appleby-proxy-mcp 1.0.0 → 1.0.1

package/AGENTS.md

@@ -102,6 +102,9 @@ npm test
 
 ## Releases
 
+- **1.0.1** — `proxy_create_proxy_host` says public hosts need the shared Cloudflare real-IP
+  include; access-list tools drop `expand: proxy_hosts` (NPM 2.16 answers 500 — use
+  `proxy_host_count`).
 - **1.0.0** — first release: 43 tools for NPM 2.16 (proxy, redirection and 404 hosts, streams,
   certificates, access lists, default site, log viewer, audit log).
 

package/index.js

@@ -7,7 +7,7 @@ import { readFileSync, writeFileSync, existsSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
 
-const VERSION = "1.0.0";
+const VERSION = "1.0.1";
 
 // --- Interactive setup ---
 
@@ -224,7 +224,7 @@ server.tool("proxy_get_proxy_host", "Get one proxy host, including its advanced_
     return { content: text(res) };
 });
 
-server.tool("proxy_create_proxy_host", "Create a proxy host. NPM writes and reloads nginx immediately; a config nginx rejects is saved as <id>.conf.err and the host goes offline (meta.nginx_online=false) — check the response's meta. For a Forta-gated host on *.appleby.cloud, put `set $forta_client_id \"<client_id>\"; include /data/nginx/custom/forta-gate.conf;` in advanced_config and use a DNS-01 certificate", {
+server.tool("proxy_create_proxy_host", "Create a proxy host. NPM writes and reloads nginx immediately; a config nginx rejects is saved as <id>.conf.err and the host goes offline (meta.nginx_online=false) — check the response's meta. A public host behind Cloudflare needs `include /data/nginx/custom/cloudflare-real-ip.conf;` in advanced_config, or its logs show Cloudflare's edge instead of the client (never add it to a LAN-only host that authorises by IP). For a Forta-gated host on *.appleby.cloud, put `set $forta_client_id \"<client_id>\"; include /data/nginx/custom/forta-gate.conf;` in advanced_config and use a DNS-01 certificate", {
     domain_names: domainNames,
     ...proxyHostFields,
 }, async (args) => {
@@ -455,8 +455,10 @@ const accessListFields = {
         .describe("IP rules, in order. Replaces the list"),
 };
 
-server.tool("proxy_list_access_lists", "List NPM access lists (IP allow/deny + basic auth). Passwords are redacted. For appleby.cloud SSO, prefer the Forta gate (see proxy_create_proxy_host) over basic auth", {
-    expand: expand(["owner", "items", "clients", "proxy_hosts"]),
+// NPM 2.16 answers 500 to expand=proxy_hosts on access lists; proxy_host_count
+// in the plain response says the same thing.
+server.tool("proxy_list_access_lists", "List NPM access lists (IP allow/deny + basic auth) with proxy_host_count. Passwords are redacted. For appleby.cloud SSO, prefer the Forta gate (see proxy_create_proxy_host) over basic auth", {
+    expand: expand(["owner", "items", "clients"]),
 }, async ({ expand: e }) => {
     const res = await npm("GET", "nginx/access-lists", expandParam(e));
     return { content: text(res) };
@@ -464,7 +466,7 @@ server.tool("proxy_list_access_lists", "List NPM access lists (IP allow/deny + b
 
 server.tool("proxy_get_access_list", "Get one access list", {
     id,
-    expand: expand(["owner", "items", "clients", "proxy_hosts"]),
+    expand: expand(["owner", "items", "clients"]),
 }, async ({ id: listId, expand: e }) => {
     const res = await npm("GET", `nginx/access-lists/${listId}`, expandParam(e));
     return { content: text(res) };
@@ -483,7 +485,7 @@ server.tool("proxy_update_access_list", "Update an access list. Only the fields
     return { content: text(res) };
 });
 
-server.tool("proxy_delete_access_list", "Delete an access list. Hosts using it become public. Check proxy_get_access_list with expand proxy_hosts first", { id }, async ({ id: listId }) => {
+server.tool("proxy_delete_access_list", "Delete an access list. Hosts using it become public. Check its proxy_host_count (proxy_list_access_lists) first", { id }, async ({ id: listId }) => {
     const res = await npm("DELETE", `nginx/access-lists/${listId}`);
     return { content: text(res) };
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "appleby-proxy-mcp",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "MCP server for the appleby.cloud Nginx Proxy Manager, through proxy-api (repo: proxy-mcp)",
   "type": "module",
   "main": "index.js",