conduyt-mcp 4.72.1 → 4.73.0

package/README.md

@@ -1,13 +1,13 @@
 # Conduyt MCP Server
 
-MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-accessible tools. Covers the core CRM surface (contacts, deals, pipelines, custom fields, automations, messaging, and more); use `conduyt_api_catalog` to discover the full set of 500+ REST endpoints.
+MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-accessible tools. Covers the core CRM surface (contacts, deals, pipelines, custom fields, automations, messaging, and more); use `conduyt_api_catalog` to discover the full set of 600+ REST endpoints.
 
 ## 299 Tools
 
 ### Discovery
 | Tool | Description |
 |------|-------------|
-| `conduyt_api_catalog` | Discover all 500+ API endpoints |
+| `conduyt_api_catalog` | Discover all 600+ API endpoints |
 | `conduyt_check_permissions` | Introspect current API key permissions |
 | `conduyt_search` | Global search across contacts, deals, companies, tasks |
 
@@ -26,7 +26,7 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | `conduyt_list_deals` | List deals by pipeline, stage, or assignee |
 | `conduyt_get_deal` | Get deal details with history, including custom-field values |
 | `conduyt_create_deal` | Create a deal with full attributes — currency (e.g. GBP), probability, priority, expected close date, contact/company, and structured custom-field values |
-| `conduyt_update_deal` | Move stage, change value/currency, set probability or close date, reassign, mark won/lost, or write custom-field values |
+| `conduyt_update_deal` | Move stage, change value/currency, set probability or close date, reassign, mark won/lost, or write custom-field values; optional `expectedUpdatedAt` pins the `updatedAt` you read, and a stale pin returns 409 `deal_changed` with the current `updatedAt` and writes nothing |
 | `conduyt_import_deals` | Bulk-import deals (pipeline/stage by name, contact by email) via the canonical import engine — dedupes, side-effect-free, owner/admin only |
 
 ### Tasks

package/dist/tools/deals.js

@@ -105,7 +105,8 @@ export function registerDealTools(server, client) {
         assignedTo: z.string().optional().describe("Reassign to user (owner) UUID"),
         source: z.string().trim().min(1).max(500).optional().describe("Attribution source for THIS deal (the trigger that produced it) — distinct from the contact's first-touch source. Every deal keeps a source (#129): it can be changed, never cleared (null/blank are rejected). 1-500 chars."),
         lostReason: z.string().optional().describe("Reason for a lost/disqualified deal. Some stages REQUIRE this on entry (the move fails with code STAGE_REQUIREMENTS listing lostReasonOptions when the stage has a configured dropdown — resend with one of those exact values)."),
-        customFields: z.record(z.any()).optional().describe("Structured custom-field values to merge, keyed by field key"),
+        customFields: z.record(z.any()).optional().describe("Structured custom-field values to merge, keyed by field key (send null for a key to clear it; keys you omit keep their current values)"),
+        expectedUpdatedAt: z.string().datetime({ message: "expectedUpdatedAt must be the deal's updatedAt exactly as the API returned it (UTC, trailing Z, e.g. 2026-10-06T23:19:00.000Z)" }).optional().describe("Optional: the deal's updatedAt from your last read, ISO 8601 exactly as returned (e.g. 2026-10-06T23:19:00.000Z). If the deal changed since, the update is refused (409, code deal_changed, with the current updatedAt) and nothing is written — read the deal again and retry. Omit for last-write-wins per field."),
     }, async ({ id, ...updates }) => {
         const result = await client.patch(`/api/v1/deals/${id}`, updates);
         return formatResult(result);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.72.1",
+  "version": "4.73.0",
   "mcpName": "com.conduyt/mcp",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",

package/scripts/coverage-matrix.json

@@ -1,11 +1,11 @@
 {
-  "generatedAt": "2026-10-02T16:12:21.781Z",
+  "generatedAt": "2026-10-04T13:54:51.239Z",
   "toolCount": 299,
-  "totalEndpoints": 1036,
+  "totalEndpoints": 1043,
   "counts": {
     "covered": 273,
-    "excluded": 313,
-    "planned": 450,
+    "excluded": 317,
+    "planned": 453,
     "uncategorized": 0
   },
   "matrix": {
@@ -189,6 +189,14 @@
       "status": "planned",
       "reason": "invoicing"
     },
+    "POST /api/v1/invoices/:id/overpayments/:overpaymentId/manual-refund": {
+      "status": "planned",
+      "reason": "invoicing"
+    },
+    "POST /api/v1/invoices/:id/overpayments/:overpaymentId/refund": {
+      "status": "planned",
+      "reason": "invoicing"
+    },
     "POST /api/v1/invoices/:id/payment-link": {
       "status": "planned",
       "reason": "invoicing"
@@ -235,6 +243,14 @@
       "status": "excluded",
       "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
     },
+    "GET /api/public/unsubscribe/confirm/:token": {
+      "status": "excluded",
+      "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
+    },
+    "POST /api/public/unsubscribe/confirm/:token": {
+      "status": "excluded",
+      "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
+    },
     "GET /api/track/click/:messageId": {
       "status": "excluded",
       "reason": "email open/click tracking pixels and redirects — recipient-facing"
@@ -1865,6 +1881,14 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/reconcile-overpayment-refunds": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
+    "POST /api/v1/cron/reconcile-overpayment-refunds": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/reconcile-reply-capture": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -2623,6 +2647,10 @@
       "status": "planned",
       "reason": "sending-domain management (reply-capture subpaths ARE covered — see the reply_capture_* tools)"
     },
+    "POST /api/v1/email/opt-out-list/resubscribe": {
+      "status": "planned",
+      "reason": "bulk email send surfaces"
+    },
     "POST /api/v1/email/send": {
       "status": "covered",
       "tools": [