@typeship-ax/mcp 0.6.0 → 0.9.1

package/AGENTS.md

@@ -0,0 +1,31 @@
+# typeship — agent context
+
+This package contains the generated MCP server for **typeship** (API v1.0.0, package v0.9.1).
+
+Resolve an OpenAPI or GraphQL Definition, diagnose it, and keep every
+selected SDK, CLI, and MCP Target current.
+
+Every operation but one requires a bearer credential: an organization
+API key from the console, or an OAuth access token carrying the operation's
+read, generate, or write capability and the organization selected during
+consent. OAuth grants cannot switch organizations after consent. A browser
+session is not a credential for this API. The exception is POST /generate,
+which works anonymously with the free plan's limits.
+
+## Ground rules
+- Typeship owns the files it generates. Change the API definition, generation settings, or definition patches, then regenerate those files. Repository delivery preserves files outside its generated-file ownership manifest; preserving a file does not add it to the package's exports, build, or tests.
+- Zero runtime dependencies; the program runs on Node.js 18+ and platform `fetch`.
+- `api.md` is the tool and schema reference; `api.json` is the machine-readable operation, schema, safety, and example contract. Read them before guessing.
+- Start with the local build or installation instructions in `README.md`. Generation does not publish a registry package.
+
+## Authentication
+- Bearer token: set the `TYPESHIP_TOKEN` environment variable.
+
+## MCP server
+- Build the package and configure your MCP client to run `node` with the absolute path to `dist/mcp.js`. After publishing, you can use `npx -y --package @typeship-ax/mcp typeship-mcp`. Set the package's auth environment variables in that client; `--read-only` prevents write tools.
+- This package exposes the compact `search_docs`, `read_docs`, and `execute` surface. Find an operation, read its complete contract, then call `execute` with its name and `arguments`; destructive operations return `CONFIRMATION_REQUIRED` until repeated with `confirm: true`. Operation names are not directly callable tools in this mode.
+- Tool arguments are checked against the schema before any request (unknown or mistyped arguments are one `isError` result with per-argument issues); pass `fields` (dotted paths) to keep only the result keys you need; errors carry `code` and `next_steps`.
+
+## Documentation
+- The reference for this exact package: `api.md` (offline, always current with the code).
+- Conceptual guides live on the docs site. For questions about how the API's concepts fit together (flows, ordering, environments), fetch `https://typeship.dev/llms-full.txt` and read the relevant sections; `https://typeship.dev/llms.txt` is the page index. Relative links in the spec resolve against `https://typeship.dev`.

package/README.md

@@ -4,29 +4,73 @@ MCP server for typeship. [API reference](./api.md)
 
 Generated from the OpenAPI spec by [typeship](https://typeship.dev). Change the spec or generation settings, then regenerate; generated files are not hand-edited.
 
-- **Zero runtime dependencies** — built on the platform `fetch` (Node 18+, browsers, edge runtimes)
+- **Zero runtime dependencies** — built on the platform `fetch` in Node 18+
 - **Agent-ready MCP** — schema-derived tools, argument validation, read-only mode, and bounded results
 
-## Install
+## Build from source
+
+Run these commands in the downloaded or cloned package directory:
 
 ```sh
-npm install @typeship-ax/mcp
+npm install
+npm run build
 ```
 
+Requires Node.js 18+. The package is ESM.
+
+To run the local MCP server, configure your MCP client with `node` and the absolute path to `dist/mcp.js`, as shown below. The server communicates over stdio.
+
+## Install a published package
+
+Generation does not publish a package. Before using the registry command below, confirm `name` and `version` in `package.json`, publish under a name you control, and verify that release is available on npm.
+
+```sh
+npm install --global @typeship-ax/mcp@0.9.1
+```
+
+## Connect after publishing
+
+The npm connections below require `@typeship-ax/mcp` to be published under your package identity. To use downloaded source before publishing, use the local configuration in the next section. Hosted connections require a deployed server.
+
+Authentication: provide `TYPESHIP_TOKEN` through the MCP client's environment or secret settings. Keep credential values out of URLs and command arguments.
+
+> **Cursor:** Cursor 3.2 is not supported: it opens with the legacy initialize handshake, while this server speaks MCP 2026-07-28.
+
+### Local
+
+- Claude Code: `claude mcp add typeship -- npx -y --package @typeship-ax/mcp typeship-mcp`
+- Codex: `codex mcp add typeship -- npx -y --package @typeship-ax/mcp typeship-mcp`
+- [Install in VS Code](vscode:mcp/install?%7B%22name%22%3A%22typeship%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22--package%22%2C%22%40typeship-ax%2Fmcp%22%2C%22typeship-mcp%22%5D%7D)
+
+### Local · read-only
+
+- Claude Code: `claude mcp add typeship-readonly -- npx -y --package @typeship-ax/mcp typeship-mcp --read-only`
+- Codex: `codex mcp add typeship-readonly -- npx -y --package @typeship-ax/mcp typeship-mcp --read-only`
+- [Install in VS Code](vscode:mcp/install?%7B%22name%22%3A%22typeship-readonly%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22--package%22%2C%22%40typeship-ax%2Fmcp%22%2C%22typeship-mcp%22%2C%22--read-only%22%5D%7D)
+
+### Hosted
+
+- Claude Code: `claude mcp add --transport http typeship https://typeship.dev/mcp`
+- Codex: `codex mcp add typeship --url https://typeship.dev/mcp`
+- [Install in VS Code](vscode:mcp/install?%7B%22name%22%3A%22typeship%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Ftypeship.dev%2Fmcp%22%7D)
+
+### Hosted · read-only
+
+- Claude Code: `claude mcp add --transport http typeship-readonly https://typeship.dev/mcp/readonly`
+- Codex: `codex mcp add typeship-readonly --url https://typeship.dev/mcp/readonly`
+- [Install in VS Code](vscode:mcp/install?%7B%22name%22%3A%22typeship-readonly%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Ftypeship.dev%2Fmcp%2Freadonly%22%7D)
+
 ## MCP server
 
-A zero-dependency stdio server exposing a compact discovery surface: `search_docs`, `read_docs`, and `execute`. Read an operation before executing it to get its complete schema, example arguments, and safety classification. Add this package to an MCP client:
+A zero-dependency stdio server exposing a compact discovery surface: `search_docs`, `read_docs`, and `execute`. Read an operation before executing it to get its complete schema, example arguments, and safety classification. After building, add the local server to an MCP client:
 
 ```json
 {
   "mcpServers": {
     "typeship": {
-      "command": "npx",
+      "command": "node",
       "args": [
-        "-y",
-        "--package",
-        "@typeship-ax/mcp",
-        "typeship-mcp"
+        "/absolute/path/to/package/dist/mcp.js"
       ],
       "env": {
         "TYPESHIP_TOKEN": "replace-with-your-credential"
@@ -36,8 +80,21 @@ A zero-dependency stdio server exposing a compact discovery surface: `search_doc
 }
 ```
 
+Replace the path with the absolute path to this package's built `dist/mcp.js`.
+
 Replace the credential placeholder using the MCP client's secret storage when it has one. The local server reads `TYPESHIP_TOKEN` from its environment; credentials never belong in command arguments. If you also generated the CLI, its `typeship login` command stores credentials the local MCP server can reuse.
 
 Tool input schemas are derived from the OpenAPI spec, so agents see real parameter types and required fields. Arguments are checked before anything reaches the API (unknown or mistyped ones come back as one `isError` result, nothing is dropped), every tool takes `fields` to keep only the result keys it needs, and errors carry a stable `code` and `next_steps`.
 
-Add `--read-only` to `args` (or set `TYPESHIP_MCP_READ_ONLY=1`) for a server that cannot write, `--tools accounts,reports` (or `TYPESHIP_MCP_TOOLS`) to expose a subset, and `TYPESHIP_MCP_MAX_RESULT_CHARS` to change the result size cap (64,000).
+Add `--read-only` to `args` (or set `TYPESHIP_MCP_READ_ONLY=1`) for a server that cannot write, `--tools generate,projects` (or `TYPESHIP_MCP_TOOLS`) to expose a subset, and `TYPESHIP_MCP_MAX_RESULT_CHARS` to change the result size cap (64,000).
+
+## MCP Registry
+
+`server.json` describes the npm executable and any hosted transports. Its `dev.typeship/typeship` identity matches `package.json#mcpName`.
+
+Install the official `mcp-publisher`, publish this npm package first, then validate or publish the listing:
+
+```bash
+npm run mcp:validate
+npm run mcp:publish
+```