cocktails-mcp 1.0.0 → 1.0.2

package/README.md

@@ -20,3 +20,22 @@ node dist/index.js
 ```
 
 Recipe data comes from the public TheCocktailDB API.
+
+<!-- paywall -->
+## Premium tools
+
+These tools need a license key:
+
+* `filter_cocktails`
+* `shopping_list`
+
+Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-cocktails-mcp and set it in your MCP client config:
+
+```json
+"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
+```
+
+The key is checked against MCP Marketplace, cached for 24 hours, and keeps
+working offline once one check has succeeded. Every other tool on this server
+stays free.
+<!-- /paywall -->

package/dist/api.js

@@ -51,3 +51,165 @@ export async function cocktailDetails(args) {
     const ings = ingredients(c);
     return `# ${c.strDrink}\n${c.strAlcoholic ?? ""} | ${c.strGlass ?? ""}\n\nIngredients:\n${ings.map((i) => `- ${i}`).join("\n")}\n\nInstructions:\n${c.strInstructions ?? ""}`;
 }
+const COCKTAIL_PARAM = { category: "c", glass: "g", strength: "a" };
+const COCKTAIL_LIST_KEY = {
+    category: "strCategory",
+    glass: "strGlass",
+    strength: "strAlcoholic",
+};
+const COCKTAIL_FACETS = ["category", "glass", "strength"];
+// filter.php answers an unknown value with the string "no data found" instead
+// of an empty list, so the shape has to be checked rather than trusted.
+function cocktailRows(payload) {
+    return Array.isArray(payload?.drinks) ? payload.drinks : null;
+}
+async function cocktailFacetValues(facet) {
+    const d = await get(`${BASE}/list.php?${COCKTAIL_PARAM[facet]}=list`);
+    const rows = Array.isArray(d?.drinks) ? d.drinks : [];
+    const key = COCKTAIL_LIST_KEY[facet];
+    return rows
+        .map((row) => row?.[key])
+        .filter((value) => typeof value === "string" && value.trim().length > 0);
+}
+function cocktailFacet(facet) {
+    return COCKTAIL_FACETS.includes(facet) ? facet : null;
+}
+function cocktailPairs(drink) {
+    const pairs = [];
+    for (let i = 1; i <= 15; i++) {
+        const name = drink?.[`strIngredient${i}`];
+        if (typeof name !== "string" || !name.trim())
+            continue;
+        const measure = drink?.[`strMeasure${i}`];
+        pairs.push({ name: name.trim(), measure: typeof measure === "string" ? measure.trim() : "" });
+    }
+    return pairs;
+}
+function cocktailSummary(drink) {
+    const parts = [drink?.strCategory, drink?.strAlcoholic, drink?.strGlass].filter((value) => typeof value === "string" && value.trim());
+    return parts.length ? parts.join(" | ") : "no classification published";
+}
+export async function filterCocktails(args) {
+    const wanted = (args.facet ?? "").trim().toLowerCase();
+    const limit = Math.max(1, Math.min(Math.trunc(args.limit ?? 25) || 25, 100));
+    if (!wanted) {
+        const lines = ["Cocktails can be browsed by three facets:"];
+        for (const facet of COCKTAIL_FACETS) {
+            const values = await cocktailFacetValues(facet);
+            lines.push("", `  ${facet} (${values.length}): ${values.join(", ")}`);
+        }
+        lines.push("", "  Pass facet and value to list the cocktails in one of them.");
+        return lines.join("\n");
+    }
+    const facet = cocktailFacet(wanted);
+    if (!facet) {
+        throw new CocktailsError(`Unknown facet "${args.facet}". Use one of ${COCKTAIL_FACETS.join(", ")}`);
+    }
+    const values = await cocktailFacetValues(facet);
+    const value = (args.value ?? "").trim();
+    if (!value) {
+        return [
+            `${facet} values (${values.length}):`,
+            ...values.map((entry) => `    ${entry}`),
+            "",
+            "  Pass one of these as value to list the cocktails in it.",
+        ].join("\n");
+    }
+    const requested = value.toLowerCase();
+    const match = values.find((entry) => entry.toLowerCase() === requested) ?? values.find((entry) => entry.toLowerCase().includes(requested));
+    if (!match) {
+        throw new CocktailsError(`TheCocktailDB has no ${facet} called "${value}". It lists ${values.length}: ${values.join(", ")}`);
+    }
+    // The public key expects spaces in the filter value, which encoding handles.
+    const d = await get(`${BASE}/filter.php?${COCKTAIL_PARAM[facet]}=${encodeURIComponent(match)}`);
+    const rows = cocktailRows(d);
+    if (!rows) {
+        return `TheCocktailDB returned no cocktails for ${facet} "${match}".`;
+    }
+    if (!rows.length)
+        return `TheCocktailDB has no cocktails in ${facet} "${match}".`;
+    const shown = rows.slice(0, limit);
+    const lines = [
+        `Cocktails in ${facet} "${match}": ${rows.length} returned${rows.length === 100 ? ", which is the cap the public key applies" : ""}`,
+        ...shown.map((row) => `    ${row.strDrink ?? "?"} (id ${row.idDrink ?? "?"})`),
+    ];
+    if (rows.length > shown.length)
+        lines.push(`    ${rows.length - shown.length} more, raise limit to see them`);
+    lines.push("", "  The value is matched against the published facet list, so it does not have to be spelled exactly as the endpoint expects.");
+    return lines.join("\n");
+}
+export async function shoppingList(args) {
+    const raw = Array.isArray(args.ids) ? args.ids : [];
+    const ids = [...new Set(raw.flatMap((entry) => String(entry ?? "").split(/[\s,]+/)).filter((entry) => entry.trim()))].slice(0, 12);
+    if (!ids.length)
+        throw new CocktailsError("Provide one or more cocktail ids, like [\"11007\", \"11117\"]");
+    const needed = new Map();
+    const missing = [];
+    const found = [];
+    for (const id of ids) {
+        const d = await get(`${BASE}/lookup.php?i=${encodeURIComponent(id)}`);
+        const drink = Array.isArray(d?.drinks) ? d.drinks[0] : null;
+        if (!drink) {
+            missing.push(id);
+            continue;
+        }
+        const name = typeof drink.strDrink === "string" ? drink.strDrink : `id ${id}`;
+        found.push(`${name} (id ${id})`);
+        for (const pair of cocktailPairs(drink)) {
+            const key = pair.name.toLowerCase();
+            const bucket = needed.get(key) ?? { measures: new Set(), drinks: new Set() };
+            if (pair.measure)
+                bucket.measures.add(pair.measure);
+            bucket.drinks.add(name);
+            needed.set(key, bucket);
+        }
+    }
+    if (!needed.size) {
+        return `None of the given ids resolved to a cocktail (${missing.join(", ")}). TheCocktailDB answers an unknown id with an empty drink list.`;
+    }
+    const ordered = [...needed.entries()].sort((a, b) => {
+        const spread = b[1].drinks.size - a[1].drinks.size;
+        return spread !== 0 ? spread : a[0].localeCompare(b[0]);
+    });
+    const shared = ordered.filter(([, bucket]) => bucket.drinks.size > 1);
+    const lines = [
+        `Shopping list for ${found.length} cocktail${found.length === 1 ? "" : "s"}: ${needed.size} distinct ingredients`,
+        "",
+        ...found.map((entry) => `    ${entry}`),
+        "",
+        ...ordered.map(([key, bucket]) => {
+            const name = key.replace(/\b[a-z]/g, (letter) => letter.toUpperCase());
+            const measures = [...bucket.measures].join(" + ") || "no measure published";
+            const from = bucket.drinks.size > 1 ? ` (for ${bucket.drinks.size} drinks)` : "";
+            return `    ${name.padEnd(24)} ${measures}${from}`;
+        }),
+        "",
+        shared.length
+            ? `  ${shared.length} of these are needed by more than one drink, listed first.`
+            : "  No ingredient is shared between these drinks.",
+        missing.length ? `  Could not resolve: ${missing.join(", ")}` : "",
+        "  Measures are printed exactly as the database records them and are never added together, because they mix units such as oz and tsp.",
+    ];
+    return lines.filter((line) => line !== "").join("\n");
+}
+export async function randomCocktail(_args) {
+    const d = await get(`${BASE}/random.php`);
+    const drink = Array.isArray(d?.drinks) ? d.drinks[0] : null;
+    if (!drink)
+        throw new CocktailsError("TheCocktailDB returned no random cocktail");
+    const ings = ingredients(drink);
+    return [
+        `# ${drink.strDrink ?? "Unknown"} (id ${drink.idDrink ?? "?"})`,
+        `  ${cocktailSummary(drink)}`,
+        drink.strIBA ? `  IBA official cocktail: ${drink.strIBA}` : "",
+        drink.strTags ? `  Tags: ${drink.strTags}` : "",
+        "",
+        "Ingredients:",
+        ...(ings.length ? ings.map((entry) => `- ${entry}`) : ["- none published"]),
+        "",
+        "Instructions:",
+        drink.strInstructions ?? "not published",
+    ]
+        .filter((line) => line !== "")
+        .join("\n");
+}

package/dist/license.js

@@ -0,0 +1,79 @@
+// Premium tools on this server need a license key bought from MCP Marketplace.
+// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
+// that is not listed in PREMIUM keeps working without a key.
+const SLUG = "cocktails-mcp";
+// Tools that need a key. Everything else is free.
+const PREMIUM = new Set([
+    "filter_cocktails",
+    "shopping_list",
+]);
+const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
+// The license check calls the marketplace's verify endpoint directly instead of
+// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
+// check it makes is rejected by Supabase before it reaches the function. The
+// publishable key below is public by design - it ships in mcp-marketplace.io's
+// own JavaScript and only ever reaches their licence check.
+const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
+const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
+const OK_CACHE_MS = 60 * 60 * 1000;
+const BAD_CACHE_MS = 60 * 1000;
+const seen = new Map();
+const REASONS = {
+    missing_key: "no key is set",
+    invalid_format: "that key is not a valid MCP Marketplace key",
+    not_found: "that key was not found",
+    revoked: "that key has been revoked",
+    rotated: "that key was rotated, use your new one",
+    expired: "that key has expired, renew it",
+    rate_limited: "there were too many checks just now, try again shortly",
+    network_error: "the license server could not be reached",
+};
+function blocked(tool, reason) {
+    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
+    return `"${tool}" needs a license key, but ${why}. ` +
+        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
+}
+async function verify(key) {
+    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
+        method: "POST",
+        headers: {
+            apikey: PUBLISHABLE_KEY,
+            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ key, slug: SLUG }),
+        // an unusable key answers 400 with a JSON body, so read the body either way
+        signal: AbortSignal.timeout(15000),
+    });
+    const data = (await res.json());
+    if (typeof data?.valid !== "boolean")
+        return { valid: false, reason: "unexpected_response" };
+    return data;
+}
+/**
+ * Returns null when the caller may run the tool, or a short message telling
+ * them how to get a key.
+ *
+ * A good key is remembered for an hour, so a busy session does not hit the
+ * license server on every call and keeps working through a brief outage.
+ */
+export async function premiumRequired(tool) {
+    if (!PREMIUM.has(tool))
+        return null;
+    const key = process.env.MCP_LICENSE_KEY;
+    if (!key)
+        return blocked(tool, "missing_key");
+    const hit = seen.get(key);
+    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
+        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
+    }
+    let result;
+    try {
+        result = await verify(key);
+    }
+    catch {
+        result = { valid: false, reason: "network_error" };
+    }
+    seen.set(key, { ...result, at: Date.now() });
+    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
+}

package/dist/server.js

@@ -2,7 +2,8 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 import { byIngredient } from "./api.js";
 import { cocktailDetails } from "./api.js";
-import { searchCocktails } from "./api.js";
+import { searchCocktails, filterCocktails, shoppingList, randomCocktail } from "./api.js";
+import { premiumRequired } from "./license.js";
 const text = (value) => ({ content: [{ type: "text", text: value }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -48,5 +49,54 @@ export function createServer() {
             return textError(error(e));
         }
     });
+    server.registerTool("filter_cocktails", {
+        title: "Filter cocktails",
+        description: "Browse TheCocktailDB by category, glass or strength, or list the values each facet offers. The existing tools only search by name or ingredient.",
+        inputSchema: z.object({ facet: z.string().describe("One of category, glass or strength. Omit to see all three.").optional(), value: z.string().describe("Facet value to list, like Shot or Cocktail glass. Omit to see the values.").optional(), limit: z.number().describe("How many cocktails to list, 1-100. Defaults to 25.").optional() }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: filter_cocktails ----
+        const paywallMessage = await premiumRequired("filter_cocktails");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await filterCocktails(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("shopping_list", {
+        title: "Shopping list",
+        description: "Merge the ingredients of several cocktails into one shopping list, flagging what more than one drink needs.",
+        inputSchema: z.object({ ids: z.array(z.string()).describe("Cocktail ids, up to 12, like [\"11007\", \"11117\"].") }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: shopping_list ----
+        const paywallMessage = await premiumRequired("shopping_list");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await shoppingList(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("random_cocktail", {
+        title: "Random cocktail",
+        description: "One random cocktail with its full ingredient list and instructions.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        try {
+            return text(await randomCocktail(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
     return server;
 }

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.0",
+  "version": "1.0.2",
   "type": "module",
   "repository": {
     "type": "git",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/mrfentmen/cocktails-mcp",
     "source": "github"
   },
-  "version": "1.0.0",
+  "version": "1.0.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "cocktails-mcp",
-      "version": "1.0.0",
+      "version": "1.0.1",
       "transport": {
         "type": "stdio"
       }