mcpscraper-memory 1.21.2 → 1.22.0

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to MCP Memory are documented here. The format is based on [K
 
 ## [Unreleased]
 
+## [1.22.0] - 2026-09-02
+
+### Changed
+
+- Accepted five-minute, audience-bound MCP Scraper assertions so customers use their single root API key for Memory, Research, and CRM.
+- Routed the standalone CLI and public setup documentation through `https://mcpscraper.dev/mcp` with `MCP_SCRAPER_API_KEY`.
+- Normalized every direct tool schema for strict current MCP clients.
+
+### Security
+
+- Retired new non-operator Memory-key issuance and scope mutation while retaining existing direct keys and revoke operations for one compatibility release.
+
 ## [1.21.2] - 2026-09-01
 
 ### Added
@@ -240,7 +252,8 @@ All notable changes to MCP Memory are documented here. The format is based on [K
 - The hosted service now consumes `mcpscraper-memory-db` 1.5 and `mcpscraper-memory-tools` 1.6, aligning direct OAuth and stdio clients with the current 14-vault Smart RAG contract, including bounded multi-query retrieval, graph expansion, and Jina reranking metadata.
 - Server guidance now documents the Skills vault and the exact hybrid retrieval workflow exposed by `memory-search`.
 
-[Unreleased]: https://github.com/VilovietaSEO/mcp-scraper/compare/memory-v1.21.2...HEAD
+[Unreleased]: https://github.com/VilovietaSEO/mcp-scraper/compare/memory-v1.22.0...HEAD
+[1.22.0]: https://github.com/VilovietaSEO/mcp-scraper/compare/memory-v1.21.2...memory-v1.22.0
 [1.21.2]: https://github.com/VilovietaSEO/mcp-scraper/compare/memory-v1.21.1...memory-v1.21.2
 [1.21.1]: https://github.com/VilovietaSEO/mcp-scraper/compare/memory-v1.21.0...memory-v1.21.1
 [1.21.0]: https://github.com/VilovietaSEO/mcp-scraper/compare/memory-v1.20.0...memory-v1.21.0

package/README.md

@@ -5,8 +5,9 @@ purpose-built vaults, semantic search, typeahead, and real structured data table
 filter, sort) — plus **Scheduled Actions**: freeform-text automations that run on a cadence, using
 your [MCP Scraper](https://mcpscraper.dev) tools to gather live data and mcp-memory to store it.
 
-There is one backend: `https://memory.mcpscraper.dev`. This package is a thin local proxy to it —
-every tool call is forwarded over HTTPS with your API key; nothing runs or is stored on your machine.
+Customer setup uses one endpoint, `https://mcpscraper.dev/mcp`, and one long-lived credential,
+`MCP_SCRAPER_API_KEY`, for scraping and Memory. This package is a compatibility stdio proxy to that
+unified server; nothing runs or is stored on your machine.
 
 This repository also owns the independently publishable `mcpscraper-memory-db` workspace for
 Postgres/PgVector storage, vault contracts, Jina embeddings, and reranking, and the
@@ -30,10 +31,10 @@ npm run verify:packages
 Package identities and release versions remain independent. See [`packages/README.md`](packages/README.md)
 for ownership boundaries and import provenance.
 
-## Two ways to connect
+## Connect
 
-**OAuth remote connector** (Claude.ai web, Claude Desktop's "Add custom connector") — no install,
-no key management. Add `https://memory.mcpscraper.dev/mcp` and log in.
+**OAuth remote connector** (Claude.ai web, Claude Desktop's "Add custom connector") — add
+`https://mcpscraper.dev/mcp` and log in.
 
 **This package**, for clients that only support local stdio MCP servers (Claude Code, Cursor,
 Windsurf, and similar):
@@ -44,14 +45,13 @@ Windsurf, and similar):
     "mcp-memory": {
       "command": "npx",
       "args": ["-y", "mcpscraper-memory"],
-      "env": { "MCP_MEMORY_API_KEY": "mk_..." }
+      "env": { "MCP_SCRAPER_API_KEY": "sk_..." }
     }
   }
 }
 ```
 
-Get your key at `memory.mcpscraper.dev`, or from the mobile Scheduled Actions link
-(`get-schedule-link`).
+Create or rotate the same key used by MCP Scraper at `https://mcpscraper.dev/dashboard`.
 
 ## Scheduled Actions access and billing
 
@@ -86,8 +86,7 @@ Scheduled Actions management links.
 
 ## Environment variables
 
-- `MCP_MEMORY_API_KEY` (or `MCP_MEMORY_KEY`) — required. Alternatively, write the key to
-  `~/.mcp-memory-key` (or point `MCP_MEMORY_KEY_PATH` at a file containing it).
-- `MCP_MEMORY_BASE_URL` — override the backend URL. Defaults to `https://memory.mcpscraper.dev`.
+- `MCP_SCRAPER_API_KEY` — the one customer key used for scraping and Memory.
+- `MCP_SCRAPER_MCP_URL` — optional endpoint override. Defaults to `https://mcpscraper.dev/mcp`.
 
 Run `npx mcpscraper-memory --help` for setup instructions from the terminal.

package/dist/bin/mcp-stdio-server.js

@@ -1,51 +1,34 @@
 #!/usr/bin/env node
 
 // bin/mcp-stdio-server.ts
-import { readFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { ListToolsRequestSchema, CallToolRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 
 // src/version.ts
-var PACKAGE_VERSION = "1.21.2";
+var PACKAGE_VERSION = "1.22.0";
 
 // bin/mcp-stdio-server.ts
 var wantsHelp = process.argv.includes("--help") || process.argv.includes("-h");
 var forceStdio = process.argv.includes("--stdio") || process.env.MCP_MEMORY_FORCE_STDIO === "1";
 var interactiveTerminal = Boolean(process.stdin.isTTY && process.stdout.isTTY);
-function readApiKeyFile() {
-  const explicitPath = process.env.MCP_MEMORY_KEY_PATH?.trim();
-  const paths = [explicitPath, join(homedir(), ".mcp-memory-key")].filter(Boolean);
-  for (const path of paths) {
-    try {
-      const value = readFileSync(path, "utf8").trim();
-      if (value) return value;
-    } catch {
-    }
-  }
-  return void 0;
-}
-var apiKey = (process.env.MCP_MEMORY_API_KEY ?? process.env.MCP_MEMORY_KEY ?? readApiKeyFile())?.trim();
+var apiKey = process.env.MCP_SCRAPER_API_KEY?.trim();
 function renderHelp() {
   const status = apiKey ? "configured" : "NOT configured";
   return [
-    `mcp-memory v${PACKAGE_VERSION} \u2014 local stdio bridge to memory.mcpscraper.dev`,
+    `mcp-memory v${PACKAGE_VERSION} \u2014 compatibility bridge to MCP Scraper`,
     "",
     `API key: ${status}`,
     "",
-    "This package is a thin proxy: every tool call is forwarded over HTTPS to",
-    "your hosted mcp-memory account, the same one used by the OAuth remote",
-    "connector. Nothing runs or is stored locally.",
+    "This compatibility package forwards every tool call to the canonical",
+    "MCP Scraper server. Scraping and Memory use the same customer API key.",
     "",
     "Setup:",
-    "  1. Get your key from memory.mcpscraper.dev (or the mobile automations link).",
-    "  2. Set it: export MCP_MEMORY_API_KEY=mk_...",
-    "     (or write it to ~/.mcp-memory-key)",
+    "  1. Create or copy your key at https://mcpscraper.dev/dashboard.",
+    "  2. Set it: export MCP_SCRAPER_API_KEY=sk_...",
     "  3. Add to your MCP client config:",
     '     { "command": "npx", "args": ["-y", "mcpscraper-memory"],',
-    '       "env": { "MCP_MEMORY_API_KEY": "mk_..." } }',
+    '       "env": { "MCP_SCRAPER_API_KEY": "sk_..." } }',
     "",
     "Flags: --stdio (skip this screen and run directly), --help",
     ""
@@ -56,11 +39,10 @@ if (!forceStdio && (interactiveTerminal || wantsHelp)) {
   process.exit(0);
 }
 if (!apiKey) {
-  process.stderr.write("MCP_MEMORY_API_KEY env var or ~/.mcp-memory-key is required\n");
+  process.stderr.write("MCP_SCRAPER_API_KEY is required\n");
   process.exit(1);
 }
-var baseUrl = (process.env.MCP_MEMORY_BASE_URL?.trim() || "https://memory.mcpscraper.dev").replace(/\/$/, "");
-var remoteUrl = `${baseUrl}/mcp`;
+var remoteUrl = (process.env.MCP_SCRAPER_MCP_URL?.trim() || "https://mcpscraper.dev/mcp").replace(/\/$/, "");
 var rpcId = 0;
 function parseRpcBody(text) {
   const dataLine = text.split("\n").find((line) => line.startsWith("data:"));
@@ -73,7 +55,7 @@ async function rpc(method, params) {
     headers: {
       "Content-Type": "application/json",
       Accept: "application/json, text/event-stream",
-      Authorization: `Bearer ${apiKey}`
+      "x-api-key": apiKey
     },
     body: JSON.stringify({ jsonrpc: "2.0", id: ++rpcId, method, params })
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcpscraper-memory",
-  "version": "1.21.2",
+  "version": "1.22.0",
   "description": "mcp-memory — a hosted, multi-tenant, access-controlled per-user Obsidian/Neon memory exposed AS an MCP server, with a scheduled optimization layer. Its own standalone MCP product.",
   "type": "module",
   "bin": {
@@ -30,6 +30,7 @@
     "build": "npm run build:packages && npm run build:server && npm run build:cli",
     "build:server": "node scripts/build-mastra-with-released-deps.mjs && node scripts/verify-mastra-build.mjs",
     "build:packages": "npm run build --workspace=mcpscraper-memory-db && npm run build --workspace=mcpscraper-memory-tools",
+    "verify:mcp-schema": "tsx scripts/verify-strict-mcp-schema.ts",
     "build:cli": "tsup",
     "prepack": "npm run build:cli",
     "test": "npm run test:packages && npm run test:server",
@@ -47,8 +48,8 @@
     "@mastra/mcp": "latest",
     "@mastra/pg": "latest",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "mcpscraper-memory-db": "1.17.1",
-    "mcpscraper-memory-tools": "1.18.2",
+    "mcpscraper-memory-db": "1.18.0",
+    "mcpscraper-memory-tools": "1.19.0",
     "zod": "^3.25.0"
   },
   "devDependencies": {