mcp-zenskar 1.0.9 → 1.0.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-zenskar",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "Model Context Protocol (MCP) server for Zenskar API - customer management, invoicing, and billing operations",
   "main": "src/server.js",
   "bin": {

package/src/server.js

@@ -378,6 +378,32 @@ async function executeAPICall(tool, args) {
       }
     });
     
+    // Nest flat address_* fields into an address object for the Zenskar API
+    if (tool.name === 'createCustomer') {
+      const addressFieldMap = {
+        address_line1: 'line1',
+        address_line2: 'line2',
+        address_city: 'city',
+        address_state: 'state',
+        address_zipCode: 'zipCode',
+        address_country: 'country',
+        address_country_code: 'country_code'
+      };
+      const addressObj = {};
+      let hasAddress = false;
+      Object.entries(addressFieldMap).forEach(([flatKey, nestedKey]) => {
+        if (bodyParams[flatKey] !== undefined) {
+          addressObj[nestedKey] = bodyParams[flatKey];
+          delete bodyParams[flatKey];
+          hasAddress = true;
+        }
+      });
+      if (hasAddress) {
+        bodyParams.address = addressObj;
+        logger.debug(`[${tool.name}] Transformed flat address fields into address object`);
+      }
+    }
+
     // Smart defaults for helper tools
     if (tool.name === 'extractContractFromRaw') {
       // Auto-populate organization_id from user context or env var if not provided
@@ -431,7 +457,11 @@ async function executeAPICall(tool, args) {
   const authToken = userContext?.authorization ||
                     userContext?.headers?.['authorization'] ||
                     userContext?.headers?.['Authorization'] ||
-                    (process.env.ZENSKAR_AUTH_TOKEN ? `Bearer ${process.env.ZENSKAR_AUTH_TOKEN}` : null);
+                    process.env.ZENSKAR_AUTH_TOKEN;
+  const apiKey = userContext?.apiKey ||
+                 userContext?.headers?.['x-api-key'] ||
+                 process.env.ZENSKAR_API_KEY ||
+                 process.env.ZENSKAR_AUTH_TOKEN; // Fallback: use AUTH_TOKEN as API key if it looks like one
 
   if (orgId) {
     headers['organisation'] = orgId;
@@ -440,18 +470,16 @@ async function executeAPICall(tool, args) {
     throw new Error('Organization ID is required for API access. Set ZENSKAR_ORGANIZATION env var or provide in user context.');
   }
 
-  if (authToken) {
+  // Determine auth method: Bearer token for JWT, x-api-key for sandbox keys
+  if (authToken && authToken.startsWith('eyJ')) {
+    // JWT token - use Bearer auth
     headers['Authorization'] = authToken.startsWith('Bearer ') ? authToken : `Bearer ${authToken}`;
+  } else if (apiKey) {
+    // API key (sandbox_* or other) - use x-api-key header
+    headers['x-api-key'] = apiKey;
   } else {
-    logger.error(`[${tool.name}] SECURITY ERROR: No authorization token provided`);
-    throw new Error('Authorization token is required for API access. Set ZENSKAR_AUTH_TOKEN env var or provide in user context.');
-  }
-
-  // Also support legacy x-api-key if provided (optional)
-  if (userContext?.apiKey) {
-    headers['x-api-key'] = userContext.apiKey;
-  } else if (userContext?.headers?.['x-api-key']) {
-    headers['x-api-key'] = userContext.headers['x-api-key'];
+    logger.error(`[${tool.name}] SECURITY ERROR: No authorization provided`);
+    throw new Error('Authorization is required. Set ZENSKAR_AUTH_TOKEN (JWT) or ZENSKAR_API_KEY env var.');
   }
 
   // Add any other headers from user context