cito-mcp 0.5.3 → 0.5.4

package/README.md

@@ -550,6 +550,11 @@ claude mcp add cito -e CITO_API_KEY=cito_… "--" npx -y cito-mcp
 
 ## Changelog (summary)
 
+### 0.5.4
+
+- **Apex Legends through `call_api`.** `/apex/...` paths (ALGS events, standings, scores) were refused with `PATH_NOT_ALLOWED` although they are a live REST product. They are allowed now and listed in `list_capabilities`.
+- **`api_health` reports your real plan and limits**: the tier plus the per-minute and monthly limit, used and remaining, read from the API's `/health`, instead of `null`.
+
 ### 0.5.3
 
 - **Paces itself and retries rate limits.** One question fans out into several API calls, and on the Free plan (10 requests/minute on average, bursts to 30) those bursts came back as `429`s the MCP never waited out. Requests are now capped at 4 in flight per API key (2 for a minute after a `429`), and once the API sends `X-RateLimit-Remaining-Minute: 0` the next request waits for the minute window instead of being refused. Paid keys never receive those headers, so they never wait.

package/dist/envelope.js

@@ -38,7 +38,7 @@ export const DEFAULT_RECOVER = {
         'Call api_health to see which games your plan includes',
     ],
     PATH_NOT_ALLOWED: [
-        'Use only allowlisted path prefixes: /health /lol /cs2 /dota2 /cod /ufc /fortnite /tennis /raf /bkfc, MMA archives /bellator /pride /strikeforce /wec /dream /elitexc /affliction /pfl /oktagon /mma',
+        'Use only allowlisted path prefixes: /health /lol /cs2 /dota2 /cod /ufc /fortnite /apex /tennis /raf /bkfc, MMA archives /bellator /pride /strikeforce /wec /dream /elitexc /affliction /pfl /oktagon /mma',
         'Prefer a curated tool from list_capabilities when one covers the outcome',
     ],
     NOT_IMPLEMENTED: [

package/dist/instructions.js

@@ -17,6 +17,7 @@ game enum (unless a tool documents otherwise): lol | cs2 | dota2 | ufc | cod | t
 - Default when the user named one title: that game. Default for "what's live?" / multi-title: omit game or all on tools that accept it.
 - On UNSUPPORTED_GAME / 403 for a title: stop retrying that game; call api_health; report plan gaps.
 - Fortnite and other titles may appear via call_api/resources; do not assume they are in the curated enum until list_capabilities says so.
+- Apex Legends (ALGS) is call_api only: /apex/algs/events, /apex/algs/events/{seriesId}/scores, /apex/algs/players, /apex/algs/global-stats/{eventId}. Not on the game enum and not in the OpenAPI spec; list_routes { game: "apex" } returns the path list as a note.
 - RAF (Real American Freestyle wrestling) and BKFC (Bare Knuckle Fighting Championship) are NOT on the game enum: use the combat_* tools with league raf|bkfc (combat_events, combat_card, combat_bout, combat_athlete, combat_h2h, combat_rankings), or call_api /raf/... and /bkfc/.... RAF scores per PERIOD (wrestling points, takedowns); BKFC per ROUND (punches landed/thrown, knockdowns). Never mix either into UFC answers.
 - MMA archives: Bellator, PRIDE, Strikeforce, WEC, DREAM, EliteXC, Affliction, plus /mma for a fighter's whole non-UFC career (recordByPromotion). combat_* tools with league bellator|pride|strikeforce|wec|dream|elitexc|affliction|mma, or call_api /{league}/.... Closed archives (1997-2017) with official per-ROUND stats in UFC's shape ("13 of 18", round 0 = whole fight); no live, rankings or upcoming cards (combat_card "last" = most recent card). Fighters share their UFC slug (ufcFighterSlug). Never mix these into UFC answers. Their stats predate the Free/Starter window: HISTORY_WINDOW_EXCEEDED means Pro, not a bad key.
 - PFL (Professional Fighters League): combat_* with league pfl, or call_api /pfl/.... Every card since 2018, upcoming cards (combat_events when upcoming, combat_card "next") and live fight status (/pfl/live: bout status "live" with live.round / live.clock). Results only (winner, method, round, time): no strike or round stats exist for PFL. league mma includes PFL. Never mix into UFC answers.

package/dist/tools/meta.js

@@ -476,7 +476,7 @@ const TOOL_CATALOG = [
         name: 'list_routes',
         outcome: 'Index of raw REST routes from the live OpenAPI spec (method, path, summary)',
         parallelSafe: true,
-        games: [...PRIMARY_GAMES, 'fortnite'],
+        games: [...PRIMARY_GAMES, 'fortnite', 'apex'],
         jobs: ['app_scaffold'],
         exampleArgs: { game: 'ufc', q: 'rankings' },
         preferOver: ['guessing a REST path for call_api', 'fetching the full 90KB spec by hand'],
@@ -486,7 +486,7 @@ const TOOL_CATALOG = [
         name: 'call_api',
         outcome: 'Allowlisted raw REST escape hatch (unshaped data.raw)',
         parallelSafe: true,
-        games: [...PRIMARY_GAMES, 'fortnite'],
+        games: [...PRIMARY_GAMES, 'fortnite', 'apex'],
         jobs: ['app_scaffold'],
         exampleArgs: { method: 'GET', path: '/cs2/rankings/teams', queryJson: '{"limit":20}' },
         preferOver: [],
@@ -558,6 +558,14 @@ const GAMES_META = [
     { id: 'cs2', label: 'Counter-Strike 2', depth: 'deep', notes: 'Prefixed ids; live path /cs2/live; trends/rankings' },
     { id: 'dota2', label: 'Dota 2', depth: 'thin', notes: 'Numeric ids; radar; no standings/roster endpoints' },
     { id: 'cod', label: 'Call of Duty (CDL)', depth: 'medium', notes: 'Org slugs; CDL standings; UUID match ids' },
+    {
+        id: 'apex',
+        label: 'Apex Legends (ALGS)',
+        depth: 'thin',
+        notes: 'call_api only (no curated tools): /apex/algs/events, /apex/algs/events/{seriesId} (+ /scores, /bans), ' +
+            '/apex/algs/matches, /apex/algs/players (+ /search), /apex/algs/global-stats/{eventId} (+ /players, /legends), ' +
+            '/apex/algs/transactions, /apex/algs/regions, /apex/algs/maps. Not in the OpenAPI spec yet (list_routes { game: "apex" } returns this path list as a note).',
+    },
     {
         id: 'ufc',
         label: 'UFC / MMA',
@@ -776,20 +784,38 @@ Example: { "includeGameProbes": true }`,
         else if (keyValid) {
             includedGames.push(...PRIMARY_GAMES);
         }
+        const healthBody = health.ok && health.data && typeof health.data === 'object' && !Array.isArray(health.data)
+            ? health.data
+            : null;
+        const limits = healthBody?.rateLimit && typeof healthBody.rateLimit === 'object'
+            ? healthBody.rateLimit
+            : null;
+        const perMinute = limits?.perMinute && typeof limits.perMinute === 'object'
+            ? limits.perMinute
+            : null;
+        const headerRate = rateLimit;
+        const tier = headerRate.tier ?? (typeof healthBody?.tier === 'string' ? healthBody.tier : null);
+        const mergedRateLimit = {
+            ...headerRate,
+            tier,
+            limit: headerRate.limit ?? (typeof perMinute?.limit === 'number' ? perMinute.limit : null),
+        };
         return successEnvelope({
             source: 'api_health',
             game: null,
             requestId,
             tookMs: Date.now() - started,
             upstreamCalls,
-            rateLimit,
+            rateLimit: mergedRateLimit,
             data: {
                 reachable,
                 keyValid,
                 answeredBy,
                 httpStatus: authedStatus,
-                tier: rateLimit.tier ?? null,
-                rateLimit,
+                tier,
+                plan: typeof healthBody?.plan === 'string' ? healthBody.plan : null,
+                rateLimit: mergedRateLimit,
+                ...(limits ? { limits } : {}),
                 includedGames,
                 ...(probes.length ? { probes } : {}),
             },
@@ -804,6 +830,7 @@ const ALLOWLIST_PREFIXES = [
     '/cod',
     '/ufc',
     '/fortnite',
+    '/apex',
     '/tennis',
     '/raf',
     '/bkfc',
@@ -840,7 +867,7 @@ Prefer curated tools for all standard jobs (live, schedule, profiles, standings,
 
 Do not use when: a curated tool covers the outcome. Avoid parallel storms; same plan rate limits apply.
 
-Path must start with / and match allowlisted prefixes: /health, /lol, /cs2, /dota2, /cod, /ufc, /fortnite, /tennis, /raf, /bkfc, /bellator, /pride, /strikeforce, /wec, /dream, /elitexc, /affliction, /pfl, /oktagon, /mma.
+Path must start with / and match allowlisted prefixes: /health, /lol, /cs2, /dota2, /cod, /ufc, /fortnite, /apex, /tennis, /raf, /bkfc, /bellator, /pride, /strikeforce, /wec, /dream, /elitexc, /affliction, /pfl, /oktagon, /mma.
 Rejects absolute URLs and path traversal → PATH_NOT_ALLOWED.
 
 Parallel-safe: yes but discouraged in bulk. Upstream cost: 1.
@@ -901,7 +928,7 @@ Example: { "method": "GET", "path": "/cs2/rankings/teams", "queryJson": "{\\"pag
                 source: 'call_api',
                 requestId,
                 tookMs: Date.now() - started,
-                hint: 'Use prefixes /health /lol /cs2 /dota2 /cod /ufc /fortnite /tennis /raf /bkfc /bellator /pride /strikeforce /wec /dream /elitexc /affliction /pfl /oktagon /mma',
+                hint: 'Use prefixes /health /lol /cs2 /dota2 /cod /ufc /fortnite /apex /tennis /raf /bkfc /bellator /pride /strikeforce /wec /dream /elitexc /affliction /pfl /oktagon /mma',
             });
         }
         let query = {};
@@ -962,6 +989,10 @@ Example: { "method": "GET", "path": "/cs2/rankings/teams", "queryJson": "{\\"pag
 const SPEC_OMITS = {
     tennis: 'The published OpenAPI spec documents no /tennis paths, but tennis routes exist and work (players, matches, h2h, rankings, tournaments, live). Use the curated tools with game tennis, or call_api with /tennis/* paths.',
     lol: 'The published OpenAPI spec documents no /lol paths, but LoL routes exist and work. Use the curated LoL tools (live_matches, upcoming_schedule, team_profile, standings, player_profile); for raw access, /lol/* is allowlisted for call_api even though it is undocumented.',
+    apex: 'The published OpenAPI spec documents no /apex paths, but the Apex Legends ALGS routes exist and work through call_api: '
+        + 'GET /apex/algs/events, /apex/algs/events/{seriesId} (+ /scores, /bans), /apex/algs/matches, /apex/algs/players (+ /search?q=), '
+        + '/apex/algs/global-stats (+ /{eventId}, /{eventId}/players, /{eventId}/legends), /apex/algs/transactions, /apex/algs/tournaments, '
+        + '/apex/algs/regions, /apex/algs/maps.',
 };
 export const listRoutes = {
     name: 'list_routes',
@@ -1002,10 +1033,10 @@ Example: { "game": "ufc", "q": "rankings" }`,
         const started = Date.now();
         const requestId = newRequestId();
         const gameRaw = typeof args.game === 'string' ? args.game.toLowerCase().trim() : '';
-        if (gameRaw && !gameRaw.match(/^(lol|cs2|dota2|cod|ufc|fortnite|tennis|raf|bkfc|bellator|pride|strikeforce|wec|dream|elitexc|affliction|pfl|oktagon|mma)$/)) {
+        if (gameRaw && !gameRaw.match(/^(lol|cs2|dota2|cod|ufc|fortnite|apex|tennis|raf|bkfc|bellator|pride|strikeforce|wec|dream|elitexc|affliction|pfl|oktagon|mma)$/)) {
             return errorEnvelope({
                 code: 'UNSUPPORTED_GAME',
-                message: `unsupported game "${gameRaw}"; use lol|cs2|dota2|cod|ufc|fortnite|tennis|raf|bkfc|bellator|pride|strikeforce|wec|dream|elitexc|affliction|pfl|oktagon|mma`,
+                message: `unsupported game "${gameRaw}"; use lol|cs2|dota2|cod|ufc|fortnite|apex|tennis|raf|bkfc|bellator|pride|strikeforce|wec|dream|elitexc|affliction|pfl|oktagon|mma`,
                 game: null,
                 source: 'list_routes',
                 requestId,
@@ -1028,7 +1059,7 @@ Example: { "game": "ufc", "q": "rankings" }`,
                 httpStatus: res.status,
                 recover: [
                     'Call list_capabilities for curated tools that need no route knowledge',
-                    'call_api accepts /health, /lol, /cs2, /dota2, /cod, /ufc, /fortnite, /tennis, /raf, /bkfc, /bellator, /pride, /strikeforce, /wec, /dream, /elitexc, /affliction, /pfl, /oktagon, /mma',
+                    'call_api accepts /health, /lol, /cs2, /dota2, /cod, /ufc, /fortnite, /apex, /tennis, /raf, /bkfc, /bellator, /pride, /strikeforce, /wec, /dream, /elitexc, /affliction, /pfl, /oktagon, /mma',
                 ],
             });
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cito-mcp",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "Standalone MCP server for the Cito esports and sports API — curated outcome tools for agents (live scoreboards, round economy, opening duels, clutches, vetoes, rosters, tennis, mma).",
   "type": "module",
   "homepage": "https://cito.gg",