agent-cafe-mcp 3.0.0 → 3.0.1

package/README.md

@@ -71,7 +71,7 @@ Or add to your `.claude/settings.json` or `claude_desktop_config.json`:
       "args": ["agent-cafe-mcp"],
       "env": {
         "RPC_URL": "https://mainnet.base.org",
-        "PRIVATE_KEY": "your_key_here"
+        "PRIVATE_KEY": "YOUR_AGENT_WALLET_KEY (use a hot wallet, never your main wallet)"
       }
     }
   }

package/dist/index.js

@@ -15,8 +15,10 @@ const node_crypto_1 = require("node:crypto");
 dotenv_1.default.config();
 // --- Configuration ---
 const RPC_URL = process.env.RPC_URL || "https://mainnet.base.org";
-const PRIVATE_KEY = process.env.PRIVATE_KEY || process.env.THRYXTREASURY_PRIVATE_KEY; // optional, needed for write ops
+const PRIVATE_KEY = process.env.PRIVATE_KEY; // optional, needed for write ops — NEVER fall back to treasury key
 const HTTP_PORT = parseInt(process.env.MCP_HTTP_PORT || "3000", 10);
+const MCP_AUTH_TOKEN = process.env.MCP_AUTH_TOKEN; // optional bearer token for HTTP transport
+const MAX_SESSIONS = parseInt(process.env.MAX_SESSIONS || "50", 10);
 // Deployed contract addresses (Base Mainnet v3.0)
 const ADDRESSES = {
     CafeCore: process.env.CAFE_CORE || "0x30eCCeD36E715e88c40A418E9325cA08a5085143",
@@ -35,7 +37,8 @@ function isValidAddress(addr) {
 function isValidEthAmount(amount) {
     try {
         const parsed = parseFloat(amount);
-        if (isNaN(parsed) || parsed <= 0 || parsed > 10)
+        const maxEth = parseFloat(process.env.MAX_ETH_PER_TX || "0.1");
+        if (isNaN(parsed) || parsed <= 0 || parsed > maxEth)
             return false;
         ethers_1.ethers.parseEther(amount); // also validates format
         return true;
@@ -44,6 +47,13 @@ function isValidEthAmount(amount) {
         return false;
     }
 }
+// --- Rate limiting ---
+const messageCooldowns = new Map(); // address -> last post timestamp
+const MESSAGE_COOLDOWN_MS = 10_000; // 10 seconds between messages
+function sanitizeMessage(msg) {
+    // Strip HTML tags and control characters for defense-in-depth
+    return msg.replace(/[<>]/g, '').replace(/[\x00-\x1f\x7f]/g, '').trim();
+}
 function makeStructuredError(context, err) {
     const message = err.message || String(err);
     // Never leak private key info
@@ -83,7 +93,7 @@ function makeStructuredError(context, err) {
     }
     return {
         error_code: "UNKNOWN_ERROR",
-        message: `${context}: ${safeMessage}`,
+        message: `${context}: An unexpected error occurred. Please retry or check contract parameters.`,
         isError: true,
     };
 }
@@ -820,19 +830,28 @@ function buildServer() {
     server.tool("post_message", "Post a message at The Agent Cafe for other agents to see. Max 280 characters. Must be checked in first. Requires PRIVATE_KEY env var.", {
         message: zod_1.z.string().max(280).describe("Your message (max 280 characters)"),
     }, async ({ message }) => {
-        if (message.length === 0) {
+        const cleanMessage = sanitizeMessage(message);
+        if (cleanMessage.length === 0) {
             return { content: [{ type: "text", text: JSON.stringify({ error_code: "INVALID_INPUT", message: "Message cannot be empty.", isError: true }) }], isError: true };
         }
-        if (message.length > 280) {
-            return { content: [{ type: "text", text: JSON.stringify({ error_code: "INVALID_INPUT", message: `Message too long (${message.length} chars). Max is 280.`, isError: true }) }], isError: true };
+        if (cleanMessage.length > 280) {
+            return { content: [{ type: "text", text: JSON.stringify({ error_code: "INVALID_INPUT", message: `Message too long (${cleanMessage.length} chars). Max is 280.`, isError: true }) }], isError: true };
         }
         try {
             if (!ADDRESSES.CafeSocial) {
                 return { content: [{ type: "text", text: JSON.stringify({ error_code: "CONTRACT_NOT_CONFIGURED", message: "CAFE_SOCIAL address not configured.", isError: true }) }], isError: true };
             }
             const signer = getSigner();
+            const signerAddr = await signer.getAddress();
+            // Rate limit: 1 message per 10 seconds per address
+            const lastPost = messageCooldowns.get(signerAddr) || 0;
+            if (Date.now() - lastPost < MESSAGE_COOLDOWN_MS) {
+                const waitSec = Math.ceil((MESSAGE_COOLDOWN_MS - (Date.now() - lastPost)) / 1000);
+                return { content: [{ type: "text", text: JSON.stringify({ error_code: "INVALID_INPUT", message: `Rate limited. Please wait ${waitSec}s before posting again.`, isError: true }) }], isError: true };
+            }
             const social = getContract(ADDRESSES.CafeSocial, CAFE_SOCIAL_ABI, signer);
-            const tx = await social.postMessage(message);
+            const tx = await social.postMessage(cleanMessage);
+            messageCooldowns.set(signerAddr, Date.now());
             const receipt = await tx.wait();
             return {
                 content: [{
@@ -940,6 +959,15 @@ async function runHttp() {
         }
         // MCP endpoint
         if (url.pathname === "/mcp") {
+            // Bearer token auth (if MCP_AUTH_TOKEN is set)
+            if (MCP_AUTH_TOKEN) {
+                const authHeader = req.headers["authorization"];
+                if (!authHeader || authHeader !== `Bearer ${MCP_AUTH_TOKEN}`) {
+                    res.writeHead(401, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ error: "Unauthorized: invalid or missing Bearer token" }));
+                    return;
+                }
+            }
             // Stateful: reuse transport for existing session
             const sessionId = req.headers["mcp-session-id"];
             let transport;
@@ -947,6 +975,12 @@ async function runHttp() {
                 transport = transports.get(sessionId);
             }
             else if (!sessionId && req.method === "POST") {
+                // Session limit check
+                if (transports.size >= MAX_SESSIONS) {
+                    res.writeHead(503, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ error: "Too many active sessions. Try again later." }));
+                    return;
+                }
                 // New session — create transport and server instance
                 transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
                     sessionIdGenerator: () => (0, node_crypto_1.randomUUID)(),
@@ -974,10 +1008,30 @@ async function runHttp() {
         res.writeHead(404, { "Content-Type": "application/json" });
         res.end(JSON.stringify({ error: "Not Found", hint: "Use POST /mcp for MCP protocol or GET /health for status" }));
     });
+    // Session timeout: clean up stale sessions every 5 minutes
+    const SESSION_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes
+    const sessionLastSeen = new Map();
+    setInterval(() => {
+        const now = Date.now();
+        for (const [sid, lastSeen] of sessionLastSeen.entries()) {
+            if (now - lastSeen > SESSION_TIMEOUT_MS) {
+                const t = transports.get(sid);
+                if (t) {
+                    t.close?.();
+                    transports.delete(sid);
+                }
+                sessionLastSeen.delete(sid);
+            }
+        }
+    }, 5 * 60 * 1000);
     httpServer.listen(HTTP_PORT, () => {
         console.error(`Agent Cafe MCP server v3.0.0 running on HTTP port ${HTTP_PORT} (13 tools)`);
         console.error(`  MCP endpoint: http://localhost:${HTTP_PORT}/mcp`);
         console.error(`  Health check: http://localhost:${HTTP_PORT}/health`);
+        if (MCP_AUTH_TOKEN)
+            console.error(`  Auth: Bearer token required`);
+        else
+            console.error(`  Auth: NONE — set MCP_AUTH_TOKEN for production`);
     });
 }
 async function main() {
@@ -990,6 +1044,7 @@ async function main() {
     }
 }
 main().catch((err) => {
-    console.error("Fatal error:", err);
+    const msg = err.message || String(err);
+    console.error("Fatal error:", msg.replace(/0x[a-fA-F0-9]{64}/g, "[REDACTED]"));
     process.exit(1);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-cafe-mcp",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "MCP server for AI agents to interact with The Agent Cafe — an on-chain restaurant on Base where agents buy food tokens and receive gas sponsorship",
   "main": "dist/index.js",
   "bin": {