helipod-mcp 0.5.1 → 0.5.2

package/README.md

@@ -198,7 +198,7 @@ Pick your agents when asked (or pass `-a codex cursor gemini-cli opencode -y`).
 | Email | status, plan (buy, renew, change, inbox add-ons, with dry runs), send, sent log, sending domains, templates, contacts, segments, topics, broadcasts, suppressions, webhooks, inbox |
 | Account | wallet and transactions, invoices, monthly statements, notifications, project activity, support tickets |
 | AI | models and prices, balance, usage, metrics, AI keys (list, revoke), top-up and auto top-up |
-| Other | `helipod_request` for any other documented endpoint |
+| Other | `helipod_api_get` to read any other documented endpoint (read only) |
 
 Each tool is marked read-only, write or destructive, so clients can ask before running the risky ones. Calls that cost money support a dry run, and the server tells the agent to show the price and wait for your OK.
 

package/dist/http.js

@@ -35673,7 +35673,7 @@ function register(server, api2, defs) {
       annotations: {
         title: d.title,
         readOnlyHint: d.kind === "read",
-        destructiveHint: d.kind === "destructive",
+        destructiveHint: d.kind !== "read",
         idempotentHint: d.kind === "read" || !!d.idempotent,
         openWorldHint: true
       }
@@ -37958,16 +37958,14 @@ var aiTools = [
 var API_PREFIXES = ["/containers/", "/databases", "/vps", "/backup/", "/domains", "/account/", "/ai/"];
 var generalTools = [
   defineTool({
-    name: "helipod_request",
-    title: "Call any Helipod API endpoint",
-    kind: "destructive",
-    description: "Call an endpoint that has no dedicated tool, as documented at https://docs.helipod.io. api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Prefer the dedicated tools; ask the user before any call that costs money or deletes something.",
+    name: "helipod_api_get",
+    title: "Read any Helipod API endpoint",
+    kind: "read",
+    description: "GET an endpoint of the Helipod public API that has no dedicated read tool (Helipod API reference: https://docs.helipod.io/docs/helipod). api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup/runs, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Read only: it never changes anything.",
     input: {
       api: exports_external.enum(["core", "email"]),
-      method: exports_external.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
-      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup"),
-      query: exports_external.record(exports_external.string(), exports_external.string()).optional(),
-      body: exports_external.record(exports_external.string(), exports_external.any()).optional()
+      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup/runs"),
+      query: exports_external.record(exports_external.string(), exports_external.string()).optional()
     },
     run: (a, api2) => {
       if (a.path.includes(".."))
@@ -37975,15 +37973,15 @@ var generalTools = [
       if (a.api === "core") {
         if (!API_PREFIXES.some((p) => a.path.startsWith(p)))
           throw new Error(`Core API paths start with one of: ${API_PREFIXES.join(", ")}`);
-        return api2.api(a.method, a.path, { query: a.query, body: a.body });
+        return api2.api("GET", a.path, { query: a.query });
       }
-      return api2.email(a.method, a.path, { query: a.query, body: a.body });
+      return api2.email("GET", a.path, { query: a.query });
     }
   })
 ];
 
 // src/server.ts
-var VERSION = "0.5.1";
+var VERSION = "0.5.2";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/dist/index.js

@@ -34818,7 +34818,7 @@ function register(server, api2, defs) {
       annotations: {
         title: d.title,
         readOnlyHint: d.kind === "read",
-        destructiveHint: d.kind === "destructive",
+        destructiveHint: d.kind !== "read",
         idempotentHint: d.kind === "read" || !!d.idempotent,
         openWorldHint: true
       }
@@ -37103,16 +37103,14 @@ var aiTools = [
 var API_PREFIXES = ["/containers/", "/databases", "/vps", "/backup/", "/domains", "/account/", "/ai/"];
 var generalTools = [
   defineTool({
-    name: "helipod_request",
-    title: "Call any Helipod API endpoint",
-    kind: "destructive",
-    description: "Call an endpoint that has no dedicated tool, as documented at https://docs.helipod.io. api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Prefer the dedicated tools; ask the user before any call that costs money or deletes something.",
+    name: "helipod_api_get",
+    title: "Read any Helipod API endpoint",
+    kind: "read",
+    description: "GET an endpoint of the Helipod public API that has no dedicated read tool (Helipod API reference: https://docs.helipod.io/docs/helipod). api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup/runs, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Read only: it never changes anything.",
     input: {
       api: exports_external.enum(["core", "email"]),
-      method: exports_external.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
-      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup"),
-      query: exports_external.record(exports_external.string(), exports_external.string()).optional(),
-      body: exports_external.record(exports_external.string(), exports_external.any()).optional()
+      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup/runs"),
+      query: exports_external.record(exports_external.string(), exports_external.string()).optional()
     },
     run: (a, api2) => {
       if (a.path.includes(".."))
@@ -37120,15 +37118,15 @@ var generalTools = [
       if (a.api === "core") {
         if (!API_PREFIXES.some((p) => a.path.startsWith(p)))
           throw new Error(`Core API paths start with one of: ${API_PREFIXES.join(", ")}`);
-        return api2.api(a.method, a.path, { query: a.query, body: a.body });
+        return api2.api("GET", a.path, { query: a.query });
       }
-      return api2.email(a.method, a.path, { query: a.query, body: a.body });
+      return api2.email("GET", a.path, { query: a.query });
     }
   })
 ];
 
 // src/server.ts
-var VERSION = "0.5.1";
+var VERSION = "0.5.2";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/dist/stdio.js

@@ -34925,7 +34925,7 @@ function register(server, api2, defs) {
       annotations: {
         title: d.title,
         readOnlyHint: d.kind === "read",
-        destructiveHint: d.kind === "destructive",
+        destructiveHint: d.kind !== "read",
         idempotentHint: d.kind === "read" || !!d.idempotent,
         openWorldHint: true
       }
@@ -37210,16 +37210,14 @@ var aiTools = [
 var API_PREFIXES = ["/containers/", "/databases", "/vps", "/backup/", "/domains", "/account/", "/ai/"];
 var generalTools = [
   defineTool({
-    name: "helipod_request",
-    title: "Call any Helipod API endpoint",
-    kind: "destructive",
-    description: "Call an endpoint that has no dedicated tool, as documented at https://docs.helipod.io. api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Prefer the dedicated tools; ask the user before any call that costs money or deletes something.",
+    name: "helipod_api_get",
+    title: "Read any Helipod API endpoint",
+    kind: "read",
+    description: "GET an endpoint of the Helipod public API that has no dedicated read tool (Helipod API reference: https://docs.helipod.io/docs/helipod). api=core for the Container, Database, VPS, Domain, Account and AI APIs (paths like /vps/{id}/backup/runs, /account/wallet, /ai/usage), api=email for the Email API (paths like /broadcasts). Read only: it never changes anything.",
     input: {
       api: exports_external.enum(["core", "email"]),
-      method: exports_external.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
-      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup"),
-      query: exports_external.record(exports_external.string(), exports_external.string()).optional(),
-      body: exports_external.record(exports_external.string(), exports_external.any()).optional()
+      path: exports_external.string().regex(/^\/[A-Za-z0-9/_.\-:]*$/).describe("Path after the base URL, e.g. /vps/abc/backup/runs"),
+      query: exports_external.record(exports_external.string(), exports_external.string()).optional()
     },
     run: (a, api2) => {
       if (a.path.includes(".."))
@@ -37227,15 +37225,15 @@ var generalTools = [
       if (a.api === "core") {
         if (!API_PREFIXES.some((p) => a.path.startsWith(p)))
           throw new Error(`Core API paths start with one of: ${API_PREFIXES.join(", ")}`);
-        return api2.api(a.method, a.path, { query: a.query, body: a.body });
+        return api2.api("GET", a.path, { query: a.query });
       }
-      return api2.email(a.method, a.path, { query: a.query, body: a.body });
+      return api2.email("GET", a.path, { query: a.query });
     }
   })
 ];
 
 // src/server.ts
-var VERSION = "0.5.1";
+var VERSION = "0.5.2";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "helipod-mcp",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "MCP server for Helipod: containers, databases, VPS, domains and email from Claude Code, Codex, Cursor and other AI tools.",
   "type": "module",
   "bin": {

package/skills/helipod-vps/SKILL.md

@@ -25,4 +25,4 @@ Follow the `helipod` skill rules. A VPS is prepaid per period: creating one char
 - Billing: `get_vps_renewal_options` → `renew_vps`; `upgrade_vps` to a larger plan (charges the difference, restarts); `toggle_vps_auto_renew`.
 - Terminate: `terminate_vps` is permanent, no refund: confirm explicitly.
 
-Backups (paid add-on) and anything else: `helipod_request` with paths from https://docs.helipod.io/docs/vps-api
+Backups (paid add-on) have dedicated tools; to read anything else use `helipod_api_get` with paths from https://docs.helipod.io/docs/vps-api