brewpage-mcp 1.15.5 → 1.16.1

package/README.md

@@ -17,7 +17,7 @@ Choosing a host? See how BrewPage compares with GitHub Pages, Netlify Drop, Tiin
 ## Quick Start
 
 ```bash
-npx -y brewpage-mcp@1.15.5
+npx -y brewpage-mcp@1.16.1
 ```
 
 Requires Node.js 20 or newer. This starts the stdio server for an MCP client.
@@ -50,7 +50,7 @@ Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)
   "mcpServers": {
     "brewpage": {
       "command": "npx",
-      "args": ["-y", "brewpage-mcp@1.15.5"]
+      "args": ["-y", "brewpage-mcp@1.16.1"]
     }
   }
 }
@@ -61,7 +61,7 @@ Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)
 Register a project-scoped stdio server:
 
 ```bash
-claude mcp add --transport stdio --scope project brewpage -- npx -y brewpage-mcp@1.15.5
+claude mcp add --transport stdio --scope project brewpage -- npx -y brewpage-mcp@1.16.1
 ```
 
 This writes `.mcp.json` in the project root. Use `--scope user` for user-scoped registration. See the [official Claude Code MCP guide](https://code.claude.com/docs/en/mcp).
@@ -75,7 +75,7 @@ Open **Settings > MCP** and add:
   "mcpServers": {
     "brewpage": {
       "command": "npx",
-      "args": ["-y", "brewpage-mcp@1.15.5"]
+      "args": ["-y", "brewpage-mcp@1.16.1"]
     }
   }
 }
@@ -89,7 +89,7 @@ Open the Cline MCP settings panel and add:
 {
   "brewpage": {
     "command": "npx",
-    "args": ["-y", "brewpage-mcp@1.15.5"]
+    "args": ["-y", "brewpage-mcp@1.16.1"]
   }
 }
 ```
@@ -97,13 +97,13 @@ Open the Cline MCP settings panel and add:
 ### Global Install
 
 ```bash
-npm install -g brewpage-mcp@1.15.5
+npm install -g brewpage-mcp@1.16.1
 brewpage-mcp
 ```
 
 ## Tools
 
-Twenty tools are available. Creation returns an owner token; keep it to modify or delete the resource later. Owner tools take `ownerToken`, else `BREWPAGE_OWNER_TOKEN`. Supported password inputs use `X-Password`. Secrets allowed; likely ones are flagged in notices. For a secret: private namespace + password.
+Twenty tools are available. Creation returns an owner token; keep it to modify or delete the resource later. Owner tools take `ownerToken`, else `BREWPAGE_OWNER_TOKEN` (local server only). Supported password inputs use `X-Password`. Secrets allowed; likely ones are flagged in notices. For a secret: private namespace + password.
 
 | Tool | Purpose |
 |------|---------|
@@ -130,7 +130,7 @@ Twenty tools are available. Creation returns an owner token; keep it to modify o
 
 All five publish tools accept optional `deliveryMode: "path" | "subdomain"`, sent only as `X-Delivery-Mode`; authored JSON and multipart bodies keep their existing format. Visibility and password protection are separate choices. Omitted namespace is private (a generated `priv-<random>` namespace): unlisted and not indexed; anyone with the link can still open it. `public` lists HTML, sites and files in the gallery and sitemap, so Google, Bing and AI search can find and index them; public pages are served on the brewpage.app domain for the strongest reach (a site always gets its own subdomain). Never put secrets in a public publication. Password-protected publications, JSON and KV are never listed.
 
-The MCP server wraps a subset of the backend-generated public [REST contract](../openapi/openapi.json). TTL inputs take days or a string such as `2w`/`36h` (default 15); the server rounds to whole days and clamps to 1–30 (owner-specific caps and eligible automatic extensions can differ). Use returned `expiresAt`. Every tolerated-input adjustment (TTL clamp, format alias, skipped site member, normalised namespace) comes back in the response `notices` array and is printed as `Notice (code): message`; `secret-detected` and `manage-link-disabled` print as `WARNING (code): message`: relay them to the user. A minted `manageUrl` prints as `MANAGE LINK (private): …`: give it to the user privately, never publish it. A listed public result prints `VISIBILITY: public, listed. Hide: set_visibility listed=false`. `get_page` reads stored rendered HTML or format-specific code/text from the API; it does not call the owner-only original-source endpoint or a browser viewer. `publish_file` uploads from a source URL and does not expose password or TTL inputs.
+The MCP server wraps a subset of the backend-generated public [REST contract](../openapi/openapi.json). TTL inputs take days or a string such as `2w`/`36h` (default 15); the server rounds to whole days and clamps to 1–30 (owner-specific caps and eligible automatic extensions can differ). Use returned `expiresAt`. Every tolerated-input adjustment (TTL clamp, format alias, skipped site member, normalised namespace) comes back in the response `notices` array and is printed as `Notice (code): message`; `secret-detected` prints as `WARNING (code): message`: relay it to the user. A live BrewPage token or manage link in public content (`credential-published`) prints first as `SECURITY ALERT (credential-published): …`: tell the user to remove and reset it; that result is hidden from the gallery, so it prints no `VISIBILITY` line. A minted `manageUrl` prints as `MANAGE LINK (private): …`: give it to the user privately, never publish it. A listed public result prints `VISIBILITY: public, listed. Hide: set_visibility listed=false`. `get_page` reads stored rendered HTML or format-specific code/text from the API; it does not call the owner-only original-source endpoint or a browser viewer. `publish_file` uploads from a source URL and does not expose password or TTL inputs.
 
 For a fresh publication, sites and HTML pages of format `HTML` outside `public` (including the generated unlisted namespace) always use Dedicated subdomain (`subdomain`); omit `deliveryMode` there. An explicit `path` there is not rejected: the publication is created on its subdomain and the result reports `deliveryModeMatched: false`, `deliveryModeReason: "policy:subdomain-required"` and a `Delivery notice:` line. Everything else in any namespace (Markdown, code/text, files, JSON, KV, public HTML) defaults to Promotion (`path`) and may choose Dedicated subdomain, including password-protected content. Promotion uses a BrewPage path with stricter active-document restrictions. Each NEW site gets one publication-specific host for its complete bundle, preserving relative/root-relative paths; missing assets return 404, with no SPA fallback. Third-party widgets may still need provider configuration.
 
@@ -232,7 +232,7 @@ publish_file(url="https://example.com/diagram.png")
 
 Publish a single-page or multi-file HTML site. Pass `entryContent` for a single page or `files` (array of `{path, content}`) for a multi-file site. Supports password protection, TTL, and owner token grouping. The result prints `Title:` (entry page title) after `ID:` when the server derives one.
 
-Limits (current values from `get_limits`): a request is at most 25 MB; a site at most 200 files, 5 MB per file and 20 MB in total; each path at most 380 characters. System files such as `.DS_Store` and `__MACOSX/` are skipped and never count; files with an unsupported extension or a too-long path are skipped and reported in notices. Entry: `entry`, else root `index.html`, else the shallowest HTML file. A site limit hit answers 400 with a message naming the limit, as does a PDF/Office file that is unreadable or password-protected; 413 means the request is over 25 MB, has too many files and form fields, or a file name/path is too long; 422 means no servable file is left; 503 means busy: retry after `Retry-After` seconds (failed publish tools print it).
+Limits (current values from `get_limits`): a request is at most 25 MiB; a site at most 200 files, 5 MiB per file and 20 MiB in total; each path at most 380 characters. System files such as `.DS_Store` and `__MACOSX/` are skipped and never count; files with an unsupported extension or a too-long path are skipped and reported in notices. Entry: `entry`, else root `index.html`, else the shallowest HTML file. A site limit hit answers 400 with a message naming the limit, as does a PDF/Office file that is unreadable or password-protected; 413 means the request is over 25 MiB, has too many files and form fields, or a file name/path is too long; 422 means no servable file is left; 503 means busy: retry after `Retry-After` seconds (failed publish tools print it).
 
 Parameters: exactly one of `entryContent` (string) or non-empty `files` (array of `{path, content}`), `entry` (optional entry file path, default `index.html`), `namespace` (optional -- omit for private, unlisted content; `public` lists the site in the gallery and sitemap for Google, Bing and AI search; a site always gets its own subdomain), `password` (optional), `ttlDays` (days or a string such as `2w`; default 15; the server clamps to 1--30), `ownerToken` (optional, groups site under an existing owner), `deliveryMode` (optional; fresh sites require `subdomain`).
 
@@ -382,7 +382,7 @@ search_gallery(mine=true, ownerToken="tok_...", sort="date")
 
 Delete a BrewPage resource (HTML page, site, KV store, JSON document, or file) using the owner token received at creation.
 
-Parameters: `type` (`html` | `site` | `kv` | `json` | `file`), `namespace` (string), `id` (string), `ownerToken` (optional; default `BREWPAGE_OWNER_TOKEN`). Path segments are URL-encoded.
+Parameters: `type` (`html` | `site` | `kv` | `json` | `file`), `namespace` (string), `id` (string), `ownerToken` (optional; default `BREWPAGE_OWNER_TOKEN`, local server only). Path segments are URL-encoded.
 
 Example prompt:
 
@@ -412,7 +412,7 @@ Output: `LISTED: false · link unchanged`.
 
 Add an owner token to your BrewPage profile (as `publish`) with an `admin` token of that profile (`POST /api/owner-token/bind`). Output: `BOUND …ab12 · 3/20 active`; tokens are never printed in full.
 
-Parameters: `token`, `ownerToken` (admin token; optional, default `BREWPAGE_OWNER_TOKEN`).
+Parameters: `token`, `ownerToken` (admin token; optional, default `BREWPAGE_OWNER_TOKEN`, local server only).
 
 ---
 
@@ -442,9 +442,9 @@ get_stats()
 
 ### `get_limits`
 
-Read the current limits from `GET /api/limits` (no auth; with `BREWPAGE_OWNER_TOKEN` also `reach` and `ownerMaxTtlDays`). Sizes are bytes, TTLs days: `requestMaxBytes`; `html`, `json`, `kv` and `files` max size, counts and TTL default/maximum; `profileMaxTtlDays` (TTL cap for a token in a profile); `sites.maxFiles`, `maxFileBytes`, `maxTotalBytes` (uncompressed), `maxArchiveExpansionBytes`, `maxPathChars`, `maxPathBytes`, `maxNameBytes`, `defaultTtlDays`, `maxTtlDays`, `allowedExtensions`, `skippedFileNames` and `skippedRootFolders`. Call it before publishing a large or multi-file site.
+Read the current limits from `GET /api/limits` (no auth needed; an owner token goes as `X-Owner-Token`). Always returns `reach`: `profile` only when the owner token is active in a profile, else `token` (also with no token); with a usable owner token also `ownerMaxTtlDays`. Sizes are bytes, TTLs days: `requestMaxBytes`; `html`, `json`, `kv` and `files` max size, counts and TTL default/maximum; `profileMaxTtlDays` (TTL cap for a token in a profile); `sites.maxFiles`, `maxFileBytes`, `maxTotalBytes` (uncompressed), `maxArchiveExpansionBytes`, `maxPathChars`, `maxPathBytes`, `maxNameBytes`, `defaultTtlDays`, `maxTtlDays`, `allowedExtensions`, `skippedFileNames` and `skippedRootFolders`. Call it before publishing a large or multi-file site.
 
-Parameters: none.
+Parameters: `ownerToken` (optional; default `BREWPAGE_OWNER_TOKEN`, local server only).
 
 Example prompt:
 
@@ -530,6 +530,14 @@ Every publish response includes an **owner token** -- the only credential that a
 
 ## Changelog
 
+## 1.16.1 -- 2026-10-30
+
+- Update tools (`update_html`, `update_json`, `set_kv`, `republish_site`) state that tokens and manage links never go in public content.
+
+## 1.16.0 -- 2026-10-29
+
+- `get_limits` accepts `ownerToken` (remote `/mcp` gets `reach`/`ownerMaxTtlDays`). Results open with `SECURITY ALERT (credential-published)` when public content holds a live BrewPage token or manage link. Wording: limits reach, local-only env token, MiB.
+
 ## 1.15.5 -- 2026-10-29
 
 - `publish_html` prints the page title (`Title:`) when the server reports one; tool texts state plain size limits; `get_limits` names the per-type limits and the profile TTL cap.

package/dist/tools.d.ts

@@ -1,6 +1,6 @@
 import { McpServer } from "@modelcontextprotocol/server";
 export declare const DEFAULT_BASE_URL = "https://brewpage.app";
-export declare const USER_AGENT = "brewpage-mcp/1.15.5";
+export declare const USER_AGENT = "brewpage-mcp/1.16.1";
 export declare const OWNER_TOKEN_ENV = "BREWPAGE_OWNER_TOKEN";
 export interface ServerOptions {
     /** BrewPage origin for API calls; default https://brewpage.app. */

package/dist/tools.js

@@ -1,7 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/server";
 import { z } from "zod";
 export const DEFAULT_BASE_URL = "https://brewpage.app";
-export const USER_AGENT = "brewpage-mcp/1.15.5";
+export const USER_AGENT = "brewpage-mcp/1.16.1";
 export const OWNER_TOKEN_ENV = "BREWPAGE_OWNER_TOKEN";
 const READ_ONLY = { readOnlyHint: true };
 const DESTRUCTIVE = { readOnlyHint: false, destructiveHint: true };
@@ -10,15 +10,23 @@ const ADDITIVE = { readOnlyHint: false, destructiveHint: false };
 function toolMeta(title, hints) {
     return { title, annotations: { title, ...hints } };
 }
-const NO_OWNER_TOKEN = `No owner token: pass ownerToken or set ${OWNER_TOKEN_ENV}.`;
-const CREATE_OWNER_TOKEN_DESCRIPTION = `Optional. Default: ${OWNER_TOKEN_ENV}, else a new token per create.`;
-const OWNER_TOKEN_DESCRIPTION = `Owner token from create. Default: ${OWNER_TOKEN_ENV}.`;
-const SECRETS = "Secrets allowed; likely ones are flagged in notices. Private namespace + password suit secrets.";
+/** Env default exists only in the local (stdio) server; remote /mcp takes ownerToken per call. */
+const ENV_DEFAULT = `env ${OWNER_TOKEN_ENV} (local server only)`;
+const NO_OWNER_TOKEN = `No owner token: pass ownerToken (local server: or set ${OWNER_TOKEN_ENV}).`;
+const CREATE_OWNER_TOKEN_DESCRIPTION = `Optional. Default: ${ENV_DEFAULT}, else a new token per create.`;
+const OWNER_TOKEN_DESCRIPTION = `Owner token from create. Default: ${ENV_DEFAULT}.`;
+/** Backend guard checks create and update content alike. */
+const NO_PUBLIC_CREDENTIALS = "BrewPage tokens and manage links must never be in public content.";
+const SECRETS = "Secrets allowed; likely ones are flagged in notices. Private namespace + password suit secrets. " +
+    NO_PUBLIC_CREDENTIALS;
 const MANAGE_URL_TEXT = "Returns manageUrl, a private management link (grants control; not for public sharing).";
 const OLD_READ_ONLY_CODE = "OLD_PUBLICATION_READ_ONLY";
 const OLD_READ_ONLY_TEXT = ` Old publications (made before 5 October 2026) are read-only: 409 ${OLD_READ_ONLY_CODE} with createUrl to publish anew.`;
 /** Notice codes the agent must relay to the user. */
-const WARNING_CODES = new Set(["secret-detected", "manage-link-disabled"]);
+const WARNING_CODES = new Set(["secret-detected"]);
+/** Live BrewPage token or manage link in public content: printed first as a security alert, never listed. */
+const CREDENTIAL_CODE = "credential-published";
+const CREDENTIAL_ALERT_TAIL = "Tell the user now: anyone with this link can use that token; they must remove it and reset it.";
 /** MCP type name -> REST path segment. */
 const TYPE_SEGMENTS = { html: "html", site: "sites", file: "files", json: "json", kv: "kv" };
 /** `/api/<segments>` with each segment encoded; empty, `.` and `..` refused (URL parsing would resolve them away). */
@@ -108,11 +116,11 @@ const DELIVERY_MODE_SCHEMA = z.enum(["path", "subdomain"]).optional().describe("
     "Everything else in any namespace (Markdown, code/text, files, JSON, KV, public HTML) defaults to path (Promotion); public HTML may automatically choose subdomain for browser features. " +
     "When creation returns an existing publication, it keeps its actual mode and URL.");
 /** Site upload rules shared by publish_site and republish_site; current values come from get_limits. */
-const SITE_LIMITS_TEXT = "Default limits (current values: GET /api/limits): a request is at most 25 MB; a site at most 200 files, 5 MB per file and 20 MB in total; " +
+const SITE_LIMITS_TEXT = "Default limits (current values: GET /api/limits): a request is at most 25 MiB; a site at most 200 files, 5 MiB per file and 20 MiB in total; " +
     "each path at most 380 characters. System files (.DS_Store, __MACOSX/ and similar) are skipped and never count; files with an unsupported extension " +
     "or a too-long path are skipped and listed in notices. Entry: `entry`, else root index.html, else the shallowest HTML file. " +
     "Errors: 400 = a site limit exceeded (the message names it), invalid path, no HTML file, or a PDF/Office file unreadable " +
-    "or password-protected; 413 = request over 25 MB, too many files and form fields, or a file name/path too long; " +
+    "or password-protected; 413 = request over 25 MiB, too many files and form fields, or a file name/path too long; " +
     "422 = no servable file left; 503 = busy, retry after Retry-After seconds.";
 function hostingResponseLines(data) {
     const fields = ["routingCohort", "deliveryMode", "requestedDeliveryMode", "effectiveDeliveryMode",
@@ -126,14 +134,26 @@ function hostingResponseLines(data) {
     lines.push(...noticeLines(data));
     return lines;
 }
-/** Server `notices` ({code, message}) on publish/update responses: each tolerated-input adjustment, verbatim. */
-function noticeLines(data) {
+/** Server `notices` ({code, message}) on publish/update responses, well-formed only. */
+function notices(data) {
     if (!Array.isArray(data.notices))
         return [];
-    return data.notices
-        .filter((n) => typeof n === "object" && n !== null && typeof n.code === "string" && typeof n.message === "string")
+    return data.notices.filter((n) => typeof n === "object" && n !== null && typeof n.code === "string" && typeof n.message === "string");
+}
+/** Each tolerated-input adjustment, verbatim; the credential alert prints separately, first. */
+function noticeLines(data) {
+    return notices(data).filter((n) => n.code !== CREDENTIAL_CODE)
         .map((n) => `${WARNING_CODES.has(n.code) ? "WARNING" : "Notice"} (${n.code}): ${n.message}`);
 }
+function hasCredentialNotice(data) {
+    return notices(data).some((n) => n.code === CREDENTIAL_CODE);
+}
+/** Opening lines of a result whose public content holds a live BrewPage credential, else none. */
+function credentialAlertLines(data) {
+    const alerts = notices(data).filter((n) => n.code === CREDENTIAL_CODE)
+        .map((n) => `SECURITY ALERT (${CREDENTIAL_CODE}): ${n.message} ${CREDENTIAL_ALERT_TAIL}`);
+    return alerts.length ? [...alerts, ``] : [];
+}
 const SIGN_IN_HINT = "Optional: sign in free (Google or any email) at https://account.brewpage.app to never lose your pages or tokens and to mint tokens that never expire. Not needed to publish.";
 /** Private management link (present only when minted) and the public listing state. */
 function ownerLinkLines(data) {
@@ -141,7 +161,7 @@ function ownerLinkLines(data) {
     if (typeof data.manageUrl === "string" && data.manageUrl.length > 0) {
         lines.push(``, `MANAGE LINK (private): ${data.manageUrl}`, `Give it to the user privately; never publish it.`);
     }
-    if (data.listed === true)
+    if (data.listed === true && !hasCredentialNotice(data))
         lines.push(``, `VISIBILITY: public, listed. Hide: set_visibility listed=false`);
     return lines;
 }
@@ -157,6 +177,7 @@ function deliveryReasonLines(data) {
 }
 function formatUpdateResponse(data) {
     const lines = [
+        ...credentialAlertLines(data),
         `Updated successfully!`,
         ``,
         `URL: ${data.link || data.url || "N/A"}`,
@@ -188,7 +209,7 @@ export function createServer(options = {}) {
     const apiFetch = options.fetch ?? fetch;
     const server = new McpServer({
         name: "brewpage-mcp",
-        version: "1.15.5",
+        version: "1.16.1",
     });
     /** Caller argument first, then the configured default; `fromEnv` marks the configured one. */
     function ownerTokenFor(argument) {
@@ -242,6 +263,7 @@ export function createServer(options = {}) {
     }
     function formatPublishResponse(data, effectiveNamespace, sentOwnerToken, listable = true) {
         const lines = [
+            ...credentialAlertLines(data),
             `Published successfully!`,
             ``,
             `URL: ${data.link || data.url || "N/A"}`,
@@ -595,6 +617,7 @@ export function createServer(options = {}) {
         }
         const site = data;
         const lines = [
+            ...credentialAlertLines(site),
             `Site published successfully!`,
             ``,
             `URL: ${site.link || "N/A"}`,
@@ -625,7 +648,7 @@ export function createServer(options = {}) {
     });
     server.registerTool("republish_site", {
         ...toolMeta("Republish site", DESTRUCTIVE),
-        description: "Republish (full-replace) an existing multi-file BrewPage site in place at the SAME URL/ID. Requires owner token. The uploaded bundle becomes the complete new file set — files absent from it are removed, new files added, matching files overwritten. Single-page: `entryContent`. Multi-page: `files` (array of `{path, content}`). Optional `entry` overrides the default `index.html`. Republishing preserves existing expiry." + OLD_READ_ONLY_TEXT + " " + SITE_LIMITS_TEXT,
+        description: "Republish (full-replace) an existing multi-file BrewPage site in place at the SAME URL/ID. Requires owner token. The uploaded bundle becomes the complete new file set — files absent from it are removed, new files added, matching files overwritten. Single-page: `entryContent`. Multi-page: `files` (array of `{path, content}`). Optional `entry` overrides the default `index.html`. Republishing preserves existing expiry." + OLD_READ_ONLY_TEXT + " " + SITE_LIMITS_TEXT + " " + NO_PUBLIC_CREDENTIALS,
         inputSchema: {
             namespace: z.string().describe("Site namespace"),
             id: z.string().describe("Site ID"),
@@ -687,6 +710,7 @@ export function createServer(options = {}) {
             return ownerFailure("republish site", res.status, data, auth.fromEnv, res.headers);
         const site = data;
         const lines = [
+            ...credentialAlertLines(site),
             `Site republished successfully (full replace)!`,
             ``,
             `URL: ${site.link || "N/A"}`,
@@ -716,7 +740,7 @@ export function createServer(options = {}) {
     server.registerTool("update_html", {
         ...toolMeta("Update page", DESTRUCTIVE),
         description: "Update an existing BrewPage HTML, Markdown, code or JSON page. Requires owner token. Returns the updated page metadata. " +
-            "The link and delivery mode never change on update; an advisory deliveryModeReason and delivery notice are included when the new content uses browser features that may not work fully on a BrewPage link." + OLD_READ_ONLY_TEXT,
+            "The link and delivery mode never change on update; an advisory deliveryModeReason and delivery notice are included when the new content uses browser features that may not work fully on a BrewPage link." + OLD_READ_ONLY_TEXT + " " + NO_PUBLIC_CREDENTIALS,
         inputSchema: {
             namespace: z.string().describe("Page namespace"),
             id: z.string().describe("Page ID"),
@@ -850,7 +874,7 @@ export function createServer(options = {}) {
     });
     server.registerTool("update_json", {
         ...toolMeta("Update JSON document", DESTRUCTIVE),
-        description: "Update an existing BrewPage JSON document. Requires owner token. Accepts a JSON object, array, or a JSON-encoded string." + OLD_READ_ONLY_TEXT,
+        description: "Update an existing BrewPage JSON document. Requires owner token. Accepts a JSON object, array, or a JSON-encoded string." + OLD_READ_ONLY_TEXT + " " + NO_PUBLIC_CREDENTIALS,
         inputSchema: {
             namespace: z.string().describe("Document namespace"),
             id: z.string().describe("Document ID"),
@@ -943,7 +967,7 @@ export function createServer(options = {}) {
     });
     server.registerTool("set_kv", {
         ...toolMeta("Set KV value", DESTRUCTIVE),
-        description: "Set or update a key in an existing BrewPage KV store. Requires owner token. The key name `hosting` is reserved." + OLD_READ_ONLY_TEXT,
+        description: "Set or update a key in an existing BrewPage KV store. Requires owner token. The key name `hosting` is reserved." + OLD_READ_ONLY_TEXT + " " + NO_PUBLIC_CREDENTIALS,
         inputSchema: {
             namespace: z.string().describe("KV store namespace"),
             id: z.string().describe("KV store ID"),
@@ -1014,10 +1038,13 @@ export function createServer(options = {}) {
         description: "Get the current BrewPage limits (GET /api/limits): request size; per type (html, json, kv, files, sites) max size, " +
             "counts and TTL default/maximum; profileMaxTtlDays (TTL cap for a token in a profile); site ZIP expansion, path and name lengths, " +
             "allowed file extensions and skipped system files. Sizes are bytes, TTLs days. " +
-            `With ${OWNER_TOKEN_ENV} set: also reach (token|profile) and ownerMaxTtlDays.`,
-        inputSchema: {},
-    }, async () => {
-        const headers = defaultOwnerToken ? { "X-Owner-Token": defaultOwnerToken } : {};
+            `The answer always has reach: \`profile\` only when the owner token is active in a profile, else \`token\` (also with no token). With a usable owner token also ownerMaxTtlDays.`,
+        inputSchema: {
+            ownerToken: z.string().optional().describe(OWNER_TOKEN_DESCRIPTION),
+        },
+    }, async ({ ownerToken }) => {
+        const { token } = ownerTokenFor(ownerToken);
+        const headers = token ? { "X-Owner-Token": token } : {};
         const { ok, status, data } = await apiRequest("GET", "/api/limits", undefined, headers);
         if (!ok) {
             return {
@@ -1068,7 +1095,7 @@ export function createServer(options = {}) {
             ownerToken: z
                 .string()
                 .optional()
-                .describe(`Owner token; only sent as X-Owner-Token when 'mine' is true. Default: ${OWNER_TOKEN_ENV}.`),
+                .describe(`Owner token; only sent as X-Owner-Token when 'mine' is true. Default: ${ENV_DEFAULT}.`),
         },
     }, async ({ q, page, size, sort, mine, ownerToken }) => {
         const auth = ownerTokenFor(ownerToken);
@@ -1119,14 +1146,14 @@ export function createServer(options = {}) {
         if (!ok)
             return ownerFailure("set visibility", status, data, auth.fromEnv);
         const result = data;
-        return textResult([`LISTED: ${result.listed} · link unchanged`, ...noticeLines(result)].join("\n"));
+        return textResult([...credentialAlertLines(result), `LISTED: ${result.listed} · link unchanged`, ...noticeLines(result)].join("\n"));
     });
     server.registerTool("bind_token", {
         ...toolMeta("Add token to profile", ADDITIVE),
         description: "Add an owner token to your BrewPage profile (as publish). Needs an admin token of that profile.",
         inputSchema: {
             token: z.string().describe("Owner token to add"),
-            ownerToken: z.string().optional().describe(`Admin token of the profile. Default: ${OWNER_TOKEN_ENV}.`),
+            ownerToken: z.string().optional().describe(`Admin token of the profile. Default: ${ENV_DEFAULT}.`),
         },
     }, async ({ token, ownerToken }) => {
         const auth = ownerTokenFor(ownerToken);
@@ -1145,7 +1172,7 @@ export function createServer(options = {}) {
             label: z.string().optional().describe("Optional label shown in the profile"),
             scope: z.enum(["publish", "admin"]).optional().describe("publish (default) or admin (can manage tokens)"),
             expiresIn: z.enum(["30d", "90d", "1y", "never"]).optional().describe("Default: admin 90d, publish never"),
-            ownerToken: z.string().optional().describe(`Admin token of the profile. Default: ${OWNER_TOKEN_ENV}.`),
+            ownerToken: z.string().optional().describe(`Admin token of the profile. Default: ${ENV_DEFAULT}.`),
         },
     }, async ({ label, scope, expiresIn, ownerToken }) => {
         const auth = ownerTokenFor(ownerToken);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brewpage-mcp",
-  "version": "1.15.5",
+  "version": "1.16.1",
   "mcpName": "io.github.kochetkov-ma/brewpage-mcp",
   "description": "MCP server for BrewPage — publish and manage HTML, sites, KV, JSON and files from AI assistants",
   "type": "module",