baconservices-mcp 0.1.2 → 0.3.0

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Bacon Services
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Bacon Services
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -18,19 +18,22 @@ spending limits.
 
 | Tool | Does | Price (2026-10-17) |
 |---|---|---|
-| `remove_background` | Removes the background from one photo; returns a transparent PNG at the photo's size | 0.20 USDC |
+| `remove_background` | Removes the background from one photo; returns a transparent PNG at the photo's size | 0.05 USDC |
 | `optimize_image` | Resizes so the longest side ≤ `max_width` (64–4096, default 1600) and encodes WebP at `quality` (40–95, default 80) | 0.01 USDC |
 | `image_palette` | The colours one image is mostly made of, as JSON: up to `count` (1–12, default 6) hex colours with their share, `include_neutrals` (default true) | 0.01 USDC |
 | `brand_from_url` | Reads one public web page (`url`) and returns its brand as JSON: name, description, logo URLs, colours, fonts, social profiles. No JavaScript runs; robots.txt is respected | 0.03 USDC |
+| `page_metadata` | Reads one public web page (`url`) and returns its SEO and link-preview metadata as JSON: title and description with lengths, canonical, redirects, robots rules, Open Graph and Twitter cards, headings, JSON-LD types, and a list of issues. Nothing it links to is fetched; robots.txt is respected | 0.01 USDC |
+| `accessibility_check` | An automated WCAG check of one public web page (`url`) with axe-core: `standard` (`wcag22aa` default, or `wcag21aa`), `viewport` (`desktop` default, or `mobile`). JSON: failing rules with WCAG criteria, element counts and examples, what needs review, and the criteria a person must test. The page's own scripts don't run. Not a certification of WCAG or ADA conformance | 0.05 USDC |
+| `vectorize_image` | Traces one image into an SVG of flat-colour paths: `colors` (2–32, default 16), `detail` (`smooth`, `balanced` or `detailed`, default `balanced`). Best for logos and icons | 0.05 USDC |
 
 Image tools take PNG, JPEG or WebP up to 8 MB, as `image_url` (public https) or `image_path` (a
-local file). `remove_background` and `optimize_image` return a signed download link (valid 24
-hours); `image_palette` and `brand_from_url` return their JSON result in the tool result. Add
+local file). `remove_background`, `optimize_image` and `vectorize_image` return a signed download
+link (valid 24 hours); `image_palette`, `brand_from_url`, `page_metadata` and `accessibility_check` return their JSON result in the tool result. Add
 `save_to` to write either kind to disk. Prices come from Bacon's live catalog, and each paid tool
 states its current price in its description.
 
-`image_palette` and `brand_from_url` appear once Bacon's catalog publishes them with contract
-versions. A service the installed package doesn't understand is listed by `list_services` but
+`image_palette`, `brand_from_url`, `page_metadata`, `accessibility_check` and `vectorize_image` appear once Bacon's catalog publishes
+them with contract versions. A service the installed package doesn't understand is listed by `list_services` but
 can't be called until you update the package.
 
 Free tools:
@@ -151,7 +154,7 @@ All of these checks happen before anything is signed:
   cap is set to your per-call limit as a second lock.
 - **Funds.** It reads your USDC balance first. If it's too low, or the balance can't be read,
   you get a plain message and nothing is signed.
-- **Your approval, where possible.** If the MCP host supports it, you're asked *"Pay 0.2 USDC on
+- **Your approval, where possible.** If the MCP host supports it, you're asked *"Pay 0.05 USDC on
   Base to Bacon Services to run remove_background?"* Not every host can ask, so the limits are
   the real boundary.
 - **No double payments.** Each purchase signs one payment for one request. If the connection drops,

package/bin/baconservices-mcp.js

@@ -1,8 +1,8 @@
-#!/usr/bin/env node
-// stdio entry point. stdout carries the MCP protocol only; nothing else is ever written there.
-
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { createBaconServer } from '../src/server.js';
-
-const { server } = createBaconServer();
-await server.connect(new StdioServerTransport());
+#!/usr/bin/env node
+// stdio entry point. stdout carries the MCP protocol only; nothing else is ever written there.
+
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { createBaconServer } from '../src/server.js';
+
+const { server } = createBaconServer();
+await server.connect(new StdioServerTransport());

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "baconservices-mcp",
-  "version": "0.1.2",
-  "description": "MCP server that lets an AI agent buy Bacon Services image operations (remove background, optimize for the web) per call in USDC over x402, with local spending limits.",
+  "version": "0.3.0",
+  "description": "MCP server that lets an AI agent buy Bacon Services tools per call in USDC over x402: remove a background, optimize an image for the web, read an image's colour palette, read a brand from a URL, read a page's SEO metadata, run an automated WCAG accessibility check, trace an image into an SVG. With local spending limits.",
   "mcpName": "io.github.afmontoya/baconservices-mcp",
   "type": "module",
   "bin": {
@@ -28,6 +28,8 @@
     "base",
     "remove-background",
     "image-optimization",
+    "color-palette",
+    "brand-kit",
     "agent-payments"
   ],
   "homepage": "https://baconservices.com",

package/src/catalog.js

@@ -1,71 +1,71 @@
-// The live catalog: what Bacon sells right now, matched against the contracts this package knows.
-
-import { CONTRACTS, checkEntry, contractForEntry, contractId } from './contracts.js';
-import { formatUsdc } from './money.js';
-
-export const CATALOG_PATH = '/api/agent-commerce/v1/capabilities';
-
-export function endpointFor(apiUrl, id) {
-    return `${apiUrl}${CATALOG_PATH}/${id}/execute`;
-}
-
-/**
- * Fetches the catalog and decides, per entry, whether it is executable here.
- * Throws with a plain message when the catalog cannot be read or is not on the configured network.
- */
-export async function fetchCatalog(config, fetchImpl) {
-    let response;
-    try {
-        response = await fetchImpl(`${config.apiUrl}${CATALOG_PATH}`, { headers: { Accept: 'application/json' }, signal: AbortSignal.timeout(15_000) });
-    } catch (error) {
-        throw new Error(`Could not reach Bacon's service catalog at ${config.apiUrl}${CATALOG_PATH} (${error.name === 'TimeoutError' ? 'timed out' : error.message}).`);
-    }
-    if (response.status === 404) {
-        throw new Error('Bacon is not selling services to agents right now (the catalog is closed).');
-    }
-    let data = null;
-    try {
-        data = await response.json();
-    } catch {
-        // checked below
-    }
-    if (!response.ok || !data || !Array.isArray(data.capabilities)) {
-        throw new Error(`Bacon's service catalog answered ${response.status} without a capability list.`);
-    }
-    if (data.protocol?.name !== 'x402' || data.protocol?.version !== 2 || data.protocol?.scheme !== 'exact') {
-        throw new Error('Bacon\'s catalog does not describe x402 v2 "exact" payments, which is all this package can make.');
-    }
-    if (data.network?.id !== config.network.id || data.network?.testnet !== config.network.testnet) {
-        throw new Error(`Bacon at ${config.apiUrl} sells on ${data.network?.id ?? 'an unknown network'}${data.network?.testnet ? ' (testnet)' : ''}, but this package is set to ${config.network.id} (${config.network.label}). Nothing can be paid until they match.`);
-    }
-
-    const services = data.capabilities.map((entry) => {
-        const contract = contractForEntry(entry);
-        const reasons = checkEntry(entry, contract, { endpoint: endpointFor(config.apiUrl, entry.id), usdc: config.network.usdc.address, catalogVersion: data.contract_version });
-        return {
-            id: entry.id,
-            name: entry.name,
-            description: entry.description,
-            contract: contractId(entry.id, entry.version),
-            tool: contract?.tool ?? null,
-            executable: reasons.length === 0,
-            not_executable_because: reasons,
-            price: entry.price && /^\d+$/.test(entry.price.amount ?? '') ? { usdc: formatUsdc(entry.price.amount), atomic: entry.price.amount } : null,
-            execution: entry.execution ?? null,
-            output: entry.output ?? null,
-            limits: entry.limits ?? null,
-            entry,
-            contractDef: contract,
-        };
-    });
-
-    return { network: data.network, contractVersion: data.contract_version ?? null, services };
-}
-
-/** The tools a catalog makes executable, in the package's own order. */
-export function executableTools(catalog) {
-    if (!catalog) {
-        return [];
-    }
-    return CONTRACTS.map((c) => catalog.services.find((s) => s.tool === c.tool && s.executable)).filter(Boolean);
-}
+// The live catalog: what Bacon sells right now, matched against the contracts this package knows.
+
+import { CONTRACTS, checkEntry, contractForEntry, contractId } from './contracts.js';
+import { formatUsdc } from './money.js';
+
+export const CATALOG_PATH = '/api/agent-commerce/v1/capabilities';
+
+export function endpointFor(apiUrl, id) {
+    return `${apiUrl}${CATALOG_PATH}/${id}/execute`;
+}
+
+/**
+ * Fetches the catalog and decides, per entry, whether it is executable here.
+ * Throws with a plain message when the catalog cannot be read or is not on the configured network.
+ */
+export async function fetchCatalog(config, fetchImpl) {
+    let response;
+    try {
+        response = await fetchImpl(`${config.apiUrl}${CATALOG_PATH}`, { headers: { Accept: 'application/json' }, signal: AbortSignal.timeout(15_000) });
+    } catch (error) {
+        throw new Error(`Could not reach Bacon's service catalog at ${config.apiUrl}${CATALOG_PATH} (${error.name === 'TimeoutError' ? 'timed out' : error.message}).`);
+    }
+    if (response.status === 404) {
+        throw new Error('Bacon is not selling services to agents right now (the catalog is closed).');
+    }
+    let data = null;
+    try {
+        data = await response.json();
+    } catch {
+        // checked below
+    }
+    if (!response.ok || !data || !Array.isArray(data.capabilities)) {
+        throw new Error(`Bacon's service catalog answered ${response.status} without a capability list.`);
+    }
+    if (data.protocol?.name !== 'x402' || data.protocol?.version !== 2 || data.protocol?.scheme !== 'exact') {
+        throw new Error('Bacon\'s catalog does not describe x402 v2 "exact" payments, which is all this package can make.');
+    }
+    if (data.network?.id !== config.network.id || data.network?.testnet !== config.network.testnet) {
+        throw new Error(`Bacon at ${config.apiUrl} sells on ${data.network?.id ?? 'an unknown network'}${data.network?.testnet ? ' (testnet)' : ''}, but this package is set to ${config.network.id} (${config.network.label}). Nothing can be paid until they match.`);
+    }
+
+    const services = data.capabilities.map((entry) => {
+        const contract = contractForEntry(entry);
+        const reasons = checkEntry(entry, contract, { endpoint: endpointFor(config.apiUrl, entry.id), usdc: config.network.usdc.address, catalogVersion: data.contract_version });
+        return {
+            id: entry.id,
+            name: entry.name,
+            description: entry.description,
+            contract: contractId(entry.id, entry.version),
+            tool: contract?.tool ?? null,
+            executable: reasons.length === 0,
+            not_executable_because: reasons,
+            price: entry.price && /^\d+$/.test(entry.price.amount ?? '') ? { usdc: formatUsdc(entry.price.amount), atomic: entry.price.amount } : null,
+            execution: entry.execution ?? null,
+            output: entry.output ?? null,
+            limits: entry.limits ?? null,
+            entry,
+            contractDef: contract,
+        };
+    });
+
+    return { network: data.network, contractVersion: data.contract_version ?? null, services };
+}
+
+/** The tools a catalog makes executable, in the package's own order. */
+export function executableTools(catalog) {
+    if (!catalog) {
+        return [];
+    }
+    return CONTRACTS.map((c) => catalog.services.find((s) => s.tool === c.tool && s.executable)).filter(Boolean);
+}

package/src/config.js

@@ -1,103 +1,103 @@
-// Configuration from the environment, with the network guard.
-//
-// Real money (Base) talks to https://baconservices.com and nothing else. Test money (Base
-// Sepolia) talks to a test copy of Bacon and never to production. A mismatch is a configuration
-// problem: nothing is fetched and nothing can be paid until it is fixed.
-
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { parseUsdc } from './money.js';
-import { NETWORKS, PRODUCTION_API_URL } from './networks.js';
-
-export const DEFAULT_LIMITS = { perCall: '0.50', perSession: '1.00', perDay: '5.00' };
-export const CONFIRM_MODES = ['auto', 'always', 'never'];
-
-const PRODUCTION_HOSTS = ['baconservices.com', 'www.baconservices.com'];
-const LOCAL_HOSTS = ['localhost', '127.0.0.1', '[::1]'];
-
-/**
- * @returns {{ problems: string[], network: object|null, apiUrl: string|null, limits: object, confirm: string,
- *            ledgerDir: string, rpcUrl: string|null, payTo: string|null, discloseBalance: boolean }}
- */
-export function loadConfig(env, { home = homedir() } = {}) {
-    const problems = [];
-    const read = (name) => (env[name] ?? '').trim();
-
-    const networkKey = read('BACON_NETWORK') || 'base';
-    const network = NETWORKS[networkKey] ?? null;
-    if (!network) {
-        problems.push(`BACON_NETWORK must be "base" (real USDC) or "base-sepolia" (test USDC), not "${networkKey}".`);
-    }
-
-    let apiUrl = null;
-    const rawApi = read('BACON_API_URL').replace(/\/+$/, '');
-    if (network) {
-        if (!network.testnet) {
-            apiUrl = PRODUCTION_API_URL;
-            if (rawApi && rawApi !== PRODUCTION_API_URL) {
-                problems.push(`BACON_NETWORK=base pays real money and only talks to ${PRODUCTION_API_URL}; BACON_API_URL is "${rawApi}". For a test copy of Bacon use BACON_NETWORK=base-sepolia.`);
-            }
-        } else if (!rawApi) {
-            problems.push('BACON_NETWORK=base-sepolia needs BACON_API_URL: the address of a test copy of Bacon (production sells for real money only).');
-        } else {
-            let url = null;
-            try {
-                url = new URL(rawApi);
-            } catch {
-                problems.push(`BACON_API_URL "${rawApi}" is not a URL.`);
-            }
-            if (url) {
-                if (PRODUCTION_HOSTS.includes(url.hostname)) {
-                    problems.push(`BACON_NETWORK=base-sepolia cannot use production (${url.hostname}): production sells for real money only. Use BACON_NETWORK=base, or point BACON_API_URL at a test copy of Bacon.`);
-                } else if (url.protocol !== 'https:' && !(url.protocol === 'http:' && LOCAL_HOSTS.includes(url.hostname))) {
-                    problems.push('BACON_API_URL must be https (plain http only for localhost).');
-                } else {
-                    apiUrl = url.origin;
-                }
-            }
-        }
-    }
-
-    let payTo = network?.payTo ?? null;
-    const rawPayTo = read('BACON_PAY_TO');
-    if (network?.testnet) {
-        if (!/^0x[0-9a-fA-F]{40}$/.test(rawPayTo)) {
-            problems.push('BACON_NETWORK=base-sepolia needs BACON_PAY_TO: the receiving address of the test copy of Bacon, so payments to anyone else are refused.');
-        } else {
-            payTo = rawPayTo;
-        }
-    } else if (network && rawPayTo && rawPayTo.toLowerCase() !== network.payTo) {
-        problems.push('BACON_PAY_TO cannot change Bacon\'s receiving address on Base; leave it unset.');
-    }
-
-    const limits = {};
-    for (const [key, name] of [['perCall', 'BACON_MAX_PER_CALL'], ['perSession', 'BACON_MAX_PER_SESSION'], ['perDay', 'BACON_MAX_PER_DAY']]) {
-        try {
-            limits[key] = parseUsdc(read(name) || DEFAULT_LIMITS[key], name);
-            if (limits[key] <= 0n) {
-                problems.push(`${name} must be more than 0.`);
-            }
-        } catch (error) {
-            problems.push(error.message);
-        }
-    }
-
-    const confirm = (read('BACON_CONFIRM') || 'auto').toLowerCase();
-    if (!CONFIRM_MODES.includes(confirm)) {
-        problems.push(`BACON_CONFIRM must be auto, always or never (got "${confirm}").`);
-    }
-
-    const rpcUrl = read('BACON_RPC_URL') || network?.rpcUrl || null;
-
-    return {
-        problems,
-        network,
-        apiUrl,
-        payTo,
-        limits,
-        confirm,
-        rpcUrl,
-        ledgerDir: read('BACON_LEDGER_DIR') || join(home, '.baconservices-mcp'),
-        discloseBalance: /^(1|true|yes)$/i.test(read('BACON_DISCLOSE_BALANCE')),
-    };
-}
+// Configuration from the environment, with the network guard.
+//
+// Real money (Base) talks to https://baconservices.com and nothing else. Test money (Base
+// Sepolia) talks to a test copy of Bacon and never to production. A mismatch is a configuration
+// problem: nothing is fetched and nothing can be paid until it is fixed.
+
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { parseUsdc } from './money.js';
+import { NETWORKS, PRODUCTION_API_URL } from './networks.js';
+
+export const DEFAULT_LIMITS = { perCall: '0.50', perSession: '1.00', perDay: '5.00' };
+export const CONFIRM_MODES = ['auto', 'always', 'never'];
+
+const PRODUCTION_HOSTS = ['baconservices.com', 'www.baconservices.com'];
+const LOCAL_HOSTS = ['localhost', '127.0.0.1', '[::1]'];
+
+/**
+ * @returns {{ problems: string[], network: object|null, apiUrl: string|null, limits: object, confirm: string,
+ *            ledgerDir: string, rpcUrl: string|null, payTo: string|null, discloseBalance: boolean }}
+ */
+export function loadConfig(env, { home = homedir() } = {}) {
+    const problems = [];
+    const read = (name) => (env[name] ?? '').trim();
+
+    const networkKey = read('BACON_NETWORK') || 'base';
+    const network = NETWORKS[networkKey] ?? null;
+    if (!network) {
+        problems.push(`BACON_NETWORK must be "base" (real USDC) or "base-sepolia" (test USDC), not "${networkKey}".`);
+    }
+
+    let apiUrl = null;
+    const rawApi = read('BACON_API_URL').replace(/\/+$/, '');
+    if (network) {
+        if (!network.testnet) {
+            apiUrl = PRODUCTION_API_URL;
+            if (rawApi && rawApi !== PRODUCTION_API_URL) {
+                problems.push(`BACON_NETWORK=base pays real money and only talks to ${PRODUCTION_API_URL}; BACON_API_URL is "${rawApi}". For a test copy of Bacon use BACON_NETWORK=base-sepolia.`);
+            }
+        } else if (!rawApi) {
+            problems.push('BACON_NETWORK=base-sepolia needs BACON_API_URL: the address of a test copy of Bacon (production sells for real money only).');
+        } else {
+            let url = null;
+            try {
+                url = new URL(rawApi);
+            } catch {
+                problems.push(`BACON_API_URL "${rawApi}" is not a URL.`);
+            }
+            if (url) {
+                if (PRODUCTION_HOSTS.includes(url.hostname)) {
+                    problems.push(`BACON_NETWORK=base-sepolia cannot use production (${url.hostname}): production sells for real money only. Use BACON_NETWORK=base, or point BACON_API_URL at a test copy of Bacon.`);
+                } else if (url.protocol !== 'https:' && !(url.protocol === 'http:' && LOCAL_HOSTS.includes(url.hostname))) {
+                    problems.push('BACON_API_URL must be https (plain http only for localhost).');
+                } else {
+                    apiUrl = url.origin;
+                }
+            }
+        }
+    }
+
+    let payTo = network?.payTo ?? null;
+    const rawPayTo = read('BACON_PAY_TO');
+    if (network?.testnet) {
+        if (!/^0x[0-9a-fA-F]{40}$/.test(rawPayTo)) {
+            problems.push('BACON_NETWORK=base-sepolia needs BACON_PAY_TO: the receiving address of the test copy of Bacon, so payments to anyone else are refused.');
+        } else {
+            payTo = rawPayTo;
+        }
+    } else if (network && rawPayTo && rawPayTo.toLowerCase() !== network.payTo) {
+        problems.push('BACON_PAY_TO cannot change Bacon\'s receiving address on Base; leave it unset.');
+    }
+
+    const limits = {};
+    for (const [key, name] of [['perCall', 'BACON_MAX_PER_CALL'], ['perSession', 'BACON_MAX_PER_SESSION'], ['perDay', 'BACON_MAX_PER_DAY']]) {
+        try {
+            limits[key] = parseUsdc(read(name) || DEFAULT_LIMITS[key], name);
+            if (limits[key] <= 0n) {
+                problems.push(`${name} must be more than 0.`);
+            }
+        } catch (error) {
+            problems.push(error.message);
+        }
+    }
+
+    const confirm = (read('BACON_CONFIRM') || 'auto').toLowerCase();
+    if (!CONFIRM_MODES.includes(confirm)) {
+        problems.push(`BACON_CONFIRM must be auto, always or never (got "${confirm}").`);
+    }
+
+    const rpcUrl = read('BACON_RPC_URL') || network?.rpcUrl || null;
+
+    return {
+        problems,
+        network,
+        apiUrl,
+        payTo,
+        limits,
+        confirm,
+        rpcUrl,
+        ledgerDir: read('BACON_LEDGER_DIR') || join(home, '.baconservices-mcp'),
+        discloseBalance: /^(1|true|yes)$/i.test(read('BACON_DISCLOSE_BALANCE')),
+    };
+}