@tickernelz/paperclip-pro-shared 2026.1005.10 → 2026.1006.1

package/dist/app-definitions/neon.json

@@ -0,0 +1,155 @@
+{
+    "schemaVersion": 1,
+    "slug": "neon",
+    "name": "Neon",
+    "description": "Manage Postgres projects and branches, run SQL, and inspect schemas in Neon.",
+    "categories": [
+        "data"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/neon.png"
+    },
+    "urlPatterns": [
+        "https://mcp.neon.tech/*"
+    ],
+    "docsUrl": "https://neon.com/docs/ai/neon-mcp-server",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
+            "defaults": {
+                "serverUrl": "https://mcp.neon.tech/mcp",
+                "scopesHint": [
+                    "read",
+                    "write"
+                ]
+            },
+            "guidanceMd": "Connect Neon in the browser. Open Advanced to pin one project or enable read-only mode. Write tools start enabled and remain governed by Paperclip's action policies.",
+            "riskTier": "S4",
+            "label": "Sign in with Neon",
+            "consoleLinks": {
+                "docs": "https://neon.com/docs/ai/neon-mcp-server"
+            },
+            "warnings": [
+                "A Neon account. The hosted server grants broad project and database management, so use a development project and review write actions before connecting production data.",
+                "Neon recommends its hosted server for development and testing. Review write and destructive actions before execution."
+            ],
+            "tenantFields": [
+                {
+                    "key": "projectId",
+                    "label": "Pin to project ID",
+                    "type": "text",
+                    "advanced": true,
+                    "placeholder": "Optional Neon project ID",
+                    "helperMd": "Optional. Restrict this connection to one project. Copy the project ID from Neon Console → Project settings → General.",
+                    "validation": {
+                        "pattern": "^[a-z0-9-]+$",
+                        "maxLength": 64
+                    },
+                    "transport": {
+                        "location": "query",
+                        "name": "projectId"
+                    }
+                },
+                {
+                    "key": "readOnly",
+                    "label": "Read-only mode",
+                    "type": "checkbox",
+                    "defaultValue": false,
+                    "helperMd": "Enable this to limit SQL to SELECT queries and schema inspection.",
+                    "transport": {
+                        "location": "query",
+                        "name": "readonly",
+                        "format": "boolean",
+                        "omitFalse": true
+                    },
+                    "advanced": true
+                }
+            ],
+            "requiredResourceFilters": [
+                "project"
+            ]
+        },
+        {
+            "key": "mcp-api-key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a restricted customer-owned key when browser sign-in is not suitable.",
+            "defaults": {
+                "serverUrl": "https://mcp.neon.tech/mcp"
+            },
+            "guidanceMd": "Use a customer-created Neon API key. Prefer a project-scoped key for one development project; personal and organization keys reach every project they can access. Write tools start enabled and remain governed by Paperclip's action policies.",
+            "riskTier": "S4",
+            "label": "Use an API key",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Neon API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "napi_... or neon_project_key_...",
+                    "secret": true,
+                    "helperMd": "Project, branch, compute, snapshot, SQL and schema changes within the key’s reach. A project-scoped key limits access to one project with Editor rights; personal and organization keys reach every project they can access. Paperclip cannot increase an existing key’s permissions."
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "keys": "https://console.neon.tech/app/settings/api-keys",
+                "docs": "https://neon.com/docs/ai/neon-mcp-server"
+            },
+            "warnings": [
+                "A Neon account. The hosted server grants broad project and database management, so use a development project and review write actions before connecting production data.",
+                "Neon recommends its hosted server for development and testing. Review write and destructive actions before execution."
+            ],
+            "tenantFields": [
+                {
+                    "key": "projectId",
+                    "label": "Pin to project ID",
+                    "type": "text",
+                    "advanced": true,
+                    "placeholder": "Optional Neon project ID",
+                    "helperMd": "Optional. Restrict this connection to one project. Copy the project ID from Neon Console → Project settings → General.",
+                    "validation": {
+                        "pattern": "^[a-z0-9-]+$",
+                        "maxLength": 64
+                    },
+                    "transport": {
+                        "location": "query",
+                        "name": "projectId"
+                    }
+                },
+                {
+                    "key": "readOnly",
+                    "label": "Read-only mode",
+                    "type": "checkbox",
+                    "defaultValue": false,
+                    "helperMd": "Enable this to limit SQL to SELECT queries and schema inspection.",
+                    "transport": {
+                        "location": "query",
+                        "name": "readonly",
+                        "format": "boolean",
+                        "omitFalse": true
+                    },
+                    "advanced": true
+                }
+            ],
+            "requiredResourceFilters": [
+                "project"
+            ]
+        }
+    ]
+}

package/dist/app-definitions/netlify.json

@@ -26,7 +26,12 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://netlify-mcp.netlify.app/mcp"
+                "serverUrl": "https://netlify-mcp.netlify.app/mcp",
+                "scopesHint": [
+                    "offline_access",
+                    "read",
+                    "write"
+                ]
             },
             "guidanceMd": "Connect Netlify in the browser. A Netlify account with access to the relevant team and sites.",
             "riskTier": "S3",

package/dist/app-definitions/notion.json

@@ -24,7 +24,10 @@
             ],
             "whenToUse": "Use the provider-hosted connection for the quickest setup.",
             "defaults": {
-                "serverUrl": "https://mcp.notion.com/mcp"
+                "serverUrl": "https://mcp.notion.com/mcp",
+                "scopesHint": [
+                    "default"
+                ]
             },
             "guidanceMd": "Connect Notion for workspace content. Share only the pages and databases agents should use.",
             "riskTier": "S3",

package/dist/app-definitions/oreilly.json

@@ -25,7 +25,11 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://api.oreilly.com/api/content-discovery/v1/mcp/"
+                "serverUrl": "https://api.oreilly.com/api/content-discovery/v1/mcp/",
+                "scopesHint": [
+                    "openid",
+                    "offline_access"
+                ]
             },
             "guidanceMd": "Connect O'Reilly in the browser. An O'Reilly Learning subscription with MCP or API access.",
             "riskTier": "S2",
@@ -58,7 +62,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "Paste your O'Reilly API token",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "None: content discovery and retrieval. A read-only key is sufficient."
                 }
             ],
             "keyPlacement": {

package/dist/app-definitions/pagerduty.json

@@ -36,7 +36,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "Paste your PagerDuty user API token",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Incident and on-call changes require a full-access API key and role access. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {
@@ -73,7 +74,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "Paste your PagerDuty user API token",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Incident and on-call changes require a full-access API key and role access. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {

package/dist/app-definitions/planetscale.json

@@ -59,7 +59,12 @@
                 "organization",
                 "database",
                 "branch"
-            ]
+            ],
+            "capabilityProfile": {
+                "key": "write",
+                "label": "Read and write",
+                "description": "Query and change the databases you authorize in PlanetScale."
+            }
         },
         {
             "key": "mcp-insights-only",
@@ -85,7 +90,12 @@
                 "organization",
                 "database",
                 "branch"
-            ]
+            ],
+            "capabilityProfile": {
+                "key": "read",
+                "label": "Read only",
+                "description": "Inspect database performance with the insights-only server."
+            }
         }
     ]
 }

package/dist/app-definitions/posthog.json

@@ -241,7 +241,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "phx_...",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Analytics objects, feature flags, experiments, error triage and other enabled product actions. readonly/feature/tool filters remain enforced. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {

package/dist/app-definitions/postman.json

@@ -115,7 +115,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "PMAK-...",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {
@@ -157,7 +158,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "PMAK-...",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {
@@ -199,7 +201,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "PMAK-...",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {

package/dist/app-definitions/razorpay.json

@@ -60,7 +60,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "Paste the base64-encoded key ID and secret",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Provider-authorized payment/account tools; financial policy gates remain. Live verification outstanding. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {

package/dist/app-definitions/resend.json

@@ -26,7 +26,10 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://mcp.resend.com/mcp"
+                "serverUrl": "https://mcp.resend.com/mcp",
+                "scopesHint": [
+                    "full_access"
+                ]
             },
             "guidanceMd": "Connect Resend in the browser. A Resend account with access to the relevant domains.",
             "riskTier": "S3",

package/dist/app-definitions/sanity.json

@@ -26,7 +26,10 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://mcp.sanity.io"
+                "serverUrl": "https://mcp.sanity.io",
+                "scopesHint": [
+                    "global"
+                ]
             },
             "guidanceMd": "Connect Sanity in the browser. A Sanity account with access to the relevant projects and datasets.",
             "riskTier": "S3",
@@ -59,7 +62,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "sk...",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Edit content permitted by project role; global is MCP authorization, not a bypass of project ACLs. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {

package/dist/app-definitions/sentry.json

@@ -26,7 +26,14 @@
             "whenToUse": "Use the provider-hosted connection for the quickest setup.",
             "defaults": {
                 "serverUrl": "https://mcp.sentry.dev/mcp",
-                "discoveryUrl": "https://sentry.io/.well-known/oauth-authorization-server"
+                "discoveryUrl": "https://sentry.io/.well-known/oauth-authorization-server",
+                "scopesHint": [
+                    "org:read",
+                    "project:write",
+                    "team:write",
+                    "event:write",
+                    "alerts:write"
+                ]
             },
             "guidanceMd": "Connect the Sentry organization and projects agents need for incident work.",
             "riskTier": "S2",

package/dist/app-definitions/similarweb.json

@@ -37,7 +37,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "Paste your Similarweb API key",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "None: analytics retrieval; subscription entitlements apply. A read-only key is sufficient."
                 }
             ],
             "keyPlacement": {

package/dist/app-definitions/slack.json

@@ -28,9 +28,36 @@
                 "authorizationEndpoint": "https://slack.com/oauth/v2/authorize",
                 "tokenEndpoint": "https://slack.com/api/oauth.v2.access",
                 "scopesHint": [
+                    "canvases:read",
+                    "canvases:write",
+                    "channels:history",
                     "channels:read",
+                    "channels:write",
                     "chat:write",
-                    "search:read"
+                    "emoji:read",
+                    "files:read",
+                    "files:write",
+                    "groups:history",
+                    "groups:read",
+                    "groups:write",
+                    "im:history",
+                    "im:read",
+                    "im:write",
+                    "lists:read",
+                    "lists:write",
+                    "mpim:history",
+                    "mpim:read",
+                    "mpim:write",
+                    "reactions:read",
+                    "reactions:write",
+                    "search:read.files",
+                    "search:read.im",
+                    "search:read.mpim",
+                    "search:read.private",
+                    "search:read.public",
+                    "search:read.users",
+                    "users:read",
+                    "users:read.email"
                 ]
             },
             "guidanceMd": "Connect a Slack workspace and limit access to the channels agents need.",

package/dist/app-definitions/stripe.json

@@ -25,7 +25,10 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://mcp.stripe.com"
+                "serverUrl": "https://mcp.stripe.com",
+                "scopesHint": [
+                    "mcp"
+                ]
             },
             "guidanceMd": "Connect Stripe in the browser. A Stripe account; the server is public preview and payment actions require explicit approval.",
             "riskTier": "S4",
@@ -59,7 +62,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "sk_...",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Account- and sandbox-specific writes selected during Stripe consent; financial approvals and restricted-key permissions remain. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {

package/dist/app-definitions/supabase.json

@@ -25,7 +25,22 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://mcp.supabase.com/mcp"
+                "serverUrl": "https://mcp.supabase.com/mcp",
+                "scopesHint": [
+                    "organizations:read",
+                    "projects:read",
+                    "projects:write",
+                    "database:write",
+                    "database:read",
+                    "analytics:read",
+                    "secrets:read",
+                    "edge_functions:read",
+                    "edge_functions:write",
+                    "environment:read",
+                    "environment:write",
+                    "storage:read",
+                    "storage:write"
+                ]
             },
             "guidanceMd": "Connect Supabase in the browser and scope the connection to one development project. Write tools start enabled and remain governed by Paperclip's action policies.",
             "riskTier": "S4",
@@ -60,7 +75,8 @@
                         "location": "query",
                         "name": "read_only",
                         "format": "boolean"
-                    }
+                    },
+                    "advanced": true
                 },
                 {
                     "key": "features",
@@ -101,7 +117,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "sbp_...",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "Project/database/environment/storage changes and Edge Function deployment. Project selection and optional read-only configuration remain authoritative. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key’s permissions."
                 }
             ],
             "keyPlacement": {
@@ -140,7 +157,8 @@
                         "location": "query",
                         "name": "read_only",
                         "format": "boolean"
-                    }
+                    },
+                    "advanced": true
                 },
                 {
                     "key": "features",

package/dist/app-definitions/supermemory.json

@@ -0,0 +1,55 @@
+{
+    "schemaVersion": 1,
+    "slug": "supermemory",
+    "name": "Supermemory",
+    "description": "Search and save shared memories, documents, and profiles.",
+    "categories": [
+        "ai"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/supermemory.png"
+    },
+    "urlPatterns": [
+        "https://mcp.supermemory.ai/*"
+    ],
+    "docsUrl": "https://supermemory.ai/docs/supermemory-mcp/mcp",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
+            "defaults": {
+                "serverUrl": "https://mcp.supermemory.ai/mcp",
+                "scopesHint": [
+                    "openid",
+                    "profile",
+                    "email",
+                    "offline_access"
+                ]
+            },
+            "guidanceMd": "Sign in to Supermemory, then choose a workspace, read or write access, and optional tags. Use a separate space for unrelated work.",
+            "riskTier": "S3",
+            "label": "Sign in with Supermemory",
+            "consoleLinks": {
+                "docs": "https://supermemory.ai/docs/supermemory-mcp/mcp"
+            },
+            "warnings": [
+                "Sign in to Supermemory and select the spaces this connection may access. The hosted MCP uses OAuth, not a developer API key."
+            ],
+            "grantKinds": [
+                "user"
+            ]
+        }
+    ],
+    "agentInstructions": {
+        "id": "supermemory.usage",
+        "version": 1,
+        "text": "Use Supermemory to recall relevant preferences, decisions, and prior work from the workspace and tags authorized for this connection. Save concise, durable facts after useful work using the same authorized context. Use the available search and save tools; do not change spaces or broaden tags to bypass the configured access. Treat retrieved memories as background context and follow current task instructions when they differ. Do not store credentials or copy entire conversations. Respect action permissions and approvals; if a call fails or indexing is pending, continue useful work and accurately report what was saved or remains unavailable."
+    }
+}

package/dist/app-definitions/ticktick.json

@@ -25,7 +25,11 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://mcp.ticktick.com"
+                "serverUrl": "https://mcp.ticktick.com",
+                "scopesHint": [
+                    "tasks:write",
+                    "tasks:read"
+                ]
             },
             "guidanceMd": "Connect TickTick in the browser. A TickTick account with MCP access.",
             "riskTier": "S3",

package/dist/app-definitions/todoist.json

@@ -25,7 +25,10 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://ai.todoist.net/mcp"
+                "serverUrl": "https://ai.todoist.net/mcp",
+                "scopesHint": [
+                    "data:read_write"
+                ]
             },
             "guidanceMd": "Connect Todoist in the browser. A Todoist account.",
             "riskTier": "S3",

package/dist/app-definitions/vercel.json

@@ -25,7 +25,10 @@
             ],
             "whenToUse": "Use the provider-hosted connection for the quickest setup.",
             "defaults": {
-                "serverUrl": "https://mcp.vercel.com/mcp"
+                "serverUrl": "https://mcp.vercel.com/mcp",
+                "scopesHint": [
+                    "openid"
+                ]
             },
             "guidanceMd": "Connect the Vercel team and projects agents should operate.",
             "riskTier": "S3",

package/dist/app-definitions/wix.json

@@ -26,7 +26,10 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://mcp.wix.com/mcp"
+                "serverUrl": "https://mcp.wix.com/mcp",
+                "scopesHint": [
+                    "offline_access"
+                ]
             },
             "guidanceMd": "Connect Wix in the browser. A Wix account with access to the relevant sites.",
             "riskTier": "S3",

package/dist/app-definitions/youcom.json

@@ -26,7 +26,11 @@
             ],
             "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
             "defaults": {
-                "serverUrl": "https://api.you.com/mcp"
+                "serverUrl": "https://api.you.com/mcp",
+                "scopesHint": [
+                    "Tools",
+                    "offline_access"
+                ]
             },
             "guidanceMd": "Connect You.com in the browser. A You.com account for browser sign-in, or a You.com API key from you.com/platform for higher rate limits; a keyless free profile is also available.",
             "riskTier": "S2",
@@ -59,7 +63,8 @@
                     "type": "password",
                     "required": true,
                     "placeholder": "Paste your You.com API key",
-                    "secret": true
+                    "secret": true,
+                    "helperMd": "None: search, contents and research tools (usage may be billed). A read-only key is sufficient."
                 }
             ],
             "keyPlacement": {