hostinger-api-mcp 3.22.0 → 3.22.1

package/CHANGELOG.md

@@ -4,6 +4,12 @@ Generated at release time from the diff between the previous and current
 build. Tool changes are listed individually; everything else is summarised
 by area.
 
+## v3.22.1 — 2026-10-29
+
+### Also in this release
+
+- OAuth sign-in flow: `src/core/oauth.js`, `src/core/oauth.ts`
+
 ## v3.22.0 — 2026-10-29
 
 ### Also in this release

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "hostinger-api-mcp",
-  "version": "3.22.0",
+  "version": "3.22.1",
   "description": "Hostinger API — manage domains, DNS, hosting, VPS, billing and more from Gemini CLI.",
   "mcpServers": {
     "hostinger": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hostinger-api-mcp",
-  "version": "3.22.0",
+  "version": "3.22.1",
   "mcpName": "io.github.hostinger/hostinger-api-mcp",
   "description": "MCP server for Hostinger API",
   "repository": {

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/hostinger/api-mcp-server",
     "source": "github"
   },
-  "version": "3.22.0",
+  "version": "3.22.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@hostinger/mcp",
-      "version": "3.22.0",
+      "version": "3.22.1",
       "transport": {
         "type": "stdio"
       },

package/src/core/oauth.js

@@ -12,16 +12,6 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const SUCCESS_HTML = readFileSync(path.join(__dirname, "oauth-success.html"), "utf8");
 const ERROR_HTML_TEMPLATE = readFileSync(path.join(__dirname, "oauth-error.html"), "utf8");
 
-function escapeHtml(s) {
-  return String(s).replace(/[&<>"']/g, (ch) => ({
-    "&": "&amp;",
-    "<": "&lt;",
-    ">": "&gt;",
-    '"': "&quot;",
-    "'": "&#39;",
-  })[ch]);
-}
-
 const DEFAULT_ISSUER = "https://auth.hostinger.com";
 const REGISTER_PATH = "/api/external/v1/oauth-server/register";
 const AUTHORIZE_PATH = "/api/external/v1/oauth-server/authorize";
@@ -29,6 +19,16 @@ const TOKEN_PATH = "/api/external/v1/oauth-server/token";
 const REVOKE_PATH = "/api/external/v1/oauth-server/token/revoke";
 const CLIENT_NAME = "hostinger-mcp";
 const CALLBACK_PATH = "/oauth/callback";
+// RFC 6749 §4.1.2.1 — anything else in ?error= is reported as unknown_error
+const OAUTH_ERROR_CODES = new Set([
+  "invalid_request",
+  "unauthorized_client",
+  "access_denied",
+  "unsupported_response_type",
+  "invalid_scope",
+  "server_error",
+  "temporarily_unavailable",
+]);
 const CREDENTIALS_DIR_NAME = "hostinger-mcp";
 const CREDENTIALS_FILE_NAME = "credentials.json";
 const EXPIRY_BUFFER_SECONDS = 60;
@@ -349,22 +349,27 @@ export class OAuthProvider {
         const state = url.searchParams.get("state");
         const error = url.searchParams.get("error");
 
-        const body = error
-          ? ERROR_HTML_TEMPLATE.replace("{{error}}", escapeHtml(error))
+        if (state !== expectedState) {
+          res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+          res.end(ERROR_HTML_TEMPLATE.replace("{{error}}", "invalid_state"));
+          return;
+        }
+
+        const oauthError =
+          error && (OAUTH_ERROR_CODES.has(error) ? error : "unknown_error");
+        const body = oauthError
+          ? ERROR_HTML_TEMPLATE.replace("{{error}}", oauthError)
           : SUCCESS_HTML;
         res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
         res.end(body);
 
         setImmediate(() => server.close());
 
-        if (error) {
+        if (oauthError) {
           return reject(
-            new Error(`OAuth error from authorization server: ${error}`),
+            new Error(`OAuth error from authorization server: ${oauthError}`),
           );
         }
-        if (!state || state !== expectedState) {
-          return reject(new Error("OAuth state mismatch"));
-        }
         if (!code) {
           return reject(new Error("No authorization code received"));
         }

package/src/core/oauth.ts

@@ -12,16 +12,6 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const SUCCESS_HTML: string = readFileSync(path.join(__dirname, 'oauth-success.html'), 'utf8');
 const ERROR_HTML_TEMPLATE: string = readFileSync(path.join(__dirname, 'oauth-error.html'), 'utf8');
 
-function escapeHtml(s: string): string {
-  return String(s).replace(/[&<>"']/g, (ch) => ({
-    '&': '&amp;',
-    '<': '&lt;',
-    '>': '&gt;',
-    '"': '&quot;',
-    "'": '&#39;',
-  })[ch] as string);
-}
-
 const DEFAULT_ISSUER = 'https://auth.hostinger.com';
 const REGISTER_PATH = '/api/external/v1/oauth-server/register';
 const AUTHORIZE_PATH = '/api/external/v1/oauth-server/authorize';
@@ -29,6 +19,16 @@ const TOKEN_PATH = '/api/external/v1/oauth-server/token';
 const REVOKE_PATH = '/api/external/v1/oauth-server/token/revoke';
 const CLIENT_NAME = 'hostinger-mcp';
 const CALLBACK_PATH = '/oauth/callback';
+// RFC 6749 §4.1.2.1 — anything else in ?error= is reported as unknown_error
+const OAUTH_ERROR_CODES = new Set([
+  'invalid_request',
+  'unauthorized_client',
+  'access_denied',
+  'unsupported_response_type',
+  'invalid_scope',
+  'server_error',
+  'temporarily_unavailable',
+]);
 const CREDENTIALS_DIR_NAME = 'hostinger-mcp';
 const CREDENTIALS_FILE_NAME = 'credentials.json';
 const EXPIRY_BUFFER_SECONDS = 60;
@@ -321,19 +321,23 @@ export class OAuthProvider {
         const state = url.searchParams.get('state');
         const error = url.searchParams.get('error');
 
-        const body = error
-          ? ERROR_HTML_TEMPLATE.replace('{{error}}', escapeHtml(error))
+        if (state !== expectedState) {
+          res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+          res.end(ERROR_HTML_TEMPLATE.replace('{{error}}', 'invalid_state'));
+          return;
+        }
+
+        const oauthError = error && (OAUTH_ERROR_CODES.has(error) ? error : 'unknown_error');
+        const body = oauthError
+          ? ERROR_HTML_TEMPLATE.replace('{{error}}', oauthError)
           : SUCCESS_HTML;
         res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
         res.end(body);
 
         setImmediate(() => server.close());
 
-        if (error) {
-          return reject(new Error(`OAuth error from authorization server: ${error}`));
-        }
-        if (!state || state !== expectedState) {
-          return reject(new Error('OAuth state mismatch'));
+        if (oauthError) {
+          return reject(new Error(`OAuth error from authorization server: ${oauthError}`));
         }
         if (!code) {
           return reject(new Error('No authorization code received'));

package/src/servers/agency-hosting.js

@@ -4,4 +4,4 @@ import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/agency-hosting.js';
 import instructions from '../core/instructions.agency-hosting.js';
 
-startServer({ name: 'hostinger-agency-hosting-mcp', version: '3.22.0', tools, instructions });
+startServer({ name: 'hostinger-agency-hosting-mcp', version: '3.22.1', tools, instructions });

package/src/servers/agency-hosting.ts

@@ -4,4 +4,4 @@ import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/agency-hosting.js';
 import instructions from '../core/instructions.agency-hosting.js';
 
-startServer({ name: 'hostinger-agency-hosting-mcp', version: '3.22.0', tools, instructions });
+startServer({ name: 'hostinger-agency-hosting-mcp', version: '3.22.1', tools, instructions });

package/src/servers/agent-readiness.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/agent-readiness.js';
 
-startServer({ name: 'hostinger-agent-readiness-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-agent-readiness-mcp', version: '3.22.1', tools });

package/src/servers/agent-readiness.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/agent-readiness.js';
 
-startServer({ name: 'hostinger-agent-readiness-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-agent-readiness-mcp', version: '3.22.1', tools });

package/src/servers/all.js

@@ -5,4 +5,4 @@ import tools from '../core/tools/all.js';
 import instructions from '../core/instructions.js';
 import skills from '../core/skills.js';
 
-startServer({ name: 'hostinger-api-mcp', version: '3.22.0', tools, instructions, skills });
+startServer({ name: 'hostinger-api-mcp', version: '3.22.1', tools, instructions, skills });

package/src/servers/all.ts

@@ -5,4 +5,4 @@ import tools from '../core/tools/all.js';
 import instructions from '../core/instructions.js';
 import skills from '../core/skills.js';
 
-startServer({ name: 'hostinger-api-mcp', version: '3.22.0', tools, instructions, skills });
+startServer({ name: 'hostinger-api-mcp', version: '3.22.1', tools, instructions, skills });

package/src/servers/billing.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/billing.js';
 
-startServer({ name: 'hostinger-billing-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-billing-mcp', version: '3.22.1', tools });

package/src/servers/billing.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/billing.js';
 
-startServer({ name: 'hostinger-billing-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-billing-mcp', version: '3.22.1', tools });

package/src/servers/dns.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/dns.js';
 
-startServer({ name: 'hostinger-dns-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-dns-mcp', version: '3.22.1', tools });

package/src/servers/dns.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/dns.js';
 
-startServer({ name: 'hostinger-dns-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-dns-mcp', version: '3.22.1', tools });

package/src/servers/domains.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/domains.js';
 
-startServer({ name: 'hostinger-domains-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-domains-mcp', version: '3.22.1', tools });

package/src/servers/domains.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/domains.js';
 
-startServer({ name: 'hostinger-domains-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-domains-mcp', version: '3.22.1', tools });

package/src/servers/ecommerce.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/ecommerce.js';
 
-startServer({ name: 'hostinger-ecommerce-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-ecommerce-mcp', version: '3.22.1', tools });

package/src/servers/ecommerce.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/ecommerce.js';
 
-startServer({ name: 'hostinger-ecommerce-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-ecommerce-mcp', version: '3.22.1', tools });

package/src/servers/horizons.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/horizons.js';
 
-startServer({ name: 'hostinger-horizons-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-horizons-mcp', version: '3.22.1', tools });

package/src/servers/horizons.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/horizons.js';
 
-startServer({ name: 'hostinger-horizons-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-horizons-mcp', version: '3.22.1', tools });

package/src/servers/hosting.js

@@ -4,4 +4,4 @@ import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/hosting.js';
 import instructions from '../core/instructions.js';
 
-startServer({ name: 'hostinger-hosting-mcp', version: '3.22.0', tools, instructions });
+startServer({ name: 'hostinger-hosting-mcp', version: '3.22.1', tools, instructions });

package/src/servers/hosting.ts

@@ -4,4 +4,4 @@ import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/hosting.js';
 import instructions from '../core/instructions.js';
 
-startServer({ name: 'hostinger-hosting-mcp', version: '3.22.0', tools, instructions });
+startServer({ name: 'hostinger-hosting-mcp', version: '3.22.1', tools, instructions });

package/src/servers/mail.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/mail.js';
 
-startServer({ name: 'hostinger-mail-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-mail-mcp', version: '3.22.1', tools });

package/src/servers/mail.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/mail.js';
 
-startServer({ name: 'hostinger-mail-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-mail-mcp', version: '3.22.1', tools });

package/src/servers/reach.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/reach.js';
 
-startServer({ name: 'hostinger-reach-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-reach-mcp', version: '3.22.1', tools });

package/src/servers/reach.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/reach.js';
 
-startServer({ name: 'hostinger-reach-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-reach-mcp', version: '3.22.1', tools });

package/src/servers/vps.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/vps.js';
 
-startServer({ name: 'hostinger-vps-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-vps-mcp', version: '3.22.1', tools });

package/src/servers/vps.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/vps.js';
 
-startServer({ name: 'hostinger-vps-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-vps-mcp', version: '3.22.1', tools });

package/src/servers/wordpress.js

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/wordpress.js';
 
-startServer({ name: 'hostinger-wordpress-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-wordpress-mcp', version: '3.22.1', tools });

package/src/servers/wordpress.ts

@@ -3,4 +3,4 @@
 import { startServer } from '../core/runtime.js';
 import tools from '../core/tools/wordpress.js';
 
-startServer({ name: 'hostinger-wordpress-mcp', version: '3.22.0', tools });
+startServer({ name: 'hostinger-wordpress-mcp', version: '3.22.1', tools });