helipod-mcp 0.5.10 → 0.5.11

package/README.md

@@ -2,7 +2,7 @@
 
 Use [Helipod](https://helipod.io) from AI coding tools: deploy apps and databases, run VPS servers, buy domains and edit DNS, and send email, by asking in plain language.
 
-- **MCP server** (`helipod-mcp`): 229 tools over the Container, Database, VPS, Domain, Email, Account and AI APIs. Works in Claude Code, Codex, Cursor, VS Code, Windsurf, Claude Desktop and any MCP client.
+- **MCP server** (`helipod-mcp`): 238 tools over the Container, Database, VPS, Domain, Email, Account and AI APIs. Works in Claude Code, Codex, Cursor, VS Code, Windsurf, Claude Desktop and any MCP client.
 - **Skills** (`skills/`): step-by-step playbooks so the agent deploys, prices and confirms the way Helipod expects (price first, confirm before deleting, read build logs on failure).
 
 Step-by-step guides for each tool (Claude Code, Codex, Cursor, VS Code, Gemini CLI, opencode, Windsurf, Claude Desktop, Cline and others): **https://docs.helipod.io/docs/helipod/ai-agents**
@@ -193,10 +193,10 @@ Pick your agents when asked (or pass `-a codex cursor gemini-cli opencode -y`).
 |---|---|
 | Containers | projects and environments (create, rename, delete), shared project variables, services (create from image, Git or Dockerfile, rename), deploy, deployments and build logs, restart, variables, domains and their ports, scale, volumes (with resize), function code, secret files, logs, metrics, templates, multi-service stacks |
 | Databases | managed Postgres: create, connection string, branches per environment, compute settings, plan upgrades, usage, live stats, credit balance, tables, read-only queries, SQL classification and confirmed writes |
-| VPS | plans, create, rename, power, reinstall, password, login details, terminate, renew, upgrade options and upgrade, auto-renew, metrics, firewall, port forwarding, SSH keys and SSH on/off, snapshots, backups |
+| VPS | plans, create, rename, power, reinstall, password, login details, terminate, renew, upgrade options and upgrade (create, renew and upgrade each with a dry run), auto-renew, metrics, firewall, port forwarding, SSH keys and SSH on/off, snapshots, backups |
 | Domains | search, prices, owner details, register, transfer, renew (each with a dry run), DNS records, nameservers, child nameservers, WHOIS privacy |
 | Email | status, plan (buy, renew, change, inbox add-ons, with dry runs), send, sent log, sending domains, templates, contacts, segments, topics, broadcasts, suppressions, webhooks, inbox |
-| Account | wallet and transactions, invoices, monthly statements, notifications, project activity, support tickets |
+| Account | wallet and transactions, deposits (top-up payment links), invoices, monthly statements, notifications, project activity, support tickets |
 | AI | models and prices, balance, usage, metrics, AI keys (list, revoke), top-up and auto top-up |
 | Other | `helipod_api_get` to read any other documented endpoint (read only) |
 

package/dist/http.js

@@ -37903,6 +37903,38 @@ var accountTools = [
     input: { limit: limit2, offset },
     run: (a, api2) => api2.api("GET", "/account/wallet/transactions", { query: { limit: a.limit, offset: a.offset } })
   }),
+  defineTool({
+    name: "create_deposit",
+    title: "Create deposit (top-up)",
+    kind: "write",
+    description: `Create a wallet top-up of amount IDR (whole number, 10000-50000000) and its payment link. Nothing is charged: give the user paymentUrl to pay (QRIS or bank virtual account, listed in paymentMethods; the link lasts 3 hours); never try to pay it yourself. Limits: one unpaid deposit at a time (409 DEPOSIT_PENDING: details.deposit is the unpaid one, send its paymentUrl instead), 10 minutes between deposits (429 DEPOSIT_COOLDOWN, details.nextAllowedAt), 10 a day (429 DEPOSIT_DAILY_LIMIT). dryRun=true creates nothing and says whether it would be accepted now. Then follow it with get_deposit. ${ACCOUNT_KEY}`,
+    input: {
+      amount: exports_external.number().int().min(1e4).max(50000000).describe("IDR, whole number"),
+      dryRun: exports_external.boolean().optional().describe("true = only check (methods, whether it would be accepted now); nothing is created"),
+      idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key. Generated when omitted; pass the same value when retrying so only one deposit is created")
+    },
+    run: (a, api2) => api2.api("POST", "/account/deposits", {
+      body: { amount: a.amount },
+      query: { dryRun: a.dryRun ? "true" : undefined },
+      idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
+    })
+  }),
+  defineTool({
+    name: "get_deposit",
+    title: "Get deposit",
+    kind: "read",
+    description: `One deposit: status pending (paymentUrl to pay), paid (paidAt; the wallet was credited) or expired (not paid in time). ${ACCOUNT_KEY}`,
+    input: { depositId: uid2("Deposit") },
+    run: (a, api2) => api2.api("GET", `/account/deposits/${a.depositId}`)
+  }),
+  defineTool({
+    name: "list_deposits",
+    title: "List deposits",
+    kind: "read",
+    description: `Deposits (wallet top-ups), newest first, with status and amount. ${ACCOUNT_KEY}`,
+    input: { limit: limit2, offset },
+    run: (a, api2) => api2.api("GET", "/account/deposits", { query: { limit: a.limit, offset: a.offset } })
+  }),
   defineTool({
     name: "list_invoices",
     title: "List invoices",
@@ -38229,7 +38261,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.10";
+var VERSION = "0.5.11";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/dist/index.js

@@ -37048,6 +37048,38 @@ var accountTools = [
     input: { limit: limit2, offset },
     run: (a, api2) => api2.api("GET", "/account/wallet/transactions", { query: { limit: a.limit, offset: a.offset } })
   }),
+  defineTool({
+    name: "create_deposit",
+    title: "Create deposit (top-up)",
+    kind: "write",
+    description: `Create a wallet top-up of amount IDR (whole number, 10000-50000000) and its payment link. Nothing is charged: give the user paymentUrl to pay (QRIS or bank virtual account, listed in paymentMethods; the link lasts 3 hours); never try to pay it yourself. Limits: one unpaid deposit at a time (409 DEPOSIT_PENDING: details.deposit is the unpaid one, send its paymentUrl instead), 10 minutes between deposits (429 DEPOSIT_COOLDOWN, details.nextAllowedAt), 10 a day (429 DEPOSIT_DAILY_LIMIT). dryRun=true creates nothing and says whether it would be accepted now. Then follow it with get_deposit. ${ACCOUNT_KEY}`,
+    input: {
+      amount: exports_external.number().int().min(1e4).max(50000000).describe("IDR, whole number"),
+      dryRun: exports_external.boolean().optional().describe("true = only check (methods, whether it would be accepted now); nothing is created"),
+      idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key. Generated when omitted; pass the same value when retrying so only one deposit is created")
+    },
+    run: (a, api2) => api2.api("POST", "/account/deposits", {
+      body: { amount: a.amount },
+      query: { dryRun: a.dryRun ? "true" : undefined },
+      idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
+    })
+  }),
+  defineTool({
+    name: "get_deposit",
+    title: "Get deposit",
+    kind: "read",
+    description: `One deposit: status pending (paymentUrl to pay), paid (paidAt; the wallet was credited) or expired (not paid in time). ${ACCOUNT_KEY}`,
+    input: { depositId: uid2("Deposit") },
+    run: (a, api2) => api2.api("GET", `/account/deposits/${a.depositId}`)
+  }),
+  defineTool({
+    name: "list_deposits",
+    title: "List deposits",
+    kind: "read",
+    description: `Deposits (wallet top-ups), newest first, with status and amount. ${ACCOUNT_KEY}`,
+    input: { limit: limit2, offset },
+    run: (a, api2) => api2.api("GET", "/account/deposits", { query: { limit: a.limit, offset: a.offset } })
+  }),
   defineTool({
     name: "list_invoices",
     title: "List invoices",
@@ -37374,7 +37406,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.10";
+var VERSION = "0.5.11";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/dist/stdio.js

@@ -37155,6 +37155,38 @@ var accountTools = [
     input: { limit: limit2, offset },
     run: (a, api2) => api2.api("GET", "/account/wallet/transactions", { query: { limit: a.limit, offset: a.offset } })
   }),
+  defineTool({
+    name: "create_deposit",
+    title: "Create deposit (top-up)",
+    kind: "write",
+    description: `Create a wallet top-up of amount IDR (whole number, 10000-50000000) and its payment link. Nothing is charged: give the user paymentUrl to pay (QRIS or bank virtual account, listed in paymentMethods; the link lasts 3 hours); never try to pay it yourself. Limits: one unpaid deposit at a time (409 DEPOSIT_PENDING: details.deposit is the unpaid one, send its paymentUrl instead), 10 minutes between deposits (429 DEPOSIT_COOLDOWN, details.nextAllowedAt), 10 a day (429 DEPOSIT_DAILY_LIMIT). dryRun=true creates nothing and says whether it would be accepted now. Then follow it with get_deposit. ${ACCOUNT_KEY}`,
+    input: {
+      amount: exports_external.number().int().min(1e4).max(50000000).describe("IDR, whole number"),
+      dryRun: exports_external.boolean().optional().describe("true = only check (methods, whether it would be accepted now); nothing is created"),
+      idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key. Generated when omitted; pass the same value when retrying so only one deposit is created")
+    },
+    run: (a, api2) => api2.api("POST", "/account/deposits", {
+      body: { amount: a.amount },
+      query: { dryRun: a.dryRun ? "true" : undefined },
+      idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey)
+    })
+  }),
+  defineTool({
+    name: "get_deposit",
+    title: "Get deposit",
+    kind: "read",
+    description: `One deposit: status pending (paymentUrl to pay), paid (paidAt; the wallet was credited) or expired (not paid in time). ${ACCOUNT_KEY}`,
+    input: { depositId: uid2("Deposit") },
+    run: (a, api2) => api2.api("GET", `/account/deposits/${a.depositId}`)
+  }),
+  defineTool({
+    name: "list_deposits",
+    title: "List deposits",
+    kind: "read",
+    description: `Deposits (wallet top-ups), newest first, with status and amount. ${ACCOUNT_KEY}`,
+    input: { limit: limit2, offset },
+    run: (a, api2) => api2.api("GET", "/account/deposits", { query: { limit: a.limit, offset: a.offset } })
+  }),
   defineTool({
     name: "list_invoices",
     title: "List invoices",
@@ -37481,7 +37513,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.10";
+var VERSION = "0.5.11";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "helipod-mcp",
   "mcpName": "io.helipod/helipod",
-  "version": "0.5.10",
+  "version": "0.5.11",
   "description": "MCP server for Helipod: containers, databases, VPS, domains and email from Claude Code, Codex, Cursor and other AI tools.",
   "type": "module",
   "bin": {

package/skills/helipod/SKILL.md

@@ -5,7 +5,7 @@ description: Use when the user mentions Helipod (helipod.io) or wants to work wi
 
 # Helipod
 
-Helipod is a cloud platform in Indonesia: containers (deploy apps from Git, images or Dockerfiles), managed Postgres databases, VPS, domain registration and DNS, email sending, and an AI gateway. Everything is billed from a prepaid wallet in Rupiah (IDR).
+Helipod is a cloud platform in Indonesia: containers (deploy apps from Git, images or Dockerfiles), managed Postgres databases, VPS, domain registration and DNS, email sending, and an AI gateway. Everything is billed from a prepaid wallet in Rupiah (IDR). When the wallet is too low, `create_deposit` makes a top-up payment link: give the user its `paymentUrl` to pay (QRIS or bank virtual account) and check it with `get_deposit`; never pay it yourself.
 
 ## Access
 
@@ -19,7 +19,7 @@ Helipod is a cloud platform in Indonesia: containers (deploy apps from Git, imag
 
 ## Rules (always)
 
-1. **Money**: before anything that costs money (create/deploy/scale a service, create/renew/upgrade a VPS, register/renew/transfer a domain, deploy a template), get the price first (`dryRun: true` on container calls, `list_vps_plans` / `get_vps_renewal_options`, `domain_prices`), tell the user the amount in IDR, and wait for a clear yes.
+1. **Money**: before anything that costs money (create/deploy/scale a service, create/renew/upgrade a VPS, register/renew/transfer a domain, deploy a template), get the price first (`dryRun: true` on container, VPS and domain calls; `domain_prices` and `list_vps_plans` to compare), tell the user the amount in IDR, and wait for a clear yes.
 2. **Destructive**: before deleting a service/volume, terminating/reinstalling a VPS, rolling back a snapshot or replacing DNS records, say exactly what will be lost and wait for a clear yes.
 3. **Background work**: deploys and VPS actions are asynchronous. Poll (`get_deployment`, `get_vps`) every few seconds until they settle; on a failed deploy read `get_deployment_logs` and explain the cause.
 4. **Secrets**: never print passwords, API keys or secret variable values unless the user asks. Store app secrets as secret variables, never in code.

package/skills/helipod-vps/SKILL.md

@@ -11,9 +11,9 @@ Follow the `helipod` skill rules. A VPS is prepaid per period: creating one char
 
 1. `list_vps_plans` → present 2 or 3 fitting plans with CPU, RAM, disk and `effectiveMonthly` (IDR). Note `osTemplates`.
 2. `list_projects` → the project it belongs to (required).
-3. Confirm with the user: plan, OS, billing period (`monthly`, `3month`, `6month`, `yearly`) and the total price.
+3. `create_vps` with `dryRun: true` → the exact `price` and `walletBalanceAfter` (nothing is charged). Confirm with the user: plan, OS, billing period (`monthly`, `3month`, `6month`, `yearly`) and that price. Pass `autoRenew: false` if they want to renew by hand.
 4. Generate a strong password (12 to 30 chars, upper, lower, digit, one of `!@#$%^*`) unless the user gives one; do not print it back unless asked.
-5. `create_vps` → poll `get_vps` every 10 s until `running` (a few minutes) or `error` (`lastJobError` says why; a failed create is refunded).
+5. `create_vps` again without `dryRun`, with an `idempotencyKey` (reuse it if you retry) → poll `get_vps` every 10 s until `running` (a few minutes) or `error` (`lastJobError` says why; a failed create is refunded).
 6. Login: `get_vps_credentials` (Linux: `ssh root@<ip>`; Windows: RDP as Administrator, port 3389).
 
 ## Manage
@@ -22,7 +22,7 @@ Follow the `helipod` skill rules. A VPS is prepaid per period: creating one char
 - Firewall: `list_firewall_rules`, `add_firewall_rules` (e.g. `{ "Protocol": "TCP", "Port": "443", "CidrBlock": "0.0.0.0/0", "Action": "ACCEPT" }`), `remove_firewall_rules` by id. Never remove the SSH rule (port 22) without asking.
 - Snapshots: `create_snapshot` before risky changes; `apply_snapshot` rolls the disk back (data after it is lost: confirm).
 - Reinstall: `reinstall_vps` wipes the disk: confirm explicitly.
-- Billing: `get_vps_renewal_options` → `renew_vps`; `upgrade_vps` to a larger plan (charges the difference, restarts); `toggle_vps_auto_renew`.
+- Billing: `renew_vps` / `upgrade_vps` with `dryRun: true` first (price and wallet after), wait for the user's yes, then the real call with an `idempotencyKey`. `get_vps_renewal_options` lists every period; `upgrade_vps` charges the difference and restarts. Auto-renew: `set_vps_auto_renew` (on or off; `toggle_vps_auto_renew` flips it).
 - Terminate: `terminate_vps` is permanent, no refund: confirm explicitly.
 
 ## Migrate a server to Helipod (free)