helipod-mcp 0.5.0 → 0.5.2

package/README.md

@@ -198,7 +198,7 @@ Pick your agents when asked (or pass `-a codex cursor gemini-cli opencode -y`).
 | Email | status, plan (buy, renew, change, inbox add-ons, with dry runs), send, sent log, sending domains, templates, contacts, segments, topics, broadcasts, suppressions, webhooks, inbox |
 | Account | wallet and transactions, invoices, monthly statements, notifications, project activity, support tickets |
 | AI | models and prices, balance, usage, metrics, AI keys (list, revoke), top-up and auto top-up |
-| Other | `helipod_request` for any other documented endpoint |
+| Other | `helipod_api_get` to read any other documented endpoint (read only) |
 
 Each tool is marked read-only, write or destructive, so clients can ask before running the risky ones. Calls that cost money support a dry run, and the server tells the agent to show the price and wait for your OK.
 

package/dist/http.js

@@ -35673,7 +35673,7 @@ function register(server, api2, defs) {
       annotations: {
         title: d.title,
         readOnlyHint: d.kind === "read",
-        destructiveHint: d.kind === "destructive",
+        destructiveHint: d.kind !== "read",
         idempotentHint: d.kind === "read" || !!d.idempotent,
         openWorldHint: true
       }
@@ -36861,7 +36861,7 @@ var emailTools = [
     name: "email_status",
     title: "Email status",
     kind: "read",
-    description: "Email service of the key's project: plan, usage today and this month, limits, counts.",
+    description: "Email service of the key's project: plan, usage today and this month, limits, counts. activated false = email is not set up yet: start it with buy_email_plan.",
     input: { projectId },
     run: (a, api2) => api2.email("GET", "/status", { project: a.projectId })
   }),
@@ -36885,7 +36885,7 @@ var emailTools = [
     name: "buy_email_plan",
     title: "Buy email plan",
     kind: "write",
-    description: `Start an email plan for the project (a free plan activates without charge). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
+    description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
     input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
@@ -37958,16 +37958,14 @@ var aiTools = [
 var API_PREFIXES = ["/containers/", "/databases", "/vps", "/backup/", "/domains", "/account/", "/ai/"];
 var generalTools = [
   defineTool({
-    name: "helipod_request",
-    title: "Call any Helipod API endpoint",
-    kind: "destructive",
-    description: "Call an endpoint that has no dedicated tool, as documented at https://docs.helipod.io. api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Prefer the dedicated tools; ask the user before any call that costs money or deletes something.",
+    name: "helipod_api_get",
+    title: "Read any Helipod API endpoint",
+    kind: "read",
+    description: "GET an endpoint of the Helipod public API that has no dedicated read tool (Helipod API reference: https://docs.helipod.io/docs/helipod). api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup/runs, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Read only: it never changes anything.",
     input: {
       api: exports_external.enum(["core", "email"]),
-      method: exports_external.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
-      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup"),
-      query: exports_external.record(exports_external.string(), exports_external.string()).optional(),
-      body: exports_external.record(exports_external.string(), exports_external.any()).optional()
+      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup/runs"),
+      query: exports_external.record(exports_external.string(), exports_external.string()).optional()
     },
     run: (a, api2) => {
       if (a.path.includes(".."))
@@ -37975,23 +37973,24 @@ var generalTools = [
       if (a.api === "core") {
         if (!API_PREFIXES.some((p) => a.path.startsWith(p)))
           throw new Error(`Core API paths start with one of: ${API_PREFIXES.join(", ")}`);
-        return api2.api(a.method, a.path, { query: a.query, body: a.body });
+        return api2.api("GET", a.path, { query: a.query });
       }
-      return api2.email(a.method, a.path, { query: a.query, body: a.body });
+      return api2.email("GET", a.path, { query: a.query });
     }
   })
 ];
 
 // src/server.ts
-var VERSION = "0.5.0";
+var VERSION = "0.5.2";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
 - Destructive tools (delete, terminate, reinstall, rollback, restore a backup, replace DNS, revoke a key, remove an SSH key or port forward, send a broadcast, execute_database_sql): confirm with the user and name what will be lost. Before execute_database_sql, run classify_database_sql.
+- Email: when a project has no email yet (email_status shows activated false) or its plan ended, start it with buy_email_plan (dryRun first; the FREE plan costs nothing, still confirm). That also sets email up for the project; then add and verify a sending domain.
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Deploys and VPS actions run in the background: poll get_deployment / get_vps until they settle; on a failed deploy read get_deployment_logs.
 - Never print secrets (passwords, secret variable values, secret files) unless the user asks for them. Domain owner details are personal data: use only what the user gave.
-- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key), 402 means plan limit or low balance.
+- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
 Docs: https://docs.helipod.io`;
 var ALL_TOOLS = [...containerTools, ...databaseTools, ...vpsTools, ...domainTools, ...emailTools, ...accountTools, ...aiTools, ...generalTools];
 function createHelipodServer(config2) {

package/dist/index.js

@@ -34818,7 +34818,7 @@ function register(server, api2, defs) {
       annotations: {
         title: d.title,
         readOnlyHint: d.kind === "read",
-        destructiveHint: d.kind === "destructive",
+        destructiveHint: d.kind !== "read",
         idempotentHint: d.kind === "read" || !!d.idempotent,
         openWorldHint: true
       }
@@ -36006,7 +36006,7 @@ var emailTools = [
     name: "email_status",
     title: "Email status",
     kind: "read",
-    description: "Email service of the key's project: plan, usage today and this month, limits, counts.",
+    description: "Email service of the key's project: plan, usage today and this month, limits, counts. activated false = email is not set up yet: start it with buy_email_plan.",
     input: { projectId },
     run: (a, api2) => api2.email("GET", "/status", { project: a.projectId })
   }),
@@ -36030,7 +36030,7 @@ var emailTools = [
     name: "buy_email_plan",
     title: "Buy email plan",
     kind: "write",
-    description: `Start an email plan for the project (a free plan activates without charge). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
+    description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
     input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
@@ -37103,16 +37103,14 @@ var aiTools = [
 var API_PREFIXES = ["/containers/", "/databases", "/vps", "/backup/", "/domains", "/account/", "/ai/"];
 var generalTools = [
   defineTool({
-    name: "helipod_request",
-    title: "Call any Helipod API endpoint",
-    kind: "destructive",
-    description: "Call an endpoint that has no dedicated tool, as documented at https://docs.helipod.io. api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Prefer the dedicated tools; ask the user before any call that costs money or deletes something.",
+    name: "helipod_api_get",
+    title: "Read any Helipod API endpoint",
+    kind: "read",
+    description: "GET an endpoint of the Helipod public API that has no dedicated read tool (Helipod API reference: https://docs.helipod.io/docs/helipod). api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup/runs, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Read only: it never changes anything.",
     input: {
       api: exports_external.enum(["core", "email"]),
-      method: exports_external.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
-      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup"),
-      query: exports_external.record(exports_external.string(), exports_external.string()).optional(),
-      body: exports_external.record(exports_external.string(), exports_external.any()).optional()
+      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup/runs"),
+      query: exports_external.record(exports_external.string(), exports_external.string()).optional()
     },
     run: (a, api2) => {
       if (a.path.includes(".."))
@@ -37120,23 +37118,24 @@ var generalTools = [
       if (a.api === "core") {
         if (!API_PREFIXES.some((p) => a.path.startsWith(p)))
           throw new Error(`Core API paths start with one of: ${API_PREFIXES.join(", ")}`);
-        return api2.api(a.method, a.path, { query: a.query, body: a.body });
+        return api2.api("GET", a.path, { query: a.query });
       }
-      return api2.email(a.method, a.path, { query: a.query, body: a.body });
+      return api2.email("GET", a.path, { query: a.query });
     }
   })
 ];
 
 // src/server.ts
-var VERSION = "0.5.0";
+var VERSION = "0.5.2";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
 - Destructive tools (delete, terminate, reinstall, rollback, restore a backup, replace DNS, revoke a key, remove an SSH key or port forward, send a broadcast, execute_database_sql): confirm with the user and name what will be lost. Before execute_database_sql, run classify_database_sql.
+- Email: when a project has no email yet (email_status shows activated false) or its plan ended, start it with buy_email_plan (dryRun first; the FREE plan costs nothing, still confirm). That also sets email up for the project; then add and verify a sending domain.
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Deploys and VPS actions run in the background: poll get_deployment / get_vps until they settle; on a failed deploy read get_deployment_logs.
 - Never print secrets (passwords, secret variable values, secret files) unless the user asks for them. Domain owner details are personal data: use only what the user gave.
-- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key), 402 means plan limit or low balance.
+- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
 Docs: https://docs.helipod.io`;
 var ALL_TOOLS = [...containerTools, ...databaseTools, ...vpsTools, ...domainTools, ...emailTools, ...accountTools, ...aiTools, ...generalTools];
 function createHelipodServer(config2) {

package/dist/stdio.js

@@ -34925,7 +34925,7 @@ function register(server, api2, defs) {
       annotations: {
         title: d.title,
         readOnlyHint: d.kind === "read",
-        destructiveHint: d.kind === "destructive",
+        destructiveHint: d.kind !== "read",
         idempotentHint: d.kind === "read" || !!d.idempotent,
         openWorldHint: true
       }
@@ -36113,7 +36113,7 @@ var emailTools = [
     name: "email_status",
     title: "Email status",
     kind: "read",
-    description: "Email service of the key's project: plan, usage today and this month, limits, counts.",
+    description: "Email service of the key's project: plan, usage today and this month, limits, counts. activated false = email is not set up yet: start it with buy_email_plan.",
     input: { projectId },
     run: (a, api2) => api2.email("GET", "/status", { project: a.projectId })
   }),
@@ -36137,7 +36137,7 @@ var emailTools = [
     name: "buy_email_plan",
     title: "Buy email plan",
     kind: "write",
-    description: `Start an email plan for the project (a free plan activates without charge). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
+    description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
     input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
@@ -37210,16 +37210,14 @@ var aiTools = [
 var API_PREFIXES = ["/containers/", "/databases", "/vps", "/backup/", "/domains", "/account/", "/ai/"];
 var generalTools = [
   defineTool({
-    name: "helipod_request",
-    title: "Call any Helipod API endpoint",
-    kind: "destructive",
-    description: "Call an endpoint that has no dedicated tool, as documented at https://docs.helipod.io. api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Prefer the dedicated tools; ask the user before any call that costs money or deletes something.",
+    name: "helipod_api_get",
+    title: "Read any Helipod API endpoint",
+    kind: "read",
+    description: "GET an endpoint of the Helipod public API that has no dedicated read tool (Helipod API reference: https://docs.helipod.io/docs/helipod). api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup/runs, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Read only: it never changes anything.",
     input: {
       api: exports_external.enum(["core", "email"]),
-      method: exports_external.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
-      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup"),
-      query: exports_external.record(exports_external.string(), exports_external.string()).optional(),
-      body: exports_external.record(exports_external.string(), exports_external.any()).optional()
+      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup/runs"),
+      query: exports_external.record(exports_external.string(), exports_external.string()).optional()
     },
     run: (a, api2) => {
       if (a.path.includes(".."))
@@ -37227,23 +37225,24 @@ var generalTools = [
       if (a.api === "core") {
         if (!API_PREFIXES.some((p) => a.path.startsWith(p)))
           throw new Error(`Core API paths start with one of: ${API_PREFIXES.join(", ")}`);
-        return api2.api(a.method, a.path, { query: a.query, body: a.body });
+        return api2.api("GET", a.path, { query: a.query });
       }
-      return api2.email(a.method, a.path, { query: a.query, body: a.body });
+      return api2.email("GET", a.path, { query: a.query });
     }
   })
 ];
 
 // src/server.ts
-var VERSION = "0.5.0";
+var VERSION = "0.5.2";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
 - Destructive tools (delete, terminate, reinstall, rollback, restore a backup, replace DNS, revoke a key, remove an SSH key or port forward, send a broadcast, execute_database_sql): confirm with the user and name what will be lost. Before execute_database_sql, run classify_database_sql.
+- Email: when a project has no email yet (email_status shows activated false) or its plan ended, start it with buy_email_plan (dryRun first; the FREE plan costs nothing, still confirm). That also sets email up for the project; then add and verify a sending domain.
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Deploys and VPS actions run in the background: poll get_deployment / get_vps until they settle; on a failed deploy read get_deployment_logs.
 - Never print secrets (passwords, secret variable values, secret files) unless the user asks for them. Domain owner details are personal data: use only what the user gave.
-- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key), 402 means plan limit or low balance.
+- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
 Docs: https://docs.helipod.io`;
 var ALL_TOOLS = [...containerTools, ...databaseTools, ...vpsTools, ...domainTools, ...emailTools, ...accountTools, ...aiTools, ...generalTools];
 function createHelipodServer(config2) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "helipod-mcp",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "MCP server for Helipod: containers, databases, VPS, domains and email from Claude Code, Codex, Cursor and other AI tools.",
   "type": "module",
   "bin": {

package/skills/helipod-vps/SKILL.md

@@ -25,4 +25,4 @@ Follow the `helipod` skill rules. A VPS is prepaid per period: creating one char
 - Billing: `get_vps_renewal_options` → `renew_vps`; `upgrade_vps` to a larger plan (charges the difference, restarts); `toggle_vps_auto_renew`.
 - Terminate: `terminate_vps` is permanent, no refund: confirm explicitly.
 
-Backups (paid add-on) and anything else: `helipod_request` with paths from https://docs.helipod.io/docs/vps-api
+Backups (paid add-on) have dedicated tools; to read anything else use `helipod_api_get` with paths from https://docs.helipod.io/docs/vps-api