alora-mcp 0.6.0 → 0.7.1

package/README.md

@@ -26,13 +26,15 @@ Or in any MCP client's JSON config:
 }
 ```
 
-## Connect (once, takes a minute)
+## Connect (one email, one click)
 
-1. Create a free account at [alora.build/register](https://alora.build/register) — $0.50 of credit included, no card.
-2. Run `npx alora-cli connect` in your terminal — it prints a code.
-3. Paste the code at [alora.build/activate](https://alora.build/activate).
+Just ask your agent to set you up. It asks for your email and calls the `account_create_and_connect` tool — you get **a single email, and one click** creates your account ($0.50 of free credit included, no card), verifies it, and authorizes the agent. No password to invent; you log into the panel later with a magic link.
 
-The token lands in `~/.alora/config.json`, and from then on your agent takes it from here. Full playbook for agents: [alora.build/llms.txt](https://alora.build/llms.txt).
+Already have an account? The same flow sends you an authorize link instead — one click never creates or touches an existing account without you signing in.
+
+Prefer the classic way? Create an account at [alora.build/register](https://alora.build/register), run `npx alora-cli connect`, and paste the code at [alora.build/activate](https://alora.build/activate).
+
+Either way the token lands in `~/.alora/config.json`, and from then on your agent takes it from here. Full playbook for agents: [alora.build/llms.txt](https://alora.build/llms.txt).
 
 ## What your agent can do (45 tools)
 
@@ -45,6 +47,7 @@ The token lands in `~/.alora/config.json`, and from then on your agent takes it
 | **Configure** | `secrets_set` (encrypted, injected as env) · `domain_connect` · `egress_ip_allocate` (static egress IP) |
 | **Use AI inside the app** | `ai_enable` — the deployed app runs `claude -p` with the owner's own Claude account |
 | **Buy domains** | `domain_search` · `domain_buy` — always gated on the owner's approval by email |
+| **Be an MCP server** | your deployed app can expose its own `/mcp` endpoint, with per-customer tokens (`token_create`) and identity headers — an [MCP-first SaaS in one deploy](https://alora.build/blog/host-mcp-server) |
 | **Know what's happening** | `analytics_summary` · `analytics_users` · `wallet_balance` · `changelog` |
 
 ## How it behaves

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "alora-mcp",
-  "version": "0.6.0",
-  "description": "MCP server for Alora, the cloud where your agent works — deploy, preview, share and run the apps your agent writes. Claude Code, Codex, Cursor and any MCP client.",
+  "version": "0.7.1",
+  "description": "MCP server for Alora, the cloud where your agent works \u2014 deploy, preview, share and run the apps your agent writes. Claude Code, Codex, Cursor and any MCP client.",
   "type": "module",
   "bin": {
     "alora-mcp": "src/index.js"
   },
   "dependencies": {
-    "alora-sdk": "^0.6.0",
+    "alora-sdk": "^0.7.0",
     "@modelcontextprotocol/sdk": "^1.12.0",
     "tar": "^7.4.3",
     "zod": "^3.24.0"

package/src/index.js

@@ -4,7 +4,7 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
-import { readFileSync, rmSync } from 'node:fs';
+import { readFileSync, rmSync, writeFileSync, mkdirSync } from 'node:fs';
 import { homedir, tmpdir } from 'node:os';
 import path from 'node:path';
 import * as tar from 'tar';
@@ -18,7 +18,7 @@ function client() {
   return new AloraClient({ api: cfg.api || 'https://api.alora.build', token: cfg.token });
 }
 
-const server = new McpServer({ name: 'alora', version: '0.6.0' });
+const server = new McpServer({ name: 'alora', version: '0.7.0' });
 
 const ok = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
 const asError = (e) => ({
@@ -43,6 +43,30 @@ server.registerTool('whoami', {
   inputSchema: {},
 }, wrap(() => client().whoami()));
 
+// --- alta iniciada por el agente: el usuario solo toca UN email ---
+server.registerTool('account_create_and_connect', {
+  description: 'SIN cuenta de Alora todavía: preguntale al usuario su email EN EL CHAT y llamá esta tool. Le llega UN email; con un click se crea la cuenta (si no existe), se verifica, se activan sus US$0.50 gratis y este agente queda autorizado. Después llamá account_connect_poll con el device_code hasta que apruebe (el link vence en 15 min). NUNCA inventes un email ni uses uno descartable — tiene que ser el inbox real del usuario. Si el email ya tiene cuenta, le llega un pedido de autorización al flujo normal (login + Authorize).',
+  inputSchema: {
+    email: z.string().describe('El email que el usuario te dio en el chat'),
+    agent_name: z.string().optional().describe('Cómo se llama este agente, ej: "Claude de Ana"'),
+  },
+}, wrap(({ email, agent_name }) => client().signupStart(email, agent_name || 'agente MCP')));
+
+server.registerTool('account_connect_poll', {
+  description: 'Después de account_create_and_connect: llamá esto cada ~5s con el device_code. Cuando el usuario toque el email devuelve approved y GUARDA el token automáticamente — desde ahí todas las demás tools funcionan. expired = el link venció sin click: pedile al usuario que revise el inbox y volvé a empezar.',
+  inputSchema: { device_code: z.string() },
+}, wrap(async ({ device_code }) => {
+  const res = await client().devicePoll(device_code);
+  if (res.status === 'approved' && res.token) {
+    let cfg = {};
+    try { cfg = JSON.parse(readFileSync(CONFIG_FILE, 'utf8')); } catch {}
+    mkdirSync(path.dirname(CONFIG_FILE), { recursive: true });
+    writeFileSync(CONFIG_FILE, JSON.stringify({ ...cfg, api: cfg.api || 'https://api.alora.build', token: res.token }, null, 2));
+    return { status: 'approved', note: 'Token guardado — ya podés usar todas las tools (probá whoami).' };
+  }
+  return res;
+}));
+
 server.registerTool('list_projects', {
   description: 'Lista los proyectos del workspace con URL, versión activa y estado.',
   inputSchema: {},