@yawlabs/lemonsqueezy-mcp 0.4.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +4 -4
  2. package/dist/index.js +11366 -2262
  3. package/package.json +8 -5
package/README.md CHANGED
@@ -54,7 +54,7 @@ Add to `claude_desktop_config.json`:
54
54
  }
55
55
  ```
56
56
 
57
- ## Tools (59)
57
+ ## Tools (61)
58
58
 
59
59
  ### Users
60
60
  - `ls_get_user` — Get the authenticated user
@@ -157,7 +157,7 @@ Add to `claude_desktop_config.json`:
157
157
 
158
158
  ## Features
159
159
 
160
- - **Full API coverage** — All 17 LemonSqueezy API resources with 59 tools
160
+ - **Full API coverage** — All 17 LemonSqueezy API resources with 61 tools
161
161
  - **JSON:API support** — Filtering, pagination, and relationship inclusion on all list/get operations
162
162
  - **Zero runtime dependencies** — Single bundled file for instant `npx` startup
163
163
  - **License API** — Activate, validate, and deactivate license keys without an API key
@@ -175,7 +175,7 @@ All configuration is via environment variables. Only `LEMONSQUEEZY_API_KEY` (or
175
175
  | `LEMONSQUEEZY_API_KEY` | LemonSqueezy API token. |
176
176
  | `LEMONSQUEEZY_API_KEY_COMMAND` | Command whose stdout produces the API key. Overrides `LEMONSQUEEZY_API_KEY`. Output is cached for 1 hour. Use this to pull short-lived credentials from a vault (`op read`, `gcloud secrets versions access`, etc.) without writing them to env vars. |
177
177
  | `LEMONSQUEEZY_ALLOWED_STORE_IDS` | Comma-separated allowlist of store IDs. When set, tools that receive a `storeId` input reject calls to any other store. Note: operations that don't take an explicit `storeId` (e.g. `ls_refund_order`) are not gated by this — pair with `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS`. |
178
- | `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` | Rejects `ls_refund_order` calls above this amount. |
178
+ | `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` | Rejects `ls_refund_order` and `ls_refund_subscription_invoice` calls above this amount. |
179
179
  | `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` | Max destructive tool calls per 60-second rolling window. In-process limit — per MCP server instance, not global. |
180
180
  | `LEMONSQUEEZY_LOG=json` | Emit one JSON log line to stderr per tool and HTTP call. Destructive calls are tagged `audit: true` and include their inputs. |
181
181
 
@@ -200,7 +200,7 @@ For unattended/agentic use against a live store, we recommend:
200
200
  What the server does **not** do and you must own at the caller level:
201
201
 
202
202
  - **Idempotency / dedupe store** — MCP servers are stateless subprocesses; cross-invocation dedupe belongs in your agent or orchestrator.
203
- - **Webhook reconciliation** — subscribe to LemonSqueezy webhooks in a separate long-running process to reconcile state when API writes succeed but the response is lost.
203
+ - **Webhook reconciliation** — subscribe to LemonSqueezy webhooks in a separate long-running process to reconcile state when API writes succeed but the response is lost. See [@yawlabs/lemonsqueezy-webhook-sink](https://github.com/YawLabs/lemonsqueezy-webhook-sink) for a ready-made sink.
204
204
  - **Metrics / dashboards** — the server emits structured logs; derive metrics in your log pipeline.
205
205
 
206
206
  See [SEMVER.md](./SEMVER.md) for the versioning policy.