@tiledesk/tiledesk-server 2.23.0 → 2.24.1

package/CHANGELOG.md

@@ -5,7 +5,16 @@
 🚀        IN PRODUCTION                        🚀
 (https://www.npmjs.com/package/@tiledesk/tiledesk-server/v/2.3.77) 
 
+# 2.24.1
+- Added native MCP servers catalog and endpoints to list, connect and retrieve tools
+- Added endpoint to save native and custom MCP servers in the project integration
+- Improved MCP authentication with custom headers and additional auth types
+- Improved MCP connection handshake with protocol version fallback and session initialization
+
 # 2.23.1
+- Restored cross-project access for global subscriptions (`id_project: '*'` or `global: true`); bots and project-bound subscriptions remain scoped to their own project
+
+# 2.23.0
 - Deprecated JWT helper routes (`/jwt/decode`, `/jwt/generatetestjwt`); they now return 410
 - Restricted bot and subscription tokens to their own project (cross-project access denied)
 - Improved error response sanitization for integration routes

package/Dockerfile

@@ -1,7 +1,4 @@
-FROM node:18-bullseye
-
-RUN sed -i 's/stable\/updates/stable-security\/updates/' /etc/apt/sources.list
-
+FROM node:18-bookworm
 
 RUN apt-get update
 

package/Dockerfile-en

@@ -1,6 +1,4 @@
-FROM node:18-bullseye
-
-RUN sed -i 's/stable\/updates/stable-security\/updates/' /etc/apt/sources.list
+FROM node:18-bookworm
 
 RUN apt-get update
 

package/Dockerfile-jobs

@@ -1,6 +1,4 @@
-FROM node:18-bullseye
-
-RUN sed -i 's/stable\/updates/stable-security\/updates/' /etc/apt/sources.list
+FROM node:18-bookworm
 
 RUN apt-get update
 

package/Dockerfile-profiler

@@ -1,7 +1,4 @@
-FROM node:18-bullseye
-
-RUN sed -i 's/stable\/updates/stable-security\/updates/' /etc/apt/sources.list
-
+FROM node:18-bookworm
 
 RUN apt-get update
 

package/app.js

@@ -93,6 +93,9 @@ let tdCache = new TdCache({
 
 tdCache.connect();
 
+const mcpService = require('./services/mcpService');
+mcpService.setTdCache(tdCache);
+
 // ROUTES DECLARATION
 var troubleshooting = require('./routes/troubleshooting');
 var auth = require('./routes/auth');

package/config/native_mcp/native_mcp_servers.json

@@ -0,0 +1,18 @@
+[
+    {
+        "id": "tiledesk-communicator",
+        "name": "Tiledesk Communicator",
+        "url": "https://stage.eks.tiledesk.com/mcp-tools/communicator/mcp",
+        "native": true,
+        "transport": "streamable_http",
+        "description": "Tiledesk Communicator is a MCP server that allows you to communicate with the Tiledesk platform."
+    },
+    {
+        "id": "tiledesk-data-table",
+        "name": "Tiledesk Data Table",
+        "url": "https://stage.eks.tiledesk.com/mcp-tools/data-table/mcp",
+        "native": true,
+        "transport": "streamable_http",
+        "description": "Tiledesk Data Table is a MCP server that allows you to manage data tables in the Tiledesk platform."
+    }
+]

package/middleware/has-role.js

@@ -44,6 +44,9 @@ class RoleChecker {
         if (!user || user.id_project == null || projectid == null) {
           return false;
         }
+        if (!(user instanceof Faq_kb) && (String(user.id_project) === '*' || user.global === true)) {
+          return true;
+        }
         return String(user.id_project) === String(projectid);
       }
 

package/middleware/passport.js

@@ -321,7 +321,7 @@ module.exports = function(passport) {
 
     } else if (subject=="subscription") {
     
-      Subscription.findOne({_id: identifier}, function(err, subscription) {
+      Subscription.findOne({_id: identifier}).select('+global').exec(function(err, subscription) {
         if (err) {
           winston.error("Passport JWT subscription err", err);
           return done(err, false);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tiledesk/tiledesk-server",
   "description": "The Tiledesk server module",
-  "version": "2.23.0",
+  "version": "2.24.1",
   "scripts": {
     "start": "node ./bin/www",
     "pretest": "mongodb-runner start",

package/pubmodules/tilebot/listener.js

@@ -4,13 +4,12 @@ var winston = require('../../config/winston');
 var configGlobal = require('../../config/global');
 
 var port = process.env.PORT || '3000';
+let TILEBOT_ENDPOINT = process.env.API_ENDPOINT ? process.env.API_ENDPOINT + "/modules/tilebot/ext/" : ("http://localhost:" + port + "/modules/tilebot/ext/");
 
-let TILEBOT_ENDPOINT = "http://localhost:" + port + "/modules/tilebot/ext/";;
 if (process.env.TILEBOT_ENDPOINT) {
-    TILEBOT_ENDPOINT = process.env.TILEBOT_ENDPOINT + "/ext/"
+  TILEBOT_ENDPOINT = process.env.TILEBOT_ENDPOINT + "/ext/";
 }
-
-winston.debug("TILEBOT_ENDPOINT: " + TILEBOT_ENDPOINT);
+winston.info("[tilebot/listener] TILEBOT_ENDPOINT: " + TILEBOT_ENDPOINT);
 
 /**
  * process.env.API_ENDPOINT --> Internal url of the server inside the cluster

package/pubmodules/trigger/rulesTrigger.js

@@ -34,11 +34,12 @@ const uuidv4 = require('uuid/v4');
 var jwt = require('jsonwebtoken');
 
 const port = process.env.PORT || '3000';
-let TILEBOT_ENDPOINT = "http://localhost:" + port + "/modules/tilebot/ext/";;
+let TILEBOT_ENDPOINT = process.env.API_ENDPOINT ? process.env.API_ENDPOINT + "/modules/tilebot/ext/" : ("http://localhost:" + port + "/modules/tilebot/ext/");
+
 if (process.env.TILEBOT_ENDPOINT) {
-    TILEBOT_ENDPOINT = process.env.TILEBOT_ENDPOINT + "/ext/"
+  TILEBOT_ENDPOINT = process.env.TILEBOT_ENDPOINT + "/ext/";
 }
-winston.debug("TILEBOT_ENDPOINT: " + TILEBOT_ENDPOINT);
+winston.info("[rulesTrigger] TILEBOT_ENDPOINT: " + TILEBOT_ENDPOINT);
 
 class RulesTrigger {
 

package/routes/authtestWithRoleCheck.js

@@ -15,6 +15,12 @@ router.get('/',  function (req, res) {
      function (req, res) {
     res.send('{"success":true}');
   });
+
+  router.get('/subscription', [
+    roleChecker.hasRoleOrTypes(null,['subscription'])],
+     function (req, res) {
+    res.send('{"success":true}');
+  });
   
   router.get('/noentitycheck', 
     [noentitycheck,

package/routes/faq_kb.js

@@ -284,11 +284,12 @@ router.put('/:faq_kbid/publish', roleChecker.hasRole('admin'), async (req, res)
     botEvent.emit('faqbot.update', updatedForkedChabot);
 
     const port = process.env.PORT || '3000';
-    let TILEBOT_ENDPOINT = "http://localhost:" + port + "/modules/tilebot/ext/";;
+    let TILEBOT_ENDPOINT = process.env.API_ENDPOINT ? process.env.API_ENDPOINT + "/modules/tilebot/ext/" : ("http://localhost:" + port + "/modules/tilebot/ext/");
+
     if (process.env.TILEBOT_ENDPOINT) {
-      TILEBOT_ENDPOINT = process.env.TILEBOT_ENDPOINT + "/ext/"
+      TILEBOT_ENDPOINT = process.env.TILEBOT_ENDPOINT + "/ext/";
     }
-    winston.debug("TILEBOT_ENDPOINT: " + TILEBOT_ENDPOINT);
+    winston.info("[RequestService] TILEBOT_ENDPOINT: " + TILEBOT_ENDPOINT);
 
     let updatedOriginalChabot = await Faq_kb.findByIdAndUpdate(id_faq_kb, { url: TILEBOT_ENDPOINT + forkedChatBotId }, { new: true, upsert: true }).exec();
     winston.debug("updatedOriginalChabot: ", updatedOriginalChabot);

package/routes/mcp.js

@@ -2,36 +2,125 @@ let express = require('express');
 let router = express.Router();
 let winston = require('../config/winston');
 const mcpService = require('../services/mcpService');
-const Project = require('../models/project');
+
+
+/**
+ * GET /mcp/native
+ * Returns the list of available native MCP servers (without URLs)
+ */
+router.get('/native', async (req, res) => {
+  try {
+    const servers = await mcpService.getNativeServersPublic();
+    res.status(200).send(servers);
+  } catch (error) {
+    winston.error('Error getting native MCP servers:', error);
+    res.status(500).send({ success: false, error: error.message || 'Error getting native MCP servers' });
+  }
+});
+
+/**
+ * POST /mcp/native/:nativeId/connect
+ * Initializes a connection to a native MCP server
+ */
+router.post('/native/:nativeId/connect', async (req, res) => {
+  try {
+    const id_project = req.projectid;
+    const { nativeId } = req.params;
+
+    const serverConfig = await mcpService.resolveNativeServerConfig(nativeId, id_project);
+    const result = await mcpService.connectServer(serverConfig);
+
+    res.status(200).send({
+      success: true,
+      message: 'Native MCP server connected successfully',
+      nativeId,
+      capabilities: result.capabilities,
+      tools: result.tools
+    });
+  } catch (error) {
+    winston.error('Error connecting to native MCP server:', error);
+    res.status(error.statusCode || 500).send({
+      success: false,
+      error: error.message || 'Error connecting to native MCP server'
+    });
+  }
+});
+
+/**
+ * POST /mcp/native/:nativeId/tools
+ * Gets the list of tools from a native MCP server
+ */
+router.post('/native/:nativeId/tools', async (req, res) => {
+  try {
+    const id_project = req.projectid;
+    const { nativeId } = req.params;
+
+    const serverConfig = await mcpService.resolveNativeServerConfig(nativeId, id_project);
+    const tools = await mcpService.listTools(serverConfig);
+
+    res.status(200).send(tools);
+  } catch (error) {
+    winston.error('Error getting tools from native MCP server:', error);
+    res.status(error.statusCode || 500).send({
+      success: false,
+      error: error.message || 'Error getting tools from native MCP server'
+    });
+  }
+});
+
+/**
+ * POST /mcp/servers
+ * Adds or updates an MCP server in the project mcp integration
+ * Body (native): { type: 'native', nativeId, tools?, selectedTools? }
+ * Body (custom): { type: 'custom', name, url, transport?, customHeaders?, tools?, selectedTools?, auth? }
+ */
+router.post('/servers', async (req, res) => {
+  try {
+    const id_project = req.projectid;
+    const result = await mcpService.upsertMcpServerInIntegration(id_project, req.body);
+
+    res.status(200).send({
+      success: true,
+      server: result.server,
+      integration: result.integration
+    });
+  } catch (error) {
+    winston.error('Error saving MCP server in integration:', error);
+    res.status(error.statusCode || 500).send({
+      success: false,
+      error: error.message || 'Error saving MCP server in integration'
+    });
+  }
+});
 
 /**
  * POST /mcp/connect
  * Initializes a connection to an MCP server
- * Body: { url: string, auth?: { type: 'bearer'|'api_key'|'basic', token?: string, key?: string, username?: string, password?: string } }
+ * Body: {
+ *   url: string,
+ *   customHeaders?: [{ key: string, value: string }],
+ *   oauth?: object (not supported yet),
+ *   auth?: object (legacy, optional)
+ * }
  */
 router.post('/connect', async (req, res) => {
   try {
     const id_project = req.projectid;
-    const { url, auth } = req.body;
+    let serverConfig;
 
-    if (!url) {
-      return res.status(400).send({ success: false, error: "Missing required parameter 'url'" });
+    try {
+      serverConfig = mcpService.buildServerConfig(id_project, req.body);
+    } catch (error) {
+      return res.status(400).send({ success: false, error: error.message });
     }
 
-    // Build server configuration
-    const serverConfig = {
-      url: url,
-      projectId: id_project,
-      auth: auth || undefined
-    };
-
-    // Initialize the connection
-    const result = await mcpService.initializeServer(serverConfig);
+    const result = await mcpService.connectServer(serverConfig);
 
-    res.status(200).send({ 
-      success: true, 
+    res.status(200).send({
+      success: true,
       message: 'MCP server connected successfully',
-      capabilities: result?.capabilities || {}
+      capabilities: result.capabilities,
+      tools: result.tools
     });
   } catch (error) {
     winston.error(`Error connecting to MCP server:`, error);
@@ -42,25 +131,27 @@ router.post('/connect', async (req, res) => {
 /**
  * POST /mcp/tools
  * Gets the list of tools from an MCP server
- * Body: { url: string, auth?: object }
+ * Body: {
+ *   url: string,
+ *   customHeaders?: [{ key: string, value: string }],
+ *   oauth?: object (not supported yet),
+ *   auth?: object (legacy, optional)
+ * }
  */
 router.post('/tools', async (req, res) => {
   try {
     const id_project = req.projectid;
-    const { url, auth } = req.body;
+    const { url } = req.body;
 
-    if (!url) {
-      return res.status(400).send({ success: false, error: "Missing required parameter 'url' in body" });
-    }
+    winston.info(`MCP /tools called for project ${id_project}, url: ${url}`);
 
-    // Build server configuration
-    const serverConfig = {
-      url: url,
-      projectId: id_project,
-      auth: auth || undefined
-    };
+    let serverConfig;
+    try {
+      serverConfig = mcpService.buildServerConfig(id_project, req.body);
+    } catch (error) {
+      return res.status(400).send({ success: false, error: error.message });
+    }
 
-    // listTools automatically initializes if necessary
     const tools = await mcpService.listTools(serverConfig);
 
     res.status(200).send(tools);
@@ -71,4 +162,3 @@ router.post('/tools', async (req, res) => {
 });
 
 module.exports = router;
-

package/routes/webhook.js

@@ -13,11 +13,12 @@ var ObjectId = require('mongoose').Types.ObjectId;
 const default_embedding = require('../config/kb/embedding');
 
 const port = process.env.PORT || '3000';
-let TILEBOT_ENDPOINT = "http://localhost:" + port + "/modules/tilebot/";
+let TILEBOT_ENDPOINT = process.env.API_ENDPOINT ? process.env.API_ENDPOINT + "/modules/tilebot/ext/" : ("http://localhost:" + port + "/modules/tilebot/ext/");
+
 if (process.env.TILEBOT_ENDPOINT) {
-    TILEBOT_ENDPOINT = process.env.TILEBOT_ENDPOINT + "/"
+  TILEBOT_ENDPOINT = process.env.TILEBOT_ENDPOINT + "/ext/";
 }
-winston.debug("TILEBOT_ENDPOINT: " + TILEBOT_ENDPOINT);
+winston.info("[RequestService] TILEBOT_ENDPOINT: " + TILEBOT_ENDPOINT);
 
 const KB_WEBHOOK_TOKEN = process.env.KB_WEBHOOK_TOKEN || 'kbcustomtoken';
 const AMQP_MANAGER_URL = process.env.AMQP_MANAGER_URL;