kiwoom-mcp-server 0.16.0 → 0.18.0

package/README.en.md

@@ -123,6 +123,11 @@ npm test                     # unit tests (no network required)
 | `ISA_ENABLED` | | `true` registers the `calc_isa_tax_status` tool. Default `false` (general-account-first) |
 | `ISA_TYPE` | | `GENERAL` (general, 2,000,000 KRW limit, default) or `SEOMIN` (low-income/farmer-fisher, 4,000,000 KRW). Only used when `ISA_ENABLED=true` |
 | `ISA_OPENED_ON` | | ISA account opening date `yyyy-MM-dd` — default aggregation start for `calc_isa_tax_status`. Only used when `ISA_ENABLED=true` |
+| `MCP_TRANSPORT` | | `stdio` (default) or `http` — see [Remote access](#remote-access-http-mode--claudeai-webmobile) |
+| `MCP_AUTH_TOKEN` | HTTP mode ✅ | Bearer token every `/mcp` request must present in HTTP mode |
+| `MCP_HTTP_PORT` | | HTTP-mode port (default `8000`) |
+| `MCP_HTTP_HOST` | | HTTP-mode bind address (default `127.0.0.1`) |
+| `MCP_HTTP_NO_AUTH` | | `true` allows starting HTTP mode without auth (discouraged — see the security notes below) |
 
 The default is **general-account-first**: without extra config, only the market-data
 and account-inquiry tools are exposed. To use the tax-free-limit tool on an ISA
@@ -195,6 +200,44 @@ From source — app key from the project-root `.env`:
 claude mcp add kiwoom -- node /absolute/path/kiwoom-mcp-server/dist/index.js
 ```
 
+## Remote access (HTTP mode) — claude.ai web/mobile
+
+claude.ai **custom connectors** (web/mobile) cannot attach to a local stdio server;
+they need a **Streamable HTTP** MCP server reachable over public HTTPS. Start this
+server in HTTP mode with the `--http` flag (or `MCP_TRANSPORT=http`):
+
+```sh
+MCP_AUTH_TOKEN="$(openssl rand -hex 32)" npx -y kiwoom-mcp-server --http --port 8000
+# endpoint: http://127.0.0.1:8000/mcp · health check: /healthz
+```
+
+- **Auth is required by default.** Without `MCP_AUTH_TOKEN` the server refuses to
+  start — every `/mcp` request must carry `Authorization: Bearer <token>`. To run
+  without auth you must pass `--no-auth` explicitly; the account-inquiry tools are
+  then exposed as-is, so do that only on a trusted network or with a paper-trading
+  key (`KIWOOM_MODE=VIRTUAL`).
+- The default bind is `127.0.0.1`, assuming a tunnel in front. To expose directly
+  (container/VPS), opt in with `--host 0.0.0.0`.
+- Get a public HTTPS URL with e.g. [Cloudflare Tunnel](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/):
+  `cloudflared tunnel --url http://localhost:8000` (ephemeral URL — use a named
+  tunnel for anything permanent).
+- Register on claude.ai under **Settings → Connectors → Add custom connector** with
+  `https://<your-domain>/mcp` (leave the OAuth fields in Advanced settings empty).
+  On connect, a browser **consent page** opens — enter your `MCP_AUTH_TOKEN` as the
+  access password and you are done: the server implements the MCP authorization spec
+  (OAuth 2.0 + PKCE with dynamic client registration), so no header configuration is
+  needed. A connector added once is available across the web, mobile, and desktop
+  clients. Header-capable clients (e.g. Claude Code `--header`) can still use the
+  static `Authorization: Bearer <MCP_AUTH_TOKEN>` path. OAuth tokens are persisted
+  to `.oauth-state.json` (0600) in the working directory, so restarts don't drop
+  the connection.
+- ⚠️ **Kiwoom API calls originate from wherever this server runs.** REAL mode is
+  bound to Kiwoom's designated-terminal (8050) IP registration, so running it
+  outside a registered IP (e.g. in the cloud) can fail auth. Validate remote
+  setups with a VIRTUAL key first.
+
+The stdio behavior (Claude Desktop/Code) is unchanged when run without arguments.
+
 ## Smoke test
 
 You can verify over stdio without an MCP client:

package/README.md

@@ -115,6 +115,11 @@ npm test                    # 단위 테스트 (네트워크 불필요)
 | `ISA_ENABLED` | | `true`면 `calc_isa_tax_status` tool 활성화. 기본값 `false`(일반 계좌 기준) |
 | `ISA_TYPE` | | `GENERAL`(일반형, 한도 200만원, 기본값) 또는 `SEOMIN`(서민형/농어민형, 400만원). `ISA_ENABLED=true`일 때만 사용 |
 | `ISA_OPENED_ON` | | ISA 계좌 개설일 `yyyy-MM-dd` — `calc_isa_tax_status` 집계 시작일 기본값. `ISA_ENABLED=true`일 때만 사용 |
+| `MCP_TRANSPORT` | | `stdio`(기본값) 또는 `http` — [원격 연결](#원격-연결-http-모드--claudeai-웹모바일) 참조 |
+| `MCP_AUTH_TOKEN` | HTTP 모드 ✅ | HTTP 모드에서 모든 `/mcp` 요청이 제시해야 하는 Bearer 토큰 |
+| `MCP_HTTP_PORT` | | HTTP 모드 포트 (기본값 `8000`) |
+| `MCP_HTTP_HOST` | | HTTP 모드 바인드 주소 (기본값 `127.0.0.1`) |
+| `MCP_HTTP_NO_AUTH` | | `true`면 인증 없이 HTTP 모드 기동 허용 (비권장 — 아래 보안 주의 참조) |
 
 기본값은 **일반(비-ISA) 계좌 기준**입니다 — 별도 설정이 없으면 시장·계좌 조회 tool만
 노출됩니다. ISA 계좌를 연결해 비과세 한도 tool을 쓰려면 `ISA_ENABLED=true`로 켜고
@@ -186,6 +191,40 @@ claude mcp add kiwoom \
 claude mcp add kiwoom -- node /절대/경로/kiwoom-mcp-server/dist/index.js
 ```
 
+## 원격 연결 (HTTP 모드) — claude.ai 웹/모바일
+
+claude.ai(웹/모바일)의 **커스텀 커넥터**는 로컬 stdio 서버에 직접 붙을 수 없고, 공개
+HTTPS로 접근 가능한 **Streamable HTTP** MCP 서버가 필요합니다. `--http` 플래그(또는
+`MCP_TRANSPORT=http`)로 이 서버를 HTTP 모드로 띄울 수 있습니다:
+
+```sh
+MCP_AUTH_TOKEN="$(openssl rand -hex 32)" npx -y kiwoom-mcp-server --http --port 8000
+# 엔드포인트: http://127.0.0.1:8000/mcp · 헬스체크: /healthz
+```
+
+- **인증이 기본 필수입니다.** `MCP_AUTH_TOKEN`이 없으면 기동을 거부합니다 — 모든 `/mcp`
+  요청에 `Authorization: Bearer <토큰>` 헤더가 있어야 합니다. 인증 없이 열려면
+  `--no-auth`를 명시해야 하며, 계좌 조회 도구가 그대로 노출되므로 신뢰할 수 있는
+  네트워크나 모의투자(`KIWOOM_MODE=VIRTUAL`)에서만 사용하세요.
+- 기본 바인드는 `127.0.0.1`입니다 — 터널을 앞에 두는 구성을 전제합니다. 컨테이너/서버에
+  직접 노출하려면 `--host 0.0.0.0`을 명시하세요.
+- 공개 HTTPS URL은 [Cloudflare Tunnel](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/) 등으로 만듭니다:
+  `cloudflared tunnel --url http://localhost:8000` (임시 URL — 상시 운영은 named tunnel 권장).
+- claude.ai 등록: **Settings → Connectors → Add custom connector**에
+  `https://<도메인>/mcp`를 입력합니다 (고급 설정의 OAuth 필드는 비워둡니다). 연결 시
+  브라우저에 **승인 페이지**가 뜨고, `MCP_AUTH_TOKEN` 값을 접속 암호로 입력하면
+  완료됩니다 — 서버가 MCP 인증 스펙(OAuth 2.0 + PKCE, 동적 클라이언트 등록)을 내장하고
+  있어 별도 헤더 설정이 필요 없습니다. 등록한 커넥터는 웹/모바일/데스크톱에서 공용입니다.
+  헤더를 지정할 수 있는 클라이언트(예: Claude Code `--header`)는 기존처럼
+  `Authorization: Bearer <MCP_AUTH_TOKEN>` 정적 헤더로도 접속할 수 있습니다.
+  OAuth 토큰은 작업 디렉터리의 `.oauth-state.json`(0600)에 저장되어 서버를 재시작해도
+  연결이 유지됩니다.
+- ⚠️ **키움 API 호출은 이 서버가 실행되는 곳에서 나갑니다.** REAL 모드는 키움 지정단말기
+  인증(8050)이 IP에 묶이므로, 등록된 IP가 아닌 곳(클라우드 등)에서 실행하면 인증 오류가
+  날 수 있습니다. 원격 노출은 모의투자로 먼저 검증하세요.
+
+기존 stdio 동작(Claude Desktop/Code 연결)은 인자 없이 실행하면 그대로입니다.
+
 ## 동작 확인
 
 MCP 클라이언트 없이 stdio로 직접 확인할 수 있습니다:

package/dist/config.js

@@ -41,7 +41,7 @@ const MODE_LABELS = {
     REAL: "실전투자",
 };
 let cached = null;
-function loadDotEnv() {
+export function loadDotEnv() {
     // Claude Desktop launches this server with an arbitrary cwd, so resolve .env
     // relative to the project root (parent of dist/ or src/) first.
     const projectRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");

package/dist/http.js

@@ -0,0 +1,158 @@
+import http from "node:http";
+import path from "node:path";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { handleOAuthRequest, OAuthProvider, requestBaseUrl, timingSafeStringEqual, } from "./oauth.js";
+import { createServer, SERVER_NAME, SERVER_VERSION } from "./server.js";
+const DEFAULT_PORT = 8000;
+const DEFAULT_HOST = "127.0.0.1";
+const MCP_PATH = "/mcp";
+const HEALTH_PATH = "/healthz";
+/**
+ * Decides the transport from CLI args + env. Pure (unit-testable): pass
+ * process.argv.slice(2) and process.env. Defaults to stdio so existing
+ * Claude Desktop/Code installs are untouched; HTTP is strictly opt-in.
+ *
+ * The auth token is env-only (MCP_AUTH_TOKEN) — a CLI flag would leak the
+ * secret to `ps`. HTTP mode refuses to start without a token unless the
+ * operator explicitly passes --no-auth: this server fronts a brokerage
+ * account, so an unauthenticated public endpoint must be a deliberate act.
+ */
+export function chooseTransport(argv, env) {
+    const flags = new Set();
+    const values = new Map();
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--port" || arg === "--host") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                throw new Error(`${arg} 옵션에 값이 없습니다 (예: ${arg === "--port" ? "--port 8000" : "--host 127.0.0.1"}).`);
+            }
+            values.set(arg, value);
+            i += 1;
+        }
+        else if (arg === "--http" || arg === "--stdio" || arg === "--no-auth") {
+            flags.add(arg);
+        }
+        else {
+            throw new Error(`알 수 없는 옵션입니다: ${arg} (지원: --http, --stdio, --port <n>, --host <addr>, --no-auth)`);
+        }
+    }
+    const envTransport = env.MCP_TRANSPORT?.trim().toLowerCase();
+    if (envTransport !== undefined && envTransport !== "" && envTransport !== "stdio" && envTransport !== "http") {
+        throw new Error(`MCP_TRANSPORT 값이 잘못되었습니다: "${env.MCP_TRANSPORT}" (stdio 또는 http).`);
+    }
+    const wantsHttp = flags.has("--http") || (!flags.has("--stdio") && envTransport === "http");
+    if (!wantsHttp)
+        return { mode: "stdio" };
+    const portRaw = values.get("--port") ?? env.MCP_HTTP_PORT?.trim();
+    let port = DEFAULT_PORT;
+    if (portRaw !== undefined && portRaw !== "") {
+        port = Number(portRaw);
+        if (!Number.isInteger(port) || port < 0 || port > 65535) {
+            throw new Error(`포트가 잘못되었습니다: "${portRaw}" (0~65535 정수).`);
+        }
+    }
+    const host = values.get("--host") ?? (env.MCP_HTTP_HOST?.trim() || DEFAULT_HOST);
+    const allowNoAuth = flags.has("--no-auth") || env.MCP_HTTP_NO_AUTH?.trim().toLowerCase() === "true";
+    const authToken = env.MCP_AUTH_TOKEN?.trim() || undefined;
+    if (!authToken && !allowNoAuth) {
+        throw new Error("HTTP 모드에는 MCP_AUTH_TOKEN 환경변수가 필요합니다 (모든 /mcp 요청의 Bearer 토큰). " +
+            "인증 없이 열려면 --no-auth를 명시하세요 — 계좌 조회 도구가 인터넷에 그대로 노출되므로 " +
+            "신뢰할 수 있는 네트워크/모의투자(VIRTUAL) 환경에서만 권장합니다.");
+    }
+    const publicUrl = env.MCP_PUBLIC_URL?.trim() || undefined;
+    return { mode: "http", options: { port, host, authToken, allowNoAuth, publicUrl } };
+}
+/** Extracts the bearer credential from an Authorization header, if any. */
+export function bearerToken(authorizationHeader) {
+    if (!authorizationHeader)
+        return undefined;
+    const match = /^Bearer\s+(.+)$/i.exec(authorizationHeader.trim());
+    return match?.[1];
+}
+/** Timing-safe static bearer-token check. */
+export function isAuthorized(authorizationHeader, token) {
+    const presented = bearerToken(authorizationHeader);
+    return presented !== undefined && timingSafeStringEqual(presented, token);
+}
+function deny(res, status, message) {
+    res.writeHead(status, { "Content-Type": "application/json" }).end(JSON.stringify({
+        jsonrpc: "2.0",
+        error: { code: -32000, message },
+        id: null,
+    }));
+}
+/**
+ * Streamable HTTP endpoint for remote MCP clients (claude.ai custom
+ * connectors, Claude Desktop/mobile via the account-brokered connector).
+ * Stateless per the MCP spec: each request gets a fresh McpServer+transport
+ * pair; the expensive state (Kiwoom token cache, ka10099 master-list cache)
+ * lives at module level and is shared across requests.
+ */
+export function createHttpServer(options) {
+    // OAuth rides on the same consent secret as the static bearer: no token → no
+    // OAuth endpoints (that is the explicit --no-auth everything-open mode).
+    const oauth = options.authToken
+        ? new OAuthProvider({
+            consentToken: options.authToken,
+            statePath: options.oauthStatePath ?? path.join(process.cwd(), ".oauth-state.json"),
+        })
+        : null;
+    return http.createServer((req, res) => {
+        void handleRequest(req, res, options, oauth).catch((error) => {
+            console.error("HTTP request handling failed:", error);
+            if (!res.headersSent)
+                deny(res, 500, "internal server error");
+        });
+    });
+}
+async function handleRequest(req, res, options, oauth) {
+    const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+    if (url.pathname === HEALTH_PATH) {
+        res.writeHead(200, { "Content-Type": "text/plain" }).end("ok");
+        return;
+    }
+    if (oauth && (await handleOAuthRequest(req, res, oauth, options.publicUrl))) {
+        return;
+    }
+    if (url.pathname !== MCP_PATH) {
+        deny(res, 404, `not found — MCP endpoint is ${MCP_PATH}`);
+        return;
+    }
+    if (options.authToken) {
+        const presented = bearerToken(req.headers.authorization);
+        const ok = presented !== undefined &&
+            (timingSafeStringEqual(presented, options.authToken) ||
+                (oauth?.validateAccessToken(presented) ?? false));
+        if (!ok) {
+            // RFC 9728: point 401s at the protected-resource metadata so MCP
+            // clients (claude.ai connectors) can discover the OAuth flow.
+            res.setHeader("WWW-Authenticate", `Bearer realm="${SERVER_NAME}", resource_metadata="${requestBaseUrl(req, options.publicUrl)}/.well-known/oauth-protected-resource"`);
+            deny(res, 401, "unauthorized — OAuth 승인 또는 Authorization: Bearer <MCP_AUTH_TOKEN> 헤더가 필요합니다");
+            return;
+        }
+    }
+    const server = createServer();
+    const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+    res.on("close", () => {
+        void transport.close();
+        void server.close();
+    });
+    await server.connect(transport);
+    await transport.handleRequest(req, res);
+}
+export async function startHttpServer(options) {
+    const server = createHttpServer(options);
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(options.port, options.host, resolve);
+    });
+    const address = server.address();
+    const boundPort = typeof address === "object" && address ? address.port : options.port;
+    console.error(`${SERVER_NAME} v${SERVER_VERSION} listening on http://${options.host}:${boundPort}${MCP_PATH} ` +
+        `(auth: ${options.authToken ? "bearer token" : "NONE — --no-auth"})`);
+    if (!options.authToken) {
+        console.error("⚠️  인증 없이 실행 중입니다. 이 서버는 계좌 조회 도구를 노출하므로 공개 네트워크에 직접 연결하지 마세요.");
+    }
+    return server;
+}

package/dist/index.js

@@ -1,7 +1,17 @@
 #!/usr/bin/env node
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { loadDotEnv } from "./config.js";
+import { chooseTransport, startHttpServer } from "./http.js";
 import { createServer, SERVER_NAME, SERVER_VERSION } from "./server.js";
 async function main() {
+    // Load .env before reading MCP_* transport vars (credential validation stays
+    // lazy in getConfig). Real environment variables win over the file.
+    loadDotEnv();
+    const choice = chooseTransport(process.argv.slice(2), process.env);
+    if (choice.mode === "http") {
+        await startHttpServer(choice.options);
+        return;
+    }
     const server = createServer();
     const transport = new StdioServerTransport();
     await server.connect(transport);

package/dist/oauth.js

@@ -0,0 +1,427 @@
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+/**
+ * Minimal built-in OAuth 2.0 authorization server for the HTTP transport,
+ * implementing what the MCP authorization spec expects from a remote server
+ * (claude.ai custom connectors drive this flow):
+ *
+ *   401 + WWW-Authenticate → RFC 9728 protected-resource metadata
+ *   → RFC 8414 authorization-server metadata → RFC 7591 dynamic client
+ *   registration → authorization-code + PKCE(S256) → opaque bearer tokens.
+ *
+ * Consent model: this server fronts ONE owner's brokerage account, so the
+ * /authorize page asks for the pre-shared MCP_AUTH_TOKEN as an access
+ * password instead of a user login. One secret serves both auth paths
+ * (static bearer for header-capable clients, OAuth consent for claude.ai).
+ */
+const CODE_TTL_MS = 5 * 60 * 1000;
+const ACCESS_TOKEN_TTL_MS = 60 * 60 * 1000;
+/** Consent brute-force guard: max failures per window, shared across IPs. */
+const MAX_CONSENT_FAILURES = 10;
+const CONSENT_FAILURE_WINDOW_MS = 10 * 60 * 1000;
+const MAX_BODY_BYTES = 64 * 1024;
+const token = (bytes = 32) => randomBytes(bytes).toString("hex");
+const sha256base64url = (value) => createHash("sha256").update(value).digest("base64url");
+/** Timing-safe string comparison (hash first so lengths never short-circuit). */
+export function timingSafeStringEqual(a, b) {
+    return timingSafeEqual(createHash("sha256").update(a).digest(), createHash("sha256").update(b).digest());
+}
+/** PKCE S256: does sha256(verifier) match the stored challenge? */
+export function verifyPkce(codeVerifier, codeChallenge) {
+    return timingSafeStringEqual(sha256base64url(codeVerifier), codeChallenge);
+}
+const escapeHtml = (s) => s
+    .replaceAll("&", "&")
+    .replaceAll("<", "&lt;")
+    .replaceAll(">", "&gt;")
+    .replaceAll('"', "&quot;")
+    .replaceAll("'", "&#39;");
+/** https-only redirect URIs, except loopback for local development. */
+export function isAllowedRedirectUri(uri) {
+    let url;
+    try {
+        url = new URL(uri);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol === "https:")
+        return true;
+    return url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+}
+export class OAuthProvider {
+    consentToken;
+    statePath;
+    clients = new Map();
+    codes = new Map();
+    tokens = new Map(); // keyed by accessToken
+    refresh = new Map(); // keyed by refreshToken
+    consentFailures = 0;
+    consentWindowStart = 0;
+    constructor(options) {
+        this.consentToken = options.consentToken;
+        this.statePath = options.statePath;
+        this.load();
+    }
+    load() {
+        if (!this.statePath || !existsSync(this.statePath))
+            return;
+        try {
+            const state = JSON.parse(readFileSync(this.statePath, "utf8"));
+            for (const c of state.clients ?? [])
+                this.clients.set(c.clientId, c);
+            for (const t of state.tokens ?? []) {
+                this.tokens.set(t.accessToken, t);
+                this.refresh.set(t.refreshToken, t);
+            }
+        }
+        catch (error) {
+            // A corrupt state file only means connectors must re-authorize.
+            console.error("OAuth state file unreadable — starting empty:", error);
+        }
+    }
+    save() {
+        if (!this.statePath)
+            return;
+        const state = {
+            clients: [...this.clients.values()],
+            tokens: [...this.refresh.values()],
+        };
+        try {
+            writeFileSync(this.statePath, JSON.stringify(state, null, 2), { mode: 0o600 });
+        }
+        catch (error) {
+            console.error("Failed to persist OAuth state:", error);
+        }
+    }
+    registerClient(meta) {
+        const uris = Array.isArray(meta.redirect_uris)
+            ? meta.redirect_uris.filter((u) => typeof u === "string")
+            : [];
+        if (uris.length === 0 || !uris.every(isAllowedRedirectUri)) {
+            return { error: "redirect_uris must be https URLs (or http loopback)" };
+        }
+        const client = {
+            clientId: token(16),
+            redirectUris: uris,
+            clientName: typeof meta.client_name === "string" ? meta.client_name.slice(0, 200) : "",
+            createdAt: Date.now(),
+        };
+        this.clients.set(client.clientId, client);
+        this.save();
+        return client;
+    }
+    getClient(clientId) {
+        return this.clients.get(clientId);
+    }
+    consentRateLimited() {
+        if (Date.now() - this.consentWindowStart > CONSENT_FAILURE_WINDOW_MS)
+            return false;
+        return this.consentFailures >= MAX_CONSENT_FAILURES;
+    }
+    /** Validates the consent password; counts failures for the rate limit. */
+    checkConsent(password) {
+        if (timingSafeStringEqual(password, this.consentToken))
+            return true;
+        if (Date.now() - this.consentWindowStart > CONSENT_FAILURE_WINDOW_MS) {
+            this.consentWindowStart = Date.now();
+            this.consentFailures = 0;
+        }
+        this.consentFailures += 1;
+        return false;
+    }
+    createCode(clientId, redirectUri, codeChallenge) {
+        const code = {
+            code: token(24),
+            clientId,
+            redirectUri,
+            codeChallenge,
+            expiresAt: Date.now() + CODE_TTL_MS,
+        };
+        this.codes.set(code.code, code);
+        return code.code;
+    }
+    exchangeCode(params) {
+        const record = this.codes.get(params.code);
+        this.codes.delete(params.code); // single-use, even on failure
+        if (!record || record.expiresAt < Date.now())
+            return { error: "invalid_grant" };
+        if (record.clientId !== params.clientId || record.redirectUri !== params.redirectUri) {
+            return { error: "invalid_grant" };
+        }
+        if (!verifyPkce(params.codeVerifier, record.codeChallenge))
+            return { error: "invalid_grant" };
+        return this.issueTokens(record.clientId);
+    }
+    refreshTokens(refreshToken, clientId) {
+        const record = this.refresh.get(refreshToken);
+        if (!record || record.clientId !== clientId)
+            return { error: "invalid_grant" };
+        // Rotate: the presented refresh token is spent either way.
+        this.refresh.delete(refreshToken);
+        this.tokens.delete(record.accessToken);
+        return this.issueTokens(clientId);
+    }
+    issueTokens(clientId) {
+        const record = {
+            accessToken: token(32),
+            refreshToken: token(32),
+            clientId,
+            accessExpiresAt: Date.now() + ACCESS_TOKEN_TTL_MS,
+            createdAt: Date.now(),
+        };
+        this.tokens.set(record.accessToken, record);
+        this.refresh.set(record.refreshToken, record);
+        this.save();
+        return record;
+    }
+    validateAccessToken(accessToken) {
+        const record = this.tokens.get(accessToken);
+        return record !== undefined && record.accessExpiresAt > Date.now();
+    }
+}
+/** Base URL for metadata/issuer: explicit override, else the request's own host. */
+export function requestBaseUrl(req, publicUrl) {
+    if (publicUrl)
+        return publicUrl.replace(/\/+$/, "");
+    const forwardedProto = req.headers["x-forwarded-proto"];
+    const proto = (Array.isArray(forwardedProto) ? forwardedProto[0] : forwardedProto)?.split(",")[0]?.trim() ||
+        "http";
+    return `${proto}://${req.headers.host ?? "localhost"}`;
+}
+export function buildProtectedResourceMetadata(base) {
+    return {
+        resource: `${base}/mcp`,
+        authorization_servers: [base],
+        bearer_methods_supported: ["header"],
+    };
+}
+export function buildAuthServerMetadata(base) {
+    return {
+        issuer: base,
+        authorization_endpoint: `${base}/authorize`,
+        token_endpoint: `${base}/token`,
+        registration_endpoint: `${base}/register`,
+        response_types_supported: ["code"],
+        grant_types_supported: ["authorization_code", "refresh_token"],
+        code_challenge_methods_supported: ["S256"],
+        token_endpoint_auth_methods_supported: ["none"],
+        scopes_supported: [],
+    };
+}
+async function readBody(req) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > MAX_BODY_BYTES)
+            throw new Error("body too large");
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+function parseBodyParams(raw, contentType) {
+    if (contentType?.includes("application/json")) {
+        const parsed = JSON.parse(raw);
+        const out = {};
+        if (parsed && typeof parsed === "object") {
+            for (const [k, v] of Object.entries(parsed))
+                if (typeof v === "string")
+                    out[k] = v;
+        }
+        return out;
+    }
+    return Object.fromEntries(new URLSearchParams(raw));
+}
+function sendJson(res, status, body) {
+    res
+        .writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store" })
+        .end(JSON.stringify(body));
+}
+function sendHtml(res, status, body) {
+    res
+        .writeHead(status, {
+        "Content-Type": "text/html; charset=utf-8",
+        "Cache-Control": "no-store",
+        "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'",
+    })
+        .end(body);
+}
+function consentPage(fields, clientName, error) {
+    const hidden = Object.entries(fields)
+        .map(([k, v]) => `<input type="hidden" name="${escapeHtml(k)}" value="${escapeHtml(v)}">`)
+        .join("\n      ");
+    return `<!doctype html>
+<html lang="ko"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+<title>kiwoom-mcp-server 연결 승인</title>
+<style>
+  body { font-family: -apple-system, sans-serif; max-width: 26rem; margin: 4rem auto; padding: 0 1rem; }
+  input[type=password] { width: 100%; padding: .6rem; font-size: 1rem; margin: .8rem 0; box-sizing: border-box; }
+  button { padding: .6rem 1.4rem; font-size: 1rem; }
+  .err { color: #c0392b; }
+  .meta { color: #666; font-size: .85rem; }
+</style></head>
+<body>
+  <h2>kiwoom-mcp-server 연결 승인</h2>
+  <p>클라이언트${clientName ? ` <strong>${escapeHtml(clientName)}</strong>` : ""}가 이 서버의
+  주식 조회 도구(읽기 전용)에 접근하려고 합니다.</p>
+  <p class="meta">승인하려면 서버의 <code>MCP_AUTH_TOKEN</code> 값을 입력하세요.</p>
+  ${error ? `<p class="err">${escapeHtml(error)}</p>` : ""}
+  <form method="post" action="/authorize">
+      ${hidden}
+      <input type="password" name="password" placeholder="접속 암호 (MCP_AUTH_TOKEN)" autofocus required>
+      <button type="submit">승인</button>
+  </form>
+</body></html>`;
+}
+/** Shared /authorize validation for GET (render) and POST (approve). */
+function validateAuthorizeParams(provider, q, res) {
+    const client = q.client_id ? provider.getClient(q.client_id) : undefined;
+    if (!client) {
+        sendHtml(res, 400, consentPage({}, "", "알 수 없는 client_id입니다. 커넥터를 다시 등록해 주세요."));
+        return null;
+    }
+    const redirectUri = q.redirect_uri ?? "";
+    if (!client.redirectUris.includes(redirectUri)) {
+        sendHtml(res, 400, consentPage({}, client.clientName, "redirect_uri가 등록된 값과 다릅니다."));
+        return null;
+    }
+    // From here on the redirect target is trusted — protocol errors go back via redirect.
+    const redirectError = (error) => {
+        const url = new URL(redirectUri);
+        url.searchParams.set("error", error);
+        if (q.state)
+            url.searchParams.set("state", q.state);
+        res.writeHead(302, { Location: url.toString() }).end();
+        return null;
+    };
+    if (q.response_type !== "code")
+        return redirectError("unsupported_response_type");
+    if (!q.code_challenge || (q.code_challenge_method ?? "S256") !== "S256") {
+        return redirectError("invalid_request");
+    }
+    return { client, redirectUri, codeChallenge: q.code_challenge, state: q.state ?? "" };
+}
+/**
+ * Handles OAuth endpoints. Returns true when the request was consumed.
+ * Wire this BEFORE the /mcp route; call only when auth is enabled.
+ */
+export async function handleOAuthRequest(req, res, provider, publicUrl) {
+    const base = requestBaseUrl(req, publicUrl);
+    const url = new URL(req.url ?? "/", base);
+    if (url.pathname === "/.well-known/oauth-protected-resource") {
+        sendJson(res, 200, buildProtectedResourceMetadata(base));
+        return true;
+    }
+    if (url.pathname === "/.well-known/oauth-authorization-server") {
+        sendJson(res, 200, buildAuthServerMetadata(base));
+        return true;
+    }
+    if (url.pathname === "/register" && req.method === "POST") {
+        let meta;
+        try {
+            meta = JSON.parse(await readBody(req));
+        }
+        catch {
+            sendJson(res, 400, { error: "invalid_client_metadata" });
+            return true;
+        }
+        const client = provider.registerClient(meta);
+        if ("error" in client) {
+            sendJson(res, 400, { error: "invalid_redirect_uri", error_description: client.error });
+            return true;
+        }
+        sendJson(res, 201, {
+            client_id: client.clientId,
+            client_id_issued_at: Math.floor(client.createdAt / 1000),
+            redirect_uris: client.redirectUris,
+            client_name: client.clientName || undefined,
+            token_endpoint_auth_method: "none",
+            grant_types: ["authorization_code", "refresh_token"],
+            response_types: ["code"],
+        });
+        return true;
+    }
+    if (url.pathname === "/authorize" && req.method === "GET") {
+        const q = Object.fromEntries(url.searchParams);
+        const params = validateAuthorizeParams(provider, q, res);
+        if (!params)
+            return true;
+        sendHtml(res, 200, consentPage({
+            client_id: params.client.clientId,
+            redirect_uri: params.redirectUri,
+            state: params.state,
+            code_challenge: params.codeChallenge,
+            code_challenge_method: "S256",
+            response_type: "code",
+        }, params.client.clientName));
+        return true;
+    }
+    if (url.pathname === "/authorize" && req.method === "POST") {
+        let form;
+        try {
+            form = parseBodyParams(await readBody(req), req.headers["content-type"]);
+        }
+        catch {
+            sendHtml(res, 400, consentPage({}, "", "요청을 읽지 못했습니다. 다시 시도해 주세요."));
+            return true;
+        }
+        const params = validateAuthorizeParams(provider, form, res);
+        if (!params)
+            return true;
+        if (provider.consentRateLimited()) {
+            sendHtml(res, 429, consentPage({}, params.client.clientName, "시도 횟수를 초과했습니다. 10분 후 다시 시도해 주세요."));
+            return true;
+        }
+        if (!provider.checkConsent(form.password ?? "")) {
+            const { password: _password, ...fields } = form;
+            sendHtml(res, 401, consentPage(fields, params.client.clientName, "접속 암호가 일치하지 않습니다."));
+            return true;
+        }
+        const code = provider.createCode(params.client.clientId, params.redirectUri, params.codeChallenge);
+        const target = new URL(params.redirectUri);
+        target.searchParams.set("code", code);
+        if (params.state)
+            target.searchParams.set("state", params.state);
+        res.writeHead(302, { Location: target.toString() }).end();
+        return true;
+    }
+    if (url.pathname === "/token" && req.method === "POST") {
+        let form;
+        try {
+            form = parseBodyParams(await readBody(req), req.headers["content-type"]);
+        }
+        catch {
+            sendJson(res, 400, { error: "invalid_request" });
+            return true;
+        }
+        let result;
+        if (form.grant_type === "authorization_code") {
+            result = provider.exchangeCode({
+                code: form.code ?? "",
+                codeVerifier: form.code_verifier ?? "",
+                clientId: form.client_id ?? "",
+                redirectUri: form.redirect_uri ?? "",
+            });
+        }
+        else if (form.grant_type === "refresh_token") {
+            result = provider.refreshTokens(form.refresh_token ?? "", form.client_id ?? "");
+        }
+        else {
+            sendJson(res, 400, { error: "unsupported_grant_type" });
+            return true;
+        }
+        if ("error" in result) {
+            sendJson(res, 400, { error: result.error });
+            return true;
+        }
+        sendJson(res, 200, {
+            access_token: result.accessToken,
+            token_type: "Bearer",
+            expires_in: Math.floor(ACCESS_TOKEN_TTL_MS / 1000),
+            refresh_token: result.refreshToken,
+        });
+        return true;
+    }
+    return false;
+}

package/dist/server.js

@@ -27,7 +27,7 @@ import { registerTransactionsTool } from "./tools/transactions.js";
 import { registerViStocksTool } from "./tools/vi-stocks.js";
 import { registerWatchlistGroupsTool, registerWatchlistTool } from "./tools/watchlist.js";
 export const SERVER_NAME = "kiwoom-mcp-server";
-export const SERVER_VERSION = "0.16.0";
+export const SERVER_VERSION = "0.18.0";
 export function createServer() {
     const server = new McpServer({
         name: SERVER_NAME,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kiwoom-mcp-server",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "Read-only MCP server exposing the Kiwoom Securities REST API (market data, account inquiry, ISA tax-allowance calculator) to Claude Desktop / Claude Code.",
   "private": false,
   "type": "module",