coverartarchive-mcp 1.0.2 → 1.0.3

package/README.md

@@ -23,21 +23,4 @@ The server uses stdio, so it can be connected to Claude Desktop, Cursor, VS Code
 
 This project is intentionally narrow. It should be treated as a practical helper, not a complete certification or security audit. Check the implementation and the returned data before using it with sensitive material. No credentials are required.
 
-<!-- paywall -->
-## Premium tools
 
-These tools need a license key:
-
-* `cover_gallery`
-* `find_cover_releases`
-
-Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-coverartarchive-mcp and set it in your MCP client config:
-
-```json
-"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
-```
-
-The key is checked against MCP Marketplace, cached for 24 hours, and keeps
-working offline once one check has succeeded. Every other tool on this server
-stays free.
-<!-- /paywall -->

package/dist/api.d.ts

@@ -17,13 +17,11 @@ export interface GalleryArgs {
     limit?: number;
     front_only?: boolean;
 }
-export declare function coverGallery(args: GalleryArgs): Promise<string>;
 export interface FindArgs {
     query: string;
     limit?: number;
     type?: string;
 }
-export declare function findCoverReleases(args: FindArgs): Promise<string>;
 export interface BytesArgs {
     mbid: string;
     size?: number;

package/dist/api.js

@@ -51,29 +51,7 @@ export function formatCover(c) {
     return lines.join("\n");
 }
 // ---- muxA tools:
-const MB = "https://musicbrainz.org/ws/2";
-function cap(value, fallback, max) {
-    return Math.max(1, Math.min(Math.round(value ?? fallback), max));
-}
 const MBID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-async function mbGet(path) {
-    const res = await fetch(`${MB}${path}`, {
-        headers: { "User-Agent": "mrfentmen-coverartarchive-mcp/1.0 (https://github.com/mrfentmen)", Accept: "application/json" },
-        signal: AbortSignal.timeout(25000),
-    });
-    const body = await res.text();
-    if (!res.ok) {
-        let detail = "";
-        try {
-            detail = String(JSON.parse(body).error ?? "").slice(0, 160);
-        }
-        catch {
-            detail = body.slice(0, 120);
-        }
-        throw new CoverArtError(`MusicBrainz returned ${res.status}${detail ? `: ${detail}` : ""}`);
-    }
-    return JSON.parse(body);
-}
 async function coverIndex(mbid, kind) {
     const res = await fetch(`${BASE}/${kind}/${mbid}`, {
         headers: { "User-Agent": "coverartarchive-mcp/1.0", Accept: "application/json" },
@@ -86,79 +64,6 @@ async function coverIndex(mbid, kind) {
         throw new CoverArtError(`Cover Art Archive error ${res.status}`);
     return (await res.json());
 }
-export async function coverGallery(args) {
-    const mbid = String(args.mbid ?? "").trim().toLowerCase();
-    if (!MBID_RE.test(mbid))
-        throw new CoverArtError("Provide a MusicBrainz MBID, a 36 character dashed UUID.");
-    const kind = mbid === "" ? "release" : "release";
-    const d = await coverIndex(mbid, kind);
-    let images = (d.images ?? []);
-    if (!images.length)
-        return `The Cover Art Archive holds no images for ${kind} ${mbid}.`;
-    const fronts = images.filter((i) => i.front).length;
-    const approved = images.filter((i) => i.approved).length;
-    if (args.front_only === true)
-        images = images.filter((i) => i.front);
-    if (!images.length)
-        return `That ${kind} has ${fronts} image(s) but none is marked as a front cover.`;
-    const limit = cap(args.limit, 10, 60);
-    const shown = images.slice(0, limit);
-    const release = (d.release ?? {});
-    return [
-        `Cover Art Archive gallery for ${kind} ${mbid}: ${images.length} image(s) shown of ${(d.images ?? []).length} archived, ${fronts} front cover(s), ${approved} approved.`,
-        release.title ? `Release title: ${String(release.title).slice(0, 120)}` : "",
-        Array.isArray(release.media) && release.media.length
-            ? `Media: ${release.media.map((m) => `${m.format ?? "?"} (${m["format-id"] ?? "?"}) x${m["track-count"] ?? "?"}`).join(", ")}`
-            : "",
-        ...shown.map((im, i) => {
-            const thumbs = (im.thumbnails ?? {});
-            return [
-                `${i + 1}. image id ${im.id ?? "?"} | types ${Array.isArray(im.types) ? im.types.join(", ") : "untyped"}` +
-                    `${im.front ? " | FRONT" : ""}${im.back ? " | BACK" : ""}${im.approved ? " | approved" : " | unapproved"}`,
-                `   full: ${im.image ?? "not reported"}`,
-                ...Object.entries(thumbs).map(([k, v]) => `   ${k}: ${v}`),
-                im.comment ? `   comment: ${String(im.comment).slice(0, 140)}` : "",
-            ]
-                .filter(Boolean)
-                .join("\n");
-        }),
-        images.length > shown.length ? `plus ${images.length - shown.length} more images` : "",
-    ]
-        .filter(Boolean)
-        .join("\n");
-}
-export async function findCoverReleases(args) {
-    const query = String(args.query ?? "").trim();
-    if (!query)
-        throw new CoverArtError("Provide a search query, e.g. an artist or release title.");
-    const limit = cap(args.limit, 5, 25);
-    const entity = (args.type ?? "release").trim().toLowerCase();
-    if (!["release", "release-group"].includes(entity)) {
-        return `Unknown entity type "${args.type}". Use release or release-group.`;
-    }
-    const d = await mbGet(`/${entity}?query=${encodeURIComponent(query)}&fmt=json&limit=${limit}`);
-    const rows = (d[`${entity}s`] ?? []);
-    if (!rows.length)
-        return `MusicBrainz has no ${entity} matching "${query}".`;
-    const out = [`MusicBrainz ${entity} search for "${query}": ${Number(d.count ?? rows.length).toLocaleString("en-US")} match(es), showing ${rows.length}.`];
-    let withArt = 0;
-    for (const [i, r] of rows.entries()) {
-        const id = String(r.id ?? "");
-        const hasArt = await coverIndex(id, entity)
-            .then((x) => (x.images ?? []).length)
-            .catch(() => 0);
-        if (hasArt)
-            withArt += 1;
-        const artist = (r["artist-credit"] ?? []);
-        const artistName = artist.map((a) => String(a.name ?? a.artist?.name ?? "")).join("");
-        const date = String(r["first-release-date"] ?? r.date ?? "");
-        out.push(`${i + 1}. [${id}] ${String(r.title ?? "untitled").slice(0, 80)}${artistName ? ` by ${artistName.slice(0, 60)}` : ""}` +
-            `${date ? ` | ${date}` : ""} | cover images: ${hasArt ? `${hasArt} in the archive` : "none archived"}` +
-            `${r.status ? ` | status ${r.status}` : ""}`);
-    }
-    out.push("", `${withArt} of ${rows.length} listed ${entity}s have artwork in the Cover Art Archive. Pass an MBID to cover_gallery for the full image list.`);
-    return out.join("\n");
-}
 export async function coverImageBytes(args) {
     const mbid = String(args.mbid ?? "").trim().toLowerCase();
     if (!MBID_RE.test(mbid))

package/dist/server.js

@@ -1,7 +1,6 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
-import { CoverArtError, formatCover, frontUrl, getCover, coverGallery, findCoverReleases, coverImageBytes } from "./api.js";
-import { premiumRequired } from "./license.js";
+import { CoverArtError, formatCover, frontUrl, getCover, coverImageBytes } from "./api.js";
 const text = (t) => ({ content: [{ type: "text", text: t }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -23,7 +22,7 @@ export function createServer() {
             return text(formatCover(await getCover(mbid, kind)));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("front_url", {
@@ -40,7 +39,7 @@ export function createServer() {
             return text(frontUrl(mbid, kind, Number(size)));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("cover_gallery", {
@@ -49,16 +48,12 @@ export function createServer() {
         inputSchema: z.object({ mbid: z.string().describe("MusicBrainz MBID, a 36 character UUID."), limit: z.number().describe("Max images.").optional(), front_only: z.boolean().describe("Only front covers.").optional() }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: cover_gallery ----
-        const paywallMessage = await premiumRequired("cover_gallery");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement gallery locally (paywall removed)
         try {
-            return text(await coverGallery(args));
+            return textError("Not yet implemented: gallery");
         }
         catch (e) {
-            return textError(e instanceof Error ? `Error: ${e.message}` : String(e));
+            return textError(String(e));
         }
     });
     server.registerTool("find_cover_releases", {
@@ -67,16 +62,12 @@ export function createServer() {
         inputSchema: z.object({ query: z.string().describe("Artist or release search terms."), limit: z.number().describe("Max results.").optional(), type: z.string().describe("release or release-group.").optional() }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: find_cover_releases ----
-        const paywallMessage = await premiumRequired("find_cover_releases");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement releases locally (paywall removed)
         try {
-            return text(await findCoverReleases(args));
+            return textError("Not yet implemented: releases");
         }
         catch (e) {
-            return textError(e instanceof Error ? `Error: ${e.message}` : String(e));
+            return textError(String(e));
         }
     });
     server.registerTool("cover_image_bytes", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coverartarchive-mcp",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Keyless MCP server for the Cover Art Archive: album and single artwork by MusicBrainz ID, front/back covers and thumbnails.",
   "type": "module",
   "mcpName": "io.github.mrfentmen/coverartarchive-mcp",
@@ -39,4 +39,4 @@
   "engines": {
     "node": ">=20"
   }
-}
+}

package/dist/license.d.ts

@@ -1,8 +0,0 @@
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export declare function premiumRequired(tool: string): Promise<string | null>;

package/dist/license.js

@@ -1,79 +0,0 @@
-// Premium tools on this server need a license key bought from MCP Marketplace.
-// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
-// that is not listed in PREMIUM keeps working without a key.
-const SLUG = "coverartarchive-mcp";
-// Tools that need a key. Everything else is free.
-const PREMIUM = new Set([
-    "cover_gallery",
-    "find_cover_releases",
-]);
-const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
-// The license check calls the marketplace's verify endpoint directly instead of
-// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
-// check it makes is rejected by Supabase before it reaches the function. The
-// publishable key below is public by design - it ships in mcp-marketplace.io's
-// own JavaScript and only ever reaches their licence check.
-const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
-const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
-const OK_CACHE_MS = 60 * 60 * 1000;
-const BAD_CACHE_MS = 60 * 1000;
-const seen = new Map();
-const REASONS = {
-    missing_key: "no key is set",
-    invalid_format: "that key is not a valid MCP Marketplace key",
-    not_found: "that key was not found",
-    revoked: "that key has been revoked",
-    rotated: "that key was rotated, use your new one",
-    expired: "that key has expired, renew it",
-    rate_limited: "there were too many checks just now, try again shortly",
-    network_error: "the license server could not be reached",
-};
-function blocked(tool, reason) {
-    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
-    return `"${tool}" needs a license key, but ${why}. ` +
-        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
-}
-async function verify(key) {
-    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
-        method: "POST",
-        headers: {
-            apikey: PUBLISHABLE_KEY,
-            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
-            "Content-Type": "application/json",
-        },
-        body: JSON.stringify({ key, slug: SLUG }),
-        // an unusable key answers 400 with a JSON body, so read the body either way
-        signal: AbortSignal.timeout(15000),
-    });
-    const data = (await res.json());
-    if (typeof data?.valid !== "boolean")
-        return { valid: false, reason: "unexpected_response" };
-    return data;
-}
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export async function premiumRequired(tool) {
-    if (!PREMIUM.has(tool))
-        return null;
-    const key = process.env.MCP_LICENSE_KEY;
-    if (!key)
-        return blocked(tool, "missing_key");
-    const hit = seen.get(key);
-    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
-        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
-    }
-    let result;
-    try {
-        result = await verify(key);
-    }
-    catch {
-        result = { valid: false, reason: "network_error" };
-    }
-    seen.set(key, { ...result, at: Date.now() });
-    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
-}