hostinger-api-mcp 0.1.43 → 0.2.2

package/src/core/runtime.ts

@@ -12,6 +12,7 @@ import {
   CallToolRequestSchema,
   Tool,
 } from "@modelcontextprotocol/sdk/types.js";
+import { OAuthProvider, getEnvToken } from "./oauth.js";
 import axios,{ AxiosRequestConfig, AxiosError, AxiosResponse } from "axios";
 import * as tus from "tus-js-client";
 import fs from "fs";
@@ -46,7 +47,7 @@ const SECURITY_SCHEMES: Record<string, SecurityScheme> = {
 
 /**
  * MCP Server for Hostinger API
- * Generated from OpenAPI spec version 0.11.7
+ * Generated from OpenAPI spec version 0.12.0
  */
 class MCPServer {
   private readonly name: string;
@@ -57,6 +58,7 @@ class MCPServer {
   private debug: boolean;
   private baseUrl: string;
   private headers: Record<string, string>;
+  private oauth: OAuthProvider;
 
   constructor({ name, version, tools }: { name: string; version: string; tools: OpenApiTool[] }) {
     // Initialize class properties
@@ -66,6 +68,7 @@ class MCPServer {
     this.debug = process.env.DEBUG === "true";
     this.baseUrl = process.env.API_BASE_URL || "https://developers.hostinger.com";
     this.headers = this.parseHeaders(process.env.API_HEADERS || "");
+    this.oauth = new OAuthProvider();
 
     // Initialize tools map - do this before creating server
     this.initializeTools();
@@ -108,6 +111,14 @@ class MCPServer {
     return headers;
   }
 
+  /**
+   * Resolve a bearer token. HOSTINGER_API_TOKEN / API_TOKEN env vars take
+   * precedence; otherwise the OAuth provider handles login/refresh transparently.
+   */
+  private async getAuthToken(): Promise<string> {
+    return await this.oauth.getAccessToken();
+  }
+
   /**
    * Initialize tools map from OpenAPI spec
    * This runs before the server is connected, so don't log here
@@ -228,10 +239,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/websites?domain=${encodeURIComponent(domain)}`, baseUrl).toString();
     
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
       
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -287,10 +295,7 @@ class MCPServer {
     const url = new URL('api/hosting/v1/files/upload-urls', baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'post',
@@ -490,10 +495,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/domains/${domain}/is-empty`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -545,10 +547,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/wordpress/import`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'post',
@@ -773,10 +772,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/wordpress/plugins/deploy`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'post',
@@ -1007,10 +1003,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/wordpress/themes/deploy`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'post',
@@ -1244,10 +1237,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/nodejs/builds/settings/from-archive?archive_path=${encodeURIComponent(archiveBasename)}`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -1293,10 +1283,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/nodejs/builds`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const archiveBasename = path.basename(archivePath);
       const buildData = {
@@ -1544,10 +1531,7 @@ class MCPServer {
     const url = new URL(`api/hosting/v1/accounts/${username}/websites/${domain}/deploy`, baseUrl).toString();
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const archiveBasename = path.basename(archivePath);
       const deployData = {
@@ -1719,10 +1703,7 @@ class MCPServer {
     const fullUrl = queryParams ? `${url}?${queryParams}` : url;
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -1832,10 +1813,7 @@ class MCPServer {
     const fullUrl = queryParams ? `${url}?${queryParams}` : url;
 
     try {
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN'];
-      if (!bearerToken) {
-        throw new Error('API_TOKEN environment variable not found');
-      }
+      const bearerToken = await this.getAuthToken();
 
       const config: AxiosRequestConfig = {
         method: 'get',
@@ -1946,11 +1924,10 @@ class MCPServer {
         }
       };
      
-      const bearerToken = process.env['API_TOKEN'] || process.env['APITOKEN']; // APITOKEN for backwards compatibility
-      if (bearerToken && config.headers) {
+      const envToken = getEnvToken();
+      let bearerToken = await this.getAuthToken();
+      if (config.headers) {
         config.headers['Authorization'] = `Bearer ${bearerToken}`;
-      } else {
-        this.log('error', `Bearer Token environment variable not found: API_TOKEN`);
       }
 
       // Add parameters based on request method
@@ -1973,9 +1950,23 @@ class MCPServer {
       });
 
       // Execute the request
-      const response = await axios(config);
+      let response = await axios(config);
       this.log('debug', `Response status: ${response.status}`);
 
+      // Reactive token recovery: a 401 means the bearer was rejected even
+      // though our local expiry said it was fine (e.g. revoked, account
+      // changed, clock skew). Force a re-auth via refresh-or-login and retry
+      // once. Skipped for the env-token path — nothing to refresh.
+      if (response.status === 401 && !envToken) {
+        this.log('info', 'API returned 401; reauthenticating and retrying once');
+        bearerToken = await this.oauth.reauthenticate();
+        if (config.headers) {
+          config.headers['Authorization'] = `Bearer ${bearerToken}`;
+        }
+        response = await axios(config);
+        this.log('debug', `Retry response status: ${response.status}`);
+      }
+
       return response.data;
 
     } catch (error) {
@@ -2113,7 +2104,7 @@ class MCPServer {
 export async function startServer({ name, version, tools }: { name: string; version: string; tools: OpenApiTool[] }): Promise<void> {
   const argv = minimist(process.argv.slice(2), {
     string: ['host'],
-    boolean: ['stdio', 'http', 'help'],
+    boolean: ['stdio', 'http', 'help', 'login', 'logout'],
     default: { host: '127.0.0.1', port: 8100, stdio: true }
   });
   if (argv.help) {
@@ -2121,17 +2112,45 @@ export async function startServer({ name, version, tools }: { name: string; vers
       ${name}
       Usage: ${name} [options]
       Options:
-        --http           Use HTTP streaming transport
-        --stdio          Use standard input/output transport (default)
-        --host <host>    Host to bind to (default: 127.0.0.1)
-        --port <port>    Port to bind to (default: 8100)
-        --help           Show this help message
+        --http               Use HTTP streaming transport (requires HOSTINGER_API_TOKEN env var)
+        --stdio              Use standard input/output transport (default)
+        --host <host>        Host to bind to (default: 127.0.0.1)
+        --port <port>        Port to bind to (default: 8100)
+        --login              Run OAuth sign-in flow and exit
+        --logout             Revoke stored OAuth credentials and exit
+        --help               Show this help message
       Environment Variables:
-        API_TOKEN        Your Hostinger API token (required)
-        DEBUG            Enable debug logging (true/false)
+        HOSTINGER_API_TOKEN  Hostinger API token (overrides OAuth when set)
+        API_TOKEN            Deprecated alias for HOSTINGER_API_TOKEN (will be removed in a future version)
+        OAUTH_ISSUER         OAuth server base URL (default: https://auth.hostinger.com)
+        DEBUG                Enable debug logging (true/false)
     `);
     process.exit(0);
   }
+
+  if (argv.login) {
+    const provider = new OAuthProvider();
+    console.error('[OAuth] Starting sign-in flow...');
+    await provider.login();
+    console.error('[OAuth] Sign-in successful. Credentials stored.');
+    process.exit(0);
+  }
+
+  if (argv.logout) {
+    const provider = new OAuthProvider();
+    await provider.logout();
+    console.error('[OAuth] Signed out. Stored credentials revoked and cleared.');
+    process.exit(0);
+  }
+
+  if (argv.http) {
+    const envToken = getEnvToken();
+    if (!envToken) {
+      console.error('[Error] HTTP transport requires the HOSTINGER_API_TOKEN environment variable. OAuth sign-in is only supported in stdio mode.');
+      process.exit(1);
+    }
+  }
+
   const server = new MCPServer({ name, version, tools });
   if (argv.http) {
     await server.startHttp(argv.host, argv.port);

package/src/core/tools/all.js

@@ -1570,6 +1570,10 @@ export default [
           "type": "string",
           "description": "surname parameter"
         },
+        "phone": {
+          "type": "string",
+          "description": "Phone number in E.164 format (leading \"+\" then 7-15 digits)"
+        },
         "note": {
           "type": "string",
           "description": "note parameter"
@@ -1787,6 +1791,10 @@ export default [
           "type": "string",
           "description": "surname parameter"
         },
+        "phone": {
+          "type": "string",
+          "description": "Phone number in E.164 format (leading \"+\" then 7-15 digits)"
+        },
         "note": {
           "type": "string",
           "description": "note parameter"

package/src/core/tools/all.ts

@@ -1580,6 +1580,10 @@ const tools: OpenApiTool[] = [
           "type": "string",
           "description": "surname parameter"
         },
+        "phone": {
+          "type": "string",
+          "description": "Phone number in E.164 format (leading \"+\" then 7-15 digits)"
+        },
         "note": {
           "type": "string",
           "description": "note parameter"
@@ -1797,6 +1801,10 @@ const tools: OpenApiTool[] = [
           "type": "string",
           "description": "surname parameter"
         },
+        "phone": {
+          "type": "string",
+          "description": "Phone number in E.164 format (leading \"+\" then 7-15 digits)"
+        },
         "note": {
           "type": "string",
           "description": "note parameter"

package/src/core/tools/reach.js

@@ -95,6 +95,10 @@ export default [
           "type": "string",
           "description": "surname parameter"
         },
+        "phone": {
+          "type": "string",
+          "description": "Phone number in E.164 format (leading \"+\" then 7-15 digits)"
+        },
         "note": {
           "type": "string",
           "description": "note parameter"
@@ -312,6 +316,10 @@ export default [
           "type": "string",
           "description": "surname parameter"
         },
+        "phone": {
+          "type": "string",
+          "description": "Phone number in E.164 format (leading \"+\" then 7-15 digits)"
+        },
         "note": {
           "type": "string",
           "description": "note parameter"

package/src/core/tools/reach.ts

@@ -105,6 +105,10 @@ const tools: OpenApiTool[] = [
           "type": "string",
           "description": "surname parameter"
         },
+        "phone": {
+          "type": "string",
+          "description": "Phone number in E.164 format (leading \"+\" then 7-15 digits)"
+        },
         "note": {
           "type": "string",
           "description": "note parameter"
@@ -322,6 +326,10 @@ const tools: OpenApiTool[] = [
           "type": "string",
           "description": "surname parameter"
         },
+        "phone": {
+          "type": "string",
+          "description": "Phone number in E.164 format (leading \"+\" then 7-15 digits)"
+        },
         "note": {
           "type": "string",
           "description": "note parameter"

package/src/servers/all.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/all.js';
 
-startServer({ name: 'hostinger-api-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-api-mcp', version: '0.2.2', tools });

package/src/servers/all.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/all.js';
 
-startServer({ name: 'hostinger-api-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-api-mcp', version: '0.2.2', tools });

package/src/servers/billing.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/billing.js';
 
-startServer({ name: 'hostinger-billing-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-billing-mcp', version: '0.2.2', tools });

package/src/servers/billing.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/billing.js';
 
-startServer({ name: 'hostinger-billing-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-billing-mcp', version: '0.2.2', tools });

package/src/servers/dns.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/dns.js';
 
-startServer({ name: 'hostinger-dns-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-dns-mcp', version: '0.2.2', tools });

package/src/servers/dns.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/dns.js';
 
-startServer({ name: 'hostinger-dns-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-dns-mcp', version: '0.2.2', tools });

package/src/servers/domains.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/domains.js';
 
-startServer({ name: 'hostinger-domains-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-domains-mcp', version: '0.2.2', tools });

package/src/servers/domains.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/domains.js';
 
-startServer({ name: 'hostinger-domains-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-domains-mcp', version: '0.2.2', tools });

package/src/servers/hosting.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/hosting.js';
 
-startServer({ name: 'hostinger-hosting-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-hosting-mcp', version: '0.2.2', tools });

package/src/servers/hosting.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/hosting.js';
 
-startServer({ name: 'hostinger-hosting-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-hosting-mcp', version: '0.2.2', tools });

package/src/servers/reach.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/reach.js';
 
-startServer({ name: 'hostinger-reach-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-reach-mcp', version: '0.2.2', tools });

package/src/servers/reach.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/reach.js';
 
-startServer({ name: 'hostinger-reach-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-reach-mcp', version: '0.2.2', tools });

package/src/servers/vps.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/vps.js';
 
-startServer({ name: 'hostinger-vps-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-vps-mcp', version: '0.2.2', tools });

package/src/servers/vps.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/vps.js';
 
-startServer({ name: 'hostinger-vps-mcp', version: '0.1.43', tools });
+startServer({ name: 'hostinger-vps-mcp', version: '0.2.2', tools });

package/types.d.ts

@@ -1019,6 +1019,10 @@ the contact will be created with a pending status and a confirmation email will
        * surname parameter
        */
       surname?: string;
+      /**
+       * Phone number in E.164 format (leading "+" then 7-15 digits)
+       */
+      phone?: string;
       /**
        * note parameter
        */
@@ -1129,6 +1133,10 @@ and a confirmation email will be sent.
        * surname parameter
        */
       surname?: string;
+      /**
+       * Phone number in E.164 format (leading "+" then 7-15 digits)
+       */
+      phone?: string;
       /**
        * note parameter
        */