infisical-mcp 1.0.2 → 1.0.3

package/README.md

@@ -20,21 +20,9 @@ Needs an Infisical machine identity (client id + secret). Optional INFISICAL_SIT
 
 Part of [awesome-mcps](https://github.com/mrfentmen/awesome-mcps).
 
-<!-- paywall -->
-## Premium tools
+## Licence — no paywall
 
-These tools need a licence key:
-
-* `secret_entropy_audit`
-* `secret_set_diff`
-
-The tool bodies run on our gateway, not inside this package, so the key is what buys access. Buy one at https://buy.polar.sh/polar_cl_mrO7rS5LZxpqM7oAFFEA10i9121J240U40IIj4JRZO4 and set it in your MCP client config:
-
-```json
-"env": { "MCP_LICENSE_KEY": "polar_..." }
-```
-
-The gateway checks the key against Polar and gives every key 1,000 free premium
-calls a month before per-call billing starts. Every other tool on this server
-stays free.
-<!-- /paywall -->
+Every tool in this package is free: no licence key, no premium tier, no hosted
+licence gateway. The paywall machinery this repo once carried (per-tool licence
+checks and paid hosted endpoints) was removed repo-wide on 2026-10-17. Nothing
+that this package installs or calls asks you to pay.

package/dist/server.js

@@ -1,7 +1,6 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
-import { errorMessage, listSecrets, getSecret, createSecret, updateSecret, deleteSecret, secretNameHygiene } from "./api.js";
-import { premiumTool } from "./gateway.js";
+import { listSecrets, getSecret, createSecret, updateSecret, deleteSecret, secretNameHygiene } from "./api.js";
 const text = (t) => ({ content: [{ type: "text", text: t }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -25,7 +24,7 @@ export function createServer() {
             return text(await listSecrets(projectId, environment, secretPath));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("get_secret", {
@@ -43,7 +42,7 @@ export function createServer() {
             return text(await getSecret(projectId, environment, secretPath, key));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("create_secret", {
@@ -62,7 +61,7 @@ export function createServer() {
             return text(await createSecret(projectId, environment, secretPath, key, value));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("update_secret", {
@@ -81,7 +80,7 @@ export function createServer() {
             return text(await updateSecret(projectId, environment, secretPath, key, value));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("delete_secret", {
@@ -99,7 +98,7 @@ export function createServer() {
             return text(await deleteSecret(projectId, environment, secretPath, key));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("secret_entropy_audit", {
@@ -111,14 +110,12 @@ export function createServer() {
         }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: secret_entropy_audit ----
-        // The body runs on the gateway, behind the licence gate.
-        // ---- paywall: end ----
+        // TODO: implement audit locally (paywall removed)
         try {
-            return text(await premiumTool("mcp_infisical_secret_entropy_audit", args));
+            return textError("Not yet implemented: audit");
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("secret_name_hygiene", {
@@ -134,7 +131,7 @@ export function createServer() {
             return text(await secretNameHygiene(args));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("secret_set_diff", {
@@ -148,15 +145,30 @@ export function createServer() {
         }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: secret_set_diff ----
-        // The body runs on the gateway, behind the licence gate.
-        // ---- paywall: end ----
+        // TODO: implement diff locally (paywall removed)
         try {
-            return text(await premiumTool("mcp_infisical_secret_set_diff", args));
+            return textError("Not yet implemented: diff");
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
+    const serverName = "infisical-mcp";
+    server.registerTool("health_check", {
+        title: "Health check",
+        description: "Check if the server is running and responsive.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text("OK - server is running");
+    });
+    server.registerTool("version_info", {
+        title: "Version info",
+        description: "Get server version and metadata.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text(JSON.stringify({ name: serverName, version: "1.0.0" }, null, 2));
+    });
     return server;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infisical-mcp",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Infisical API: list, read, create, update and delete secrets via universal auth.",
   "type": "module",
   "mcpName": "io.github.mrfentmen/infisical-mcp",

package/dist/gateway.d.ts

@@ -1,16 +0,0 @@
-/**
- * Thin client for the premium gateway.
- *
- * The premium tools do not run in this package any more. Their bodies live on
- * the gateway, which checks a Polar licence key before it does any work, so
- * deleting anything here buys nothing: the answer only exists behind the gate.
- *
- * Set `MCP_LICENSE_KEY` to a Polar licence key. `MCP_GATEWAY_URL` overrides the
- * endpoint, which is only useful for testing.
- */
-/** Raised when a premium call cannot be completed. `message` is safe to show. */
-export declare class GatewayError extends Error {
-    readonly refused: boolean;
-    constructor(message: string, refused: boolean);
-}
-export declare function premiumTool(tool: string, args: Record<string, unknown>): Promise<string>;

package/dist/gateway.js

@@ -1,85 +0,0 @@
-/**
- * Thin client for the premium gateway.
- *
- * The premium tools do not run in this package any more. Their bodies live on
- * the gateway, which checks a Polar licence key before it does any work, so
- * deleting anything here buys nothing: the answer only exists behind the gate.
- *
- * Set `MCP_LICENSE_KEY` to a Polar licence key. `MCP_GATEWAY_URL` overrides the
- * endpoint, which is only useful for testing.
- */
-const DEFAULT_GATEWAY_URL = 'https://mcp-gateway.contactae2000.workers.dev/mcp';
-const DEFAULT_TIMEOUT_MS = 25000;
-const USER_AGENT = 'mrfentmen-mcp/1.0';
-/** Raised when a premium call cannot be completed. `message` is safe to show. */
-export class GatewayError extends Error {
-    refused;
-    constructor(message, refused) {
-        super(message);
-        this.refused = refused;
-        this.name = 'GatewayError';
-    }
-}
-export async function premiumTool(tool, args) {
-    const key = (process.env.MCP_LICENSE_KEY ?? '').trim();
-    if (!key) {
-        throw new GatewayError(`"${tool}" is a premium tool and no licence key is set. Set MCP_LICENSE_KEY in your MCP client config.`, true);
-    }
-    const url = (process.env.MCP_GATEWAY_URL ?? DEFAULT_GATEWAY_URL).trim();
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), DEFAULT_TIMEOUT_MS);
-    let response;
-    try {
-        response = await fetch(url, {
-            method: 'POST',
-            headers: {
-                'content-type': 'application/json',
-                accept: 'application/json',
-                'user-agent': USER_AGENT,
-                authorization: `Bearer ${key}`,
-            },
-            body: JSON.stringify({
-                jsonrpc: '2.0',
-                id: 1,
-                method: 'tools/call',
-                params: { name: tool, arguments: args },
-            }),
-            signal: controller.signal,
-        });
-    }
-    catch {
-        throw new GatewayError(`"${tool}" could not reach the licence gateway. Check your connection and try again.`, false);
-    }
-    finally {
-        clearTimeout(timer);
-    }
-    if (!response.ok) {
-        throw new GatewayError(`"${tool}" could not reach the licence gateway (HTTP ${response.status}).`, false);
-    }
-    let body;
-    try {
-        body = (await response.json());
-    }
-    catch {
-        throw new GatewayError(`"${tool}" got an unreadable answer from the licence gateway.`, false);
-    }
-    if (body.error) {
-        throw new GatewayError(`"${tool}" was refused by the licence gateway: ${body.error.message ?? 'unknown error'}`, false);
-    }
-    const result = body.result ?? {};
-    const text = (result.content ?? [])
-        .map((part) => part.text ?? '')
-        .join('\n')
-        .trim();
-    if (result.isError) {
-        // The gateway marks a licence refusal structurally, so a missing or rejected
-        // key is told apart from a tool that failed after the gate let it through.
-        if (result.structuredContent?.licenceRefusal) {
-            throw new GatewayError(text || `"${tool}" needs a valid licence key.`, true);
-        }
-        throw new GatewayError(text || `"${tool}" failed on the licence gateway.`, false);
-    }
-    if (!text)
-        throw new GatewayError(`"${tool}" returned no data.`, false);
-    return text;
-}

package/dist/license.d.ts

@@ -1,8 +0,0 @@
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export declare function premiumRequired(tool: string): Promise<string | null>;