linkbreakers-mcp 1.183.3 → 1.185.0

package/README.md

@@ -1,8 +1,29 @@
 # linkbreakers-mcp
 
-Local stdio bridge to the hosted [Linkbreakers](https://linkbreakers.com) MCP server at `https://mcp.linkbreakers.com`, for MCP clients that can only start local (stdio) servers.
+**An MCP server that lets AI agents create and track QR codes.** Connect Claude, Cursor, VS Code or any MCP client to [Linkbreakers](https://linkbreakers.com/mcp?utm_source=github&utm_content=linkbreakers-mcp) and your agent can create a dynamic QR code and its short link, style the code, put a lead capture form between the scan and the destination and read back every scan: device, country, city and time, visitors and analytics.
 
-If your client supports remote MCP servers, connect it to `https://mcp.linkbreakers.com` directly instead. See the [setup guide](https://linkbreakers.com/help/article/mcp-server-setup).
+```bash
+npx -y linkbreakers-mcp
+```
+
+Sign in with OAuth on the first request, nothing to paste. Works on every Linkbreakers plan, Free included.
+
+What an agent can ask for, and the tools it uses:
+
+| Ask | Tools |
+| --- | --- |
+| "Make a QR code for our spring poster that opens example.com/spring" | `links_create` |
+| "Make one code per store from this list" | `links_create_bulk` |
+| "Make the code navy with rounded dots" | `qrcodedesigns_update` |
+| "Ask for an email before the redirect" | `workflow_steps_create` |
+| "Who scanned the poster this week, and from where?" | `events_list`, `visitors_list` |
+| "How many scans did the workspace get?" | `metrics_workspace` |
+
+In clients that render MCP Apps (Claude, ChatGPT), `links_create`, `links_get`, `visitors_list` and `metrics_workspace` answer with an interactive card.
+
+## How it works
+
+This package is a local stdio bridge to the hosted server at `https://mcp.linkbreakers.com`, for MCP clients that can only start local (stdio) servers. If your client supports remote MCP servers, connect it to `https://mcp.linkbreakers.com` directly instead. See the [setup guide](https://linkbreakers.com/help/article/mcp-server-setup?utm_source=github&utm_content=linkbreakers-mcp).
 
 Tools, resources and their schemas come from the hosted server: this package forwards every request unchanged, so it always matches what `https://mcp.linkbreakers.com` serves.
 
@@ -21,24 +42,13 @@ Tools, resources and their schemas come from the hosted server: this package for
 
 ### Authentication
 
-- **OAuth (default):** on the first request, your browser opens the Linkbreakers sign-in. Once you approve, the tools appear. Tokens are stored in `~/.config/linkbreakers/mcp-oauth.json` and refreshed automatically.
-- **API token:** set `LINKBREAKERS_API_TOKEN` to a workspace API token from the [dashboard](https://app.linkbreakers.com) to skip the browser.
+On the first request, your browser opens the Linkbreakers sign-in. Once you approve, the tools appear. Tokens are stored in `~/.config/linkbreakers/mcp-oauth.json` and refreshed automatically.
 
-```json
-{
-  "mcpServers": {
-    "linkbreakers": {
-      "command": "npx",
-      "args": ["-y", "linkbreakers-mcp"],
-      "env": { "LINKBREAKERS_API_TOKEN": "your-workspace-token" }
-    }
-  }
-}
-```
+The MCP server accepts OAuth only: dashboard API tokens are refused, so there
+is nothing to paste. API tokens are for the REST API, the SDKs and the CLI.
 
 | Variable | Default | Purpose |
 | --- | --- | --- |
-| `LINKBREAKERS_API_TOKEN` | unset | Workspace API token, sent as a bearer token |
 | `LINKBREAKERS_MCP_URL` | `https://mcp.linkbreakers.com` | Server to forward to |
 | `LINKBREAKERS_MCP_CALLBACK_PORT` | `47823` | Local port for the OAuth redirect |
 

package/lib/proxy.js

@@ -9,7 +9,6 @@ import { FileOAuthProvider, hasStoredTokens, openBrowser } from './oauth.js';
 
 const { version } = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
 const SERVER_URL = new URL(process.env.LINKBREAKERS_MCP_URL || 'https://mcp.linkbreakers.com');
-const TOKEN = process.env.LINKBREAKERS_API_TOKEN?.trim();
 const REQUEST_TIMEOUT_MS = 5 * 60 * 1000;
 const AUTH_REQUIRED = -32001;
 const DEFAULT_CAPABILITIES = { tools: { listChanged: true }, resources: { listChanged: true } };
@@ -17,15 +16,14 @@ const DEFAULT_CAPABILITIES = { tools: { listChanged: true }, resources: { listCh
 const log = (message) => process.stderr.write(`linkbreakers-mcp: ${message}\n`);
 
 export async function main() {
-  const oauth = TOKEN ? undefined : new FileOAuthProvider(SERVER_URL.href, version);
+  // The MCP server accepts OAuth only: dashboard API tokens are refused.
+  const oauth = new FileOAuthProvider(SERVER_URL.href, version);
   let server;
   let remote;
   let connecting;
   let signIn;
 
-  const transportOptions = TOKEN
-    ? { requestInit: { headers: { Authorization: `Bearer ${TOKEN}` } } }
-    : { authProvider: oauth };
+  const transportOptions = { authProvider: oauth };
 
   async function connectRemote(transport = new StreamableHTTPClientTransport(SERVER_URL, transportOptions)) {
     const client = new Client({ name: 'linkbreakers-mcp', version }, { capabilities: {} });
@@ -38,7 +36,7 @@ export async function main() {
     try {
       await client.connect(transport);
     } catch (err) {
-      if (oauth && err instanceof UnauthorizedError && oauth.authorizationUrl) startSignIn(transport);
+      if (err instanceof UnauthorizedError && oauth.authorizationUrl) startSignIn(transport);
       throw err;
     }
     return client;
@@ -66,12 +64,10 @@ export async function main() {
   }
 
   function authError() {
-    const url = oauth?.authorizationUrl;
+    const url = oauth.authorizationUrl;
     return new McpError(
       AUTH_REQUIRED,
-      TOKEN
-        ? 'Linkbreakers rejected LINKBREAKERS_API_TOKEN. Create a workspace API token at https://app.linkbreakers.com, or unset it to sign in with OAuth.'
-        : `Linkbreakers sign-in required. Finish the OAuth sign-in opened in your browser${url ? ` (${url})` : ''}, or set LINKBREAKERS_API_TOKEN to a workspace API token. Tools appear once you are signed in.`,
+      `Linkbreakers sign-in required. Finish the OAuth sign-in opened in your browser${url ? ` (${url})` : ''}. Tools appear once you are signed in.`,
     );
   }
 
@@ -90,7 +86,7 @@ export async function main() {
     }
   }
 
-  if (TOKEN || hasStoredTokens(SERVER_URL.href)) {
+  if (hasStoredTokens(SERVER_URL.href)) {
     try {
       remote = await connectRemote();
     } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "linkbreakers-mcp",
-  "version": "1.183.3",
+  "version": "1.185.0",
   "mcpName": "com.linkbreakers/mcp",
   "description": "Local stdio bridge to the Linkbreakers MCP server (https://mcp.linkbreakers.com) for MCP clients that only run local servers.",
   "keywords": [