conduyt-mcp 4.55.0 → 4.56.0

package/dist/tools/bulk.js

@@ -115,6 +115,16 @@ export function registerBulkTools(server, client) {
         const result = await client.post("/api/v1/bulk/contacts/delete", params);
         return formatResult(result);
     });
+    server.tool("conduyt_bulk_delete_contacts_matching", "Soft-delete EVERY contact a list filter matches, across pages (#73, 2026-09-15) — the contacts page's \"Select all N matching\" action. FIRST CALL: pass the same filter you would give conduyt_list_contacts (search, tag, tags, source, reachability, company, company_id, assigned_to, created_from/to, updated_from/to, min_score, import_id, smart_view, smartListId, filters JSON, master_status, exclude_master_status, cf[key]) and expectedTotal = the meta.total that filter returned. The server re-counts and refuses when the set moved (409 expected_total_mismatch), refuses when some matching contacts are shared with you but not yours to delete (409 not_all_editable), then FREEZES the matching ids (max 50,000; 422 above) and deletes only those. Contacts with an upcoming appointment are kept (keptWithAppointments). If done=false the response carries remainingIds AND a signed continuation token: CALL AGAIN with ids = remainingIds and continuation = that token, verbatim (no filter, no expectedTotal) until done=true; busy=true means wait a moment first. The token is bound to you, this account and exactly those ids and expires after 2 hours (403 continuation_*); a continuation without it is refused. Empty filters are refused. Requires contacts:delete and an active subscription.", {
+        filter: z.record(z.string(), z.union([z.string(), z.array(z.string())])).optional().describe("First call: the contact list filter parameters, exactly as for conduyt_list_contacts; at least one non-empty value"),
+        expectedTotal: z.number().int().positive().optional().describe("First call: the total the list showed for this filter (meta.total)"),
+        ids: z.array(z.string().uuid()).min(1).max(50_000).optional().describe("Continuation: the remainingIds from the previous response, in the same order (send INSTEAD of filter/expectedTotal)"),
+        continuation: z.string().max(2_000).optional().describe("Continuation: the `continuation` token from the previous response, verbatim (required with ids)"),
+    }, async (params) => {
+        const body = params.ids ? { ids: params.ids, continuation: params.continuation } : { filter: params.filter, expectedTotal: params.expectedTotal };
+        const result = await client.post("/api/v1/bulk/contacts/delete-matching", body);
+        return formatResult(result);
+    });
     server.tool("conduyt_bulk_dnc_contacts", "Add or remove a Do-Not-Contact / litigator mark for many contacts (compliance action). Requires the EXPLICIT 'dnc' API-key scope — an admin must grant it deliberately in Settings > API Keys (an unrestricted key does NOT imply it; without the scope this returns 403). Writes are also bound by contact-ownership rules for limited keys. To CHECK whether a number is already blocked, use conduyt_get_contact (dnc status) or the contacts dnc-status read.", {
         contactIds: z.array(z.string()).describe("Contact UUIDs (those without a phone number are skipped)"),
         action: z.enum(["add", "remove"]).describe("Add or remove the mark"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.55.0",
+  "version": "4.56.0",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",
   "main": "dist/index.js",

package/scripts/coverage-matrix.json

@@ -1,10 +1,10 @@
 {
-  "generatedAt": "2026-09-15T15:01:31.617Z",
-  "toolCount": 263,
-  "totalEndpoints": 975,
+  "generatedAt": "2026-09-15T16:44:24.985Z",
+  "toolCount": 264,
+  "totalEndpoints": 979,
   "counts": {
-    "covered": 246,
-    "excluded": 288,
+    "covered": 247,
+    "excluded": 291,
     "planned": 441,
     "uncategorized": 0
   },
@@ -13,6 +13,14 @@
       "status": "excluded",
       "reason": "unauthenticated liveness probe; trivially reachable without a tool"
     },
+    "GET /api/public/account-emails/unsubscribe/:token": {
+      "status": "excluded",
+      "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
+    },
+    "POST /api/public/account-emails/unsubscribe/:token": {
+      "status": "excluded",
+      "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
+    },
     "GET /api/public/appointments/:token": {
       "status": "excluded",
       "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
@@ -864,6 +872,12 @@
         "conduyt_bulk_delete_contacts"
       ]
     },
+    "POST /api/v1/bulk/contacts/delete-matching": {
+      "status": "covered",
+      "tools": [
+        "conduyt_bulk_delete_contacts_matching"
+      ]
+    },
     "POST /api/v1/bulk/contacts/dnc": {
       "status": "covered",
       "tools": [
@@ -1851,6 +1865,10 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/trial-lifecycle-emails": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/up-for-grabs-expire": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"