@tiangong-lca/mcp-server 0.0.5 → 0.0.7

package/README.md

@@ -32,17 +32,17 @@ npx -y supergateway \
 
 ```bash
 # Build MCP server image using Dockerfile (optional)
-docker build -t linancn/tiangong-lca-mcp-server:0.0.1 .
+docker build -t linancn/tiangong-lca-mcp-server:0.0.5 .
 
 # Pull MCP server image
-docker pull linancn/tiangong-lca-mcp-server:0.0.1
+docker pull linancn/tiangong-lca-mcp-server:0.0.5
 
 # Start MCP server using Docker
 docker run -d \
     --name tiangong-lca-mcp-server \
     --publish 9278:9278 \
     --env-file .env \
-    linancn/tiangong-lca-mcp-server:0.0.1
+    linancn/tiangong-lca-mcp-server:0.0.5
 ```
 
 ## Development
@@ -90,7 +90,7 @@ npm install -g supergateway
 # Launch the SSE Server (If the parameter --baseUrl is configured, it should be set to a valid IP address or domain name)
 npx dotenv -e .env -- \
 npx -y supergateway \
-    --stdio "npx -y -p tiangong-lca-mcp-server-0.0.3.tgz tiangong-lca-mcp-stdio" \
+    --stdio "npx -y -p tiangong-lca-mcp-server-0.0.5.tgz tiangong-lca-mcp-stdio" \
     --port 3001 \
     --ssePath /sse \
     --messagePath /message

package/dist/src/_shared/auth_middleware.js

@@ -0,0 +1,74 @@
+import { createClient } from '@supabase/supabase-js';
+import { Redis } from '@upstash/redis';
+import decodeApiKey from './decode_api_key.js';
+const supabase_base_url = process.env.SUPABASE_BASE_URL ?? '';
+const supabase_anon_key = process.env.SUPABASE_ANON_KEY ?? '';
+const supabase = createClient(supabase_base_url, supabase_anon_key);
+const redis_url = process.env.UPSTASH_REDIS_URL ?? '';
+const redis_token = process.env.UPSTASH_REDIS_TOKEN ?? '';
+const redis = new Redis({
+    url: redis_url,
+    token: redis_token,
+});
+export async function authenticateRequest(bearerKey) {
+    const credentials = decodeApiKey(bearerKey);
+    if (credentials) {
+        const { email = '', password = '' } = credentials;
+        const userIdFromRedis = await redis.get('lca_' + email);
+        if (!userIdFromRedis) {
+            const { data, error } = await supabase.auth.signInWithPassword({
+                email: email,
+                password: password,
+            });
+            console.error(email, password, data, error);
+            if (error) {
+                return {
+                    isAuthenticated: false,
+                    response: 'Unauthorized',
+                };
+            }
+            if (data.user.role !== 'authenticated') {
+                return {
+                    isAuthenticated: false,
+                    response: 'You are not an authenticated user.',
+                };
+            }
+            else {
+                await redis.setex('lca_' + email, 3600, data.user.id);
+                return {
+                    isAuthenticated: true,
+                    response: data.user.id,
+                };
+            }
+        }
+        return {
+            isAuthenticated: true,
+            response: String(userIdFromRedis),
+        };
+    }
+    const { data: authData } = await supabase.auth.getUser(bearerKey);
+    if (authData.user?.role === 'authenticated') {
+        return {
+            isAuthenticated: true,
+            response: authData.user?.id,
+        };
+    }
+    if (!authData || !authData.user) {
+        return {
+            isAuthenticated: false,
+            response: 'User Not Found',
+        };
+    }
+    else {
+        if (authData.user.role !== 'authenticated') {
+            return {
+                isAuthenticated: false,
+                response: 'Forbidden',
+            };
+        }
+    }
+    return {
+        isAuthenticated: true,
+        response: authData.user.id,
+    };
+}

package/dist/src/_shared/config.js

@@ -1,4 +1,4 @@
-export const base_url = process.env.BASE_URL ?? '';
+export const supabase_base_url = process.env.SUPABASE_BASE_URL ?? '';
 export const supabase_anon_key = process.env.SUPABASE_ANON_KEY ?? '';
 export const x_api_key = process.env.X_API_KEY ?? '';
 export const x_region = process.env.X_REGION ?? '';

package/dist/src/_shared/decode_api_key.js

@@ -0,0 +1,16 @@
+function decodeApiKey(apiKey) {
+    if (!apiKey)
+        return null;
+    try {
+        const jsonString = atob(apiKey);
+        const credentials = JSON.parse(jsonString);
+        if (!credentials.email || !credentials.password) {
+            return null;
+        }
+        return credentials;
+    }
+    catch (_error) {
+        return null;
+    }
+}
+export default decodeApiKey;

package/dist/src/_shared/init_server.js

@@ -5,19 +5,19 @@ import { regOpenLcaLciaTool } from '../tools/openlca_ipc_lcia.js';
 import { regOpenLcaListLCIAMethodsTool } from '../tools/openlca_ipc_lcia_methods_list.js';
 import { regOpenLcaListSystemProcessTool } from '../tools/openlca_ipc_process_list.js';
 import { regProcessSearchTool } from '../tools/process_hybrid_search.js';
-export function initializeServer() {
+export function initializeServer(bearerKey) {
     const server = new McpServer({
         name: 'TianGong-MCP-Server',
         version: '1.0.0',
     });
-    regFlowSearchTool(server);
-    regProcessSearchTool(server);
+    regFlowSearchTool(server, bearerKey);
+    regProcessSearchTool(server, bearerKey);
     regBomCalculationTool(server);
     regOpenLcaLciaTool(server);
     regOpenLcaListSystemProcessTool(server);
     regOpenLcaListLCIAMethodsTool(server);
     return server;
 }
-export function getServer() {
-    return initializeServer();
+export function getServer(bearerKey) {
+    return initializeServer(bearerKey);
 }

package/dist/src/index_server.js

@@ -1,13 +1,9 @@
 #!/usr/bin/env node
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import express from 'express';
+import { authenticateRequest } from './_shared/auth_middleware.js';
 import { getServer } from './_shared/init_server.js';
-const BEARER_KEY = process.env.BEARER_KEY;
-const authenticateBearer = (req, res, next) => {
-    if (!BEARER_KEY) {
-        next();
-        return;
-    }
+const authenticateBearer = async (req, res, next) => {
     const authHeader = req.headers.authorization;
     if (!authHeader || !authHeader.startsWith('Bearer ')) {
         res.status(401).json({
@@ -20,25 +16,27 @@ const authenticateBearer = (req, res, next) => {
         });
         return;
     }
-    const token = authHeader.substring(7);
-    if (token !== BEARER_KEY) {
+    const bearerKey = authHeader.substring(7).trim();
+    const authResult = await authenticateRequest(bearerKey);
+    if (!authResult || !authResult.isAuthenticated) {
         res.status(403).json({
             jsonrpc: '2.0',
             error: {
                 code: -32002,
-                message: 'Invalid bearer token',
+                message: authResult?.response || 'Forbidden',
             },
             id: null,
         });
         return;
     }
+    req.bearerKey = bearerKey;
     next();
 };
 const app = express();
 app.use(express.json());
 app.post('/mcp', authenticateBearer, async (req, res) => {
     try {
-        const server = getServer();
+        const server = getServer(req.bearerKey);
         const transport = new StreamableHTTPServerTransport({
             sessionIdGenerator: undefined,
         });
@@ -86,6 +84,11 @@ app.delete('/mcp', async (req, res) => {
         id: null,
     }));
 });
+app.get('/health', async (req, res) => {
+    res.status(200).json({
+        status: 'ok'
+    });
+});
 const PORT = Number(process.env.PORT ?? 9278);
 const HOST = process.env.HOST ?? '0.0.0.0';
 app.listen(PORT, HOST, () => {

package/dist/src/tools/flow_hybrid_search.js

@@ -1,18 +1,18 @@
 import { z } from 'zod';
 import cleanObject from '../_shared/clean_object.js';
-import { base_url, supabase_anon_key, x_api_key, x_region } from '../_shared/config.js';
+import { supabase_anon_key, supabase_base_url, x_region } from '../_shared/config.js';
 const input_schema = {
     query: z.string().min(1).describe('Queries from user'),
 };
-async function searchFlows({ query }) {
-    const url = `${base_url}/flow_hybrid_search`;
+async function searchFlows({ query }, bearerKey) {
+    const url = `${supabase_base_url}/functions/v1/flow_hybrid_search`;
     try {
         const response = await fetch(url, {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json',
                 Authorization: `Bearer ${supabase_anon_key}`,
-                'x-api-key': x_api_key,
+                ...(bearerKey && { 'x-api-key': bearerKey }),
                 'x-region': x_region,
             },
             body: JSON.stringify(cleanObject({
@@ -30,11 +30,11 @@ async function searchFlows({ query }) {
         throw error;
     }
 }
-export function regFlowSearchTool(server) {
+export function regFlowSearchTool(server, bearerKey) {
     server.tool('Search_flows_Tool', 'Search LCA flows data.', input_schema, async ({ query }) => {
         const result = await searchFlows({
             query,
-        });
+        }, bearerKey);
         return {
             content: [
                 {

package/dist/src/tools/process_hybrid_search.js

@@ -1,18 +1,18 @@
 import { z } from 'zod';
 import cleanObject from '../_shared/clean_object.js';
-import { base_url, supabase_anon_key, x_api_key, x_region } from '../_shared/config.js';
+import { supabase_anon_key, supabase_base_url, x_region } from '../_shared/config.js';
 const input_schema = {
     query: z.string().min(1).describe('Queries from user'),
 };
-async function searchProcesses({ query }) {
-    const url = `${base_url}/process_hybrid_search`;
+async function searchProcesses({ query }, bearerKey) {
+    const url = `${supabase_base_url}/functions/v1/process_hybrid_search`;
     try {
         const response = await fetch(url, {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json',
                 Authorization: `Bearer ${supabase_anon_key}`,
-                'x-api-key': x_api_key,
+                ...(bearerKey && { 'x-api-key': bearerKey }),
                 'x-region': x_region,
             },
             body: JSON.stringify(cleanObject({
@@ -30,11 +30,11 @@ async function searchProcesses({ query }) {
         throw error;
     }
 }
-export function regProcessSearchTool(server) {
+export function regProcessSearchTool(server, bearerKey) {
     server.tool('Search_processes_Tool', 'Search LCA processes data.', input_schema, async ({ query }) => {
         const result = await searchProcesses({
             query,
-        });
+        }, bearerKey);
         return {
             content: [
                 {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiangong-lca/mcp-server",
-  "version": "0.0.5",
+  "version": "0.0.7",
   "description": "TianGong LCA MCP Server",
   "license": "MIT",
   "author": "Nan LI",
@@ -23,10 +23,11 @@
   },
   "dependencies": {
     "olca-ipc": "^2.2.1",
-    "@types/express": "^5.0.2",
+    "@types/express": "^5.0.3",
     "@modelcontextprotocol/sdk": "^1.12.1",
-    "@supabase/supabase-js": "^2.49.10",
-    "zod": "^3.25.51"
+    "@supabase/supabase-js": "^2.50.0",
+    "@upstash/redis": "^1.35.0",
+    "zod": "^3.25.57"
   },
   "devDependencies": {
     "@modelcontextprotocol/inspector": "^0.14.0",