@spacelr/mcp 0.0.10 → 0.0.12

package/dist/index.mjs

@@ -1448,6 +1448,40 @@ function registerDatabaseTools(server, api) {
       }
     }
   );
+  server.registerTool(
+    "database_documents_search",
+    {
+      description: "Server-side substring search across named fields of a collection. The query is regex-escaped and case-insensitive. Uses unanchored MongoDB $regex per field \u2014 consider adding a filter to narrow the scan on large collections. Max 10 fields, max 100 results. Runs with admin privileges (bypasses .read rules); use the SDK search() for tenant-scoped rule-gated search.",
+      inputSchema: {
+        projectId: z4.string(),
+        collectionName: z4.string(),
+        query: z4.string().min(1).max(200),
+        fields: z4.array(z4.string().regex(/^[a-zA-Z0-9_.]+$/).max(64)).min(1).max(10),
+        filter: z4.record(z4.string(), z4.unknown()).optional(),
+        sort: z4.record(z4.string(), z4.union([z4.literal(1), z4.literal(-1)])).optional(),
+        limit: z4.number().int().min(1).max(100).optional(),
+        offset: z4.number().int().min(0).optional(),
+        select: z4.array(z4.string()).optional()
+      }
+    },
+    async ({ projectId, collectionName, ...body }) => {
+      try {
+        const result = await api.post(
+          `/databases/${encodeURIComponent(projectId)}/collections/${encodeURIComponent(collectionName)}/documents/search`,
+          { body }
+        );
+        return {
+          content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+        };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+          content: [{ type: "text", text: `Failed to search documents: ${message}` }],
+          isError: true
+        };
+      }
+    }
+  );
   server.registerTool(
     "database_documents_insert",
     {
@@ -2394,7 +2428,10 @@ function registerFunctionTools(server, api) {
         cronTimezone: z7.string().optional(),
         timeout: z7.number().int().min(1e3).max(12e4).optional(),
         memoryLimitMb: z7.number().int().min(16).max(512).optional(),
-        enabled: z7.boolean().optional()
+        enabled: z7.boolean().optional(),
+        invokeMode: z7.enum(["webhook", "authenticated", "public", "hybrid"]).optional().describe(
+          "Controls which credentials the public invoke endpoint accepts. webhook: X-Webhook-Secret only (default). authenticated: JWT only. public: no auth. hybrid: either; JWT wins on conflict."
+        )
       }
     },
     async ({ projectId, ...body }) => {
@@ -2429,7 +2466,10 @@ function registerFunctionTools(server, api) {
         cronTimezone: z7.string().optional(),
         timeout: z7.number().int().min(1e3).max(12e4).optional(),
         memoryLimitMb: z7.number().int().min(16).max(512).optional(),
-        enabled: z7.boolean().optional()
+        enabled: z7.boolean().optional(),
+        invokeMode: z7.enum(["webhook", "authenticated", "public", "hybrid"]).optional().describe(
+          "Controls which credentials the public invoke endpoint accepts. webhook: X-Webhook-Secret only. authenticated: JWT only. public: no auth. hybrid: either; JWT wins on conflict."
+        )
       }
     },
     async ({ projectId, functionId, ...body }) => {