agent-ready-mcp 0.5.4 → 0.6.1

package/dist/mcp-server.mjs

@@ -23093,6 +23093,55 @@ async function call(config2, opts) {
   }
   return payload;
 }
+async function postAnonScan(config2, url2) {
+  const path = "/api/scan";
+  let res;
+  try {
+    res = await fetch(`${config2.baseUrl}${path}`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Accept: "application/json",
+        // Funnel attribution: /api/scan is shared with the web app, so without
+        // this header keyless npm-MCP scans are recorded as source=`web`. The
+        // server tags them `mcp-npm` (distinct from `mcp`, the hosted keyed
+        // endpoint). Read only on /api/scan; ignored elsewhere.
+        "X-Agent-Ready-Client": "mcp-npm"
+      },
+      body: JSON.stringify({ url: url2 }),
+      signal: AbortSignal.timeout(config2.scanTimeoutMs)
+    });
+  } catch (err) {
+    if (err instanceof Error && err.name === "TimeoutError") {
+      throw new ApiError(
+        "timeout",
+        `Request to ${path} timed out after ${config2.scanTimeoutMs}ms.`
+      );
+    }
+    const message = err instanceof Error ? err.message : String(err);
+    throw new ApiError("network_error", `Network error calling ${path}: ${message}`);
+  }
+  const text = await res.text();
+  let payload = null;
+  if (text.length > 0) {
+    try {
+      payload = JSON.parse(text);
+    } catch {
+    }
+  }
+  if (!res.ok) {
+    const body = payload && typeof payload === "object" ? payload : null;
+    let message = typeof body?.error === "string" && body.error ? body.error : text || `HTTP ${res.status} from ${path}`;
+    if (res.status === 429) {
+      if (typeof body?.resetAt === "string") {
+        message += ` Quota resets ${body.resetAt.slice(0, 10)}.`;
+      }
+      throw new ApiError("quota_exhausted", message, res.status);
+    }
+    throw new ApiError(`http_${res.status}`, message, res.status);
+  }
+  return payload;
+}
 async function postScan(config2, body) {
   return call(config2, {
     method: "POST",
@@ -31531,7 +31580,31 @@ var POLL_INTERVAL_MS = 2e3;
 async function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
+var ANON_TIER_NOTE = "Scanned on the anonymous free tier (3 scans per 30 days per IP, 25-page depth). A Pro API key (AGENT_READY_API_KEY) unlocks 50 scans/month, 250-page depth, scan history via get_scan, and weekly monitoring \u2014 https://agent-ready.dev/pricing";
 async function scanSite(config2, input) {
+  if (!config2.apiKey) {
+    let res;
+    try {
+      res = await postAnonScan(config2, input.url);
+    } catch (err) {
+      if (err instanceof ApiError) {
+        const hint = err.status === 429 ? " Set a Pro API key (AGENT_READY_API_KEY, from https://agent-ready.dev/dashboard/api-keys) to remove the anonymous cap." : "";
+        throw new ToolError(err.code, err.message + hint);
+      }
+      throw err;
+    }
+    if (!res || typeof res !== "object" || !res.scan) {
+      throw new ToolError(
+        "invalid_response",
+        "Anonymous scan returned no scan payload from /api/scan."
+      );
+    }
+    const payload = { ...res.scan, message: ANON_TIER_NOTE };
+    return {
+      content: [{ type: "text", text: JSON.stringify(payload) }],
+      structuredContent: payload
+    };
+  }
   let placeholder;
   try {
     placeholder = await postScan(config2, {
@@ -31605,6 +31678,12 @@ async function getScanById(config2, input) {
       if (err.status === 404) {
         throw new ToolError("not_found", `Scan ${input.id} not found.`);
       }
+      if (err.code === "missing_api_key") {
+        throw new ToolError(
+          "missing_api_key",
+          "get_scan needs a Pro API key (scan history is account-scoped). scan_site works without one on the anonymous tier and returns its result inline. Keys: https://agent-ready.dev/dashboard/api-keys"
+        );
+      }
       throw new ToolError(err.code, err.message);
     }
     throw err;
@@ -31754,7 +31833,7 @@ var validateStructuredDataInputShape = {
 // src/server.ts
 var SERVER_INFO = {
   name: "agent-ready",
-  version: "0.5.4"
+  version: "0.6.1"
 };
 function createMcpServer(config2) {
   const server = new McpServer(SERVER_INFO);
@@ -31768,7 +31847,7 @@ function createMcpServer(config2) {
     "scan_site",
     {
       title: "Scan a site for AI agent readability",
-      description: "Runs the agent-ready.dev scanner against a URL and returns structured results: Vercel score, llmstxt.org score, and per-check findings with remediation hints. Scans may take up to ~60s; if the local poll deadline elapses, the tool returns the scan id and asks you to poll with get_scan.",
+      description: "Runs the agent-ready.dev scanner against a URL and returns structured results: Vercel score, llmstxt.org score, and per-check findings with remediation hints. Works without an API key on the anonymous free tier (3 scans/30 days per IP, 25-page depth, synchronous). With a Pro AGENT_READY_API_KEY it scans deeper (up to 250 pages) and may take up to ~60s; if the local poll deadline elapses, the tool returns the scan id and asks you to poll with get_scan.",
       inputSchema: scanSiteInputShape,
       outputSchema: scanOutputShape,
       annotations: READ_ONLY_OPEN_WORLD
@@ -31785,7 +31864,7 @@ function createMcpServer(config2) {
     "get_scan",
     {
       title: "Get a previous scan by id",
-      description: "Fetches a completed or in-progress scan by its id. Only scans owned by the authenticated API key's user are returned.",
+      description: "Fetches a completed or in-progress scan by its id. Requires a Pro API key \u2014 scan history is account-scoped. (Anonymous scan_site calls return their result inline, so keyless use never needs this tool.)",
       inputSchema: getScanInputShape,
       outputSchema: scanOutputShape,
       annotations: READ_ONLY_OPEN_WORLD
@@ -31853,7 +31932,7 @@ async function main() {
   const config2 = createConfig();
   if (!config2.apiKey) {
     process.stderr.write(
-      "agent-ready-mcp started without AGENT_READY_API_KEY \u2014 tools will return a configuration message until a key is set. Issue a Pro API key at https://agent-ready.dev/dashboard/api-keys.\n"
+      "agent-ready-mcp started without AGENT_READY_API_KEY \u2014 scan_site runs on the anonymous free tier (3 scans per 30 days per IP, 25-page depth); get_scan needs a Pro key. Issue one at https://agent-ready.dev/dashboard/api-keys for deeper scans, history, and monitoring.\n"
     );
   }
   const server = createMcpServer(config2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-ready-mcp",
-  "version": "0.5.4",
+  "version": "0.6.1",
   "mcpName": "io.github.mlava/agent-ready-mcp",
   "description": "MCP server for Agent Ready — scan any URL for AI-readability against the Vercel Agent Readability Spec, the llmstxt.org standard, and agent-protocol manifests (MCP server cards, A2A, agents.json, agent-permissions.json, UCP, x402, NLWeb). 69 checks with per-check fix guidance.",
   "license": "MIT",