@tickernelz/paperclip-pro-shared 2026.925.0

package/dist/app-definitions/resend.json

@@ -0,0 +1,42 @@
+{
+    "schemaVersion": 1,
+    "slug": "resend",
+    "name": "Resend",
+    "description": "Connect Resend's provider-hosted MCP server.",
+    "categories": [
+        "communication"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/resend.svg",
+        "darkLogoUrl": "/brands/apps/resend-dark.svg"
+    },
+    "urlPatterns": [
+        "https://mcp.resend.com/*"
+    ],
+    "docsUrl": "https://resend.com/changelog/remote-mcp-server",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
+            "defaults": {
+                "serverUrl": "https://mcp.resend.com/mcp"
+            },
+            "guidanceMd": "Connect Resend in the browser. A Resend account with access to the relevant domains.",
+            "riskTier": "S3",
+            "label": "Sign in with Resend",
+            "consoleLinks": {
+                "docs": "https://resend.com/changelog/remote-mcp-server"
+            },
+            "warnings": [
+                "A Resend account with access to the relevant domains."
+            ]
+        }
+    ]
+}

package/dist/app-definitions/sanity.json

@@ -0,0 +1,79 @@
+{
+    "schemaVersion": 1,
+    "slug": "sanity",
+    "name": "Sanity",
+    "description": "Connect Sanity's provider-hosted MCP server.",
+    "categories": [
+        "content"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/sanity.svg",
+        "darkLogoUrl": "/brands/apps/sanity-dark.svg"
+    },
+    "urlPatterns": [
+        "https://mcp.sanity.io/*"
+    ],
+    "docsUrl": "https://www.sanity.io/docs/ai/mcp-server",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
+            "defaults": {
+                "serverUrl": "https://mcp.sanity.io"
+            },
+            "guidanceMd": "Connect Sanity in the browser. A Sanity account with access to the relevant projects and datasets.",
+            "riskTier": "S3",
+            "label": "Sign in with Sanity",
+            "consoleLinks": {
+                "docs": "https://www.sanity.io/docs/ai/mcp-server"
+            },
+            "warnings": [
+                "A Sanity account with access to the relevant projects and datasets."
+            ]
+        },
+        {
+            "key": "mcp-api-key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a restricted customer-owned key when browser sign-in is not suitable.",
+            "defaults": {
+                "serverUrl": "https://mcp.sanity.io"
+            },
+            "guidanceMd": "Use a customer-created Sanity key. A Sanity account with access to the relevant projects and datasets.",
+            "riskTier": "S3",
+            "label": "Use an API key",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Sanity API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "sk...",
+                    "secret": true
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "keys": "https://www.sanity.io/docs/ai/mcp-server",
+                "docs": "https://www.sanity.io/docs/ai/mcp-server"
+            },
+            "warnings": [
+                "A Sanity account with access to the relevant projects and datasets."
+            ]
+        }
+    ]
+}

package/dist/app-definitions/sentry.json

@@ -0,0 +1,42 @@
+{
+    "schemaVersion": 1,
+    "slug": "sentry",
+    "name": "Sentry",
+    "description": "Investigate errors, releases, and production issues.",
+    "categories": [
+        "developer"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/sentry.svg",
+        "darkLogoUrl": "/brands/apps/sentry-dark.svg"
+    },
+    "urlPatterns": [
+        "https://mcp.sentry.dev/*"
+    ],
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "customer",
+                "dcr"
+            ],
+            "whenToUse": "Use the provider-hosted connection for the quickest setup.",
+            "defaults": {
+                "serverUrl": "https://mcp.sentry.dev/mcp",
+                "discoveryUrl": "https://sentry.io/.well-known/oauth-authorization-server"
+            },
+            "guidanceMd": "Connect the Sentry organization and projects agents need for incident work.",
+            "riskTier": "S2",
+            "requiredResourceFilters": [
+                "organization",
+                "project",
+                "environment"
+            ]
+        }
+    ],
+    "docsUrl": "https://mcp.sentry.dev/.well-known/oauth-authorization-server",
+    "redirectConstraints": "https-or-loopback-http"
+}

package/dist/app-definitions/shopify.json

@@ -0,0 +1,117 @@
+{
+    "schemaVersion": 1,
+    "slug": "shopify",
+    "name": "Shopify",
+    "description": "Search a store's products and policies, and manage shopping carts.",
+    "categories": [
+        "commerce"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/shopify.svg"
+    },
+    "urlPatterns": [
+        "https://*.myshopify.com/api/ucp/mcp",
+        "https://*.myshopify.com/api/mcp"
+    ],
+    "methods": [
+        {
+            "key": "ucp-commerce",
+            "transport": "mcp_remote",
+            "auth": "none",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Recommended for Shopify's current UCP catalog, cart, and checkout tools.",
+            "defaults": {
+                "serverUrlTemplate": "https://{storeDomain}/api/ucp/mcp",
+                "toolArgumentDefaults": {
+                    "meta": {
+                        "ucp-agent": {
+                            "profile": "https://shopify.dev/ucp/agent-profiles/examples/2026-04-08/valid-with-capabilities.json"
+                        }
+                    }
+                }
+            },
+            "guidanceMd": "Connect Shopify's current UCP server for shopper-facing catalog and commerce tools. Paperclip supplies the required agent profile automatically.",
+            "riskTier": "S3",
+            "label": "Shopify UCP commerce",
+            "tenantFields": [
+                {
+                    "key": "storeDomain",
+                    "label": "Store domain",
+                    "type": "text",
+                    "required": true,
+                    "placeholder": "your-store.myshopify.com",
+                    "helperMd": "Enter the permanent myshopify.com domain without https://. Custom storefront domains are not the MCP endpoint.",
+                    "validation": {
+                        "pattern": "^[A-Za-z0-9][A-Za-z0-9-]*\\.myshopify\\.com$",
+                        "maxLength": 255
+                    }
+                }
+            ],
+            "consoleLinks": {
+                "docs": "https://shopify.dev/docs/agents/catalog/storefront-catalog"
+            },
+            "warnings": [
+                "This is Shopify's shopper-facing UCP server, not Admin API access. It does not manage merchant products or customers.",
+                "The storefront must be public. A private or password-protected storefront returns HTTP 401 even when the merchant is signed in to Shopify Admin.",
+                "Paperclip currently uses Shopify's documented hosted agent-profile fixture while Paperclip's production UCP profile is being established."
+            ],
+            "requiredResourceFilters": [
+                "store"
+            ]
+        },
+        {
+            "key": "storefront-mcp",
+            "transport": "mcp_remote",
+            "auth": "none",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use Shopify's compatibility server when agents need storefront policy and FAQ search.",
+            "defaults": {
+                "serverUrlTemplate": "https://{storeDomain}/api/mcp"
+            },
+            "guidanceMd": "Connect Shopify's official Storefront MCP server for shopper-facing catalog, policy, and cart tools.",
+            "riskTier": "S3",
+            "label": "Storefront policies and compatibility tools",
+            "tenantFields": [
+                {
+                    "key": "storeDomain",
+                    "label": "Store domain",
+                    "type": "text",
+                    "required": true,
+                    "placeholder": "your-store.myshopify.com",
+                    "helperMd": "Enter the permanent myshopify.com domain without https://. Custom storefront domains are not the MCP endpoint.",
+                    "validation": {
+                        "pattern": "^[A-Za-z0-9][A-Za-z0-9-]*\\.myshopify\\.com$",
+                        "maxLength": 255
+                    }
+                }
+            ],
+            "consoleLinks": {
+                "docs": "https://shopify.dev/docs/apps/build/storefront-mcp/servers/storefront"
+            },
+            "warnings": [
+                "This is Shopify's Storefront MCP, not Admin API access. It does not manage merchant products, orders, or customers.",
+                "The storefront must be public. A private or password-protected storefront returns HTTP 401 even when the merchant is signed in to Shopify Admin."
+            ],
+            "requiredResourceFilters": [
+                "store"
+            ]
+        }
+    ],
+    "docsUrl": "https://shopify.dev/docs/apps/build/storefront-mcp/servers/storefront",
+    "setupPrerequisite": {
+        "title": "Launch the storefront before connecting",
+        "description": "Shopify's Storefront MCP is a public, no-auth endpoint. Paperclip cannot use the merchant's Shopify Admin session to bypass a private storefront.",
+        "steps": [
+            "Select a Shopify plan; Shopify keeps trial storefronts private until a plan is selected.",
+            "In Shopify Admin, open Online Store → Preferences and set Storefront visibility to Public (remove password protection).",
+            "Use the permanent <store>.myshopify.com domain in Paperclip, even if the store also has a custom domain."
+        ],
+        "actionLabel": "Open Shopify Admin",
+        "actionUrl": "https://admin.shopify.com/"
+    }
+}

package/dist/app-definitions/similarweb.json

@@ -0,0 +1,57 @@
+{
+    "schemaVersion": 1,
+    "slug": "similarweb",
+    "name": "Similarweb",
+    "description": "Connect Similarweb's provider-hosted MCP server.",
+    "categories": [
+        "analytics"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/similarweb.svg",
+        "darkLogoUrl": "/brands/apps/similarweb-dark.svg"
+    },
+    "urlPatterns": [
+        "https://mcp.similarweb.com/*"
+    ],
+    "docsUrl": "https://developers.similarweb.com/docs/similarweb-mcp",
+    "methods": [
+        {
+            "key": "mcp-api-key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a restricted customer-owned key when browser sign-in is not suitable.",
+            "defaults": {
+                "serverUrl": "https://mcp.similarweb.com"
+            },
+            "guidanceMd": "Use a customer-created Similarweb key. A Similarweb subscription with API access and an API key.",
+            "riskTier": "S2",
+            "label": "Use an API key",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Similarweb API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Paste your Similarweb API key",
+                    "secret": true
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "api-key",
+                "prefix": null
+            },
+            "consoleLinks": {
+                "keys": "https://developers.similarweb.com/docs/similarweb-mcp",
+                "docs": "https://developers.similarweb.com/docs/similarweb-mcp"
+            },
+            "warnings": [
+                "A Similarweb subscription with API access and an API key."
+            ]
+        }
+    ]
+}

package/dist/app-definitions/slack.json

@@ -0,0 +1,86 @@
+{
+    "schemaVersion": 1,
+    "slug": "slack",
+    "name": "Slack",
+    "description": "Give agents Slack tools or let people start and continue Paperclip work from Slack.",
+    "categories": [
+        "communication"
+    ],
+    "featured": true,
+    "branding": {
+        "logoUrl": "/brands/apps/slack.svg"
+    },
+    "urlPatterns": [
+        "https://mcp.slack.com/*",
+        "https://app.slack.com/client/*"
+    ],
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use the provider-hosted connection for the quickest setup.",
+            "defaults": {
+                "serverUrl": "https://mcp.slack.com/mcp",
+                "authorizationEndpoint": "https://slack.com/oauth/v2/authorize",
+                "tokenEndpoint": "https://slack.com/api/oauth.v2.access",
+                "scopesHint": [
+                    "channels:read",
+                    "chat:write",
+                    "search:read"
+                ]
+            },
+            "guidanceMd": "Connect a Slack workspace and limit access to the channels agents need.",
+            "riskTier": "S3",
+            "label": "Use this connection as an agent tool",
+            "purpose": "tool",
+            "requiredResourceFilters": [
+                "workspace",
+                "channel"
+            ]
+        },
+        {
+            "key": "chat-agent",
+            "label": "Chat with an agent",
+            "purpose": "channel",
+            "provider": "slack",
+            "transport": "chat_sdk",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Let people in Slack start and continue work with one Paperclip agent.",
+            "credentialFields": [
+                {
+                    "key": "botToken",
+                    "label": "Bot User OAuth Token",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "xoxb-...",
+                    "secret": true
+                },
+                {
+                    "key": "signingSecret",
+                    "label": "Signing Secret",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "Paste the Slack App signing secret",
+                    "secret": true
+                }
+            ],
+            "guidanceMd": "Create and install one Slack App for this agent. Paperclip receives verified Events API requests and interactive callbacks, acknowledges with reactions, responds in direct messages, and starts one Paperclip task per new mentioned channel thread.",
+            "consoleLinks": {
+                "register": "https://api.slack.com/apps",
+                "docs": "https://api.slack.com/start/quickstart"
+            },
+            "riskTier": "S3",
+            "requiredResourceFilters": [
+                "workspace",
+                "channel"
+            ]
+        }
+    ]
+}

package/dist/app-definitions/stripe.json

@@ -0,0 +1,80 @@
+{
+    "schemaVersion": 1,
+    "slug": "stripe",
+    "name": "Stripe",
+    "description": "Connect Stripe's provider-hosted MCP server.",
+    "categories": [
+        "commerce"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/stripe.svg"
+    },
+    "urlPatterns": [
+        "https://mcp.stripe.com/*"
+    ],
+    "docsUrl": "https://docs.stripe.com/mcp",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
+            "defaults": {
+                "serverUrl": "https://mcp.stripe.com"
+            },
+            "guidanceMd": "Connect Stripe in the browser. A Stripe account; the server is public preview and payment actions require explicit approval.",
+            "riskTier": "S4",
+            "label": "Sign in with Stripe",
+            "consoleLinks": {
+                "docs": "https://docs.stripe.com/mcp"
+            },
+            "warnings": [
+                "A Stripe account; the server is public preview and payment actions require explicit approval.",
+                "Financial or destructive actions must be explicitly approved before execution."
+            ]
+        },
+        {
+            "key": "mcp-api-key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a restricted customer-owned key when browser sign-in is not suitable.",
+            "defaults": {
+                "serverUrl": "https://mcp.stripe.com"
+            },
+            "guidanceMd": "Use a customer-created Stripe key. A Stripe account; the server is public preview and payment actions require explicit approval.",
+            "riskTier": "S4",
+            "label": "Use an API key",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Stripe API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "sk_...",
+                    "secret": true
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "keys": "https://docs.stripe.com/mcp",
+                "docs": "https://docs.stripe.com/mcp"
+            },
+            "warnings": [
+                "A Stripe account; the server is public preview and payment actions require explicit approval.",
+                "Financial or destructive actions must be explicitly approved before execution."
+            ]
+        }
+    ]
+}

package/dist/app-definitions/supabase.json

@@ -0,0 +1,164 @@
+{
+    "schemaVersion": 1,
+    "slug": "supabase",
+    "name": "Supabase",
+    "description": "Connect Supabase's provider-hosted MCP server.",
+    "categories": [
+        "data"
+    ],
+    "featured": false,
+    "branding": {
+        "logoUrl": "/brands/apps/supabase.svg"
+    },
+    "urlPatterns": [
+        "https://mcp.supabase.com/*"
+    ],
+    "docsUrl": "https://supabase.com/docs/guides/ai-tools/mcp",
+    "redirectConstraints": "https-or-loopback-http",
+    "methods": [
+        {
+            "key": "mcp-oauth",
+            "transport": "mcp_remote",
+            "auth": "oauth",
+            "ownershipModes": [
+                "dcr"
+            ],
+            "whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
+            "defaults": {
+                "serverUrl": "https://mcp.supabase.com/mcp"
+            },
+            "guidanceMd": "Connect Supabase in the browser and scope the connection to one development project. Write tools start enabled and remain governed by Paperclip's action policies.",
+            "riskTier": "S4",
+            "label": "Sign in with Supabase",
+            "consoleLinks": {
+                "docs": "https://supabase.com/docs/guides/ai-tools/mcp"
+            },
+            "warnings": [
+                "A Supabase account; use a development project and review write actions before connecting production data.",
+                "Do not connect production data unless you have reviewed Supabase's MCP security guidance."
+            ],
+            "tenantFields": [
+                {
+                    "key": "projectRef",
+                    "label": "Project reference",
+                    "type": "text",
+                    "required": true,
+                    "placeholder": "abcdefghijklmnopqrst",
+                    "helperMd": "Scope the connection to one development project.",
+                    "transport": {
+                        "location": "query",
+                        "name": "project_ref"
+                    }
+                },
+                {
+                    "key": "readOnly",
+                    "label": "Read-only mode",
+                    "type": "checkbox",
+                    "defaultValue": false,
+                    "helperMd": "Enable this to prevent the connection from changing the database.",
+                    "transport": {
+                        "location": "query",
+                        "name": "read_only",
+                        "format": "boolean"
+                    }
+                },
+                {
+                    "key": "features",
+                    "label": "Feature groups",
+                    "type": "textarea",
+                    "advanced": true,
+                    "placeholder": "database,docs",
+                    "helperMd": "Optional comma-separated feature groups.",
+                    "transport": {
+                        "location": "query",
+                        "name": "features",
+                        "format": "csv"
+                    }
+                }
+            ],
+            "requiredResourceFilters": [
+                "project"
+            ]
+        },
+        {
+            "key": "mcp-api-key",
+            "transport": "mcp_remote",
+            "auth": "api_key",
+            "ownershipModes": [
+                "customer"
+            ],
+            "whenToUse": "Use a restricted customer-owned key when browser sign-in is not suitable.",
+            "defaults": {
+                "serverUrl": "https://mcp.supabase.com/mcp"
+            },
+            "guidanceMd": "Use a customer-created Supabase key scoped to one development project. Write tools start enabled and remain governed by Paperclip's action policies.",
+            "riskTier": "S4",
+            "label": "Use an API key",
+            "credentialFields": [
+                {
+                    "key": "authorization",
+                    "label": "Supabase API key",
+                    "type": "password",
+                    "required": true,
+                    "placeholder": "sbp_...",
+                    "secret": true
+                }
+            ],
+            "keyPlacement": {
+                "location": "header",
+                "name": "Authorization",
+                "prefix": "Bearer "
+            },
+            "consoleLinks": {
+                "keys": "https://supabase.com/docs/guides/ai-tools/mcp",
+                "docs": "https://supabase.com/docs/guides/ai-tools/mcp"
+            },
+            "warnings": [
+                "A Supabase account; use a development project and review write actions before connecting production data.",
+                "Do not connect production data unless you have reviewed Supabase's MCP security guidance."
+            ],
+            "tenantFields": [
+                {
+                    "key": "projectRef",
+                    "label": "Project reference",
+                    "type": "text",
+                    "required": true,
+                    "placeholder": "abcdefghijklmnopqrst",
+                    "helperMd": "Scope the connection to one development project.",
+                    "transport": {
+                        "location": "query",
+                        "name": "project_ref"
+                    }
+                },
+                {
+                    "key": "readOnly",
+                    "label": "Read-only mode",
+                    "type": "checkbox",
+                    "defaultValue": false,
+                    "helperMd": "Enable this to prevent the connection from changing the database.",
+                    "transport": {
+                        "location": "query",
+                        "name": "read_only",
+                        "format": "boolean"
+                    }
+                },
+                {
+                    "key": "features",
+                    "label": "Feature groups",
+                    "type": "textarea",
+                    "advanced": true,
+                    "placeholder": "database,docs",
+                    "helperMd": "Optional comma-separated feature groups.",
+                    "transport": {
+                        "location": "query",
+                        "name": "features",
+                        "format": "csv"
+                    }
+                }
+            ],
+            "requiredResourceFilters": [
+                "project"
+            ]
+        }
+    ]
+}