hostinger-api-mcp 0.1.42 → 0.2.1

package/src/core/runtime.ts

@@ -12,6 +12,7 @@ import {
   CallToolRequestSchema,
   Tool,
 } from "@modelcontextprotocol/sdk/types.js";
+import { OAuthProvider } from "./oauth.js";
 import axios,{ AxiosRequestConfig, AxiosError, AxiosResponse } from "axios";
 import * as tus from "tus-js-client";
 import fs from "fs";
@@ -57,6 +58,7 @@ class MCPServer {
   private debug: boolean;
   private baseUrl: string;
   private headers: Record<string, string>;
+  private oauth: OAuthProvider;
 
   constructor({ name, version, tools }: { name: string; version: string; tools: OpenApiTool[] }) {
     // Initialize class properties
@@ -66,6 +68,7 @@ class MCPServer {
     this.debug = process.env.DEBUG === "true";
     this.baseUrl = process.env.API_BASE_URL || "https://developers.hostinger.com";
     this.headers = this.parseHeaders(process.env.API_HEADERS || "");
+    this.oauth = new OAuthProvider();
 
     // Initialize tools map - do this before creating server
     this.initializeTools();
@@ -98,12 +101,24 @@ class MCPServer {
         if (key && value) headers[key.trim()] = value.trim();
       });
     }
-    
-    headers['User-Agent'] = `hostinger-mcp-server/${this.version}`;
-    
+
+    const extensionUa = String(process.env.USER_AGENT ?? "")
+      .replace(/\r|\n/g, "")
+      .trim();
+    const base = `hostinger-mcp-server/${this.version}`;
+    headers["User-Agent"] = extensionUa ? `${base} (${extensionUa})` : base;
+
     return headers;
   }
 
+  /**
+   * Resolve a bearer token. API_TOKEN env var takes precedence; otherwise the
+   * OAuth provider handles login/refresh transparently.
+   */
+  private async getAuthToken(): Promise<string> {
+    return await this.oauth.getAccessToken();
+  }
+
   /**
    * Initialize tools map from OpenAPI spec
    * This runs before the server is connected, so don't log here
@@ -224,10 +239,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/websites?domain=${encodeURIComponent(domain)}`, baseUrl).toString();
     
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
       
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -283,10 +295,7 @@ class MCPServer {
     const url = new URL('api/hosting/v1/files/upload-urls', baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'post',
@@ -486,10 +495,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/domains/${domain}/is-empty`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -541,10 +547,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/wordpress/import`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'post',
@@ -769,10 +772,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/wordpress/plugins/deploy`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'post',
@@ -1003,10 +1003,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/wordpress/themes/deploy`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'post',
@@ -1240,10 +1237,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/nodejs/builds/settings/from-archive?archive_path=${encodeURIComponent(archiveBasename)}`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -1289,10 +1283,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/nodejs/builds`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const archiveBasename = path.basename(archivePath);
       const buildData = {
@@ -1540,10 +1531,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/deploy`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const archiveBasename = path.basename(archivePath);
       const deployData = {
@@ -1715,10 +1703,7 @@ class MCPServer {
     const fullUrl = queryParams ? `${url}?${queryParams}` : url;
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -1828,10 +1813,7 @@ class MCPServer {
     const fullUrl = queryParams ? `${url}?${queryParams}` : url;
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -1942,11 +1924,10 @@ class MCPServer {
         }
       };
      
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN']; // APITOKEN for backwards compatibility
-      if (bearerToken && config.headers) {
+      const envToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
+      let bearerToken = await this.getAuthToken();
+      if (config.headers) {
         config.headers['Authorization'] = `Bearer ${bearerToken}`;
-      } else {
-        this.log('error', `Bearer Token environment variable not found: API_TOKEN`);
       }
 
       // Add parameters based on request method
@@ -1969,9 +1950,23 @@ class MCPServer {
       });
 
       // Execute the request
-      const response = await axios(config);
+      let response = await axios(config);
       this.log('debug', `Response status: ${response.status}`);
 
+      // Reactive token recovery: a 401 means the bearer was rejected even
+      // though our local expiry said it was fine (e.g. revoked, account
+      // changed, clock skew). Force a re-auth via refresh-or-login and retry
+      // once. Skipped for the env-token path — nothing to refresh.
+      if (response.status === 401 && !envToken) {
+        this.log('info', 'API returned 401; reauthenticating and retrying once');
+        bearerToken = await this.oauth.reauthenticate();
+        if (config.headers) {
+          config.headers['Authorization'] = `Bearer ${bearerToken}`;
+        }
+        response = await axios(config);
+        this.log('debug', `Retry response status: ${response.status}`);
+      }
+
       return response.data;
 
     } catch (error) {
@@ -2109,7 +2104,7 @@ class MCPServer {
 export async function startServer({ name, version, tools }: { name: string; version: string; tools: OpenApiTool[] }): Promise<void> {
   const argv = minimist(process.argv.slice(2), {
     string: ['host'],
-    boolean: ['stdio', 'http', 'help'],
+    boolean: ['stdio', 'http', 'help', 'login', 'logout'],
     default: { host: '127.0.0.1', port: 8100, stdio: true }
   });
   if (argv.help) {
@@ -2117,17 +2112,44 @@ export async function startServer({ name, version, tools }: { name: string; vers
       ${name}
       Usage: ${name} [options]
       Options:
-        --http           Use HTTP streaming transport
+        --http           Use HTTP streaming transport (requires API_TOKEN env var)
         --stdio          Use standard input/output transport (default)
         --host <host>    Host to bind to (default: 127.0.0.1)
         --port <port>    Port to bind to (default: 8100)
+        --login          Run OAuth sign-in flow and exit
+        --logout         Revoke stored OAuth credentials and exit
         --help           Show this help message
       Environment Variables:
-        API_TOKEN        Your Hostinger API token (required)
+        API_TOKEN        Hostinger API token (overrides OAuth when set)
+        OAUTH_ISSUER     OAuth server base URL (default: https://auth.hostinger.com)
         DEBUG            Enable debug logging (true/false)
     `);
     process.exit(0);
   }
+
+  if (argv.login) {
+    const provider = new OAuthProvider();
+    console.error('[OAuth] Starting sign-in flow...');
+    await provider.login();
+    console.error('[OAuth] Sign-in successful. Credentials stored.');
+    process.exit(0);
+  }
+
+  if (argv.logout) {
+    const provider = new OAuthProvider();
+    await provider.logout();
+    console.error('[OAuth] Signed out. Stored credentials revoked and cleared.');
+    process.exit(0);
+  }
+
+  if (argv.http) {
+    const envToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
+    if (!envToken) {
+      console.error('[Error] HTTP transport requires the API_TOKEN environment variable. OAuth sign-in is only supported in stdio mode.');
+      process.exit(1);
+    }
+  }
+
   const server = new MCPServer({ name, version, tools });
   if (argv.http) {
     await server.startHttp(argv.host, argv.port);

package/src/servers/all.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/all.js';
 
-startServer({ name: 'hostinger-api-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-api-mcp', version: '0.2.1', tools });

package/src/servers/all.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/all.js';
 
-startServer({ name: 'hostinger-api-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-api-mcp', version: '0.2.1', tools });

package/src/servers/billing.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/billing.js';
 
-startServer({ name: 'hostinger-billing-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-billing-mcp', version: '0.2.1', tools });

package/src/servers/billing.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/billing.js';
 
-startServer({ name: 'hostinger-billing-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-billing-mcp', version: '0.2.1', tools });

package/src/servers/dns.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/dns.js';
 
-startServer({ name: 'hostinger-dns-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-dns-mcp', version: '0.2.1', tools });

package/src/servers/dns.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/dns.js';
 
-startServer({ name: 'hostinger-dns-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-dns-mcp', version: '0.2.1', tools });

package/src/servers/domains.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/domains.js';
 
-startServer({ name: 'hostinger-domains-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-domains-mcp', version: '0.2.1', tools });

package/src/servers/domains.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/domains.js';
 
-startServer({ name: 'hostinger-domains-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-domains-mcp', version: '0.2.1', tools });

package/src/servers/hosting.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/hosting.js';
 
-startServer({ name: 'hostinger-hosting-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-hosting-mcp', version: '0.2.1', tools });

package/src/servers/hosting.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/hosting.js';
 
-startServer({ name: 'hostinger-hosting-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-hosting-mcp', version: '0.2.1', tools });

package/src/servers/reach.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/reach.js';
 
-startServer({ name: 'hostinger-reach-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-reach-mcp', version: '0.2.1', tools });

package/src/servers/reach.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/reach.js';
 
-startServer({ name: 'hostinger-reach-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-reach-mcp', version: '0.2.1', tools });

package/src/servers/vps.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/vps.js';
 
-startServer({ name: 'hostinger-vps-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-vps-mcp', version: '0.2.1', tools });

package/src/servers/vps.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/vps.js';
 
-startServer({ name: 'hostinger-vps-mcp', version: '0.1.42', tools });
+startServer({ name: 'hostinger-vps-mcp', version: '0.2.1', tools });