@unchainedshop/api 3.1.13 → 4.0.0-rc.3

package/lib/schema/types/price.js

@@ -4,7 +4,7 @@ export default [
       isTaxable: Boolean!
       isNetPrice: Boolean!
       amount: Int!
-      currency: String!
+      currencyCode: String!
     }
 
     type PriceRange @cacheControl(maxAge: 60) {

package/lib/schema/types/product/bundle-product.js

@@ -12,7 +12,7 @@ export default [
       updated: DateTime
       published: DateTime
       media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
-      texts(forceLocale: String): ProductTexts
+      texts(forceLocale: Locale): ProductTexts
       bundleItems: [ProductBundleItem!]
       reviews(
         limit: Int = 10

package/lib/schema/types/product/configurable-product.js

@@ -14,20 +14,20 @@ export default [
 
     type ProductVariationTexts @cacheControl(maxAge: 180) {
       _id: ID!
-      locale: Locale
+      locale: Locale!
       title: String
       subtitle: String
     }
 
     type ProductVariationOption @cacheControl(maxAge: 180) {
       _id: ID!
-      texts(forceLocale: String): ProductVariationTexts
+      texts(forceLocale: Locale): ProductVariationTexts
       value: String
     }
 
     type ProductVariation @cacheControl(maxAge: 180) {
       _id: ID!
-      texts(forceLocale: String): ProductVariationTexts
+      texts(forceLocale: Locale): ProductVariationTexts
       type: ProductVariationType
       key: String
       options: [ProductVariationOption!]
@@ -71,7 +71,7 @@ export default [
       updated: DateTime
       published: DateTime
       media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
-      texts(forceLocale: String): ProductTexts
+      texts(forceLocale: Locale): ProductTexts
       assortmentPaths: [ProductAssortmentPath!]!
       siblings(
         assortmentId: ID
@@ -90,13 +90,13 @@ export default [
         quantity: Int = 0
         vectors: [ProductAssignmentVectorInput!]
         includeInactive: Boolean = false
-        currency: String
+        currencyCode: String
       ): PriceRange
       simulatedPriceRange(
         quantity: Int
         vectors: [ProductAssignmentVectorInput!]
         includeInactive: Boolean = false
-        currency: String
+        currencyCode: String
         useNetPrice: Boolean = false
       ): PriceRange @cacheControl(scope: PRIVATE)
 

package/lib/schema/types/product/plan-product.js

@@ -41,16 +41,16 @@ export default [
       updated: DateTime
       published: DateTime
       media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
-      texts(forceLocale: String): ProductTexts
-      catalogPrice(quantity: Int = 1, currency: String): Price
-      leveledCatalogPrices(currency: String): [PriceLevel!]!
+      texts(forceLocale: Locale): ProductTexts
+      catalogPrice(quantity: Int = 1, currencyCode: String): Price
+      leveledCatalogPrices(currencyCode: String): [PriceLevel!]!
       simulatedPrice(
-        currency: String
+        currencyCode: String
         useNetPrice: Boolean = false
         quantity: Int = 1
         configuration: [ProductConfigurationParameterInput!]
       ): Price @cacheControl(scope: PRIVATE)
-      assortmentPaths(forceLocale: String): [ProductAssortmentPath!]!
+      assortmentPaths(forceLocale: Locale): [ProductAssortmentPath!]!
       siblings(
         assortmentId: ID
         limit: Int = 10

package/lib/schema/types/product/product.js

@@ -25,7 +25,7 @@ export default [
 
     type ProductMediaTexts @cacheControl(maxAge: 180) {
       _id: ID!
-      locale: Locale
+      locale: Locale!
       title: String
       subtitle: String
     }
@@ -35,12 +35,12 @@ export default [
       tags: [LowerCaseString!]
       file: Media
       sortKey: Int!
-      texts(forceLocale: String): ProductMediaTexts
+      texts(forceLocale: Locale): ProductMediaTexts
     }
 
     type ProductTexts @cacheControl(maxAge: 180) {
       _id: ID!
-      locale: Locale
+      locale: Locale!
       slug: String
       title: String
       subtitle: String
@@ -61,7 +61,7 @@ export default [
       created: DateTime
       updated: DateTime
       published: DateTime
-      texts(forceLocale: String): ProductTexts
+      texts(forceLocale: Locale): ProductTexts
       media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
       reviews(
         limit: Int = 10

package/lib/schema/types/product/simple-product.js

@@ -12,11 +12,11 @@ export default [
       updated: DateTime
       published: DateTime
       media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
-      texts(forceLocale: String): ProductTexts
-      catalogPrice(quantity: Int = 1, currency: String): Price
-      leveledCatalogPrices(currency: String): [PriceLevel!]!
+      texts(forceLocale: Locale): ProductTexts
+      catalogPrice(quantity: Int = 1, currencyCode: String): Price
+      leveledCatalogPrices(currencyCode: String): [PriceLevel!]!
       simulatedPrice(
-        currency: String
+        currencyCode: String
         useNetPrice: Boolean = false
         quantity: Int = 1
         configuration: [ProductConfigurationParameterInput!]

package/lib/schema/types/product/tokenized-product.js

@@ -31,17 +31,17 @@ export default [
       updated: DateTime
       published: DateTime
       media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
-      texts(forceLocale: String): ProductTexts
-      catalogPrice(quantity: Int = 1, currency: String): Price
-      leveledCatalogPrices(currency: String): [PriceLevel!]!
+      texts(forceLocale: Locale): ProductTexts
+      catalogPrice(quantity: Int = 1, currencyCode: String): Price
+      leveledCatalogPrices(currencyCode: String): [PriceLevel!]!
       simulatedPrice(
-        currency: String
+        currencyCode: String
         useNetPrice: Boolean = false
         quantity: Int = 1
         configuration: [ProductConfigurationParameterInput!]
       ): Price @cacheControl(scope: PRIVATE, maxAge: 10)
       simulatedStocks(referenceDate: Timestamp): [Stock!] @cacheControl(scope: PRIVATE, maxAge: 10)
-      assortmentPaths(forceLocale: String): [ProductAssortmentPath!]!
+      assortmentPaths(forceLocale: Locale): [ProductAssortmentPath!]!
       siblings(
         assortmentId: ID
         limit: Int = 10

package/lib/schema/types/warehousing.js

@@ -59,7 +59,7 @@ export default [
       walletAddress: String
       chainId: String
       chainTokenId: String
-      ercMetadata(forceLocale: String): JSON
+      ercMetadata(forceLocale: Locale): JSON
     }
   `,
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unchainedshop/api",
-  "version": "3.1.13",
+  "version": "4.0.0-rc.3",
   "main": "lib/api-index.js",
   "types": "lib/api-index.d.ts",
   "type": "module",
@@ -31,17 +31,23 @@
   },
   "homepage": "https://github.com/unchainedshop/unchained#readme",
   "peerDependencies": {
-    "@ethereumjs/util": ">= 8 < 11",
-    "@fastify/cookie": ">= 11.0 < 12",
-    "@fastify/session": ">= 11.0 < 12",
-    "connect-mongo": ">= 5.1.0 < 6",
-    "express": ">= 5.0 < 6",
-    "express-session": ">= 1.18 < 2",
+    "@ethereumjs/util": ">= 10 < 11",
     "fastify": ">= 5.2 < 6",
-    "graphql-yoga": ">= 5.9 < 6.0",
+    "@fastify/cookie": ">= 11 < 12",
+    "@fastify/session": ">= 11 < 12",
+    "@fastify/multipart": ">= 9 < 10",
+    "connect-mongo": ">= 5.1 < 6",
+    "@modelcontextprotocol/sdk": ">= 1 < 2",
+    "express": ">= 5 < 6",
+    "express-session": ">= 1.18 < 2",
+    "multer": ">= 2 < 3",
+    "graphql-yoga": ">= 5.9 < 6",
     "passport": ">= 0.7 < 1"
   },
   "peerDependenciesMeta": {
+    "@modelcontextprotocol/sdk": {
+      "optional": false
+    },
     "graphql-yoga": {
       "optional": false
     },
@@ -51,9 +57,15 @@
     "@ethereumjs/util": {
       "optional": true
     },
+    "fastify": {
+      "optional": true
+    },
     "@fastify/cookie": {
       "optional": true
     },
+    "@fastify/multipart": {
+      "optional": true
+    },
     "@fastify/session": {
       "optional": true
     },
@@ -63,7 +75,7 @@
     "express-session": {
       "optional": true
     },
-    "fastify": {
+    "multer": {
       "optional": true
     },
     "passport": {
@@ -71,27 +83,31 @@
     }
   },
   "dependencies": {
-    "@unchainedshop/core": "^3.1.13",
-    "@unchainedshop/events": "^3.1.13",
-    "@unchainedshop/logger": "^3.1.13",
-    "@unchainedshop/roles": "^3.1.13",
-    "@unchainedshop/utils": "^3.1.13",
+    "@unchainedshop/core": "^4.0.0-rc.3",
+    "@unchainedshop/events": "^4.0.0-rc.3",
+    "@unchainedshop/logger": "^4.0.0-rc.3",
+    "@unchainedshop/roles": "^4.0.0-rc.3",
+    "@unchainedshop/utils": "^4.0.0-rc.3",
     "accounting": "0.4.1",
     "dataloader": "^2.2.3",
     "expiry-map": "^2.0.0",
     "graphql-scalars": "^1.24.2",
     "moniker": "0.1.2",
-    "p-memoize": "^7.1.1"
+    "p-memoize": "^7.1.1",
+    "zod": "^3.25.67"
   },
   "devDependencies": {
     "@ethereumjs/util": "^10.0.0",
+    "fastify": "^5.4.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/session": "^11.1.0",
+    "@fastify/multipart": "^9.0.3",
+    "@modelcontextprotocol/sdk": "^1.13.1",
     "@types/express": "^5.0.3",
     "@types/node": "^24.0.4",
     "express": "^5.1.0",
     "express-session": "^1.18.1",
-    "fastify": "^5.4.0",
+    "multer": "^2.0.1",
     "passport": "^0.7.0",
     "tsx": "^4.20.3",
     "typescript": "^5.8.3"

package/src/api-index.ts

@@ -38,7 +38,10 @@ export const startAPIServer = async (options: UnchainedServerOptions) => {
     ...serverOptions
   } = options || {};
 
-  const contextResolver = createContextResolver(unchainedAPI, { roles, adminUiConfig });
+  const contextResolver = createContextResolver(unchainedAPI, {
+    roles,
+    adminUiConfig,
+  });
 
   setCurrentContextResolver(
     customContext

package/src/context.ts

@@ -31,12 +31,12 @@ export interface AdminUiConfig {
   singleSignOnURL?: string;
 }
 
-export type UnchainedHTTPServerContext = {
+export interface UnchainedHTTPServerContext {
   setHeader: (key: string, value: string) => void;
   getHeader: (key: string) => string;
   remoteAddress?: string;
   remotePort?: number;
-};
+}
 
 export type Context = UnchainedCore & {
   version?: string;
@@ -83,7 +83,7 @@ export const createContextResolver =
     logout,
   }) => {
     const abstractHttpServerContext = { remoteAddress, remotePort, getHeader, setHeader };
-    const loaders = await instantiateLoaders(unchainedAPI);
+    const loaders = instantiateLoaders(unchainedAPI);
     const localeContext = await getLocaleContext(abstractHttpServerContext, unchainedAPI);
     const userContext: UnchainedUserContext = { login, logout, impersonatorId };
 

package/src/createGraphQLServer.ts

@@ -4,8 +4,8 @@ import { createYoga, createSchema, YogaServerOptions } from 'graphql-yoga';
 const logger = createLogger('unchained:api');
 
 export type GraphQLServerOptions = YogaServerOptions<any, any> & {
-  typeDefs?: Array<string>;
-  resolvers?: Array<Record<string, any>>;
+  typeDefs?: string[];
+  resolvers?: Record<string, any>[];
 };
 
 export default async (options: GraphQLServerOptions) => {

package/src/errors.ts

@@ -183,10 +183,6 @@ export const MultipleBookmarksFound = createError(
   'The convenience bookmark mutation cannot be used because multiple bookmarks were explicitly created with different metadata',
 );
 
-export const QueryStringRequiredError = createError(
-  'QueryStringRequiredError',
-  'Query string is required when no assortments are in scope',
-);
 export const PaymentProviderNotFoundError = createError(
   'PaymentProviderNotFoundError',
   'Payment provider not found',
@@ -305,6 +301,16 @@ export const ProductLinkedToQuotationError = createError(
   'Product is part of a requested/proposed quotations item, remove it from any requested/proposed quotations item before deleting',
 );
 
+export const ProductVariationVectorAlreadySet = createError(
+  'ProductVariationVectorAlreadySet',
+  'Product variation vector is already set, remove the existing one before setting a new one',
+);
+
+export const ProductVariationVectorInvalid = createError(
+  'ProductVariationVectorInvalid',
+  'Product variation vector is invalid/incomplete',
+);
+
 export const FileNotFoundError = createError('FileNotFoundError', 'File not found');
 
 export const FileUploadExpiredError = createError('FileUploadExpired', 'File upload has expired');

package/src/express/createERCMetadataMiddleware.ts

@@ -23,19 +23,25 @@ const ercMetadataMiddleware: RequestHandler = async (
       return methodWrongHandler(res);
     }
 
-    const { services, localeContext } = req.unchainedContext;
+    const { services, modules, loaders, locale } = req.unchainedContext;
     const url = new URL(req.url, ROOT_URL);
     const parsedPath = path.parse(url.pathname);
 
     if (parsedPath.ext !== '.json') throw new Error('Invalid ERC Metadata URI');
 
     const [, productId, localeOrTokenFilename, tokenFileName] = url.pathname.split('/');
-    const locale = tokenFileName ? new Intl.Locale(localeOrTokenFilename) : localeContext;
 
-    const ercMetadata = await services.warehousing.ercMetadata({
-      productId,
-      locale,
+    const product = await loaders.productLoader.load({ productId });
+
+    const [token] = await modules.warehousing.findTokens({
       chainTokenId: parsedPath.name,
+      contractAddress: product?.tokenization?.contractAddress,
+    });
+
+    const ercMetadata = await services.warehousing.ercMetadata({
+      product,
+      token,
+      locale: tokenFileName ? new Intl.Locale(localeOrTokenFilename) : locale,
     });
 
     if (!ercMetadata) {

package/src/express/createMCPMiddleware.ts

@@ -0,0 +1,91 @@
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
+import createMcpServer from '../mcp/index.js';
+import { Request, RequestHandler } from 'express';
+import { Context } from '../context.js';
+
+// Map to store transports by session ID
+const transports: Record<string, StreamableHTTPServerTransport> = {};
+
+const handlePostRequest: RequestHandler = async (req: Request & { unchainedContext: Context }, res) => {
+  // Check for existing session ID
+
+  const sessionId = req.headers['mcp-session-id'] as string | undefined;
+
+  let transport: StreamableHTTPServerTransport;
+
+  if (sessionId && transports[sessionId]) {
+    // Reuse existing transport
+    transport = transports[sessionId];
+  } else if (!sessionId && isInitializeRequest(req.body)) {
+    // New initialization request
+    transport = new StreamableHTTPServerTransport({
+      sessionIdGenerator: () => crypto.randomUUID(),
+      onsessioninitialized: (sessionId) => {
+        // Store the transport by session ID
+        transports[sessionId] = transport;
+      },
+    });
+
+    // Clean up transport when closed
+    transport.onclose = () => {
+      if (transport.sessionId) {
+        delete transports[transport.sessionId];
+      }
+    };
+
+    const roles = req.unchainedContext.user.roles || [];
+    const server = createMcpServer(req.unchainedContext, roles);
+    await server.connect(transport);
+  } else {
+    // Invalid request
+    res.status(400).json({
+      jsonrpc: '2.0',
+      error: {
+        code: -32000,
+        message: 'Bad Request: No valid session ID provided',
+      },
+      id: null,
+    });
+    return;
+  }
+
+  // Handle the request
+  await transport.handleRequest(req, res, req.body);
+};
+
+// Reusable handler for GET and DELETE requests
+const handleSessionRequest: RequestHandler = async (req, res) => {
+  const sessionId = req.headers['mcp-session-id'] as string | undefined;
+  if (!sessionId || !transports[sessionId]) {
+    res.status(400).send('Invalid or missing session ID');
+    return;
+  }
+
+  const transport = transports[sessionId];
+  await transport.handleRequest(req, res);
+};
+
+const createMCPMiddleware: RequestHandler = (req, res, next) => {
+  if (!(req as any).unchainedContext.user) {
+    res.status(401);
+    res.header(
+      'WWW-Authenticate',
+      `Bearer realm="Unchained MCP", error="invalid_token", resource="${process.env.ROOT_URL || 'http://localhost:4010'}",`,
+    );
+    res.json({
+      error: 'invalid_token',
+      resource_metadata: `${process.env.ROOT_URL || 'http://localhost:4010'}/.well-known/oauth-protected-resource`,
+    });
+    return;
+  }
+
+  if (req.method === 'POST') {
+    return handlePostRequest(req, res, next);
+  } else if (req.method === 'GET' || req.method === 'DELETE') {
+    return handleSessionRequest(req, res, next);
+  }
+  res.status(405).send('Method Not Allowed');
+};
+
+export default createMCPMiddleware;

package/src/express/createTempUploadMiddleware.ts

@@ -0,0 +1,60 @@
+import { createLogger } from '@unchainedshop/logger';
+import { checkAction } from '../acl.js';
+import { actions } from '../roles/index.js';
+import { Context } from '../context.js';
+import { getFileAdapter } from '@unchainedshop/core-files';
+
+const logger = createLogger('unchained:temp-upload');
+
+const methodWrongHandler = (res) => {
+  logger.error('Method not supported, return 404');
+  res.writeHead(404);
+  res.end();
+  return;
+};
+
+export default async function tempUploadMiddleware(
+  req: Request & { query?: any; files: any; unchainedContext: Context },
+  res,
+) {
+  try {
+    const context = req.unchainedContext;
+
+    if (req.method !== 'POST') {
+      return methodWrongHandler(res);
+    }
+
+    await checkAction(context, (actions as any).uploadTempFile);
+
+    const [data] = req.files || [];
+
+    const file = await context.services.files.uploadFileFromStream({
+      directoryName: 'temp-uploads',
+      rawFile: {
+        filename: data.originalname,
+        buffer: data.buffer,
+        mimetype: data.mimetype,
+      },
+      meta: { fieldname: data.fieldname, encoding: data.encoding },
+    });
+
+    // Add an expiration date to this file manually!
+    const expires = new Date(Date.now() + 24 * 60 * 60 * 1000);
+    await context.modules.files.update(file._id, {
+      expires, // Default to 1 hour
+    });
+
+    const fileUploadAdapter = getFileAdapter();
+    const rawUrl = await fileUploadAdapter.createDownloadURL(file);
+    const url = context.modules.files.normalizeUrl(rawUrl, {});
+    const body = JSON.stringify({ fileId: file._id, url, expires: expires.toISOString() });
+
+    res.writeHead(200);
+    res.end(body);
+  } catch (e) {
+    logger.error(e.message);
+    res.writeHead(503);
+    res.end(JSON.stringify({ name: e.name, code: e.code, message: e.message }));
+    return;
+  }
+}

package/src/express/index.ts

@@ -1,17 +1,21 @@
 import e from 'express';
-import { getCurrentContextResolver, LoginFn, LogoutFn } from '../context.js';
-import createBulkImportMiddleware from './createBulkImportMiddleware.js';
-import createERCMetadataMiddleware from './createERCMetadataMiddleware.js';
 import session from 'express-session';
+import multer from 'multer';
 import MongoStore from 'connect-mongo';
 import { Passport } from 'passport';
 import { YogaServerInstance } from 'graphql-yoga';
 import { mongodb } from '@unchainedshop/mongodb';
 import { UnchainedCore } from '@unchainedshop/core';
 import { emit } from '@unchainedshop/events';
-import { API_EVENTS } from '../events.js';
 import { User } from '@unchainedshop/core-users';
 
+import { getCurrentContextResolver, LoginFn, LogoutFn } from '../context.js';
+import createBulkImportMiddleware from './createBulkImportMiddleware.js';
+import createERCMetadataMiddleware from './createERCMetadataMiddleware.js';
+import createTempUploadMiddleware from './createTempUploadMiddleware.js';
+import createMCPMiddleware from './createMCPMiddleware.js';
+import { API_EVENTS } from '../events.js';
+
 const resolveUserRemoteAddress = (req: e.Request) => {
   const remoteAddress =
     (req.headers['x-real-ip'] as string) ||
@@ -23,9 +27,14 @@ const resolveUserRemoteAddress = (req: e.Request) => {
   return { remoteAddress, remotePort };
 };
 
+const storage = multer.memoryStorage();
+const upload = multer({ storage: storage });
+
 const {
   BULK_IMPORT_API_PATH = '/bulk-import',
   ERC_METADATA_API_PATH = '/erc-metadata',
+  TEMP_UPLOAD_API_PATH = '/temp-upload',
+  MCP_API_PATH = '/mcp',
   GRAPHQL_API_PATH = '/graphql',
   UNCHAINED_COOKIE_NAME = 'unchained_token',
   UNCHAINED_COOKIE_PATH = '/',
@@ -62,18 +71,17 @@ const addContext = async function middlewareWithContext(
       const tokenObject = {
         _id: (req as any).sessionID,
         userId: user._id,
-        /* eslint-disable-next-line */
+
         tokenExpires: new Date((req as any).session?.cookie._expires),
       };
 
       await emit(API_EVENTS.API_LOGIN_TOKEN_CREATED, tokenObject);
 
-      /* eslint-disable-next-line */
       (user as any)._inLoginMethodResponse = true;
       return { user, ...tokenObject };
     };
 
-    const logout: LogoutFn = async (sessionId) => { /* eslint-disable-line */
+    const logout: LogoutFn = async (sessionId) => {
       // TODO: this should only logout an explicitly provided session if sessionID
       // has been provided
       // express-session destroy
@@ -127,10 +135,16 @@ export const connect = (
   {
     graphqlHandler,
     db,
-  }: { graphqlHandler: YogaServerInstance<any, any>; db: mongodb.Db; unchainedAPI: UnchainedCore },
+  }: {
+    graphqlHandler: YogaServerInstance<any, any>;
+    db: mongodb.Db;
+    unchainedAPI: UnchainedCore;
+  },
   {
     allowRemoteToLocalhostSecureCookies = false,
-  }: { allowRemoteToLocalhostSecureCookies?: boolean } = {},
+  }: {
+    allowRemoteToLocalhostSecureCookies?: boolean;
+  } = {},
 ) => {
   if (allowRemoteToLocalhostSecureCookies) {
     // Workaround: Allow to use sandbox with localhost
@@ -138,6 +152,16 @@ export const connect = (
     expressApp.use((req, res, next) => {
       req.headers['x-forwarded-proto'] = 'https';
       res.setHeader('Access-Control-Allow-Private-Network', 'true');
+      res.setHeader('Access-Control-Allow-Origin', req.headers.origin || '*');
+      res.setHeader('Access-Control-Allow-Credentials', 'true');
+      res.setHeader(
+        'Access-Control-Allow-Methods',
+        ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'].join(', '),
+      );
+      res.setHeader(
+        'Access-Control-Allow-Headers',
+        req.headers['access-control-request-headers'] || '*',
+      );
       next();
     });
   }
@@ -190,4 +214,8 @@ export const connect = (
   expressApp.use(GRAPHQL_API_PATH, graphqlHandler.handle);
   expressApp.use(ERC_METADATA_API_PATH, createERCMetadataMiddleware);
   expressApp.use(BULK_IMPORT_API_PATH, createBulkImportMiddleware);
+  expressApp.use(TEMP_UPLOAD_API_PATH, upload.any(), createTempUploadMiddleware);
+
+  expressApp.use(MCP_API_PATH, e.json({ limit: '10mb' }));
+  expressApp.use(MCP_API_PATH, createMCPMiddleware);
 };