brewpage-mcp 1.12.0 → 1.13.0

package/README.md

@@ -2,17 +2,22 @@
 
 [![npm version](https://img.shields.io/npm/v/brewpage-mcp.svg)](https://www.npmjs.com/package/brewpage-mcp)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Brewpage MCP server](https://mcprush.com/badge/brewpage-mcp/card.svg)](https://mcprush.com/to/brewpage-mcp?ref=badge)
 
 MCP server for [BrewPage](https://brewpage.app) -- publish and manage HTML, KV, JSON, and file content directly from AI assistants.
 
 ## What is BrewPage
 
-[BrewPage](https://brewpage.app) is a free instant hosting platform designed for AI agents and developers. One `POST` request publishes HTML, Markdown, a multi-file site, a JSON document, or a binary file and returns its primary HTTPS link -- no accounts, no API keys, no infrastructure setup. Every resource carries an **owner token** returned at creation time: use it to update content in place, delete the resource, or authenticate list operations across sessions. `brewpage-mcp` exposes this API as seventeen typed MCP tools so any compatible agent -- Claude, Codex, Gemini, Cursor, Cline -- can publish, update, fetch, and manage BrewPage HTML, JSON, KV, and file content without leaving the conversation.
+[BrewPage](https://brewpage.app) is a free instant hosting platform designed for AI agents and developers. One `POST` request publishes HTML, Markdown, a multi-file site, a JSON document, or a binary file and returns its primary HTTPS link -- no account needed, no API keys, no infrastructure setup. Every resource carries an **owner token** returned at creation time: use it to update content in place, delete the resource, or authenticate list operations across sessions. `brewpage-mcp` exposes this API as twenty typed MCP tools so any compatible agent -- Claude, Codex, Gemini, Cursor, Cline -- can publish, update, fetch, and manage BrewPage HTML, JSON, KV, and file content without leaving the conversation.
+
+Optional: sign in free (Google or any email) at https://account.brewpage.app to never lose your pages or tokens and to mint tokens that never expire. Not needed to publish.
+
+Choosing a host? See how BrewPage compares with GitHub Pages, Netlify Drop, Tiiny Host and other tools: [brewpage.app/compare](https://brewpage.app/compare).
 
 ## Quick Start
 
 ```bash
-npx -y brewpage-mcp@1.12.0
+npx -y brewpage-mcp@1.13.0
 ```
 
 Requires Node.js 20 or newer. This starts the stdio server for an MCP client.
@@ -28,7 +33,7 @@ Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)
   "mcpServers": {
     "brewpage": {
       "command": "npx",
-      "args": ["-y", "brewpage-mcp@1.12.0"]
+      "args": ["-y", "brewpage-mcp@1.13.0"]
     }
   }
 }
@@ -39,7 +44,7 @@ Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)
 Register a project-scoped stdio server:
 
 ```bash
-claude mcp add --transport stdio --scope project brewpage -- npx -y brewpage-mcp@1.12.0
+claude mcp add --transport stdio --scope project brewpage -- npx -y brewpage-mcp@1.13.0
 ```
 
 This writes `.mcp.json` in the project root. Use `--scope user` for user-scoped registration. See the [official Claude Code MCP guide](https://code.claude.com/docs/en/mcp).
@@ -53,7 +58,7 @@ Open **Settings > MCP** and add:
   "mcpServers": {
     "brewpage": {
       "command": "npx",
-      "args": ["-y", "brewpage-mcp@1.12.0"]
+      "args": ["-y", "brewpage-mcp@1.13.0"]
     }
   }
 }
@@ -67,7 +72,7 @@ Open the Cline MCP settings panel and add:
 {
   "brewpage": {
     "command": "npx",
-    "args": ["-y", "brewpage-mcp@1.12.0"]
+    "args": ["-y", "brewpage-mcp@1.13.0"]
   }
 }
 ```
@@ -75,13 +80,13 @@ Open the Cline MCP settings panel and add:
 ### Global Install
 
 ```bash
-npm install -g brewpage-mcp@1.12.0
+npm install -g brewpage-mcp@1.13.0
 brewpage-mcp
 ```
 
 ## Tools
 
-Seventeen tools are available. Creation returns an owner token; keep it to modify or delete the resource later. Updates (`PUT`/`PATCH`) require the original `ownerToken`. Supported password inputs use `X-Password`.
+Twenty tools are available. Creation returns an owner token; keep it to modify or delete the resource later. Owner tools take `ownerToken`, else `BREWPAGE_OWNER_TOKEN`. Supported password inputs use `X-Password`. Secrets allowed; likely ones are flagged in notices. For a secret: private namespace + password.
 
 | Tool | Purpose |
 |------|---------|
@@ -98,14 +103,17 @@ Seventeen tools are available. Creation returns an owner token; keep it to modif
 | `set_kv` | Set or replace a key in an owned KV store |
 | `get_kv` | Read a KV value |
 | `update_hosting` | Change eligible delivery mode with owner token and hosting version |
-| `delete_resource` | Delete HTML, JSON, KV, or file content |
+| `delete_resource` | Delete an HTML page, site, JSON document, KV store or file |
+| `set_visibility` | Hide or show a public publication in gallery & search; link unchanged |
+| `bind_token` | Add an owner token to your profile (admin token) |
+| `mint_token` | Mint a profile token, shown once (admin token) |
 | `search_gallery` | Browse public content or list owned resources |
 | `get_stats` | Read platform-wide statistics |
 | `get_limits` | Read the current upload limits (`GET /api/limits`) |
 
 All five publish tools accept optional `deliveryMode: "path" | "subdomain"`, sent only as `X-Delivery-Mode`; authored JSON and multipart bodies keep their existing format. Visibility and password protection are separate choices. Omitted namespace still generates an unlisted `priv-<random>` namespace; anyone with an unpassworded unlisted link can read it. `public` grants gallery/search eligibility only; password-protected content remains excluded and unlisted, protected or otherwise ineligible native responses carry `noindex`; eligible public HTML, sites and files may permit indexing.
 
-The MCP server wraps a subset of the backend-generated public [REST contract](../openapi/openapi.json). TTL inputs take days or a string such as `2w`/`36h` (default 15); the server rounds to whole days and clamps to 1–30 (owner-specific caps and eligible automatic extensions can differ). Use returned `expiresAt`. Every tolerated-input adjustment (TTL clamp, format alias, skipped site member, normalised namespace) comes back in the response `notices` array and is printed as `Notice (code): message`. `get_page` reads stored rendered HTML or format-specific code/text from the API; it does not call the owner-only original-source endpoint or a browser viewer. `publish_file` uploads from a source URL and does not expose password or TTL inputs.
+The MCP server wraps a subset of the backend-generated public [REST contract](../openapi/openapi.json). TTL inputs take days or a string such as `2w`/`36h` (default 15); the server rounds to whole days and clamps to 1–30 (owner-specific caps and eligible automatic extensions can differ). Use returned `expiresAt`. Every tolerated-input adjustment (TTL clamp, format alias, skipped site member, normalised namespace) comes back in the response `notices` array and is printed as `Notice (code): message`; `secret-detected` and `manage-link-disabled` print as `WARNING (code): message`: relay them to the user. A minted `manageUrl` prints as `MANAGE LINK (private): …`: give it to the user privately, never publish it. A listed public result prints `VISIBILITY: public, listed. Hide: set_visibility listed=false`. `get_page` reads stored rendered HTML or format-specific code/text from the API; it does not call the owner-only original-source endpoint or a browser viewer. `publish_file` uploads from a source URL and does not expose password or TTL inputs.
 
 For a fresh publication, sites and HTML pages of format `HTML` outside `public` (including the generated unlisted namespace) always use Dedicated subdomain (`subdomain`); omit `deliveryMode` there. An explicit `path` there is not rejected: the publication is created on its subdomain and the result reports `deliveryModeMatched: false`, `deliveryModeReason: "policy:subdomain-required"` and a `Delivery notice:` line. Everything else in any namespace (Markdown, code/text, files, JSON, KV, public HTML) defaults to Promotion (`path`) and may choose Dedicated subdomain, including password-protected content. Promotion uses a BrewPage path with stricter active-document restrictions. Each NEW site gets one publication-specific host for its complete bundle, preserving relative/root-relative paths; missing assets return 404, with no SPA fallback. Third-party widgets may still need provider configuration.
 
@@ -339,7 +347,7 @@ get_kv(namespace="public", id="aBcDeFgHiJ", key="theme")
 
 Browse the public gallery of BrewPage pages, or list resources you own. Returns a paged result with metadata (id, title, view count, created date). All parameters are optional; with no parameters this returns the most recent public pages.
 
-Parameters: `q` (optional search query), `page` (optional, 0-indexed), `size` (optional page size), `sort` (optional `date` | `views`), `mine` (optional boolean -- list only resources owned by `ownerToken`), `ownerToken` (required only when `mine=true`).
+Parameters: `q` (optional search query), `page` (optional, 1-based), `size` (optional page size), `sort` (optional `date` | `views`), `mine` (optional boolean -- list only resources owned by `ownerToken`), `ownerToken` (required only when `mine=true`).
 
 Example prompt:
 
@@ -355,11 +363,9 @@ search_gallery(mine=true, ownerToken="tok_...", sort="date")
 
 ### `delete_resource`
 
-Delete a BrewPage resource (HTML page, KV store, JSON document, or file) using the owner token received at creation.
+Delete a BrewPage resource (HTML page, site, KV store, JSON document, or file) using the owner token received at creation.
 
-Parameters: `type` (`html` | `kv` | `json` | `file`), `namespace` (string), `id` (string), `ownerToken` (string).
-
-Sites are not supported by this tool; use the REST site deletion endpoint.
+Parameters: `type` (`html` | `site` | `kv` | `json` | `file`), `namespace` (string), `id` (string), `ownerToken` (optional; default `BREWPAGE_OWNER_TOKEN`). Path segments are URL-encoded.
 
 Example prompt:
 
@@ -371,6 +377,36 @@ delete_resource(type="html", namespace="public", id="aBcDeFgHiJ", ownerToken="to
 
 ---
 
+### `set_visibility`
+
+Hide or show a public publication in gallery & search; the link stays the same. Only public, password-free HTML, sites and files can be listed; others answer with a `visibility-not-listable` notice.
+
+Parameters: `type` (`html` | `site` | `file` | `json` | `kv`), `namespace`, `id`, `listed` (boolean), `ownerToken` (optional).
+
+```
+set_visibility(type="html", namespace="public", id="aBcDeFgHiJ", listed=false)
+```
+
+Output: `LISTED: false · link unchanged`.
+
+---
+
+### `bind_token`
+
+Add an owner token to your BrewPage profile (as `publish`) with an `admin` token of that profile (`POST /api/owner-token/bind`). Output: `BOUND …ab12 · 3/20 active`; tokens are never printed in full.
+
+Parameters: `token`, `ownerToken` (admin token; optional, default `BREWPAGE_OWNER_TOKEN`).
+
+---
+
+### `mint_token`
+
+Mint a new profile token with an `admin` token (`POST /api/owner-token/mint`). The new token is shown once; the admin token is never printed.
+
+Parameters: `label` (optional), `scope` (`publish` default | `admin`), `expiresIn` (`30d` | `90d` | `1y` | `never`; default admin 90d, publish never), `ownerToken` (admin token; optional).
+
+---
+
 ### `get_stats`
 
 Get platform-wide BrewPage usage statistics (page count, file count, storage, daily totals). Supports an optional IANA timezone for the "today" boundary.
@@ -389,7 +425,7 @@ get_stats()
 
 ### `get_limits`
 
-Read the current upload limits from `GET /api/limits` (no auth). Sizes are bytes: `requestMaxBytes` plus `sites.maxFiles`, `maxFileBytes`, `maxTotalBytes` (uncompressed), `maxArchiveExpansionBytes`, `maxPathChars`, `maxPathBytes`, `maxNameBytes`, `defaultTtlDays`, `maxTtlDays`, `allowedExtensions`, `skippedFileNames` and `skippedRootFolders`. Call it before publishing a large or multi-file site.
+Read the current upload limits from `GET /api/limits` (no auth; with `BREWPAGE_OWNER_TOKEN` also `reach` and `ownerMaxTtlDays`). Sizes are bytes: `requestMaxBytes` plus `sites.maxFiles`, `maxFileBytes`, `maxTotalBytes` (uncompressed), `maxArchiveExpansionBytes`, `maxPathChars`, `maxPathBytes`, `maxNameBytes`, `defaultTtlDays`, `maxTtlDays`, `allowedExtensions`, `skippedFileNames` and `skippedRootFolders`. Call it before publishing a large or multi-file site.
 
 Parameters: none.
 
@@ -430,7 +466,8 @@ get_limits()
 
 Every publish response includes an **owner token** -- the only credential that allows updating or deleting your content. **Save it. It cannot be recovered.**
 
-- Reuse it with `publish_site`, `publish_json`, or `publish_kv` to group new resources under one owner; REST creates accept `X-Owner-Token`.
+- Reuse it with any publish tool (`ownerToken`) to group new resources under one owner; REST creates accept `X-Owner-Token`.
+- Set `BREWPAGE_OWNER_TOKEN` to use one token for every call; the output then names it instead of printing it.
 - Pass it to `delete_resource` to remove content.
 - Pass it to `search_gallery` with `mine=true` to list owned resources. `get_page` has no owner-token input; protected reads use `password`.
 
@@ -439,6 +476,7 @@ Every publish response includes an **owner token** -- the only credential that a
 | Variable | Default | Description |
 |----------|---------|-------------|
 | `BREWPAGE_URL` | `https://brewpage.app` | Authorized apex API base URL; never a publication host |
+| `BREWPAGE_OWNER_TOKEN` | unset | Optional default owner token (32 letters/digits) for every call; unset = new token per create |
 
 ## Links
 
@@ -453,6 +491,18 @@ Every publish response includes an **owner token** -- the only credential that a
 
 ## Changelog
 
+## 1.13.0 -- 2026-10-25
+
+- Identifying `User-Agent: brewpage-mcp/1.13.0` on every BrewPage call.
+- Optional `BREWPAGE_OWNER_TOKEN` default; `ownerToken` on `publish_html` and `publish_file`; owner tools fail before HTTP without a token.
+- New tools: `set_visibility`, `bind_token`, `mint_token` (twenty tools).
+- `delete_resource` deletes sites and URL-encodes path segments.
+- Prints `MANAGE LINK (private)`, `VISIBILITY` and `WARNING (code)` lines; a wrong-token 403 adds a hint.
+
+## 1.12.1 -- 2026-10-22
+
+- Package README links the BrewPage comparison page (https://brewpage.app/compare). Same seventeen tools, inputs and HTTP behavior.
+
 ## 1.12.0 -- 2026-10-22
 
 - New `get_limits` tool reads `GET /api/limits`: request size, site file count, per-file and total size, ZIP expansion, path and name lengths, TTL default/maximum, allowed extensions and skipped system files.

package/dist/index.js

@@ -3,10 +3,60 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 const BASE_URL = process.env.BREWPAGE_URL || "https://brewpage.app";
+const USER_AGENT = "brewpage-mcp/1.13.0";
 const server = new McpServer({
     name: "brewpage-mcp",
-    version: "1.12.0",
+    version: "1.13.0",
 });
+const OWNER_TOKEN_SHAPE = /^[A-Za-z0-9]{32}$/;
+const OWNER_TOKEN_ENV = "BREWPAGE_OWNER_TOKEN";
+/** Optional default owner token for every call; a malformed value is ignored with one stderr line. */
+const ENV_OWNER_TOKEN = (() => {
+    const raw = process.env[OWNER_TOKEN_ENV]?.trim();
+    if (!raw)
+        return undefined;
+    if (OWNER_TOKEN_SHAPE.test(raw))
+        return raw;
+    console.error(`${OWNER_TOKEN_ENV} ignored: expected 32 letters/digits.`);
+    return undefined;
+})();
+const NO_OWNER_TOKEN = `No owner token: pass ownerToken or set ${OWNER_TOKEN_ENV}.`;
+const CREATE_OWNER_TOKEN_DESCRIPTION = `Optional. Default: ${OWNER_TOKEN_ENV}, else a new token per create.`;
+const OWNER_TOKEN_DESCRIPTION = `Owner token from create. Default: ${OWNER_TOKEN_ENV}.`;
+const SECRETS = "Secrets allowed; likely ones are flagged in notices. For a secret: private namespace + password.";
+const MANAGE_URL_TEXT = "Returns manageUrl (private): give it to the user privately; never publish it.";
+/** Notice codes the agent must relay to the user. */
+const WARNING_CODES = new Set(["secret-detected", "manage-link-disabled"]);
+/** MCP type name -> REST path segment. */
+const TYPE_SEGMENTS = { html: "html", site: "sites", file: "files", json: "json", kv: "kv" };
+/** Caller argument first, then the configured default; `fromEnv` marks the configured one. */
+function ownerTokenFor(argument) {
+    if (argument && argument.length > 0)
+        return { token: argument, fromEnv: false };
+    return { token: ENV_OWNER_TOKEN, fromEnv: ENV_OWNER_TOKEN !== undefined };
+}
+/** Only the last 4 characters: tokens never reach a transcript in full. */
+function maskToken(token) {
+    return `…${token.slice(-4)}`;
+}
+function textResult(text, isError = false) {
+    return isError ? { content: [{ type: "text", text }], isError: true } : { content: [{ type: "text", text }] };
+}
+/** Owner-tool failure: the server answer verbatim plus a hint for a plain wrong-token 403. */
+function ownerFailure(operation, status, data, fromEnv) {
+    const lines = [`Failed to ${operation} (${status}): ${JSON.stringify(data)}`];
+    const code = data?.code;
+    if (status === 403 && (code === undefined || code === "OWNER_AUTHORIZATION_FAILED")) {
+        lines.push(`Wrong owner token for this publication. Use ownerToken from create.${fromEnv ? ` Sent: ${OWNER_TOKEN_ENV}.` : ""}`);
+    }
+    return textResult(lines.join("\n"), true);
+}
+/** Every BrewPage call identifies the client; source-file downloads use plain fetch. */
+function bpFetch(url, init = {}) {
+    const headers = new Headers(init.headers);
+    headers.set("User-Agent", USER_AGENT);
+    return fetch(url, { ...init, headers });
+}
 const PUBLIC_NAMESPACE = "public";
 /**
  * Generate a short, unlisted private namespace slug used when the caller omits
@@ -29,13 +79,13 @@ function defaultPrivateNamespace() {
 function resolveNamespace(namespace) {
     return namespace && namespace.length > 0 ? namespace : defaultPrivateNamespace();
 }
-const UNLISTED_NOTICE = "Unlisted link — anyone who has it can open it, but it's not in the gallery or search. " +
-    "Use namespace `public` for gallery/search eligibility; password-protected content stays excluded.";
-const PROTECTED_UNLISTED_NOTICE = "Password-protected unlisted link — readers need the password; excluded from gallery and search.";
+const UNLISTED_NOTICE = "Private: not listed. Anyone with the link can open it. Use namespace public for gallery & search.";
+const PROTECTED_UNLISTED_NOTICE = "Password: link + password. Not listed.";
 const NAMESPACE_DESCRIPTION = "Optional. Omit to generate an unlisted namespace: anyone with its unpassworded link can read it, " +
     "but it is excluded from gallery/search. Pass a custom namespace to group unlisted content, " +
     "or pass `public` ONLY when the user explicitly wants gallery/search eligibility. " +
-    "Password-protected content stays excluded; unlisted, protected or otherwise ineligible native responses carry noindex; eligible public HTML, sites and files may permit indexing.";
+    "Password-protected content stays excluded; unlisted, protected or otherwise ineligible native responses carry noindex; eligible public HTML, sites and files may permit indexing. " +
+    "Lowercase only: 1-32 of a-z, 0-9, hyphen.";
 const TTL_SCHEMA = z.union([z.number().positive(), z.string().min(1).max(32)]).optional().describe("Requested TTL: days as a number, or a string such as '2w', '36h' or '1 month' (default 15 days). " +
     "The server rounds to whole days and clamps to the allowed range (1-30 by default; owner caps differ), reporting each adjustment in notices; use returned expiresAt.");
 const DELIVERY_MODE_SCHEMA = z.enum(["path", "subdomain"]).optional().describe("Optional delivery choice for a fresh publication, independent of password/namespace. " +
@@ -66,7 +116,38 @@ function noticeLines(data) {
         return [];
     return data.notices
         .filter((n) => typeof n === "object" && n !== null && typeof n.code === "string" && typeof n.message === "string")
-        .map((n) => `Notice (${n.code}): ${n.message}`);
+        .map((n) => `${WARNING_CODES.has(n.code) ? "WARNING" : "Notice"} (${n.code}): ${n.message}`);
+}
+const SIGN_IN_HINT = "Optional: sign in free (Google or any email) at https://account.brewpage.app to never lose your pages or tokens and to mint tokens that never expire. Not needed to publish.";
+/** Owner token banner; the configured default is named, never repeated; none for a foreign existing publication.
+ * Sign-in hint only for a token minted by this call (not `sent`, not the configured default). */
+function ownerTokenLines(data, purpose, sent) {
+    const token = data.ownerToken;
+    const extras = data.result?.extras;
+    if (extras?.isOwner === false)
+        return [``, `No owner token: an existing publication of another owner was returned.`];
+    if (typeof token !== "string" || token.length === 0)
+        return [];
+    const shown = ENV_OWNER_TOKEN !== undefined && token === ENV_OWNER_TOKEN ? `${OWNER_TOKEN_ENV} (not repeated)` : token;
+    return [
+        ``,
+        `===================================`,
+        `OWNER TOKEN: ${shown}`,
+        `===================================`,
+        ``,
+        `IMPORTANT: Save your owner token! You need it to ${purpose}. It cannot be recovered if lost.`,
+        ...(token !== sent && token !== ENV_OWNER_TOKEN ? [SIGN_IN_HINT] : []),
+    ];
+}
+/** Private management link (present only when minted) and the public listing state. */
+function ownerLinkLines(data) {
+    const lines = [];
+    if (typeof data.manageUrl === "string" && data.manageUrl.length > 0) {
+        lines.push(``, `MANAGE LINK (private): ${data.manageUrl}`, `Give it to the user privately; never publish it.`);
+    }
+    if (data.listed === true)
+        lines.push(``, `VISIBILITY: public, listed. Hide: set_visibility listed=false`);
+    return lines;
 }
 /** Optional delivery fields on HTML and hosting responses: why the mode was chosen, flagged or not applied. */
 function deliveryReasonLines(data) {
@@ -80,7 +161,7 @@ function deliveryReasonLines(data) {
 }
 async function apiRequest(method, path, body, headers, responseType = "json") {
     const url = `${BASE_URL}${path}`;
-    const res = await fetch(url, {
+    const res = await bpFetch(url, {
         method,
         headers: {
             "Content-Type": "application/json",
@@ -91,7 +172,7 @@ async function apiRequest(method, path, body, headers, responseType = "json") {
     const data = responseType === "text" ? await res.text() : await res.json().catch(() => null);
     return { ok: res.ok, status: res.status, data, headers: res.headers };
 }
-function formatPublishResponse(data, effectiveNamespace) {
+function formatPublishResponse(data, effectiveNamespace, sentOwnerToken) {
     const lines = [
         `Published successfully!`,
         ``,
@@ -103,7 +184,8 @@ function formatPublishResponse(data, effectiveNamespace) {
     if (data.expiresAt)
         lines.push(`Expires: ${data.expiresAt}`);
     lines.push(...hostingResponseLines(data));
-    lines.push(``, `===================================`, `OWNER TOKEN: ${data.ownerToken}`, `===================================`, ``, `IMPORTANT: Save your owner token! You need it to update or delete this resource later. It cannot be recovered if lost.`);
+    lines.push(...ownerTokenLines(data, "update or delete this resource later", sentOwnerToken));
+    lines.push(...ownerLinkLines(data));
     const ns = (data.namespace ?? effectiveNamespace) || "";
     if (ns !== PUBLIC_NAMESPACE) {
         lines.push(``, data.access === "protected" ? PROTECTED_UNLISTED_NOTICE : UNLISTED_NOTICE);
@@ -128,7 +210,8 @@ function formatUpdateResponse(data) {
 }
 server.tool("publish_html", "Publish HTML or Markdown content to BrewPage (repository default limit 5 MiB). Returns its primary share link and owner token. Supports password protection, custom TTL, optional filename, and an opt-in top toolbar (showTopBar). " +
     "When deliveryMode is omitted for a `public` page, the server may publish it on its own subdomain if the page needs browser features a BrewPage link does not provide; " +
-    "the result then includes deliveryModeReason and a delivery notice. Markdown raw HTML is allowlisted: scripts, styles, event handlers, forms and embeds are removed. Always share the returned URL.", {
+    "the result then includes deliveryModeReason and a delivery notice. Markdown raw HTML is allowlisted: scripts, styles, event handlers, forms and embeds are removed. Always share the returned URL. " +
+    MANAGE_URL_TEXT + " " + SECRETS, {
     content: z.string().describe("HTML or Markdown content to publish"),
     deliveryMode: DELIVERY_MODE_SCHEMA,
     format: z
@@ -154,7 +237,8 @@ server.tool("publish_html", "Publish HTML or Markdown content to BrewPage (repos
         .boolean()
         .optional()
         .describe("Add a thin top toolbar (filename + Download button + theme toggle) on the served page. Default: hidden."),
-}, async ({ content, format, namespace, password, ttlDays, filename, showTopBar, deliveryMode }) => {
+    ownerToken: z.string().optional().describe(CREATE_OWNER_TOKEN_DESCRIPTION),
+}, async ({ content, format, namespace, password, ttlDays, filename, showTopBar, deliveryMode, ownerToken }) => {
     const effectiveNamespace = resolveNamespace(namespace);
     const qsParams = [`ns=${encodeURIComponent(effectiveNamespace)}`, `format=${encodeURIComponent(format.toLowerCase())}`];
     if (ttlDays !== undefined)
@@ -169,6 +253,9 @@ server.tool("publish_html", "Publish HTML or Markdown content to BrewPage (repos
         headers["X-Password"] = password;
     if (deliveryMode)
         headers["X-Delivery-Mode"] = deliveryMode;
+    const owner = ownerTokenFor(ownerToken).token;
+    if (owner)
+        headers["X-Owner-Token"] = owner;
     const { ok, data } = await apiRequest("POST", `/api/html?${qsParams.join("&")}`, body, headers);
     if (!ok) {
         return {
@@ -185,12 +272,13 @@ server.tool("publish_html", "Publish HTML or Markdown content to BrewPage (repos
         content: [
             {
                 type: "text",
-                text: formatPublishResponse(data, effectiveNamespace),
+                text: formatPublishResponse(data, effectiveNamespace, owner),
             },
         ],
     };
 });
-server.tool("publish_file", "Upload a file to BrewPage via URL. Repository defaults: 5 MiB for files/audio, 20 MiB for video. Returns its primary share link and owner token. Does not expose password or TTL inputs.", {
+server.tool("publish_file", "Upload a file to BrewPage via URL. Repository defaults: 5 MiB for files/audio, 20 MiB for video. Returns its primary share link and owner token. Does not expose password or TTL inputs. " +
+    MANAGE_URL_TEXT + " " + SECRETS, {
     url: z.string().url().describe("URL of the file to upload"),
     deliveryMode: DELIVERY_MODE_SCHEMA,
     namespace: z
@@ -198,7 +286,8 @@ server.tool("publish_file", "Upload a file to BrewPage via URL. Repository defau
         .optional()
         .describe(NAMESPACE_DESCRIPTION),
     filename: z.string().optional().describe("Custom filename (optional)"),
-}, async ({ url: fileUrl, namespace, filename, deliveryMode }) => {
+    ownerToken: z.string().optional().describe(CREATE_OWNER_TOKEN_DESCRIPTION),
+}, async ({ url: fileUrl, namespace, filename, deliveryMode, ownerToken }) => {
     const effectiveNamespace = resolveNamespace(namespace);
     const fileRes = await fetch(fileUrl);
     if (!fileRes.ok) {
@@ -215,9 +304,15 @@ server.tool("publish_file", "Upload a file to BrewPage via URL. Repository defau
     const blob = await fileRes.blob();
     const formData = new FormData();
     formData.append("file", blob, filename || fileUrl.split("/").pop() || "file");
-    const res = await fetch(`${BASE_URL}/api/files?ns=${encodeURIComponent(effectiveNamespace)}`, {
+    const headers = {};
+    if (deliveryMode)
+        headers["X-Delivery-Mode"] = deliveryMode;
+    const owner = ownerTokenFor(ownerToken).token;
+    if (owner)
+        headers["X-Owner-Token"] = owner;
+    const res = await bpFetch(`${BASE_URL}/api/files?ns=${encodeURIComponent(effectiveNamespace)}`, {
         method: "POST",
-        headers: deliveryMode ? { "X-Delivery-Mode": deliveryMode } : undefined,
+        headers,
         body: formData,
     });
     const data = await res.json().catch(() => null);
@@ -236,7 +331,7 @@ server.tool("publish_file", "Upload a file to BrewPage via URL. Repository defau
         content: [
             {
                 type: "text",
-                text: formatPublishResponse(data, effectiveNamespace),
+                text: formatPublishResponse(data, effectiveNamespace, owner),
             },
         ],
     };
@@ -245,51 +340,36 @@ server.tool("update_hosting", "Change delivery mode for a NEW publication (not a
     type: z.enum(["html", "file", "json", "kv"]).describe("Resource type; sites always stay on their own subdomain"),
     namespace: z.string().describe("Resource namespace; non-public HTML-format pages stay on subdomain"),
     id: z.string().describe("Resource ID"),
-    ownerToken: z.string().describe("Original resource owner token"),
+    ownerToken: z.string().optional().describe(OWNER_TOKEN_DESCRIPTION),
     deliveryMode: z.enum(["path", "subdomain"]).describe("path = Promotion; subdomain = Dedicated subdomain"),
     expectedVersion: z.number().int().min(1).max(Number.MAX_SAFE_INTEGER).optional().describe("Optional current hostingVersion from the server; a stale value still applies and the result says so"),
 }, async ({ type, namespace, id, ownerToken, deliveryMode, expectedVersion }) => {
-    const segment = type === "file" ? "files" : type;
-    const path = `/api/${segment}/${encodeURIComponent(namespace)}/${encodeURIComponent(id)}/hosting`;
-    const { ok, status, data } = await apiRequest("PATCH", path, { deliveryMode, expectedVersion }, { "X-Owner-Token": ownerToken });
-    if (!ok) {
-        return {
-            content: [{ type: "text", text: `Failed to update hosting (${status}): ${JSON.stringify(data)}` }],
-            isError: true,
-        };
-    }
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
+    const path = `/api/${TYPE_SEGMENTS[type]}/${encodeURIComponent(namespace)}/${encodeURIComponent(id)}/hosting`;
+    const { ok, status, data } = await apiRequest("PATCH", path, { deliveryMode, expectedVersion }, { "X-Owner-Token": auth.token });
+    if (!ok)
+        return ownerFailure("update hosting", status, data, auth.fromEnv);
     return {
         content: [{ type: "text", text: formatUpdateResponse(data) }],
     };
 });
-server.tool("delete_resource", "Delete a BrewPage resource (HTML page, KV store, JSON collection, or file) using the owner token.", {
+server.tool("delete_resource", "Delete a BrewPage resource (HTML page, site, KV store, JSON document, or file) using the owner token.", {
     type: z
-        .enum(["html", "kv", "json", "file"])
+        .enum(["html", "site", "kv", "json", "file"])
         .describe("Resource type to delete"),
     namespace: z.string().describe("Resource namespace"),
     id: z.string().describe("Resource ID"),
-    ownerToken: z
-        .string()
-        .describe("Owner token received when the resource was created"),
+    ownerToken: z.string().optional().describe(OWNER_TOKEN_DESCRIPTION),
 }, async ({ type, namespace, id, ownerToken }) => {
-    const pathMap = {
-        html: `/api/html/${namespace}/${id}`,
-        kv: `/api/kv/${namespace}/${id}`,
-        json: `/api/json/${namespace}/${id}`,
-        file: `/api/files/${namespace}/${id}`,
-    };
-    const { ok, status, data } = await apiRequest("DELETE", pathMap[type], undefined, { "X-Owner-Token": ownerToken });
-    if (!ok) {
-        return {
-            content: [
-                {
-                    type: "text",
-                    text: `Failed to delete (${status}): ${JSON.stringify(data)}`,
-                },
-            ],
-            isError: true,
-        };
-    }
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
+    const path = `/api/${TYPE_SEGMENTS[type]}/${encodeURIComponent(namespace)}/${encodeURIComponent(id)}`;
+    const { ok, status, data } = await apiRequest("DELETE", path, undefined, { "X-Owner-Token": auth.token });
+    if (!ok)
+        return ownerFailure("delete", status, data, auth.fromEnv);
     return {
         content: [
             {
@@ -372,7 +452,8 @@ server.tool("get_stats", "Get BrewPage platform-wide usage statistics including
         ],
     };
 });
-server.tool("publish_site", "Publish an HTML site to BrewPage. Single-page: pass `entryContent`. Multi-page: pass `files` (array of `{path, content}`). Optional `entry` overrides default `index.html`. Use its returned primary link and retain the owner token. " + SITE_LIMITS_TEXT, {
+server.tool("publish_site", "Publish an HTML site to BrewPage. Single-page: pass `entryContent`. Multi-page: pass `files` (array of `{path, content}`). Optional `entry` overrides default `index.html`. Use its returned primary link and retain the owner token. " + SITE_LIMITS_TEXT +
+    " " + MANAGE_URL_TEXT + " " + SECRETS, {
     deliveryMode: DELIVERY_MODE_SCHEMA,
     entryContent: z
         .string()
@@ -395,10 +476,7 @@ server.tool("publish_site", "Publish an HTML site to BrewPage. Single-page: pass
         .optional()
         .describe("Optional password to protect the site"),
     ttlDays: TTL_SCHEMA,
-    ownerToken: z
-        .string()
-        .optional()
-        .describe("Existing owner token to group this site under the same owner as previous content"),
+    ownerToken: z.string().optional().describe(CREATE_OWNER_TOKEN_DESCRIPTION),
 }, async ({ entryContent, files, entry, namespace, password, ttlDays, ownerToken, deliveryMode }) => {
     const hasEntry = typeof entryContent === "string";
     const hasFiles = Array.isArray(files) && files.length > 0;
@@ -429,8 +507,9 @@ server.tool("publish_site", "Publish an HTML site to BrewPage. Single-page: pass
     const headers = {};
     if (password)
         headers["X-Password"] = password;
-    if (ownerToken)
-        headers["X-Owner-Token"] = ownerToken;
+    const owner = ownerTokenFor(ownerToken).token;
+    if (owner)
+        headers["X-Owner-Token"] = owner;
     if (deliveryMode)
         headers["X-Delivery-Mode"] = deliveryMode;
     const effectiveNamespace = resolveNamespace(namespace);
@@ -442,7 +521,7 @@ server.tool("publish_site", "Publish an HTML site to BrewPage. Single-page: pass
         qsParams.push(`ttl=${encodeURIComponent(String(ttlDays))}`);
     const qs = qsParams.length ? `?${qsParams.join("&")}` : "";
     const url = `${BASE_URL}/api/sites${qs}`;
-    const res = await fetch(url, { method: "POST", headers, body: formData });
+    const res = await bpFetch(url, { method: "POST", headers, body: formData });
     const data = await res.json().catch(() => null);
     if (!res.ok) {
         return {
@@ -474,7 +553,8 @@ server.tool("publish_site", "Publish an HTML site to BrewPage. Single-page: pass
     if (site.expiresAt)
         lines.push(`Expires: ${site.expiresAt}`);
     lines.push(...hostingResponseLines(site));
-    lines.push(``, `===================================`, `OWNER TOKEN: ${site.ownerToken}`, `===================================`, ``, `IMPORTANT: Save your owner token! You need it to view info or delete this site. It cannot be recovered if lost.`);
+    lines.push(...ownerTokenLines(site, "view info or delete this site", owner));
+    lines.push(...ownerLinkLines(site));
     const ns = (site.namespace || effectiveNamespace) || "";
     if (ns !== PUBLIC_NAMESPACE) {
         lines.push(``, site.access === "protected" ? PROTECTED_UNLISTED_NOTICE : UNLISTED_NOTICE);
@@ -486,9 +566,7 @@ server.tool("publish_site", "Publish an HTML site to BrewPage. Single-page: pass
 server.tool("republish_site", "Republish (full-replace) an existing multi-file BrewPage site in place at the SAME URL/ID. Requires owner token. The uploaded bundle becomes the complete new file set — files absent from it are removed, new files added, matching files overwritten. Single-page: pass `entryContent`. Multi-page: pass `files` (array of `{path, content}`). Optional `entry` overrides the default `index.html`. Republishing preserves existing expiry. " + SITE_LIMITS_TEXT, {
     namespace: z.string().describe("Site namespace"),
     id: z.string().describe("Site ID"),
-    ownerToken: z
-        .string()
-        .describe("Owner token received when the site was created (required for republish)"),
+    ownerToken: z.string().optional().describe(OWNER_TOKEN_DESCRIPTION),
     entryContent: z
         .string()
         .optional()
@@ -533,7 +611,10 @@ server.tool("republish_site", "Republish (full-replace) an existing multi-file B
         formData.append("files", entryBlob, entryName);
         formData.append("paths", entryName);
     }
-    const headers = { "X-Owner-Token": ownerToken };
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
+    const headers = { "X-Owner-Token": auth.token };
     const qsParams = [];
     if (entry)
         qsParams.push(`entry=${encodeURIComponent(entry)}`);
@@ -543,19 +624,10 @@ server.tool("republish_site", "Republish (full-replace) an existing multi-file B
         qsParams.push(`tags=${encodeURIComponent(tags.join(","))}`);
     const qs = qsParams.length ? `?${qsParams.join("&")}` : "";
     const url = `${BASE_URL}/api/sites/${encodeURIComponent(namespace)}/${encodeURIComponent(id)}${qs}`;
-    const res = await fetch(url, { method: "PUT", headers, body: formData });
+    const res = await bpFetch(url, { method: "PUT", headers, body: formData });
     const data = await res.json().catch(() => null);
-    if (!res.ok) {
-        return {
-            content: [
-                {
-                    type: "text",
-                    text: `Failed to republish site (${res.status}): ${JSON.stringify(data)}`,
-                },
-            ],
-            isError: true,
-        };
-    }
+    if (!res.ok)
+        return ownerFailure("republish site", res.status, data, auth.fromEnv);
     const site = data;
     const lines = [
         `Site republished successfully (full replace)!`,
@@ -588,9 +660,7 @@ server.tool("update_html", "Update an existing BrewPage HTML/Markdown page. Requ
     namespace: z.string().describe("Page namespace"),
     id: z.string().describe("Page ID"),
     content: z.string().describe("New HTML or Markdown content"),
-    ownerToken: z
-        .string()
-        .describe("Owner token received when the page was created"),
+    ownerToken: z.string().optional().describe(OWNER_TOKEN_DESCRIPTION),
     format: z
         .string()
         .optional()
@@ -599,21 +669,15 @@ server.tool("update_html", "Update an existing BrewPage HTML/Markdown page. Requ
     const body = { content };
     if (format)
         body.format = format;
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
     const path = `/api/html/${encodeURIComponent(namespace)}/${encodeURIComponent(id)}`;
     const { ok, status, data } = await apiRequest("PUT", path, body, {
-        "X-Owner-Token": ownerToken,
+        "X-Owner-Token": auth.token,
     });
-    if (!ok) {
-        return {
-            content: [
-                {
-                    type: "text",
-                    text: `Failed to update HTML (${status}): ${JSON.stringify(data)}`,
-                },
-            ],
-            isError: true,
-        };
-    }
+    if (!ok)
+        return ownerFailure("update HTML", status, data, auth.fromEnv);
     return {
         content: [
             {
@@ -623,7 +687,8 @@ server.tool("update_html", "Update an existing BrewPage HTML/Markdown page. Requ
         ],
     };
 });
-server.tool("publish_json", "Publish a JSON document to BrewPage (repository default limit 1 MiB). Accepts a JSON object, array, or a JSON-encoded string containing any valid JSON, including scalars/null. Returns its primary share link and owner token.", {
+server.tool("publish_json", "Publish a JSON document to BrewPage (repository default limit 1 MiB). Accepts a JSON object, array, or a JSON-encoded string containing any valid JSON, including scalars/null. Returns its primary share link and owner token. " +
+    MANAGE_URL_TEXT + " " + SECRETS, {
     deliveryMode: DELIVERY_MODE_SCHEMA,
     json: z
         .union([z.string(), z.record(z.unknown()), z.array(z.unknown())])
@@ -641,10 +706,7 @@ server.tool("publish_json", "Publish a JSON document to BrewPage (repository def
         .array(z.string())
         .optional()
         .describe("Optional tags for the document"),
-    ownerToken: z
-        .string()
-        .optional()
-        .describe("Existing owner token to group this document under the same owner as previous content"),
+    ownerToken: z.string().optional().describe(CREATE_OWNER_TOKEN_DESCRIPTION),
 }, async ({ json, namespace, password, ttlDays, tags, ownerToken, deliveryMode }) => {
     const jsonString = typeof json === "string" ? json : JSON.stringify(json);
     const effectiveNamespace = resolveNamespace(namespace);
@@ -660,11 +722,12 @@ server.tool("publish_json", "Publish a JSON document to BrewPage (repository def
     const headers = { "Content-Type": "application/json" };
     if (password)
         headers["X-Password"] = password;
-    if (ownerToken)
-        headers["X-Owner-Token"] = ownerToken;
+    const owner = ownerTokenFor(ownerToken).token;
+    if (owner)
+        headers["X-Owner-Token"] = owner;
     if (deliveryMode)
         headers["X-Delivery-Mode"] = deliveryMode;
-    const res = await fetch(`${BASE_URL}/api/json${qs}`, {
+    const res = await bpFetch(`${BASE_URL}/api/json${qs}`, {
         method: "POST",
         headers,
         body: jsonString,
@@ -685,7 +748,7 @@ server.tool("publish_json", "Publish a JSON document to BrewPage (repository def
         content: [
             {
                 type: "text",
-                text: formatPublishResponse(data, effectiveNamespace),
+                text: formatPublishResponse(data, effectiveNamespace, owner),
             },
         ],
     };
@@ -729,32 +792,24 @@ server.tool("update_json", "Update an existing BrewPage JSON document. Requires
     json: z
         .union([z.string(), z.record(z.unknown()), z.array(z.unknown())])
         .describe("New JSON document (object, array, or JSON-encoded string)"),
-    ownerToken: z
-        .string()
-        .describe("Owner token received when the document was created"),
+    ownerToken: z.string().optional().describe(OWNER_TOKEN_DESCRIPTION),
 }, async ({ namespace, id, json, ownerToken }) => {
     const jsonString = typeof json === "string" ? json : JSON.stringify(json);
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
     const url = `${BASE_URL}/api/json/${encodeURIComponent(namespace)}/${encodeURIComponent(id)}`;
-    const res = await fetch(url, {
+    const res = await bpFetch(url, {
         method: "PUT",
         headers: {
             "Content-Type": "application/json",
-            "X-Owner-Token": ownerToken,
+            "X-Owner-Token": auth.token,
         },
         body: jsonString,
     });
     const data = await res.json().catch(() => null);
-    if (!res.ok) {
-        return {
-            content: [
-                {
-                    type: "text",
-                    text: `Failed to update JSON (${res.status}): ${JSON.stringify(data)}`,
-                },
-            ],
-            isError: true,
-        };
-    }
+    if (!res.ok)
+        return ownerFailure("update JSON", res.status, data, auth.fromEnv);
     return {
         content: [
             {
@@ -764,7 +819,8 @@ server.tool("update_json", "Update an existing BrewPage JSON document. Requires
         ],
     };
 });
-server.tool("publish_kv", "Publish a key/value entry to BrewPage. Creates a KV store; the entry is addressed by (namespace, id, key). Repository defaults: 1 MiB per value, 1,000 keys per store. Returns its primary share link and owner token.", {
+server.tool("publish_kv", "Publish a key/value entry to BrewPage. Creates a KV store; the entry is addressed by (namespace, id, key). Repository defaults: 1 MiB per value, 1,000 keys per store; the key name `hosting` is reserved. Returns its primary share link and owner token. " +
+    MANAGE_URL_TEXT + " " + SECRETS, {
     deliveryMode: DELIVERY_MODE_SCHEMA,
     key: z.string().describe("KV key (first part of the (namespace, id, key) addressing tuple)"),
     value: z.string().describe("KV value"),
@@ -781,10 +837,7 @@ server.tool("publish_kv", "Publish a key/value entry to BrewPage. Creates a KV s
         .array(z.string())
         .optional()
         .describe("Optional tags for the KV entry"),
-    ownerToken: z
-        .string()
-        .optional()
-        .describe("Existing owner token to group this KV store under the same owner as previous content"),
+    ownerToken: z.string().optional().describe(CREATE_OWNER_TOKEN_DESCRIPTION),
 }, async ({ key, value, namespace, password, ttlDays, tags, ownerToken, deliveryMode }) => {
     const body = { key, value };
     const effectiveNamespace = resolveNamespace(namespace);
@@ -800,8 +853,9 @@ server.tool("publish_kv", "Publish a key/value entry to BrewPage. Creates a KV s
     const headers = {};
     if (password)
         headers["X-Password"] = password;
-    if (ownerToken)
-        headers["X-Owner-Token"] = ownerToken;
+    const owner = ownerTokenFor(ownerToken).token;
+    if (owner)
+        headers["X-Owner-Token"] = owner;
     if (deliveryMode)
         headers["X-Delivery-Mode"] = deliveryMode;
     const { ok, status, data } = await apiRequest("POST", `/api/kv${qs}`, body, headers);
@@ -820,36 +874,28 @@ server.tool("publish_kv", "Publish a key/value entry to BrewPage. Creates a KV s
         content: [
             {
                 type: "text",
-                text: formatPublishResponse(data, effectiveNamespace),
+                text: formatPublishResponse(data, effectiveNamespace, owner),
             },
         ],
     };
 });
-server.tool("set_kv", "Set or update a key in an existing BrewPage KV store. Requires owner token.", {
+server.tool("set_kv", "Set or update a key in an existing BrewPage KV store. Requires owner token. The key name `hosting` is reserved.", {
     namespace: z.string().describe("KV store namespace"),
     id: z.string().describe("KV store ID"),
     key: z.string().describe("Key to set"),
     value: z.string().describe("Value to assign to the key"),
-    ownerToken: z
-        .string()
-        .describe("Owner token received when the KV store was created"),
+    ownerToken: z.string().optional().describe(OWNER_TOKEN_DESCRIPTION),
 }, async ({ namespace, id, key, value, ownerToken }) => {
     const body = { value };
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
     const path = `/api/kv/${encodeURIComponent(namespace)}/${encodeURIComponent(id)}/${encodeURIComponent(key)}`;
     const { ok, status, data } = await apiRequest("PUT", path, body, {
-        "X-Owner-Token": ownerToken,
+        "X-Owner-Token": auth.token,
     });
-    if (!ok) {
-        return {
-            content: [
-                {
-                    type: "text",
-                    text: `Failed to set KV (${status}): ${JSON.stringify(data)}`,
-                },
-            ],
-            isError: true,
-        };
-    }
+    if (!ok)
+        return ownerFailure("set KV", status, data, auth.fromEnv);
     return {
         content: [
             {
@@ -893,10 +939,11 @@ server.tool("get_kv", "Fetch a value from a BrewPage KV store by namespace, ID,
         ],
     };
 });
-server.tool("get_limits", "Get the current BrewPage upload limits (GET /api/limits, no auth): request size, site file count, per-file and total size, " +
+server.tool("get_limits", "Get the current BrewPage upload limits (GET /api/limits): request size, site file count, per-file and total size, " +
     "ZIP expansion, path and name lengths, TTL default/maximum, allowed file extensions and skipped system files. Sizes are bytes. " +
-    "Call it before publishing a large or multi-file site.", {}, async () => {
-    const { ok, status, data } = await apiRequest("GET", "/api/limits");
+    `With ${OWNER_TOKEN_ENV} set: also reach (token|profile) and ownerMaxTtlDays. Call it before publishing a large or multi-file site.`, {}, async () => {
+    const headers = ENV_OWNER_TOKEN ? { "X-Owner-Token": ENV_OWNER_TOKEN } : {};
+    const { ok, status, data } = await apiRequest("GET", "/api/limits", undefined, headers);
     if (!ok) {
         return {
             content: [
@@ -943,8 +990,11 @@ server.tool("search_gallery", "Search the BrewPage public gallery. Optional filt
     ownerToken: z
         .string()
         .optional()
-        .describe("Owner token; only sent as X-Owner-Token when 'mine' is true"),
+        .describe(`Owner token; only sent as X-Owner-Token when 'mine' is true. Default: ${OWNER_TOKEN_ENV}.`),
 }, async ({ q, page, size, sort, mine, ownerToken }) => {
+    const auth = ownerTokenFor(ownerToken);
+    if (mine === true && !auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
     const qsParams = [];
     if (q !== undefined)
         qsParams.push(`q=${encodeURIComponent(q)}`);
@@ -958,8 +1008,8 @@ server.tool("search_gallery", "Search the BrewPage public gallery. Optional filt
         qsParams.push("mine=true");
     const qs = qsParams.length ? `?${qsParams.join("&")}` : "";
     const headers = {};
-    if (mine === true && ownerToken)
-        headers["X-Owner-Token"] = ownerToken;
+    if (mine === true && auth.token)
+        headers["X-Owner-Token"] = auth.token;
     const { ok, status, data } = await apiRequest("GET", `/api/gallery${qs}`, undefined, headers);
     if (!ok) {
         return {
@@ -981,6 +1031,59 @@ server.tool("search_gallery", "Search the BrewPage public gallery. Optional filt
         ],
     };
 });
+server.tool("set_visibility", "Hide or show a public publication in gallery & search. Link unchanged.", {
+    type: z.enum(["html", "site", "file", "json", "kv"]).describe("Publication type; only public html, site and file can be listed"),
+    namespace: z.string().describe("Publication namespace"),
+    id: z.string().describe("Publication ID"),
+    listed: z.boolean().describe("false = hide, true = show"),
+    ownerToken: z.string().optional().describe(OWNER_TOKEN_DESCRIPTION),
+}, async ({ type, namespace, id, listed, ownerToken }) => {
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
+    const path = `/api/${TYPE_SEGMENTS[type]}/${encodeURIComponent(namespace)}/${encodeURIComponent(id)}/visibility`;
+    const { ok, status, data } = await apiRequest("POST", path, { listed }, { "X-Owner-Token": auth.token });
+    if (!ok)
+        return ownerFailure("set visibility", status, data, auth.fromEnv);
+    const result = data;
+    return textResult([`LISTED: ${result.listed} · link unchanged`, ...noticeLines(result)].join("\n"));
+});
+server.tool("bind_token", "Add an owner token to your BrewPage profile (as publish). Needs an admin token of that profile.", {
+    token: z.string().describe("Owner token to add"),
+    ownerToken: z.string().optional().describe(`Admin token of the profile. Default: ${OWNER_TOKEN_ENV}.`),
+}, async ({ token, ownerToken }) => {
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
+    const { ok, status, data } = await apiRequest("POST", "/api/owner-token/bind", { token }, { "X-Owner-Token": auth.token });
+    if (!ok)
+        return textResult(`Failed to bind token (${status}): ${JSON.stringify(data)}`, true);
+    const result = data;
+    return textResult(`BOUND ${maskToken(token)} · ${result.active}/${result.max} active`);
+});
+server.tool("mint_token", "Mint a new profile token with an admin token; the new token is shown once. Scope publish (default) or admin; expiry 30d, 90d, 1y or never.", {
+    label: z.string().optional().describe("Optional label shown in the profile"),
+    scope: z.enum(["publish", "admin"]).optional().describe("publish (default) or admin (can manage tokens)"),
+    expiresIn: z.enum(["30d", "90d", "1y", "never"]).optional().describe("Default: admin 90d, publish never"),
+    ownerToken: z.string().optional().describe(`Admin token of the profile. Default: ${OWNER_TOKEN_ENV}.`),
+}, async ({ label, scope, expiresIn, ownerToken }) => {
+    const auth = ownerTokenFor(ownerToken);
+    if (!auth.token)
+        return textResult(NO_OWNER_TOKEN, true);
+    const { ok, status, data } = await apiRequest("POST", "/api/owner-token/mint", { label, scope, expiresIn }, { "X-Owner-Token": auth.token });
+    if (!ok)
+        return textResult(`Failed to mint token (${status}): ${JSON.stringify(data)}`, true);
+    const result = data;
+    return textResult([
+        `MINTED · ${result.scope} · expires ${result.expiresAt ?? "never"}`,
+        ``,
+        `===================================`,
+        `NEW TOKEN (shown once): ${result.token}`,
+        `===================================`,
+        ``,
+        `Save it now; it cannot be shown again. Never publish it.`,
+    ].join("\n"));
+});
 async function main() {
     const transport = new StdioServerTransport();
     await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brewpage-mcp",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "mcpName": "io.github.kochetkov-ma/brewpage-mcp",
   "description": "MCP server for BrewPage — publish and manage HTML, sites, KV, JSON and files from AI assistants",
   "type": "module",