@zenrows/mcp 1.0.7 → 1.1.1

package/dist/http.js

@@ -1,9 +1,19 @@
 import { Hono } from "hono";
+import { cors } from "hono/cors";
 import { serve } from "@hono/node-server";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { createServer } from "./server.js";
 // ─── app ──────────────────────────────────────────────────────────────────────
 const app = new Hono();
+// CORS — required for browser-side MCP clients (Claude.ai, Cursor web, etc.)
+// All origins allowed: the API key is the auth mechanism, not the origin.
+app.use(cors({
+    origin: "*",
+    allowMethods: ["GET", "POST", "OPTIONS"],
+    allowHeaders: ["Authorization", "Content-Type", "Accept", "Mcp-Session-Id"],
+    exposeHeaders: ["WWW-Authenticate", "Mcp-Session-Id"],
+    maxAge: 86_400,
+}));
 function extractApiKey(req) {
     const auth = req.headers.get("authorization");
     if (auth) {
@@ -13,12 +23,24 @@ function extractApiKey(req) {
     }
     return new URL(req.url).searchParams.get("apikey") ?? undefined;
 }
+const AUTH_SERVER = process.env.OAUTH_AUTH_SERVER ?? "https://app.zenrows.com";
+app.get("/.well-known/oauth-authorization-server", (c) => c.json({
+    issuer: AUTH_SERVER,
+    authorization_endpoint: `${AUTH_SERVER}/oauth/mcp/authorize`,
+    token_endpoint: `${AUTH_SERVER}/oauth/mcp/token`,
+    response_types_supported: ["code"],
+    grant_types_supported: ["authorization_code"],
+    code_challenge_methods_supported: ["S256"],
+    token_endpoint_auth_methods_supported: ["none"],
+}));
 app.all("/mcp", async (c) => {
     const apiKey = extractApiKey(c.req.raw);
     if (!apiKey) {
         return c.json({
             error: "Missing API key. Use Authorization: Bearer <key> header or ?apikey=<key> query param.",
-        }, 401);
+        }, 401, {
+            "WWW-Authenticate": `Bearer realm="${AUTH_SERVER}", resource_metadata="https://mcp.zenrows.com/.well-known/oauth-authorization-server"`,
+        });
     }
     const transport = new WebStandardStreamableHTTPServerTransport({
         sessionIdGenerator: undefined, // stateless — no session tracking between requests

package/dist/server.js

@@ -11,6 +11,11 @@ export function createServer(apiKey) {
     });
     // ─── scrape ────────────────────────────────────────────────────────────────
     server.registerTool("scrape", {
+        annotations: {
+            title: "Scrape Webpage",
+            readOnlyHint: true,
+            destructiveHint: false,
+        },
         description: `Scrape any webpage and return its content using ZenRows.
 
 Use this tool to fetch webpage content for analysis. By default it returns clean

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zenrows/mcp",
-  "version": "1.0.7",
+  "version": "1.1.1",
   "description": "ZenRows MCP server — Universal Scraper API for AI coding assistants",
   "type": "module",
   "bin": {