@ttoss/http-server-mcp 0.28.1 → 0.28.2

package/README.md

@@ -127,6 +127,17 @@ const data = await apiCall('GET', 'https://partner.api.com/data', {
 
 `apiCall` throws with a clear message when called with a relative path and no `apiBaseUrl` is configured in the context.
 
+### Errors
+
+A non-2xx response throws, with the message read off the error body — `{ error: 'text' }` and `{ error: { code, message } }` both work, the latter as `code: message`. A body naming neither falls back to `HTTP <status>`.
+
+```typescript
+// { "error": { "code": "plan_limit_reached", "message": "Upgrade to add more." } }
+// → Error: plan_limit_reached: Upgrade to add more.
+```
+
+Inside a tool handler the thrown message is what the MCP SDK returns to the client, so it is the whole answer the calling model acts on.
+
 ## Authentication
 
 `createMcpRouter` supports OAuth 2.0 Bearer token authentication via the `auth` option. Incoming MCP requests must include a valid `Authorization: Bearer <token>` header — invalid or missing tokens receive a `401 Unauthorized` response. The MCP lifecycle methods `initialize` and `tools/list` are exempt by default so clients can discover the server before authenticating (see [Public methods and discovery](#public-methods-and-discovery)).
@@ -593,6 +604,8 @@ Generic HTTP helper for use inside MCP tool handlers.
 
 **Returns:** `Promise<unknown>` — Parsed JSON response body
 
+**Throws:** `Error` on a non-2xx response, carrying the error body's message (see [Errors](#errors))
+
 ### `getIdentity<T>()`
 
 Returns the verified JWT payload for the current MCP request. Only available inside a tool handler when `auth` is configured. Returns `undefined` when called outside an authenticated context.

package/dist/index.cjs

@@ -588,6 +588,31 @@ var buildVerifyToken = auth => {
     return payload;
   };
 };
+var isRecord = value => {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+};
+var readText = value => {
+  return typeof value === "string" && value !== "" ? value : void 0;
+};
+/**
+* The message an error body carries, across the two shapes REST APIs answer
+* with: `{ error: 'text' }` and `{ error: { code?, message? } }`.
+*
+* The structured one is why this is read rather than taken: an object handed
+* to `new Error()` renders as `[object Object]`, and inside a tool handler
+* that string is the whole answer the calling model acts on.
+*/
+var errorBodyMessage = body => {
+  if (!isRecord(body)) return;
+  const {
+    error
+  } = body;
+  if (!isRecord(error)) return readText(error);
+  const code = readText(error.code);
+  const message = readText(error.message);
+  if (message === void 0) return code;
+  return code === void 0 ? message : `${code}: ${message}`;
+};
 /**
 * Generic HTTP helper for use inside MCP tool handlers.
 *
@@ -663,12 +688,12 @@ var apiCall = async (method, url, options) => {
     body: hasBody ? JSON.stringify(options.body) : void 0
   });
   if (!response.ok) {
-    const err = await response.json().catch(() => {
+    const errorBody = await response.json().catch(() => {
       return {
         error: response.statusText
       };
     });
-    throw new Error(err.error || `HTTP ${response.status}`);
+    throw new Error(errorBodyMessage(errorBody) ?? `HTTP ${response.status}`);
   }
   if (response.status === 204 || response.status === 205) return;
   if (response.headers.get("content-type")?.includes("application/json")) return response.json();

package/dist/index.mjs

@@ -585,6 +585,31 @@ var buildVerifyToken = auth => {
     return payload;
   };
 };
+var isRecord = value => {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+};
+var readText = value => {
+  return typeof value === "string" && value !== "" ? value : void 0;
+};
+/**
+* The message an error body carries, across the two shapes REST APIs answer
+* with: `{ error: 'text' }` and `{ error: { code?, message? } }`.
+*
+* The structured one is why this is read rather than taken: an object handed
+* to `new Error()` renders as `[object Object]`, and inside a tool handler
+* that string is the whole answer the calling model acts on.
+*/
+var errorBodyMessage = body => {
+  if (!isRecord(body)) return;
+  const {
+    error
+  } = body;
+  if (!isRecord(error)) return readText(error);
+  const code = readText(error.code);
+  const message = readText(error.message);
+  if (message === void 0) return code;
+  return code === void 0 ? message : `${code}: ${message}`;
+};
 /**
 * Generic HTTP helper for use inside MCP tool handlers.
 *
@@ -660,12 +685,12 @@ var apiCall = async (method, url, options) => {
     body: hasBody ? JSON.stringify(options.body) : void 0
   });
   if (!response.ok) {
-    const err = await response.json().catch(() => {
+    const errorBody = await response.json().catch(() => {
       return {
         error: response.statusText
       };
     });
-    throw new Error(err.error || `HTTP ${response.status}`);
+    throw new Error(errorBodyMessage(errorBody) ?? `HTTP ${response.status}`);
   }
   if (response.status === 204 || response.status === 205) return;
   if (response.headers.get("content-type")?.includes("application/json")) return response.json();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttoss/http-server-mcp",
-  "version": "0.28.1",
+  "version": "0.28.2",
   "description": "Model Context Protocol (MCP) server integration for @ttoss/http-server",
   "keywords": [
     "ai",