conduyt-mcp 4.10.0 → 4.11.0

package/README.md

@@ -2,7 +2,7 @@
 
 MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-accessible tools. Covers the core CRM surface (contacts, deals, pipelines, custom fields, automations, messaging, and more); use `conduyt_api_catalog` to discover the full set of 500+ REST endpoints.
 
-## 136 Tools
+## 161 Tools
 
 ### Discovery
 | Tool | Description |
@@ -252,6 +252,12 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | `conduyt_ai_task_segment_and_act` | AI task (preview only): segment by filter, then tag/assign/update — execution is human-session-only |
 | `conduyt_ai_task_pipeline_cleanup` | AI task (preview only): find stale deals and tag/move/notify/report — execution is human-session-only |
 
+### Privacy (GDPR)
+| Tool | Description |
+|------|-------------|
+| `conduyt_export_contact_data` | GDPR data-portability export — full portable JSON of everything held about a contact (owner/admin) |
+| `conduyt_forget_contact` | IRREVERSIBLE GDPR right-to-be-forgotten erasure — requires `confirm='FORGET'` (owner only) |
+
 ## Setup
 
 ```bash

package/dist/index.js

@@ -34,6 +34,7 @@ import { registerTemplateTools } from "./tools/templates.js";
 import { registerDashboardTools } from "./tools/dashboard.js";
 import { registerAiExtendedTools } from "./tools/ai-extended.js";
 import { registerWorkflowSandboxTools } from "./tools/workflow-sandbox.js";
+import { registerPrivacyTools } from "./tools/privacy.js";
 const apiUrl = process.env.CONDUYT_API_URL;
 const apiKey = process.env.CONDUYT_API_KEY;
 if (!apiUrl || !apiKey) {
@@ -85,5 +86,6 @@ registerTemplateTools(server, client);
 registerDashboardTools(server, client);
 registerAiExtendedTools(server, client);
 registerWorkflowSandboxTools(server, client);
+registerPrivacyTools(server, client);
 const transport = new StdioServerTransport();
 await server.connect(transport);

package/dist/tools/privacy.d.ts

@@ -0,0 +1,11 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ConduytClient } from "../client.js";
+/**
+ * GDPR privacy tools — tri-surface parity for the /gdpr-export and /gdpr-forget
+ * endpoints (audit F7). The API enforces role independently (export =
+ * owner/admin, forget = owner-only); these tools work with whatever role the
+ * API key carries. The forget is IRREVERSIBLE, so the tool requires an explicit
+ * confirm="FORGET" literal (mirroring the API contract) — a model cannot erase a
+ * contact without deliberately supplying it.
+ */
+export declare function registerPrivacyTools(server: McpServer, client: ConduytClient): void;

package/dist/tools/privacy.js

@@ -0,0 +1,31 @@
+import { z } from "zod";
+import { formatResult } from "../client.js";
+/**
+ * GDPR privacy tools — tri-surface parity for the /gdpr-export and /gdpr-forget
+ * endpoints (audit F7). The API enforces role independently (export =
+ * owner/admin, forget = owner-only); these tools work with whatever role the
+ * API key carries. The forget is IRREVERSIBLE, so the tool requires an explicit
+ * confirm="FORGET" literal (mirroring the API contract) — a model cannot erase a
+ * contact without deliberately supplying it.
+ */
+export function registerPrivacyTools(server, client) {
+    server.tool("conduyt_export_contact_data", "GDPR data-portability export: returns the full portable JSON of everything held about a contact — profile, custom fields, tags, messages, notes, deals, activities, calls, appointments, files, and consent/suppression records. Read-only. Requires an owner or admin API key (the API enforces this).", {
+        // Strict UUID + encode: a raw id with slashes could otherwise traverse
+        // into a different subroute. Keep this export-only regardless of key role.
+        id: z.string().uuid().describe("Contact UUID to export"),
+    }, async ({ id }) => {
+        const result = await client.get(`/api/v1/contacts/${encodeURIComponent(id)}/gdpr-export`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_forget_contact", "IRREVERSIBLE GDPR right-to-be-forgotten erasure: permanently anonymizes the contact and erases their personal data EVERYWHERE it appears — messages, notes, deals, files, automations, and exports — across the whole account. Suppression/consent tombstones are kept so they are not re-contacted. THERE IS NO UNDO. Requires an owner API key (the API enforces this) and an explicit confirm='FORGET'. On a large tenant this can legitimately take tens of seconds. A 409 is retryable (a concurrent merge or in-flight automation) — retry once.", {
+        // Strict UUID + encode — this must stay a forget of exactly this contact,
+        // never a traversal into another destructive endpoint.
+        id: z.string().uuid().describe("Contact UUID to erase"),
+        confirm: z
+            .literal("FORGET")
+            .describe("Must be exactly the string 'FORGET'. This is a hard safety gate for an irreversible erasure — do not supply it unless the erasure is intended."),
+    }, async ({ id, confirm }) => {
+        const result = await client.post(`/api/v1/contacts/${encodeURIComponent(id)}/gdpr-forget`, { confirm });
+        return formatResult(result);
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.10.0",
+  "version": "4.11.0",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",
   "main": "dist/index.js",