@usethrottle/mcp 0.4.1 → 0.4.3

package/dist/mcp.js

@@ -194,6 +194,8 @@ add("Customers", "customers", ["read", "write"], { read: "View customers", write
 add("Customers", "customer_pii", ["read"], { read: "View customer PII" }, { sensitive: true });
 add("Customers", "customer_addresses", ["read", "write"], { read: "View addresses", write: "Manage addresses" });
 add("Customers", "customer_payment_methods", ["read", "write"], { read: "View stored cards", write: "Manage stored cards" }, { sensitive: true });
+add("Customers", "customer_tokens", ["read"], { read: "Check shoppers' sign-in tokens" });
+add("Customers", "customer_directory", ["read"], { read: "Find customers by name or email" }, { sensitive: true });
 add(
   "Customer accounts",
   "customer_accounts",
@@ -326,6 +328,7 @@ var EVENT_SCOPE_OVERRIDES = {
   "subscription.invoice_refunded": "payment_refunds:read",
   "payment.disputed": "payment_disputes:read",
   "payment.dispute_cleared": "payment_disputes:read",
+  "payment.dispute_lost": "payment_disputes:read",
   "fulfillment.digital.delivered": "fulfillment_digital:read"
 };
 var PREFIX_RULES = [
@@ -634,7 +637,7 @@ var ACTIONS = [
   {
     id: "search_customers",
     title: "Search customers",
-    description: "Find customers by name, email or external id, or list them by creation date. Over an OAuth connection (ChatGPT, Claude) text search is not available \u2014 list by date instead \u2014 because every field it could match is withheld there.",
+    description: "Find customers by name, company, email or external id, or list them by creation date. Over an OAuth connection (ChatGPT, Claude) text search is not available \u2014 list by date instead \u2014 because every field it could match is withheld there.",
     kind: "read",
     scopes: ["customers:read"],
     input: [
@@ -1479,7 +1482,7 @@ var ACTIONS = [
   {
     id: "create_customer",
     title: "Create a customer",
-    description: "Create a customer record. Use search_customers first if the buyer may already exist \u2014 this does not de-duplicate by email.",
+    description: "Create a customer record. Email and externalId are each unique per application: a value that already belongs to a customer fails with 409 customer_already_exists rather than returning the existing record, so use search_customers first if the buyer may already exist.",
     kind: "write",
     scopes: ["customers:write"],
     input: [
@@ -1557,7 +1560,7 @@ var ACTIONS = [
   {
     id: "create_checkout_link",
     title: "Create a checkout link",
-    description: "Build a cart from line items and return a hosted checkout URL the buyer can pay at. Prices are in minor units (2500 = $25.00).",
+    description: "Build a cart from line items and return a hosted checkout URL the buyer can pay at. Prices are integers in the minor units of the cart currency (2500 = 25.00 in a two-decimal currency).",
     kind: "write",
     scopes: ["carts:write", "cart_items:write", "checkout_sessions:write"],
     input: [
@@ -1711,6 +1714,29 @@ var ACTIONS = [
     channels: ["mcp", "zapier", "make", "n8n"],
     idempotent: true
   },
+  {
+    id: "set_subscription_payment_method",
+    title: "Change a subscription's card",
+    description: "Set the saved card one subscription renews on. Only that subscription moves; the customer's default card and their other subscriptions stay as they are. Nothing is charged now.",
+    kind: "write",
+    scopes: ["subscriptions:write"],
+    input: [
+      { name: "id", type: "string", required: true, description: "Subscription id." },
+      {
+        name: "paymentMethodId",
+        type: "string",
+        required: true,
+        description: "One of the subscription customer's saved cards (GET /api/v1/customers/:id/payment-methods): active and in date."
+      }
+    ],
+    requests: [{ method: "PATCH", path: "/api/v1/subscriptions/:id/payment-method" }],
+    channels: ["mcp", "zapier", "make", "n8n"],
+    idempotent: true,
+    guardrails: [
+      "Changes which card future renewals charge. Confirm the subscription and the card (brand, last four) with the user first.",
+      "409 payment_method_unusable: the card is not this customer's active, in-date saved card. 409 invalid_state: the subscription is cancelled or completed."
+    ]
+  },
   {
     id: "cancel_subscription",
     title: "Cancel a subscription",
@@ -2422,6 +2448,14 @@ var HANDLERS = {
       idempotencyKey: `mcp-manage-subscription-${id}-${action}-${Date.now()}`
     });
   },
+  set_subscription_payment_method: async (ctx, args) => {
+    const id = String(args.id);
+    return ctx.client.patch(`/api/v1/subscriptions/${id}/payment-method`, {
+      // `id` is the path parameter; the body is `.strict()`.
+      body: { paymentMethodId: args.paymentMethodId },
+      idempotencyKey: `mcp-set-subscription-card-${id}-${String(args.paymentMethodId)}-${Date.now()}`
+    });
+  },
   create_quote: async (ctx, args) => {
     const items = Array.isArray(args.items) ? args.items : [];
     if (args.netN !== void 0 && items.some((item) => item && item.recurring)) {
@@ -2686,6 +2720,7 @@ var DISPLAY_QUALIFIERS = [
   "Payment processing",
   "Disputed",
   "Authorization expired",
+  "Chargeback lost",
   "Returned",
   "Partially returned",
   "Delivered",
@@ -2763,6 +2798,8 @@ var PAYMENT = {
   cardBrand: S,
   disputed: S,
   disputeOpenedAt: S,
+  disputeOutcome: S,
+  disputeClosedAt: S,
   errorCode: S,
   netN: S,
   netNSource: S,
@@ -2825,6 +2862,10 @@ var SUBSCRIPTION = {
   pendingIntervalCount: S,
   scheduleTotal: S,
   nextPaymentAmount: S,
+  // A physical subscription (0236): the method is an enum, and the ship-to is
+  // kept to its country like every other address here.
+  deliveryMethod: S,
+  shippingAddress: ADDRESS,
   paymentSchedule: [{
     index: S,
     amount: S,
@@ -3201,7 +3242,7 @@ var OAUTH_PROJECTIONS = {
 };
 
 // src/server.ts
-var VERSION = true ? "0.4.1" : "0.0.0-dev";
+var VERSION = true ? "0.4.3" : "0.0.0-dev";
 function registerableActions(policy) {
   const isProduction = policy.identity.environment.providerEnvironment === "production";
   return actionsForChannel("mcp").filter((action) => {
@@ -3230,7 +3271,7 @@ function buildInstructions(identity, actions, policy) {
     '- The application can vary per call: pass "applicationId" on a read or analytics tool to reach a different application in this workspace, and call list_applications to see which ones this connection can reach. Omitting applicationId uses the application this connection was authorized for.',
     "- Every analytics result covers exactly ONE application and names it in `application`. Say which application a figure describes. If the user asks about their business as a whole and this connection reaches more than one application, do not answer from the default alone \u2014 call list_applications, then query each and add them up, or ask which application they mean.",
     '- List tools return { data, pagination }. When pagination.hasMore is true, pass pagination.cursor back as "cursor" rather than raising "limit".',
-    "- Amounts are integer minor units (2500 = $25.00).",
+    "- Amounts are integer minor units of the record's currency (2500 = 25.00 in a two-decimal currency; JPY has none, KWD has three).",
     "- Throttle rejects snake_case on public request bodies. Before writing integration code, confirm shapes with describe_endpoint and check bodies with validate_payload instead of guessing field names.",
     "- API errors come back as text with a stable code. On insufficient_scopes, tell the user which scope to add \u2014 do not retry.",
     "- Analytics results may mark a section `omitted`. That means UNKNOWN, never zero. When `grantable` is false the data cannot be read over this connection at all \u2014 say so rather than reporting an absence."