hamravesh-mcp 0.1.0

package/ENDPOINTS.md

@@ -0,0 +1,245 @@
+# Hamravesh Console API — فهرست کامل Endpointها
+
+> همراه `HAMRAVESH-API.md` بخوان (آنجا base URL، احراز هویت و هدرها توضیح داده شده).
+> `{paas}` = نام محصول (دارکوب = `darkube`). `{id}` = شناسه‌ی منبع. `{app_id}` = شناسه‌ی اپ دیتابیس.
+> همه روی base `https://api.hamravesh.com` با هدر `Authorization` + `X-Organization`.
+> ستون Methods نشان‌دهنده‌ی متدهای دیده‌شده روی همان مسیر است.
+
+## Auth & Users
+
+| Methods | Path |
+|---|---|
+| POST | `/api/v1/token/` |
+| POST | `/api/v1/token/refresh/` |
+| GET, POST, DELETE | `/api/v1/apikeys/` , `/api/v1/apikeys/{id}/` |
+| GET | `/api/v2/users/profile` (پروفایل + لیست سازمان‌ها/کلاسترها/بودجه) |
+| PUT | `/api/v2/users/profile` , `/api/v1/users/profile` |
+| GET | `/api/v1/2fa/status/` , `/api/v1/2fa/setup/` |
+| POST | `/api/v1/2fa/enable/` , `/api/v1/2fa/disable/` |
+| GET | `/api/v1/account/available_clusters/` |
+| POST | `/api/v1/account/cluster/cluster_ingress_host_name/` |
+| POST | `/api/v1/oauth/auth/` |
+| GET | `/api/v1/oauth/authorization_request/?oauth_provider={id}` |
+| POST | `/api/v1/users/change_password/` , `/api/v1/users/forget_password/` , `/api/v1/users/reset_password/` |
+| GET | `/api/v1/users/check_email/?email=` , `/api/v1/users/check_org_name/?org_name=` , `/api/v1/users/check_username/?username=` |
+| POST | `/api/v1/users/onboard/` , `/api/v1/users/verify_mobile/` , `/api/v1/users/send_verification_sms/` |
+| POST | `/api/v2/users/register_user/` , `/api/v2/users/update_email/` , `/api/v2/users/verify_email/` , `/api/v2/users/verify_mobile/` , `/api/v2/users/verify_mobile_national_id/` |
+
+## PaaS / Darkube apps  ({paas} = darkube)
+
+| Methods | Path |
+|---|---|
+| POST | `/api/v1/{paas}/apps/` |
+| GET | `/api/v1/{paas}/apps/?limit=400&offset=0&fields=id,namespace,cluster,state,name,creation_method,is_deployable,log_aggregation_config` |
+| GET, PATCH, PUT, DELETE | `/api/v1/{paas}/apps/{id}/` |
+| GET | `/api/v1/{paas}/apps/{id}/alerts/` |
+| GET | `/api/v1/{paas}/apps/{id}/app_containers/` |
+| POST | `/api/v1/{paas}/apps/{id}/app_files/` |
+| GET | `/api/v1/{paas}/apps/{id}/app_log/?from_index=&to_index=&reference_index=&pod_name=&container_name=&previous=` |
+| GET | `/api/v1/{paas}/apps/{id}/available_upgrades/` |
+| GET | `/api/v1/{paas}/apps/{id}/certificate_status/` |
+| POST | `/api/v1/{paas}/apps/{id}/check_repo/` |
+| GET | `/api/v1/{paas}/apps/{id}/manifests/` |
+| POST | `/api/v1/{paas}/apps/{id}/migrate/` |
+| GET | `/api/v1/{paas}/apps/{id}/operations/?type=version_upgrade&type=version_rollback` |
+| GET, POST, DELETE | `/api/v1/{paas}/apps/{id}/plugins/` |
+| GET | `/api/v1/{paas}/apps/{id}/read_all_vault_secret_envs/` |
+| POST | `/api/v1/{paas}/apps/{id}/read_vault_secret_env/` , `/api/v1/{paas}/apps/{id}/read_vault_secret/` |
+| POST | `/api/v1/{paas}/apps/{id}/reinstall/` |
+| POST | `/api/v1/{paas}/apps/{id}/restart/` |
+| GET | `/api/v1/{paas}/apps/{id}/rollback_version/` |
+| POST | `/api/v1/{paas}/apps/{id}/ssl_certificate_records/` |
+| POST | `/api/v1/{paas}/apps/{id}/suggestions/` |
+| POST | `/api/v1/{paas}/apps/{id}/upgrade_version/` |
+| POST | `/api/v1/{paas}/apps/check_dns_records/` , `/api/v1/{paas}/apps/check_subdomain/` |
+| POST | `/api/v1/{paas}/apps/docker_compose/` , `/api/v1/{paas}/apps/schedule_info/` |
+| GET | `/api/v1/{paas}/build/{id}/` , `/api/v1/{paas}/build/{id}/retry/` |
+| POST | `/api/v1/{paas}/build/{id}/stop/` |
+| GET | `/api/v1/{paas}/build/app/{id}/?limit=&offset=` |
+| GET | `/api/v1/{paas}/build/build_last_commit/?app_id={id}&deploy=true` (تریگر دیپلوی) |
+| GET | `/api/v1/{paas}/certificates/` , `/api/v1/{paas}/certificates/?cluster_id=` |
+| GET, POST | `/api/v1/{paas}/deploy_contexts/` |
+| GET, PUT, DELETE | `/api/v1/{paas}/deploy_contexts/{id}/` |
+| POST | `/api/v1/{paas}/github/branches/` , `/api/v1/{paas}/gitlab/branches/` |
+| GET | `/api/v1/{paas}/github/installed/` , `/api/v1/{paas}/github/repos/` , `/api/v1/{paas}/gitlab/installed/` , `/api/v1/{paas}/gitlab/repos/` |
+| GET | `/api/v1/{paas}/kubeconfig/generate/` |
+| POST | `/api/v1/{paas}/license/confluence/` , `/license/jira/` , `/license/jirasm/` , `/license/plugin/` |
+| POST | `/api/v1/{paas}/logs/loki/` |
+| POST | `/api/v1/{paas}/namespaces/` |
+| GET | `/api/v1/{paas}/namespaces/{id}/` |
+| GET, POST | `/api/v1/{paas}/nodepools/` |
+| GET | `/api/v1/{paas}/nodes/?cluster_id=` |
+| POST | `/api/v1/{paas}/nodes/create_and_join/` , `/nodes/increase_disk_size/` , `/nodes/join/` |
+| GET | `/api/v1/{paas}/permissions/` |
+| GET, PUT | `/api/v1/{paas}/permissions/app/{id}/` , `/api/v1/{paas}/permissions/user/{id}/` |
+| GET | `/api/v1/{paas}/plans/` , `/api/v1/{paas}/plans/disk/` |
+| POST | `/api/v1/{paas}/plans/calculator/` |
+| GET | `/api/v1/{paas}/security_scans/?app_id=&limit=&offset=` , `/security_scans/{id}/` , `/security_scans/summary/` , `/security_scans/scan_image/?app_id=` |
+| GET | `/api/v1/{paas}/stateless_apps/{id}/generate_cicd_scripts` , `/generate_gitlabci_jobs/` , `/history/?start_time=&end_time=` , `/secret/?secret_fields=` |
+| POST | `/api/v1/{paas}/stateless_apps/sync_apps_data/` |
+| GET, DELETE | `/api/v1/{paas}/template/` |
+
+### Darkube (سراسری / دیتابیس‌محور)
+| Methods | Path |
+|---|---|
+| GET | `/api/v1/darkube/apps/{id}/app_pvc_backups/` , `/backup/` , `/backup/operations/` , `/backup/statistics/` |
+| POST | `/api/v1/darkube/apps/{id}/backup/download_information/` , `/backup/trigger_backup/` , `/backup/trigger_restore/` , `/compatible_plan/` |
+| GET | `/api/v1/darkube/certificates` |
+| PUT | `/api/v1/darkube/database/user/{id}` , `/api/v1/darkube/promote-to-master/{id}` |
+| GET, POST | `/api/v1/darkube/loadbalancers/` |
+| GET, PUT, DELETE | `/api/v1/darkube/loadbalancers/{id}` , `/api/v1/darkube/loadbalancers/{id}/` |
+| POST | `/api/v1/darkube/loadbalancers/{id}/redeploy_apps/` |
+| GET | `/api/v1/darkube/nses/?cluster_id=` |
+| GET | `/api/v1/darkube/pgbadger/report/{id}/?report_address=` , `/report/list/{id}/?year=&month=` , `/summary/{id}/?report_address=` |
+| POST | `/api/v1/darkube/postgres_standby/check` |
+| GET | `/api/v1/darkube/pvcs/?namespace_name=&cluster_id=` |
+| POST | `/api/v1/darkube/pvcs/defrag/` , `/pvcs/migrate/?pvc_name=&dst_size=&namespace_name=` , `/pvcs/restore_pvc_backup/` , `/pvcs/sync/` |
+| PUT | `/api/v1/darkube/apps/update_from_cli/` (دیپلوی رسمی با deploy token — base: `api.console.hamravesh.ir`) |
+
+## DBaaS (databases)
+
+| Methods | Path |
+|---|---|
+| GET | `/dbaas/api/v1/account/available_clusters/` |
+| GET, POST | `/dbaas/api/v1/app/database/` |
+| GET, PUT, DELETE | `/dbaas/api/v1/app/database/{app_id}/` |
+| GET | `/dbaas/api/v1/app/database/{app_id}/certificate/` |
+| POST | `/dbaas/api/v1/app/database/{app_id}/external_access/` , `/internal_access/` , `/shutdown/` , `/start/` |
+| GET | `/dbaas/api/v1/app/database/{app_id}/logs/?end_time=&start_time=&limit=` |
+| POST | `/dbaas/api/v1/app/database/{id}/promote/` , `/database/compatibility_check/` , `/database/readonly-cluster/` |
+| GET, PUT | `/dbaas/api/v1/app/database/config/{app_id}/` |
+| GET, POST | `/dbaas/api/v1/app/db/database/{app_id}/` |
+| DELETE | `/dbaas/api/v1/app/db/database/{app_id}/{id}/` |
+| GET | `/dbaas/api/v1/app/insight/{app_id}?start_time=&end_time=&metric_option=` |
+| GET, PUT | `/dbaas/api/v1/app/permissions/database/{app_id}/` |
+| GET, POST, DELETE | `/dbaas/api/v1/app/pghero/{app_id}` |
+| GET | `/dbaas/api/v1/app/pitr_information/{app_id}` , `/app/restore/range/{app_id}/` |
+| GET | `/dbaas/api/v1/app/plans/` , `/app/plans/calculator/?is_managed=&is_on_premise=&cpu=&ram=&disk=&num_of_standbys=` |
+| GET, POST | `/dbaas/api/v1/app/pools/database/{app_id}/` |
+| PUT, DELETE | `/dbaas/api/v1/app/pools/database/{app_id}/{id}/` |
+| GET, POST | `/dbaas/api/v1/app/query-analysis/{app_id}/...` (`/is-active/` , `/activate/` , `/report/`) |
+| GET | `/dbaas/api/v1/app/secrets/?secret_path=` |
+| GET, POST | `/dbaas/api/v1/app/user/database/{app_id}/` |
+| DELETE | `/dbaas/api/v1/app/user/database/{app_id}/{id}/` |
+| PUT | `/dbaas/api/v1/app/user/database/{app_id}/{id}/change_password/` |
+| GET | `/dbaas/api/v1/app/backups/{app_id}/` , `/list/` , `/operations/` , `/snapshots/` , `/statistics/` |
+| POST | `/dbaas/api/v1/app/backups/{app_id}/download_info/` , `/trigger_backup/` |
+| GET | `/dbaas/api/v1/pgbadger/report/{id}/` , `/report/list/{id}/` , `/summary/{id}/` |
+| GET | `/api/v1/services/?kind=postgres|mysql|mongo|redis|minio` (سرویس‌های قابل اتصال) |
+
+## Container Registry
+
+| Methods | Path |
+|---|---|
+| GET, POST | `/api/v1/registry/` |
+| DELETE | `/api/v1/registry/{id}/` |
+| POST | `/api/v1/registry/{id}/change_password/` , `/read_vault_secret/` |
+| GET | `/api/v1/registry/{id}/list_repositories/?offset=&limit=10` , `/storage_usage` |
+| POST | `/api/v1/registry/{id}/list_repository_digests/` , `/delete_digests/` , `/delete_repository/` , `/delete_tags/` |
+| GET, POST | `/api/v1/registry-gc-strategies/` |
+| PUT, DELETE | `/api/v1/registry-gc-strategies/{id}` , `/{id}/` |
+
+## Monitoring & Logging
+
+| Methods | Path |
+|---|---|
+| GET, POST | `/api/v1/datasources/` |
+| GET, DELETE | `/api/v1/datasources/{id}/` , `/api/v1/datasources/{id}` |
+| POST | `/api/v1/datasources/{id}/users/` |
+| GET, POST | `/api/v1/dazzle/metric-datasources/` |
+| DELETE | `/api/v1/dazzle/metric-datasources/{id}/` |
+| GET | `/api/v1/dazzle/metric-datasource-plans/` |
+| POST | `/api/v1/dazzle/metric-datasources/{id}/read_vault_secret/` |
+| GET, POST | `/api/v1/hamartia/datasources/` |
+| DELETE | `/api/v1/hamartia/datasources/{id}/` |
+| GET, POST | `/api/v1/hamartia/datasources/{id}/pipelines/` |
+| DELETE | `/api/v1/hamartia/datasources/{id}/pipelines/?pipeline_id=` |
+| POST | `/api/v1/hamartia/datasources/{id}/read_vault_secret/` |
+| GET | `/api/v1/hamartia/plans/` |
+| GET, POST | `/api/v1/logstorage/loki/` |
+| GET, PUT, DELETE | `/api/v1/logstorage/loki/{id}/` |
+| GET | `/api/v1/logstorage/custom/` |
+| POST | `/api/v1/loki/usages/` |
+| GET | `/api/v1/zones/` , `/api/v1/zones/?controller_loki_service=` |
+| GET | `/api/v1/plans/?zone_name=` , `/api/v1/plans/?zone_name=&controller_loki_service=` |
+| GET | `/api/v1/query_range/` , `/api/v1/app/insight/query_range/` |
+
+## Marketplace / SaaS (one-click apps)
+
+| Methods | Path |
+|---|---|
+| GET | `/api/v1/app/products/` , `/{id}/` , `/{id}/plans/` , `/{id}/details/` , `/{id}/available_versions/` , `/{id}/sidebar_links/` , `/{id}/support/` |
+| GET, POST | `/api/v1/app/saas/` |
+| GET, PUT, DELETE | `/api/v1/app/saas/{id}/` |
+| GET | `/api/v1/app/saas/{id}/available_upgrades/` , `/containers/` , `/pod_status/` , `/version_rollback/` , `/list_performed_upgrades/` |
+| GET | `/api/v1/app/saas/{id}/get_last_workflow_status/` , `/get_last_workflow_progress_detail/` , `/check_dns_records/` |
+| POST | `/api/v1/app/saas/{id}/restart/` , `/check_upgrade_compatibility/` , `/shown_field/` , `/ssl_certificate_records/` , `/set_ssl_challenge_type/` |
+| POST | `/api/v1/app/saas/{id}/enable_filebrowser/` , `/disable_filebrowser/` , `/backup/trigger_backup/` , `/backup/trigger_restore/` , `/backup/download_info/` |
+| GET | `/api/v1/app/saas/{id}/backup/` , `/backup/operations?backup_id=` |
+| PUT | `/api/v1/app/saas/{id}/version_upgrade/` |
+| POST | `/api/v1/app/saas/set_ssl_challenge_dns01/` , `/api/v1/app/license/{id}/` |
+| GET | `/api/v1/app/products/{id}/plans/` , `/api/v1/app/tags/` , `/api/v1/app/insight/resource_limits/{id}/` |
+
+## Organizations & Members
+
+| Methods | Path |
+|---|---|
+| PUT | `/api/v1/organizations/{id}/edit` |
+| GET, PUT | `/api/v1/organizations/{id}/members` (GET لیست اعضا، PUT ویرایش نقش/دعوت) |
+| GET | `/api/v1/organizations/{id}/transfer-status` |
+| POST | `/api/v1/organizations/{id}/initiate-transfer` , `/accept-transfer` , `/reject-transfer` , `/cancel-transfer` , `/leave` |
+| POST, DELETE | `/api/v1/organizations/{id}/enforce-2fa/` |
+| POST | `/api/v1/organizations/join_by_token` |
+
+## Billing & Financial
+
+| Methods | Path |
+|---|---|
+| GET | `/api/v1/billing/billing-accounts/{id}/` |
+| GET | `/api/v1/billing/wallets/` , `/wallet-transactions/` , `/wallet-transactions/{id}/receipt/` |
+| GET | `/api/v1/billing/financial_transactions/` , `/{id}/receipt/` |
+| POST | `/api/v1/billing/financial_transactions/self_reporting_transaction/` |
+| GET | `/api/v1/billing/invoices/` , `/{id}/` , `/{id}/export/` , `/official_invoices/` |
+| POST | `/api/v1/billing/invoices/export_report/` , `/invoices/invoice_settings/` |
+| GET | `/api/v1/billing/plans` , `/reserved-resources/` , `/bank-accounts/` |
+| POST | `/api/v1/billing/payment/request` , `/billbillak/history/` , `/giftcodes/use/` |
+
+## Sentry (error tracking)
+
+| Methods | Path |
+|---|---|
+| GET, POST | `/api/v1/sentry/sentrys/` |
+| GET, PATCH, DELETE | `/api/v1/sentry/sentrys/{id}/` |
+| GET | `/api/v1/sentry/{id}/plans` , `/api/v1/sentry/{id}/subscription-status/` , `/api/v1/lazarus/sentry-plans` |
+
+## Notifications & Alerts
+
+| Methods | Path |
+|---|---|
+| GET | `/api/v1/notifications/all_list/?limit=&offset=` |
+| GET | `/api/v1/notifications/mark-all-as-read/` , `/api/v1/notifications/announcements/{id}/` |
+| GET, POST | `/api/v1/viper/alert_routes/` |
+| DELETE | `/api/v1/viper/alert_routes/{id}/` |
+| GET | `/api/v1/viper/alert_rules/` , `/api/v1/viper/alertmanager/alerts/` , `/api/v1/viper/notices` |
+| GET | `/notifications/alerts/api/alerts/` , `/notifications/alerts/api/alerts/{id}/` |
+| GET, POST | `/notifications/alerts/api/organization-id-alert-routers/` |
+
+## Backup (سرویس بکاپ سراسری)
+
+| Methods | Path |
+|---|---|
+| GET | `/api/v1/backups/backups?fields=...` |
+| POST | `/api/v1/backups/backups/` |
+| GET | `/api/v1/backups/backups/{id}/snapshots/` , `/clones/` , `/restores/` |
+| GET | `/api/v1/backups/org_plans` , `/api/v1/backups/prices` |
+| POST | `/api/v1/backups/snapshots/{id}/clone/` , `/restore/` |
+| GET | `/api/v1/backups/snapshots/{id}/url/` |
+| GET | `/api/v1/backups/storage_destinations/` |
+| POST | `/api/v1/backups/storage_destinations/{id}/change_password/` , `/read_vault_secret/` |
+
+## Clusters & API Keys (متفرقه)
+
+| Methods | Path |
+|---|---|
+| POST | `/api/v1/clusters/` |
+| GET, POST, DELETE | `/api/v1/apikeys/` , `/api/v1/apikeys/{id}/` |

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mohammad Bakhtari (محمد باختری)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/LIVE-STATUS.md

@@ -0,0 +1,79 @@
+# Hamravesh — وضعیت زندهٔ endpoint ها (با حساب admin روی wgcup)
+
+> نتیجه‌ی تست واقعی ۲۱۳ درخواست با حساب `oosmajid@gmail.com` (نقش admin در wgcup)، تاریخ 2026-06-13.
+> `200/204`=کار می‌کند | `400`=پارامتر/بدنه لازم دارد | `404`=این امکان برای این سازمان روشن نیست یا مسیر فرق دارد |
+> `500`=خطای سمت سرور هم‌روش | `405`=متد اشتباه (مثلاً GET روی مسیری که فقط POST است).
+
+| Status | Method | Path |
+|---|---|---|
+| 200 | GET | `/api/v1/2fa/status/` |
+| 404 | GET | `/api/v1/account/available_clusters/` |
+| 200 | GET | `/api/v1/announcements/` |
+| 200 | GET | `/api/v1/apikeys/` |
+| 200 | POST | `/api/v1/apikeys/` |
+| 204 | DELETE | `/api/v1/apikeys/{id}/` |
+| 404 | GET | `/api/v1/app/products/` |
+| 404 | GET | `/api/v1/app/saas/` |
+| 404 | GET | `/api/v1/app/tags/` |
+| 404 | GET | `/api/v1/backups/backups` |
+| 404 | GET | `/api/v1/backups/org_plans` |
+| 404 | GET | `/api/v1/backups/storage_destinations/` |
+| 400 | GET | `/api/v1/billing/bank-accounts/` |
+| 200 | GET | `/api/v1/billing/billing-accounts/{id}/` |
+| 200 | GET | `/api/v1/billing/financial_transactions/` |
+| 200 | GET | `/api/v1/billing/invoices/` |
+| 404 | GET | `/api/v1/billing/plans` |
+| 404 | GET | `/api/v1/billing/reserved-resources/` |
+| 200 | GET | `/api/v1/billing/wallets/` |
+| 200 | GET | `/api/v1/darkube/apps/` |
+| 200 | GET | `/api/v1/darkube/apps/{id}/` |
+| 200 | GET | `/api/v1/darkube/apps/{id}/alerts/` |
+| 200 | GET | `/api/v1/darkube/apps/{id}/app_containers/` |
+| 404 | GET | `/api/v1/darkube/apps/{id}/app_pvc_backups/` |
+| 500 | GET | `/api/v1/darkube/apps/{id}/available_upgrades/` |
+| 404 | GET | `/api/v1/darkube/apps/{id}/backup/` |
+| 400 | GET | `/api/v1/darkube/apps/{id}/backup/operations/` |
+| 400 | GET | `/api/v1/darkube/apps/{id}/backup/statistics/` |
+| 200 | GET | `/api/v1/darkube/apps/{id}/certificate_status/` |
+| 200 | GET | `/api/v1/darkube/apps/{id}/manifests/` |
+| 200 | GET | `/api/v1/darkube/apps/{id}/operations/` |
+| 200 | GET | `/api/v1/darkube/apps/{id}/plugins/` |
+| 200 | GET | `/api/v1/darkube/apps/{id}/read_all_vault_secret_envs/` |
+| 404 | GET | `/api/v1/darkube/apps/{id}/rollback_version/` |
+| 405 | GET | `/api/v1/darkube/apps/{id}/suggestions/` |
+| 200 | GET | `/api/v1/darkube/build/app/{id}/` |
+| 200 | GET | `/api/v1/darkube/certificates/` |
+| 200 | GET | `/api/v1/darkube/deploy_contexts/` |
+| 200 | GET | `/api/v1/darkube/github/installed/` |
+| 200 | GET | `/api/v1/darkube/github/repos/` |
+| 200 | GET | `/api/v1/darkube/gitlab/installed/` |
+| 400 | GET | `/api/v1/darkube/loadbalancers/` |
+| 404 | GET | `/api/v1/darkube/nodepools/` |
+| 500 | GET | `/api/v1/darkube/permissions/` |
+| 200 | GET | `/api/v1/darkube/plans/` |
+| 200 | GET | `/api/v1/darkube/plans/disk/` |
+| 200 | GET | `/api/v1/darkube/template/` |
+| 404 | GET | `/api/v1/datasources/` |
+| 200 | GET | `/api/v1/dazzle/metric-datasource-plans/` |
+| 200 | GET | `/api/v1/dazzle/metric-datasources/` |
+| 200 | GET | `/api/v1/hamartia/datasources/` |
+| 500 | GET | `/api/v1/hamartia/plans/` |
+| 404 | GET | `/api/v1/logstorage/custom/` |
+| 404 | GET | `/api/v1/logstorage/loki/` |
+| 200 | GET | `/api/v1/notifications/all_list/` |
+| 200 | GET | `/api/v1/organizations/{id}/members` |
+| 200 | GET | `/api/v1/registry-gc-strategies/` |
+| 200 | GET | `/api/v1/registry/` |
+| 200 | GET | `/api/v1/registry/{id}/list_repositories/` |
+| 200 | GET | `/api/v1/registry/{id}/storage_usage` |
+| 404 | GET | `/api/v1/sentry/sentrys/` |
+| 404 | GET | `/api/v1/services/` |
+| 200 | GET | `/api/v1/viper/alert_routes/` |
+| 200 | GET | `/api/v1/viper/alert_rules/` |
+| 200 | GET | `/api/v1/viper/alertmanager/alerts/` |
+| 200 | GET | `/api/v1/viper/notices` |
+| 404 | GET | `/api/v1/zones/` |
+| 200 | GET | `/api/v2/users/profile` |
+| 200 | GET | `/dbaas/api/v1/account/available_clusters/` |
+| 200 | GET | `/dbaas/api/v1/app/database/` |
+| 200 | GET | `/dbaas/api/v1/app/plans/` |

package/README.md

@@ -0,0 +1,188 @@
+# hamravesh-mcp
+
+> کنترلِ کنسولِ **هم‌روش / دارکوب** از داخلِ هر کلاینتِ MCP (مثل Claude) — بدونِ پنل، بدونِ کلیک.
+> Control the **Hamravesh / Darkube** console from any MCP client (Claude, etc.) — no panel, no clicking.
+
+[![npm version](https://img.shields.io/npm/v/hamravesh-mcp.svg)](https://www.npmjs.com/package/hamravesh-mcp)
+[![CI](https://github.com/bakhtarimohammad/hamravesh-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/bakhtarimohammad/hamravesh-mcp/actions/workflows/ci.yml)
+[![license](https://img.shields.io/npm/l/hamravesh-mcp.svg)](./LICENSE)
+[![node](https://img.shields.io/node/v/hamravesh-mcp.svg)](https://nodejs.org)
+
+سرورِ [MCP](https://modelcontextprotocol.io) که به دستیارِ هوشِ مصنوعی اجازه می‌دهد اپ‌های [هم‌روش](https://hamravesh.com) (دارکوب) را مستقیم از طریقِ API داخلیِ کنسول مدیریت کند: دیدن و بررسیِ اپ‌ها، لاگ، ری‌استارت، دیپلوی، اسکیل، تغییرِ env، مدیریتِ دیتابیس/رجیستری/صورتحساب — و صدا زدنِ هر endpointِ دیگر.
+
+A [Model Context Protocol](https://modelcontextprotocol.io) server that lets an AI assistant manage your [Hamravesh](https://hamravesh.com) (Darkube) apps directly via the console's internal API: list & inspect apps, view logs, restart, redeploy, scale, edit env vars, manage databases, registries, billing — and call any other endpoint.
+
+> ⚠️ **غیررسمی.** این ابزار از API داخلیِ کنسولِ هم‌روش (`api.hamravesh.com`) استفاده می‌کند که عمومی/مستند نیست و ممکن است بدونِ اطلاع تغییر کند.
+> **Unofficial.** Uses Hamravesh's internal console API (`api.hamravesh.com`), which is not a public/documented API and may change without notice.
+
+---
+
+## فارسی
+
+### امکانات
+
+- 🔑 **دو روشِ ورود** — یا **کلید API** (هدرِ `Authorization: Api-Key …`، توصیه‌شده) یا **ایمیل/رمز** (JWT با تمدیدِ خودکار).
+- 🧰 **۲۱ ابزار** — خواندنی (اپ‌ها، لاگ، کانتینرها، منیفست، بیلدها، دیتابیس، رجیستری، صورتحساب، کلیدها)، نوشتنی (ری‌استارت، دیپلوی، اسکیل، روشن/خاموش، تغییرِ env، ساخت/حذفِ اپ، ساخت/حذفِ کلید) و یک ابزارِ جوکر به‌نامِ `hamravesh_request` برای هر endpoint.
+- 🔒 **پیش‌فرض امن** — نوشتن و حذف تا وقتی خودت روشن نکنی **خاموش‌اند**. ابزارِ جوکر روی میزبانِ هم‌روش قفل است (بدونِ SSRF) و رازها از پیامِ خطا پاک می‌شوند.
+- 📦 **بدونِ build، یک وابستگی** — ESMِ ساده، فقط `@modelcontextprotocol/sdk`.
+
+### گرفتنِ کلید API
+
+در پنلِ هم‌روش: **تنظیماتِ سازمان ← امنیت ← API Keys ← یک کلید بساز.** (یا به‌جایش ایمیل/رمز بده — جدولِ پایین.)
+
+### شروعِ سریع
+
+با **Claude، Cursor، VS Code، Windsurf** و هر کلاینتِ MCP کار می‌کند. نیازی به نصبِ سراسری نیست — `npx` خودش موقعِ اجرا دانلودش می‌کند.
+
+**🪄 روشِ A — بدونِ کدنویسی (بذار Claude خودش انجامش دهد).** اگر همه‌کارت را با Claude انجام می‌دهی، فقط بگو:
+
+> «MCP هم‌روش (`hamravesh-mcp`) را برایم نصب و تنظیم کن. کلیدِ APIم این است: `…` و سازمانم `…`.»
+
+Claude خودش نصب و تنظیمش می‌کند. تمام.
+
+**⌨️ روشِ B — Claude Code، یک خط:**
+
+```bash
+claude mcp add hamravesh --env HAMRAVESH_API_KEY=کلیدت --env HAMRAVESH_ORG=سازمانت -- npx -y hamravesh-mcp
+```
+
+**📝 روشِ C — فایلِ پیکربندی** (`claude_desktop_config.json` یا `.mcp.json`ِ پروژه):
+
+```json
+{
+  "mcpServers": {
+    "hamravesh": {
+      "command": "npx",
+      "args": ["-y", "hamravesh-mcp"],
+      "env": {
+        "HAMRAVESH_API_KEY": "کلیدِ تو",
+        "HAMRAVESH_ORG": "نامِ سازمان"
+      }
+    }
+  }
+}
+```
+
+### متغیرهای محیطی
+
+| متغیر | لازم؟ | توضیح |
+|---|---|---|
+| `HAMRAVESH_API_KEY` | یکی از این دو | کلید API (توصیه‌شده). |
+| `HAMRAVESH_EMAIL` + `HAMRAVESH_PASSWORD` | یکی از این دو | ایمیل/رمز (JWT). اگر 2FA داری `HAMRAVESH_OTP`. |
+| `HAMRAVESH_ORG` | توصیه‌شده | سازمانِ پیش‌فرض (مثل `wgcup`)؛ در هر ابزار قابلِ تغییر. |
+| `HAMRAVESH_BASE` | نه | پیش‌فرض `https://api.hamravesh.com`. |
+| `HAMRAVESH_ALLOW_WRITE` | نه | `1` برای فعال‌کردنِ ابزارهای نوشتن (پیش‌فرض خاموش). |
+| `HAMRAVESH_ALLOW_DELETE` | نه | `1` برای فعال‌کردنِ ابزارهای حذف (پیش‌فرض خاموش). |
+
+### ایمنی
+
+به‌صورتِ پیش‌فرض فقط **خواندن** مجاز است؛ هیچ تغییری روی سرویسِ زنده رخ نمی‌دهد. برای تغییر/حذف باید فلگ‌های بالا را روی `1` بگذاری. این یعنی امکان ندارد دستیار اشتباهی چیزی را خراب کند.
+
+### ابزارها
+
+**خواندنی (همیشه روشن):** `hamravesh_whoami`، `hamravesh_list_apps`، `hamravesh_get_app`، `hamravesh_app_containers`، `hamravesh_app_logs`، `hamravesh_app_manifests`، `hamravesh_app_builds`، `hamravesh_list_databases`، `hamravesh_list_registries`، `hamravesh_billing`، `hamravesh_list_apikeys`
+
+**نوشتنی (نیازمندِ `ALLOW_WRITE=1`):** `hamravesh_restart_app`، `hamravesh_redeploy_app`، `hamravesh_scale_app`، `hamravesh_set_app_enabled`، `hamravesh_update_app_envs`، `hamravesh_create_app`، `hamravesh_create_apikey`، و `hamravesh_delete_app`/`hamravesh_delete_apikey` (نیازمندِ `ALLOW_DELETE=1`)
+
+**جوکر:** `hamravesh_request` — هر متد/مسیر (GET آزاد؛ نوشتن/حذف تابعِ فلگ‌ها).
+
+### مرجع
+
+- [`ENDPOINTS.md`](ENDPOINTS.md) — کاتالوگِ دسته‌بندی‌شده.
+- [`WRITE-ENDPOINTS.md`](WRITE-ENDPOINTS.md) — شکلِ بدنهٔ همهٔ ۱۶۲ درخواستِ نوشتنی.
+- [`LIVE-STATUS.md`](LIVE-STATUS.md) — وضعیتِ زندهٔ هر endpoint با حسابِ admin.
+- [`ENDPOINTS-RAW.txt`](ENDPOINTS-RAW.txt) — لیستِ خامِ همهٔ ۵۷۸ آدرس (متد+مسیر).
+
+### توسعه
+
+```bash
+npm ci
+npm test        # بدونِ شبکه: ابزارها و محافظِ نوشتن را چک می‌کند
+```
+
+---
+
+## English
+
+### Features
+
+- 🔑 **Two auth modes** — a stable **API key** (`Authorization: Api-Key …`, recommended) or **email/password** (JWT with auto-refresh).
+- 🧰 **21 tools** — read (apps, logs, containers, manifests, builds, databases, registries, billing, api-keys), write (restart, redeploy, scale, enable/disable, update env, create/delete app, create/delete api-key), plus a generic `hamravesh_request` escape hatch for any endpoint.
+- 🔒 **Safe by default** — write and delete operations are **disabled** unless you explicitly turn them on. The generic tool is host-locked (no SSRF) and secrets are redacted from error messages.
+- 📦 **Zero build, one dependency** — plain ESM, only `@modelcontextprotocol/sdk`.
+
+### Get an API key
+
+In the Hamravesh panel: **Organization settings → Security → API Keys → create one.** (Or use email/password instead — see the table below.)
+
+### Quick start
+
+Works with **Claude, Cursor, VS Code, Windsurf** and any MCP client. No global install — `npx` fetches it on demand.
+
+**🪄 Option A — No coding (let Claude do it).** If you do everything through Claude, just tell it:
+
+> *"Set up the `hamravesh-mcp` MCP server for me. My Hamravesh API key is `…` and my org is `…`."*
+
+Claude installs it and writes the config for you. Done.
+
+**⌨️ Option B — Claude Code, one line:**
+
+```bash
+claude mcp add hamravesh --env HAMRAVESH_API_KEY=your-key --env HAMRAVESH_ORG=your-org -- npx -y hamravesh-mcp
+```
+
+**📝 Option C — config file** (Claude Desktop `claude_desktop_config.json`, or a project `.mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "hamravesh": {
+      "command": "npx",
+      "args": ["-y", "hamravesh-mcp"],
+      "env": {
+        "HAMRAVESH_API_KEY": "your-api-key",
+        "HAMRAVESH_ORG": "your-org-name"
+      }
+    }
+  }
+}
+```
+
+### Environment variables
+
+| Variable | Required | Description |
+|---|---|---|
+| `HAMRAVESH_API_KEY` | one of these | API key (recommended). |
+| `HAMRAVESH_EMAIL` + `HAMRAVESH_PASSWORD` | one of these | Email/password (JWT). `HAMRAVESH_OTP` if 2FA. |
+| `HAMRAVESH_ORG` | recommended | Default organization (e.g. `wgcup`); per-call overridable. |
+| `HAMRAVESH_BASE` | no | Defaults to `https://api.hamravesh.com`. |
+| `HAMRAVESH_ALLOW_WRITE` | no | `1` to enable write tools (default off). |
+| `HAMRAVESH_ALLOW_DELETE` | no | `1` to enable delete tools (default off). |
+
+### Tools
+
+**Read (always on):** `hamravesh_whoami`, `hamravesh_list_apps`, `hamravesh_get_app`, `hamravesh_app_containers`, `hamravesh_app_logs`, `hamravesh_app_manifests`, `hamravesh_app_builds`, `hamravesh_list_databases`, `hamravesh_list_registries`, `hamravesh_billing`, `hamravesh_list_apikeys`
+
+**Write (need `ALLOW_WRITE=1`):** `hamravesh_restart_app`, `hamravesh_redeploy_app`, `hamravesh_scale_app`, `hamravesh_set_app_enabled`, `hamravesh_update_app_envs`, `hamravesh_create_app`, `hamravesh_create_apikey`, `hamravesh_delete_app`/`hamravesh_delete_apikey` (need `ALLOW_DELETE=1`)
+
+**Generic:** `hamravesh_request` — any method/path (GET free; write/delete follow the flags).
+
+### Reference
+
+- [`ENDPOINTS.md`](ENDPOINTS.md) — categorized endpoint catalog.
+- [`WRITE-ENDPOINTS.md`](WRITE-ENDPOINTS.md) — request-body shapes for all 162 write endpoints.
+- [`LIVE-STATUS.md`](LIVE-STATUS.md) — live status of each endpoint with an admin account.
+- [`ENDPOINTS-RAW.txt`](ENDPOINTS-RAW.txt) — raw list of all 578 method+path pairs.
+
+### Develop
+
+```bash
+npm ci
+npm test        # network-free: checks tools + write guard
+```
+
+---
+
+## مجوز / License
+
+[MIT](./LICENSE) © محمد باختری — Mohammad Bakhtari