@tickernelz/paperclip-pro-shared 2026.1011.2 → 2026.1012.0

package/dist/app-definitions/firecrawl.json

@@ -0,0 +1,93 @@
+{
+    "schemaVersion": 1,
+    "slug": "firecrawl",
+    "name": "Firecrawl",
+    "description": "Search, scrape, and parse public web pages with Firecrawl.",
+    "categories": [
+        "data"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/firecrawl.svg"
+    },
+    "urlPatterns": [
+        "https://mcp.firecrawl.dev/*"
+    ],
+    "docsUrl": "https://docs.firecrawl.dev/mcp-server",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "label": "Sign in with Firecrawl",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use interactive Firecrawl account authorization for the full hosted MCP tool surface.",
+            "defaults": {
+                "serverUrl": "https://mcp.firecrawl.dev/v2/mcp-oauth",
+                "scopesHint": [
+                    "firecrawl:global",
+                    "offline_access"
+                ]
+            },
+            "guidanceMd": "Sign in and choose the Firecrawl team whose usage should apply. This route exposes the account-authorized tool surface; review paid jobs and action policies before execution.",
+            "riskTier": "S4",
+            "warnings": [
+                "Account authorization exposes Firecrawl’s broader hosted MCP surface, including job-based research tools that may use account credits.",
+                "Crawls and research jobs can use provider credits; review their tool actions and limits before execution."
+            ]
+        },
+        {
+            "key": "mcp-api-key",
+            "label": "Use a Firecrawl API key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a customer-created Firecrawl API key in a Bearer header for unattended or higher-limit access.",
+            "defaults": {
+                "serverUrl": "https://mcp.firecrawl.dev/v2/mcp"
+            },
+            "guidanceMd": "Create a Firecrawl API key for the intended team, then connect it with a Bearer header. The authenticated server may expose additional job tools and spend team credits.",
+            "riskTier": "S4",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Use a Firecrawl API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Enter provider credential",
+                    "secret": true,
+                    "helperMd": "Create an API key for the intended Firecrawl team with access to the search, scrape, parse, and any job tools you intend to use. Jobs can consume credits; Paperclip cannot increase an existing key’s permissions."
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "keys": "https://docs.firecrawl.dev/mcp-server",
+                "docs": "https://docs.firecrawl.dev/mcp-server"
+            }
+        },
+        {
+            "key": "keyless",
+            "label": "Try keyless access",
+            "transport": "mcp_remote",
+            "auth": "none",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use the rate-limited keyless public web-search route without a Firecrawl credential.",
+            "defaults": {
+                "serverUrl": "https://mcp.firecrawl.dev/v2/mcp"
+            },
+            "guidanceMd": "The keyless route currently exposes Search, Scrape, and Parse. Keep requests bounded; these calls can consume the provider’s keyless allowance.",
+            "riskTier": "S2"
+        }
+    ]
+}

package/dist/app-definitions/gauge.json

@@ -0,0 +1,94 @@
+{
+    "schemaVersion": 1,
+    "slug": "gauge",
+    "name": "Gauge",
+    "description": "Track how AI answers mention your brand, research keywords and traffic, and run content workflows.",
+    "categories": [
+        "analytics"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/gauge.png"
+    },
+    "urlPatterns": [
+        "https://app.withgauge.com/*"
+    ],
+    "docsUrl": "https://docs.withgauge.com/help/mcp",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
+            "defaults": {
+                "serverUrl": "https://app.withgauge.com/mcp",
+                "scopesHint": [
+                    "mcp"
+                ]
+            },
+            "guidanceMd": "Connect Gauge in the browser and choose the organization this connection may use. Write tools start enabled and remain governed by Paperclip's action policies.",
+            "riskTier": "S3",
+            "label": "Sign in with Gauge",
+            "consoleLinks": {
+                "docs": "https://docs.withgauge.com/help/mcp"
+            },
+            "warnings": [
+                "A Gauge account. Each connection reaches one Gauge organization: sign-in uses the organization chosen during consent, and an API key uses the organization that created it.",
+                "Gauge content tools can publish to your connected CMS, including live. Set publish actions to Ask first before agents run unattended."
+            ],
+            "capabilityProfile": {
+                "key": "write",
+                "label": "Read and write",
+                "description": "Read AI visibility, SEO and traffic data, and run content workflows. Gauge content tools can publish to your connected CMS, including live. Set publish actions to Ask first before agents run unattended."
+            }
+        },
+        {
+            "key": "mcp-api-key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a Gauge organization API key when browser sign-in is not suitable.",
+            "defaults": {
+                "serverUrl": "https://app.withgauge.com/mcp"
+            },
+            "guidanceMd": "In Gauge, open Settings → Integrations → API Keys, generate a key for Paperclip, and paste it below.",
+            "riskTier": "S3",
+            "label": "Use an API key",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Gauge API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Paste your Gauge API key",
+                    "secret": true,
+                    "helperMd": "Gauge API keys are not scoped: a key reaches every MCP tool in the organization that created it, including publishing to a connected CMS, and requests are attributed to the organization rather than a user. Generate a separate key for Paperclip so it can be deleted independently, and set publish actions to Ask first before agents run unattended. Paperclip cannot narrow an existing key."
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "keys": "https://docs.withgauge.com/help/mcp",
+                "docs": "https://docs.withgauge.com/help/mcp"
+            },
+            "warnings": [
+                "A Gauge account. Each connection reaches one Gauge organization: sign-in uses the organization chosen during consent, and an API key uses the organization that created it.",
+                "Gauge content tools can publish to your connected CMS, including live. Set publish actions to Ask first before agents run unattended."
+            ],
+            "capabilityProfile": {
+                "key": "write",
+                "label": "Read and write",
+                "description": "Read AI visibility, SEO and traffic data, and run content workflows. Gauge content tools can publish to your connected CMS, including live. Set publish actions to Ask first before agents run unattended."
+            }
+        }
+    ]
+}

package/dist/app-definitions/github-code-review-bot.json

@@ -42,7 +42,7 @@
                     "secret": true
                 }
             ],
-            "guidanceMd": "Generate the webhook secret in Paperclip, then create one private GitHub App with active SSL-verified webhooks, Issues and Pull requests read/write permission, and the selectable issue_comment and pull_request_review_comment events. GitHub sends installation and installation_repositories automatically. Install the App only on repositories where people may mention the agent.",
+            "guidanceMd": "Generate the webhook secret in Paperclip, then create one private GitHub App with active SSL-verified webhooks and Issues and Pull requests read/write permission. Subscribe to issue_comment and pull_request_review_comment for comment mentions; add issues and pull_request for description mentions, and pull_request_review for review-summary mentions. The wizard selects all five. GitHub sends installation and installation_repositories automatically. Install the App only on repositories where people may mention the agent.",
             "consoleLinks": {
                 "register": "https://github.com/settings/apps/new",
                 "docs": "https://docs.github.com/en/apps/creating-github-apps/registering-a-github-app/registering-a-github-app"

package/dist/app-definitions/google.json

@@ -0,0 +1,55 @@
+{
+    "schemaVersion": 1,
+    "slug": "google",
+    "name": "Google Gemini",
+    "description": "Connect Google Gemini accounts for your agents.",
+    "categories": [
+        "ai"
+    ],
+    "branding": {
+        "logoUrl": "/brands/apps/google.svg"
+    },
+    "urlPatterns": [
+        "https://generativelanguage.googleapis.com/*"
+    ],
+    "methods": [
+        {
+            "key": "ai-api_key",
+            "label": "Google Gemini API key",
+            "purpose": "ai",
+            "transport": "runtime_auth",
+            "auth": "api_key",
+            "ai": {
+                "provider": "google",
+                "method": "api_key"
+            },
+            "grantKinds": [
+                "user",
+                "organization"
+            ],
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Authenticate an agent with this account.",
+            "guidanceMd": "Use your personal account or an explicitly shared company account.",
+            "riskTier": "S3",
+            "credentialFields": [
+                {
+                    "key": "apiKey",
+                    "label": "API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Enter API key",
+                    "secret": true
+                }
+            ],
+            "keyPlacement": {
+                "location": "env",
+                "name": "GEMINI_API_KEY"
+            }
+        }
+    ],
+    "tags": [
+        "model-provider"
+    ]
+}

package/dist/app-definitions/gsc-wizard.json

@@ -0,0 +1,78 @@
+{
+    "schemaVersion": 1,
+    "slug": "gsc-wizard",
+    "name": "GSC Wizard",
+    "description": "Read Google Search Console, Bing Webmaster, and analytics data for connected properties.",
+    "categories": [
+        "analytics"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/gsc-wizard.png"
+    },
+    "urlPatterns": [
+        "https://mcp.gscwizard.com/*"
+    ],
+    "docsUrl": "https://www.gscwizard.com/claude-search-console-mcp.html",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "label": "Sign in with GSC Wizard",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use remote OAuth authorization for the GSC Wizard MCP.",
+            "defaults": {
+                "serverUrl": "https://mcp.gscwizard.com/mcp",
+                "scopesHint": [
+                    "mcp:read",
+                    "mcp:write"
+                ]
+            },
+            "guidanceMd": "Connect the GSC Wizard account and its authorized properties. Check site identity and date bounds before querying; review any URL submission or property-changing action separately.",
+            "riskTier": "S3",
+            "warnings": [
+                "Some tools may submit URLs or otherwise change external indexing state; review action details before use.",
+                "GSC Wizard connects multiple search and analytics providers; confirm the authorized property and action policy for each tool."
+            ]
+        },
+        {
+            "key": "mcp-api-key",
+            "label": "Use a GSC Wizard MCP key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a customer-created GSC Wizard MCP key in a Bearer header.",
+            "defaults": {
+                "serverUrl": "https://mcp.gscwizard.com/mcp"
+            },
+            "guidanceMd": "Create a key for the intended account and select the appropriate read or write permission during key creation. Verify each connected property before querying; review URL submission actions separately.",
+            "riskTier": "S3",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Use a GSC Wizard MCP key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Enter provider credential",
+                    "secret": true,
+                    "helperMd": "At key creation, choose read-only or read/write according to the approved task. Read/write keys can reach URL-submission and related provider actions; Paperclip cannot increase an existing key’s permissions."
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "keys": "https://www.gscwizard.com/claude-search-console-mcp.html",
+                "docs": "https://www.gscwizard.com/claude-search-console-mcp.html"
+            }
+        }
+    ]
+}

package/dist/app-definitions/hugging-face.json

@@ -42,6 +42,28 @@
             "warnings": [
                 "A Hugging Face account."
             ]
+        },
+        {
+            "key": "public-mcp",
+            "transport": "mcp_remote",
+            "auth": "none",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use the anonymous hosted MCP endpoint for public Hugging Face Hub lookups.",
+            "defaults": {
+                "serverUrl": "https://huggingface.co/mcp"
+            },
+            "guidanceMd": "This anonymous method exposes the public Hugging Face Hub read tools for repository search, public repository details, datasets, and documentation. It does not require an account or API key and is rate-limited. Keep queries to public information; do not include secrets, personal data, private repository names, or proprietary content.",
+            "riskTier": "S1",
+            "label": "Use public Hugging Face Hub",
+            "consoleLinks": {
+                "docs": "https://huggingface.co/docs/hub/agents-mcp"
+            },
+            "warnings": [
+                "Anonymous requests are rate-limited by Hugging Face.",
+                "This method only advertises read tools for the public Hub; do not include secrets, personal data, private repository names, or proprietary content in queries."
+            ]
         }
     ]
 }

package/dist/app-definitions/klaviyo.json

@@ -0,0 +1,59 @@
+{
+    "schemaVersion": 1,
+    "slug": "klaviyo",
+    "name": "Klaviyo",
+    "description": "Review Klaviyo campaign performance and prepare campaign changes for review.",
+    "categories": [
+        "commerce"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/klaviyo.png"
+    },
+    "urlPatterns": [
+        "https://mcp.klaviyo.com/*"
+    ],
+    "docsUrl": "https://developers.klaviyo.com/en/docs/connect_to_the_klaviyo_mcp_server",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "label": "Sign in with Klaviyo",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "oauthClientRegistration": "dcr",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Connect to the provider-hosted Klaviyo MCP server with browser sign-in.",
+            "defaults": {
+                "serverUrl": "https://mcp.klaviyo.com/mcp?toolsets=campaigns:read,campaigns:write,metrics:read,segments:read"
+            },
+            "guidanceMd": "Review campaign and metric data, then prepare campaign changes for human review. Campaign write access may expose sends and other state changes; never send or schedule a campaign without explicit authorization and an allowed Paperclip action.",
+            "riskTier": "S4",
+            "tenantFields": [
+                {
+                    "key": "readOnly",
+                    "label": "Read-only mode",
+                    "type": "checkbox",
+                    "advanced": true,
+                    "defaultValue": false,
+                    "helperMd": "Turn on to remove Klaviyo MCP tools that can modify account data. This provider-side restriction is separate from Paperclip action permissions.",
+                    "transport": {
+                        "location": "query",
+                        "name": "read-only",
+                        "format": "boolean",
+                        "omitFalse": true
+                    }
+                }
+            ],
+            "consoleLinks": {
+                "docs": "https://developers.klaviyo.com/en/docs/connect_to_the_klaviyo_mcp_server"
+            },
+            "warnings": [
+                "Klaviyo's remote MCP requires an Owner, Admin, or Manager account role.",
+                "The campaigns:write toolset may expose campaign sending and other writes. Keep write actions Off until reviewed; the provider's Advanced read-only mode is optional and does not replace Paperclip action permissions."
+            ]
+        }
+    ]
+}

package/dist/app-definitions/linear.json

@@ -33,7 +33,7 @@
                     "write"
                 ]
             },
-            "guidanceMd": "Connect Linear for issues and projects. Paperclip registers its own OAuth client with Linear's MCP server, so no developer-console setup is needed.",
+            "guidanceMd": "Connect Linear for issues and projects. Paperclip registers its own OAuth client with Linear MCP; no developer-console setup is needed.",
             "riskTier": "S2",
             "requiredResourceFilters": [
                 "workspace",
@@ -57,7 +57,50 @@
                         "prefix": "Bearer "
                     }
                 }
+            },
+            "label": "Sign in with Linear",
+            "consoleLinks": {
+                "docs": "https://linear.app/docs/mcp"
             }
+        },
+        {
+            "key": "mcp-api-key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a Linear API key when browser sign-in is not suitable.",
+            "defaults": {
+                "serverUrl": "https://mcp.linear.app/mcp"
+            },
+            "guidanceMd": "Create a Linear API key with the permissions needed for the actions you intend to allow. A key restricted to Read is supported for read-only use; workspace and role access still apply.",
+            "riskTier": "S2",
+            "label": "Use an API key",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Linear API key",
+                    "type": "password",
+                    "required": true,
+                    "secret": true,
+                    "helperMd": "Choose intended permissions and teams when creating the personal API key. Read-only is supported with Read permission only.",
+                    "placeholder": "Paste your Linear API key"
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "docs": "https://linear.app/docs/api-and-webhooks"
+            },
+            "warnings": [
+                "Linear’s standard MCP endpoint exposes read and write tools; review the discovered catalog and Paperclip action policies."
+            ]
         }
-    ]
+    ],
+    "docsUrl": "https://linear.app/docs/mcp",
+    "redirectConstraints": "https-or-loopback-http"
 }

package/dist/app-definitions/local.json

@@ -0,0 +1,53 @@
+{
+    "schemaVersion": 1,
+    "slug": "local",
+    "name": "Local endpoint",
+    "description": "Use a local model server in the agent’s execution environment.",
+    "categories": [
+        "ai"
+    ],
+    "branding": {
+        "logoUrl": "/brands/apps/api-key-generic.svg"
+    },
+    "urlPatterns": [],
+    "methods": [
+        {
+            "key": "ai-api_key",
+            "label": "Local endpoint API key",
+            "purpose": "ai",
+            "transport": "runtime_auth",
+            "auth": "api_key",
+            "ai": {
+                "provider": "openai",
+                "method": "api_key"
+            },
+            "grantKinds": [
+                "user",
+                "organization"
+            ],
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a local model server in the agent’s execution environment.",
+            "guidanceMd": "Use your personal account or an explicitly shared company account.",
+            "riskTier": "S3",
+            "credentialFields": [
+                {
+                    "key": "apiKey",
+                    "label": "API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Enter API key",
+                    "secret": true
+                }
+            ],
+            "keyPlacement": {
+                "location": "env",
+                "name": "OPENAI_API_KEY"
+            }
+        }
+    ],
+    "tags": [
+        "model-provider"
+    ]
+}

package/dist/app-definitions/make.json

@@ -12,7 +12,8 @@
         "darkLogoUrl": "/brands/apps/make-dark.svg"
     },
     "urlPatterns": [
-        "https://mcp.make.com/*"
+        "https://mcp.make.com/*",
+        "https://*.make.com/mcp"
     ],
     "docsUrl": "https://developers.make.com/mcp-server",
     "redirectConstraints": "https-or-loopback-http",
@@ -37,6 +38,57 @@
             "warnings": [
                 "A Make account and access to the scenarios exposed to MCP."
             ]
+        },
+        {
+            "key": "mcp-api-token",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a Make MCP token when browser sign-in is not suitable.",
+            "defaults": {
+                "serverUrlTemplate": "https://{zone}/mcp"
+            },
+            "guidanceMd": "Create a Make API token with the mcp:use scope and any additional scopes required by the selected scenarios. Enter the zone host from your Make organization. The token is sent as a Bearer header and remains a secret.",
+            "riskTier": "S3",
+            "label": "Use an MCP token",
+            "tenantFields": [
+                {
+                    "key": "zone",
+                    "label": "Make zone host",
+                    "type": "text",
+                    "required": true,
+                    "placeholder": "eu2.make.com",
+                    "helperMd": "Enter the zone host for your Make organization exactly as shown in the Make MCP client setup instructions. The server URL is https://<zone>/mcp.",
+                    "validation": {
+                        "pattern": "^[A-Za-z0-9-]+\\.make\\.com$",
+                        "maxLength": 253
+                    }
+                }
+            ],
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Make MCP token",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Paste your MCP token",
+                    "secret": true,
+                    "helperMd": "Provider-issued Make token. Include documented mcp:use and only additional scopes required by selected scenarios; exact scopes are user selected."
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "docs": "https://developers.make.com/mcp-server/connect-using-mcp-token"
+            },
+            "warnings": [
+                "A token is a secret; do not place it in the server URL. Scenario availability depends on token scopes and scenario access controls."
+            ]
         }
     ]
 }

package/dist/app-definitions/messages-api.json

@@ -0,0 +1,53 @@
+{
+    "schemaVersion": 1,
+    "slug": "messages-api",
+    "name": "Messages API",
+    "description": "Connect any compatible harness to an Anthropic Messages-compatible provider or gateway.",
+    "categories": [
+        "ai"
+    ],
+    "branding": {
+        "logoUrl": "/brands/apps/api-key-generic.svg"
+    },
+    "urlPatterns": [],
+    "methods": [
+        {
+            "key": "ai-api_key",
+            "label": "Messages API API key",
+            "purpose": "ai",
+            "transport": "runtime_auth",
+            "auth": "api_key",
+            "ai": {
+                "provider": "anthropic",
+                "method": "api_key"
+            },
+            "grantKinds": [
+                "user",
+                "organization"
+            ],
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Connect any compatible harness to an Anthropic Messages-compatible provider or gateway.",
+            "guidanceMd": "Use your personal account or an explicitly shared company account.",
+            "riskTier": "S3",
+            "credentialFields": [
+                {
+                    "key": "apiKey",
+                    "label": "API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Enter API key",
+                    "secret": true
+                }
+            ],
+            "keyPlacement": {
+                "location": "env",
+                "name": "ANTHROPIC_API_KEY"
+            }
+        }
+    ],
+    "tags": [
+        "model-provider"
+    ]
+}