create(client, server);
-IterationTools.create(client, server);
-EpicTools.create(client, server);
-ObjectiveTools.create(client, server);
-TeamTools.create(client, server);
-WorkflowTools.create(client, server);
-DocumentTools.create(client, server);
+UserTools.create(client, server, isReadonly);
+StoryTools.create(client, server, isReadonly);
+IterationTools.create(client, server, isReadonly);
+EpicTools.create(client, server, isReadonly);
+ObjectiveTools.create(client, server, isReadonly);
+TeamTools.create(client, server, isReadonly);
+WorkflowTools.create(client, server, isReadonly);
+DocumentTools.create(client, server, isReadonly);
 async function startServer() {
 	try {
 		const transport = new StdioServerTransport();

package/package.json

@@ -12,7 +12,7 @@
 		"modelcontextprotocol"
 	],
 	"license": "MIT",
-	"version": "0.12.0",
+	"version": "0.13.0",
 	"type": "module",
 	"main": "dist/index.js",
 	"bin": {