npm - brightspace-mcp-server - Versions diffs - 3.9.8 → 3.9.10 - Mend

brightspace-mcp-server 3.9.8 → 3.9.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/README.md +90 -224
package/package.json +1 -1

package/README.md CHANGED Viewed

@@ -8,38 +8,31 @@
 **Official repo:** github.com/RohanMuppa/brightspace-mcp-server · [npm](https://www.npmjs.com/package/brightspace-mcp-server) — forks of this README are not maintained.
-**Contents:** [Try It](#try-it) · [Install](#install) · [Supported schools](#supported-schools) ·
-[Session Expired?](#session-expired) · [No browser?](#no-browser-paste-a-session-cookie-or-token) ·
-[Troubleshooting](#troubleshooting) ·
-[Does it work with ChatGPT, Cursor, Windsurf or Claude Code?](#does-it-work-with-chatgpt-cursor-windsurf-or-claude-code) ·
-[Is my password safe?](#is-my-password-safe) · [Does my school work?](#does-my-school-work) ·
-[Why do I have to approve MFA sometimes?](#why-do-i-have-to-approve-mfa-sometimes) ·
-[What You Can Ask About](#what-you-can-ask-about)
 > **By [Rohan Muppa](https://github.com/rohanmuppa), ECE @ Purdue**
-Talk to your Brightspace courses with AI. Ask about grades, due dates, quizzes, announcements, and more. Works with Claude Desktop, Claude Code, Cursor, ChatGPT Desktop, Windsurf, and any MCP client.
+Lets your AI see your Brightspace classes, so you can just ask:
-This is an [MCP (Model Context Protocol)](https://modelcontextprotocol.io) server that connects your AI to D2L Brightspace so it can pull your grades, assignments, syllabus, and course content on demand.
+> "What's due this week?" · "Am I passing all my classes?" · "Summarize today's announcements" · "Turn my lecture slides into flashcards"
-Connects to D2L Brightspace. Automatic login supports Purdue's Microsoft Entra flow, SUNY campus selection, Western University, TU Delft NetID via SURFconext, CUNY Login, and Leiden University via SURFconext and Microsoft Entra. Other schools need a compatible automated sign-in flow; unsupported login pages return an actionable error.
+Works with Claude Desktop, Claude Code, Cursor, ChatGPT Desktop, Windsurf, and any other app that supports [MCP](https://modelcontextprotocol.io) (the standard way to plug tools into an AI). It only **reads** your courses — it never submits, edits, or deletes anything.
 <p align="center">
   <img src="https://raw.githubusercontent.com/RohanMuppa/brightspace-mcp-server/main/docs/how-it-works.svg" alt="Architecture diagram" width="100%">
 </p>
-## Try It
-> "Download my lecture slides and turn them into interactive flashcards"
-> "Grab every assignment rubric and build me a visual dashboard of what I need to hit for an A"
-## Install
+## Get started in 3 steps
-**You need:** [Node.js 20+](https://nodejs.org/) and a native credential store: macOS Keychain, Windows Credential Manager, or Linux Secret Service (requires `secret-tool` and an unlocked keyring — install `libsecret-tools` on Debian/Ubuntu, or your distribution's `secret-tool` package). A container or SSH session without Secret Service can't persist authentication in v2.
+1. **Install [Node.js](https://nodejs.org/)** (version 20 or newer) if you don't have it. Download, run the installer, done.
+2. **Open a terminal and run the setup:**
+   ```bash
+   npx -y brightspace-mcp-server@latest setup
+   ```
+   It asks for your school's Brightspace address, your username and password, and how you normally do two-factor sign-in (phone approval, authenticator code, or a browser window). Your password goes into your computer's own password store (Keychain on Mac, Credential Manager on Windows), never into a file. At the end it connects itself to Claude Desktop, Cursor, Codex, or Claude Code if you have them.
+3. **Restart your AI app and ask it something** — the first question signs you in. If your phone asks you to approve a sign-in, approve it and ask again.
-**Option 1: Let your AI do it**
+At one of these schools, add the flag and skip typing the address: `--purdue`, `--suny`, `--western`, `--tudelft`, `--cuny`, `--leiden`.
-Paste this into Claude Code, Cursor, Windsurf, Copilot, Codex, or any AI coding assistant:
+**Rather have the AI install it for you?** Paste this into Claude Code, Cursor, Windsurf, Copilot, or Codex:
 ```
 Install brightspace-mcp-server for me by following
@@ -47,220 +40,93 @@ https://github.com/RohanMuppa/brightspace-mcp-server/blob/main/LLMs.md
 (use --purdue at Purdue, --suny at SUNY, --tudelft at TU Delft, --cuny at CUNY, or --leiden at Leiden).
 ```
-**Option 2: Run it yourself**
-```bash
-npx -y brightspace-mcp-server@latest setup
-```
-Purdue students can add `--purdue` to skip entering the school URL:
-```bash
-npx -y brightspace-mcp-server@latest setup --purdue
-```
-SUNY campuses share one Brightspace site, so `--suny` also asks which campus
-you're at and skips SUNY's campus picker when you sign in:
-```bash
-npx -y brightspace-mcp-server@latest setup --suny
-```
-TU Delft students can use `--tudelft` to select the Brightspace URL and NetID login:
-```bash
-npx -y brightspace-mcp-server@latest setup --tudelft
-```
-Use your NetID rather than your student email address. The TU Delft flow is headless NetID username and password sign-in only, including automatic re-authentication when the saved session expires; it does not support MFA or any other interactive step. If your account requires one, [open an issue](https://github.com/RohanMuppa/brightspace-mcp-server/issues) — that tenant isn't supported yet.
-CUNY students can add `--cuny`. Sign in with your full CUNY Login address
-(`firstname.lastname01@login.cuny.edu`); authentication asks in the terminal
-for the 6-digit code from your authenticator app. CUNY asks for that code on
-every full sign-in, so when your Brightspace session ends, run
-`npx -y brightspace-mcp-server@latest auth` in a terminal again:
+Using a different AI app? Add the command `npx -y brightspace-mcp-server@latest` to its MCP settings (on Windows: `cmd /c npx -y brightspace-mcp-server@latest`). Exact steps for each app: [docs/troubleshooting.md](docs/troubleshooting.md).
-```bash
-npx -y brightspace-mcp-server@latest setup --cuny
-```
-Leiden University students can use `--leiden`:
-```bash
-npx -y brightspace-mcp-server@latest setup --leiden
-```
-Sign in with your full Microsoft address (for example `s1234567@vuw.leidenuniv.nl`). The flow picks Leiden University (Entra) on SURFconext's account page, then uses the same Microsoft sign-in as Purdue. Leiden normally asks for a code from your authenticator app, which `auth` prompts for in the terminal.
-The wizard saves your password in the native credential store and asks how you'll complete MFA: wait for approval or number matching, enter a terminal code from Google Authenticator or another app, or use a visible browser for other interactive methods. It can also configure Claude Desktop, Cursor, Codex Desktop and CLI, and Claude Code when installed — restart your AI client when it finishes.
-Any other D2L school: run `setup` without a flag and paste your Brightspace URL (for example `https://yourschool.brightspace.com`).
-<details>
-<summary>Using a different client? Configure it manually.</summary>
-Search your client's docs for how to add an MCP server. The server command to register is:
-```
-npx -y brightspace-mcp-server@latest
-```
-On **Windows**, npx must be wrapped: `cmd /c npx -y brightspace-mcp-server@latest`
-You still need to run `npx -y brightspace-mcp-server@latest setup` first to save your credentials.
-For Codex Desktop and Codex CLI, run:
-```bash
-codex mcp add brightspace -- npx -y brightspace-mcp-server@latest
-```
-Codex Desktop and CLI use the same user configuration on a computer. Restart the desktop app or start a new CLI session after registration.
-For Claude Code, run:
-```bash
-claude mcp add --scope user brightspace -- npx -y brightspace-mcp-server@latest
-```
-Claude Desktop uses a separate configuration, which the setup wizard can update automatically.
-</details>
-Building against this server or opening a PR? See [STABILITY.md](STABILITY.md) for what's safe to rely on and what counts as a breaking change.
-**Running from a source checkout or fork?** When a newer release is published, the server tells a source checkout to `git pull` and `npm run build` rather than to install the npm package. For a fork you maintain, set `D2L_NO_UPDATE_CHECK=1` in the server's environment to turn off upstream update notices.
-## Supported schools
-| School | Login flow | Setup preset |
-|--------|-----------|--------------|
-| Purdue | Microsoft Entra (number matching, authenticator code, or visible browser) | `--purdue` |
-| SUNY | Shared tenant with a campus picker | `--suny` |
-| Western University | Microsoft Entra | `--western` |
-| TU Delft | NetID via SURFconext (headless, no MFA) | `--tudelft` |
-| CUNY | CUNY Login, with an authenticator code on every full sign-in | `--cuny` |
-| Leiden University | SURFconext → Microsoft Entra | `--leiden` |
-| Any other D2L school | Paste your Brightspace URL; unsupported login pages fall back to the visible browser | run `setup` with no flag |
-## Session Expired?
-There's no login step — asking a question signs you in.
-**Normal days:** tokens renew over HTTPS, and a background browser silently replays your saved Microsoft session (silent SSO) if it lapses.
-**When MFA is asked:** the number to approve shows up right in the tool's response, and sign-in finishes in the background — approve it, call the tool again, and use the newest number if one goes stale. TOTP apps (Google Authenticator, etc.) get prompted via the terminal; visible-browser mode opens a window instead, though automatic recovery during a tool call still runs headless unless you set `D2L_HEADLESS=false`. On Duo, sign-in auto-answers "Is this your device?" with **yes**, since a headless run has nobody to click it — this also makes Duo remember the device, so skip it on shared machines. Set `D2L_DUO_PASSCODE` to swap the push for a typed passcode. On Microsoft's MFA page, setting `D2L_REMEMBER_MFA=true` makes the server tick "Don't ask again" when your school offers it, so later sign-ins can skip the second factor; how long that lasts is the school's setting, not the server's. It is off by default — leave it off on a shared machine — and `get_server_info` shows whether the box was ticked, offered, or left alone.
+## Does my school work?
-**If it gets stuck:** a missed MFA approval pauses automatic sign-in for 5 minutes. This retries immediately, takes over a stuck sign-in, or asks for a code:
+If your school uses D2L Brightspace, yes. These have automatic sign-in built in:
+| School | Sign-in | Flag |
+|--------|---------|------|
+| Purdue | Microsoft (phone approval, authenticator code, or browser) | `--purdue` |
+| SUNY | Shared site with a campus picker | `--suny` |
+| Western University | Microsoft | `--western` |
+| TU Delft | NetID (no two-factor) | `--tudelft` |
+| CUNY | CUNY Login, authenticator code each time | `--cuny` |
+| Leiden University | SURFconext → Microsoft | `--leiden` |
+| Any other D2L school | Paste your Brightspace address; if the login page isn't recognized, a browser window opens so you can sign in by hand | none |
+School-specific quirks: [docs/sign-in.md](docs/sign-in.md#per-school-notes).
+## Things to ask
+| About | Try |
+|-------|-----|
+| Grades | "Am I passing all my classes?" · "Compare my grades across courses" |
+| Due dates | "What's due in the next 48 hours?" · "Build me a study schedule for the week" |
+| Assignments and rubrics | "What does the lab 4 spec actually ask for?" · "Why did I lose points on the analysis criterion?" |
+| Quizzes and exams | "Which quizzes close this week?" · "Is there a midterm in the gradebook that isn't on my assignments list?" |
+| Announcements | "Did any professor post something important today?" · "Read the file attached to today's announcement" |
+| Course content | "Find the midterm review slides" · "Download every PDF from Module 5" · "Search this course for office hours" |
+| People | "Who are the TAs for ECE 264?" · "Who is in my project group?" |
+| Discussions | "Summarize the latest posts in the final project thread" |
+| Lecture videos | "What did the professor say about pinch-off in Tuesday's recording?" (Kaltura and YouTube) |
+| Calendar | "When is my midterm?" · "Is lab cancelled on Thursday?" |
+Apps with a prompt picker (like Claude Desktop) also offer four ready-made prompts: `weekly_briefing`, `grade_audit`, `study_planner`, and `course_summary`.
+## What it can do
+Nineteen read-only tools behind those questions. The ones worth knowing about:
+- **Grades** — every course's gradebook with instructor comments, and the hidden "exam" items that only appear in the gradebook.
+- **Assignments** — due dates with a plain-words `dueIn` ("in 3 days"), your submissions and the feedback on them, rubric names, and quizzes with attempt counts. While sign-in is still pending it says so instead of returning an empty list.
+- **Rubrics** — the full criteria, levels, and points for an assignment, plus your own graded outcome per criterion when your school exposes it.
+- **Due dates and calendar** — upcoming deadlines from assignments, quizzes, graded discussions, and the course calendar (exams, labs, review sessions).
+- **Announcements** — with attachments you can read or save.
+- **Course content** — modules and topics as markdown, file download (PDF, Office, and more), and release windows: it tells you when something opens, has ended, or is hidden instead of a bare error.
+- **Search** — content, announcements, and discussions by keyword in one call.
+- **Lecture videos** — transcripts for Kaltura and YouTube embeds.
+- **People** — roster, instructor and TA emails, and your project or lab groups.
+- **Discussions** — forums and topics.
+- **Diagnostics** — `get_server_info`: version, timezone, who you're signed in as, whether Microsoft remembered your device, and request counters, all without touching Brightspace.
+Sign-in is automatic: silent renewal most days, the MFA number shown in-chat when needed, Duo and authenticator-code support, a visible-browser mode for anything else, an opt-in "remember this device" for Microsoft, and a browser-free mode (paste a session cookie or token) for Docker, WSL, and hardware-key accounts. Links in course content have D2L's session tokens stripped before they reach the AI.
+## Settings you might want
+All optional, set in your AI app's MCP `env` config or your shell. The full list is in [LLMs.md](LLMs.md).
+| Setting | What it does |
+|---------|--------------|
+| `D2L_REMEMBER_MFA=true` | Tick Microsoft's "Don't ask again" box so later sign-ins skip the second factor (off by default; not for shared computers) |
+| `D2L_HEADLESS=false` | Show the browser window during sign-in, for MFA methods that need a click |
+| `D2L_DUO_PASSCODE=1` | On Duo, type a passcode instead of waiting for a push |
+| `D2L_SESSION_COOKIE` / `D2L_ACCESS_TOKEN` | Skip the browser entirely with a pasted cookie or token ([how](docs/sign-in.md#no-browser-paste-a-session-cookie-or-token)) |
+| `D2L_INCLUDE_COURSES` / `D2L_EXCLUDE_COURSES` | Limit which courses the AI sees, by course id |
+| `D2L_ACTIVE_ONLY=false` | Include courses whose enrollment has ended |
+| `D2L_NO_UPDATE_CHECK=1` | Turn off the new-version notice |
+## When it asks you to sign in
+There's no separate login — asking a question signs you in, and it stays signed in on its own most days. When your school wants two-factor again, the number to approve shows up right in the answer; approve it on your phone and ask again. If it ever gets stuck, run this in a terminal:
 ```bash
 npx -y brightspace-mcp-server@latest auth
 ```
-Run it from your home folder — macOS blocks `npx` from Documents, Desktop, or Downloads without Files and Folders permission (`EPERM`). Grant access in System Settings → Privacy & Security → Files and Folders, or run elsewhere.
-## No browser? Paste a session cookie or token
-The normal setup drives a real (usually hidden) browser through sign-in, which doesn't work in Docker, headless Linux, WSL without a display, or on a tenant whose MFA requires a hardware security key. Two environment variables skip the browser entirely; set one and leave the normal setup untouched:
-- **`D2L_SESSION_COOKIE`** — the `d2lSessionVal` and `d2lSecureSessionVal` cookies from a browser tab where you're already signed in to Brightspace. In Chrome DevTools: open your Brightspace site, **F12 → Application → Cookies**, find `d2lSessionVal` and `d2lSecureSessionVal`, and set the variable to either form:
-  ```bash
-  export D2L_SESSION_COOKIE="d2lSessionVal=<value>; d2lSecureSessionVal=<value>"
-  # or just the two values, in that order:
-  export D2L_SESSION_COOKIE="<d2lSessionVal>;<d2lSecureSessionVal>"
-  ```
-- **`D2L_ACCESS_TOKEN`** — a pre-issued Bearer token (an admin-issued Valence token, or one minted by a TA script):
-  ```bash
-  export D2L_ACCESS_TOKEN="<token>"
-  ```
+How often you're asked is up to your school, not this tool. Everything else about sign-in — Duo, authenticator codes, visible-browser mode, and running without a browser at all (Docker, WSL, hardware keys) — is in [docs/sign-in.md](docs/sign-in.md).
-Set either in your MCP client's `env` config instead of a shell export if you're not running the server from a terminal. If both are set, `D2L_ACCESS_TOKEN` wins.
+## Something not working?
-If this is a Docker or other headless setup with no `~/.brightspace-mcp/config.json` on disk, also set **`D2L_BASE_URL`** to your school's Brightspace URL — with no config file to read it from, the server otherwise defaults to Purdue's.
+- **It works in the terminal but not in the app:** the app starts it separately and may not see your password store yet — see [docs/troubleshooting.md](docs/troubleshooting.md).
+- **Which version do I have?** Ask your AI "which version of the Brightspace server am I running?"
+- **Still stuck?** [Open an issue](https://github.com/RohanMuppa/brightspace-mcp-server/issues) and paste what the terminal printed.
-**The catch:** neither one renews itself. A pasted session cookie dies at D2L's own idle timeout (the same timeout that would eventually log you out in a browser), and a pre-issued token dies whenever it expires or is revoked. When that happens the server does **not** fall back to a browser login — it answers with an error telling you to paste a fresh value. There's no in-between: this is a deliberate escape hatch for environments that can't run a browser at all, not a way to skip typing your password once.
+## Is it safe?
-## Troubleshooting
+Your password is kept in your operating system's password store, never in a plain file. Saved sign-in state is encrypted. Your second factor (the phone tap or code) stays on your phone — this tool never sees or stores it. And it can only read your courses, never change them.
-**Where to find logs:** MCP clients log the server's stderr themselves. On **macOS**, Claude Desktop writes to `~/Library/Logs/Claude/mcp*.log` (one file per server, plus `mcp.log` for the client itself). On **Windows**, it's `%APPDATA%\Claude\logs`. Other clients vary — check their own logs or output panel for the `brightspace-mcp-server` process.
-**Works in a terminal but not in the client:** the client launches the server as its own subprocess, which doesn't inherit your shell's environment. Common causes: the native credential store is locked (a GUI app started before you unlocked your keyring or logged into macOS won't get a Keychain prompt the way a terminal does), `HOME` or `PATH` differ for GUI-launched processes versus your shell, or `npx` resolves a different cached version than the one on your `PATH`. To check, run the exact registered command (`npx -y brightspace-mcp-server@latest`, or `cmd /c npx -y brightspace-mcp-server@latest` on Windows) from a fresh terminal with no extra environment set, and compare.
-**Which version am I running:** ask the assistant anything that calls `get_server_info` — it reports the running version, Node runtime, and config/session paths with no network call. If you're on a source checkout instead of the published npm package, that version comes from the local `build/` output, so it only reflects your latest `npm run build`, not what's on npm.
-## Does it work with ChatGPT, Cursor, Windsurf or Claude Code?
-Yes — it's a standard MCP server, so it works with Claude Desktop, Claude Code, Cursor, ChatGPT Desktop,
-Windsurf, Codex, and any other MCP client. The setup wizard auto-configures Claude Desktop, Cursor, and
-Codex Desktop/CLI, and uses `claude mcp add` for Claude Code, when it detects them on your machine. Any
-other client just needs the same `npx -y brightspace-mcp-server@latest` command added to its MCP config
-(see "Using a different client?" above for exact steps).
-## Is my password safe?
-Your password is saved in your operating system's native credential store (macOS Keychain, Windows
-Credential Manager, or Linux Secret Service) — never in a plaintext file. Session state on disk is
-encrypted with AES-256-GCM. None of the server's tools submit, edit, or delete anything in your
-courses; they only read grades, assignments, and course content. The second factor itself (an
-approval tap, a number match, or a TOTP code) stays on your phone or authenticator app — the server
-never sees or stores it.
-## Does my school work?
+## For developers
-If your school runs D2L Brightspace, yes. Purdue, SUNY, Western University, TU Delft, CUNY, and Leiden
-have dedicated setup presets with automated sign-in; see [Supported schools](#supported-schools) above
-for which flag to use. Any other Brightspace school works too — run `setup` without a flag and paste
-your school's Brightspace URL, and an unsupported login page falls back to a visible browser window
-you complete by hand.
-## Why do I have to approve MFA sometimes?
-How often you're asked is your school's sign-in frequency setting, not something this server controls —
-the same approval you'd see signing in through a regular browser. Set `D2L_REMEMBER_MFA=true` to have
-the server tick Microsoft's "Don't ask again" box during sign-in so later logins can skip the second
-factor for as long as your school's tenant allows; it's opt-in and off by default, so leave it off on a
-shared machine.
-## What You Can Ask About
-| Topic | Examples |
-|-------|---------|
-| Grades | "Am I passing all my classes?" · "Compare my grades across all courses" |
-| Assignments | "What's due in the next 48 hours?" · "Summarize every assignment I haven't turned in yet" · "Give me the link to submit HW 4" |
-| Quizzes | "Which quizzes close this week?" · "Is Quiz 3 timed, and does it have a grace period?" |
-| Assignment files | "What does the lab 4 spec actually ask for?" · "Summarize the rubric attached to the project" |
-| Rubrics | "What does the rubric for Lab 4 actually want?" · "Why did I lose points on the analysis criterion?" — `get_assignment_rubric` returns the full criteria groups, levels, and point values for a dropbox assignment, plus your own graded outcome per criterion when the tenant exposes it |
-| Exams | "Is there a midterm in the gradebook that isn't on my assignments list?" |
-| Announcements | "Did any professor post something important today?" · "What did my CS prof announce this week?" · "Any announcements since last Monday?" · "Read the file attached to today's announcement" · "Save the rubric my prof attached to that announcement" |
-| Course content | "Find the midterm review slides" · "Download every PDF from Module 5" · "What's new in this course since I last checked?" |
-| Roster | "Who are the TAs for ECE 264?" · "Get me my instructor's email" |
-| Groups | "Who is in my project group?" · "List my lab group members for this course" |
-| Discussions | "What are people saying in the final project thread?" · "Summarize the latest discussion posts" |
-| Search | "Search this course for the midterm review slides" · "Has anyone posted about office hours?" — searches content, announcements, and discussions by keyword in one call instead of reading the whole content tree |
-| Video transcripts | "What did the professor say about pinch-off in Tuesday's lecture recording?" · "Summarize last week's BoilerCast video" — works for Kaltura and YouTube embeds; other platforms report that they aren't supported yet |
-| Troubleshooting | "Which version of the Brightspace server am I running?" · "Where is my Brightspace config file?" · "What timezone are my due dates being computed in?" — `get_server_info` reports the version, Node runtime, platform, config and session paths, school URL, whether a credential is stored, the server's local timezone and UTC offset (`localTimezone`, `utcOffsetMinutes`), who the session is signed in as when known (`signedInAs: { uniqueName, displayName }`), what Microsoft remembered (`microsoftSession`: stay-signed-in and its expiry, plus whether "Don't ask again" was ticked, already on, not offered, or left off because `D2L_REMEMBER_MFA` isn't set), and `requests` (lightweight counters: responses by status class, network errors, cache hits/misses, coalesced in-flight joins, and token refreshes), without contacting Brightspace or revealing secrets |
-| Calendar | "When is my midterm?" · "What's on my calendar this week?" · "Is lab cancelled on Thursday?" — reads exams, labs, review sessions, and deadlines instructors put only on the course calendar |
-| Planning | "Build me a study schedule based on my upcoming due dates" · "Which class needs the most attention right now?" — pulls from assignments, quizzes, graded discussion topics (any topic with a due date), and course calendar events such as exams and labs |
-### Prompts
-Clients that show server-provided prompts (e.g. Claude Desktop's prompt picker) can also start from one of
-four canned prompts instead of typing a question from scratch:
-| Prompt | Arguments | What it asks for |
-|--------|-----------|-------------------|
-| `weekly_briefing` | — | A 7-day rollup of what's due, what's new, and what's changed in grades, across every course |
-| `grade_audit` | `courseId` (optional) | Analyzes grades for one course, or all of them, and flags missing or low-scoring items |
-| `study_planner` | `daysAhead` (optional, default 7) | Plans study time from upcoming due dates and calendar events |
-| `course_summary` | `courseId` (required) | Syllabus, content outline, assignments, and grades for one course |
-Each prompt is a single starter message built from the tools above — it doesn't add any new capability on
-its own, just a one-click way to ask for a common combination of them.
-`get_course_content` reports `isAvailable`, `availabilityStatus` (`available`, `not_yet_open`, `ended`, `hidden`, or `locked`), `availabilityMessage`, `startDate`, and `endDate` for modules and topics. The effective release window includes restrictions inherited from enclosing modules.
-When a content-file download returns 403 or 404, `download_file` checks topic metadata and the course table of contents. Confirmed restrictions return `{ success: false, available: false, reason, message, startDate, endDate }` so the assistant can explain when content opens or why it has closed. Unexplained 404s and server/network failures retain their original errors.
-When course content or announcements are converted to markdown, `javascript:`/`data:` links are rendered as plain text (the link itself is dropped, not followed) and D2L's per-session query parameters (`d2lSessionVal`, `d2lSecureSessionVal`, and the cache-busting `_`) are stripped from any remaining links and images before they reach the assistant.
-Licensed under the MIT License.
+Tool reference, response fields, and environment variables: [LLMs.md](LLMs.md). What's safe to build against: [STABILITY.md](STABILITY.md). Licensed under the MIT License.

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "3.9.8",
+  "version": "3.9.10",
   "mcpName": "io.github.rohanmuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",