myclaw-toolkit 1.0.10 → 1.0.11

package/README.md

@@ -4,8 +4,24 @@
 [![npm](https://img.shields.io/npm/v/myclaw-toolkit)](https://www.npmjs.com/package/myclaw-toolkit)
 [![npm downloads](https://img.shields.io/npm/dw/myclaw-toolkit)](https://www.npmjs.com/package/myclaw-toolkit)
 [![license](https://img.shields.io/npm/l/myclaw-toolkit)](./LICENSE)
+[![tests](https://github.com/Dusheh/myclaw-toolkit/actions/workflows/test.yml/badge.svg)](https://github.com/Dusheh/myclaw-toolkit/actions/workflows/test.yml)
 
-**24-in-1 developer utility toolkit as an MCP server.** Search the web, convert currencies, check crypto prices, generate QR codes, format JSON, and more — all from any MCP-compatible AI assistant.
+**24-in-1 developer utility toolkit as an MCP server — privacy-first.** Search the web, convert currencies, check crypto prices, generate QR codes, format JSON, and more — all from any MCP-compatible AI assistant.
+
+## 🔒 Privacy-First Design
+
+Most tools run **100% locally on your machine** — no data ever leaves your device:
+
+| Local tools (zero network) | Tools requiring remote API |
+|---|---|
+| timestamp, uuid, base64, hash | web_search, news_search |
+| qrcode, wifi_qrcode | product_search, exchange_rate |
+| color_tools, json_formatter | crypto_price, domain_check |
+| url_tools, text_tools | rss_feed, read_page |
+| bmi_calculator, vcard_generator | ai_translate, quote, compare |
+| markdown_to_html | |
+
+WiFi passwords, JSON data, text content, hashes, and Markdown documents are all processed entirely on-device. Only tools that genuinely need external data (search, exchange rates, etc.) call the remote API.
 
 ## Quick Install
 
@@ -21,7 +37,7 @@ Or add to your AI client:
   "mcpServers": {
     "myclaw-toolkit": {
       "command": "npx",
-      "args": ["myclaw-toolkit"]
+      "args": ["-y", "myclaw-toolkit"]
     }
   }
 }
@@ -34,7 +50,7 @@ claude mcp add myclaw-toolkit -- npx myclaw-toolkit
 
 ## Tools
 
-### Utility (Free)
+### Utility (Local)
 | Tool | Description |
 |------|-------------|
 | `timestamp` | Current Unix timestamp & ISO 8601 |
@@ -47,16 +63,16 @@ claude mcp add myclaw-toolkit -- npx myclaw-toolkit
 | `url_tools` | URL encode/decode |
 | `text_tools` | Text count, reverse, case |
 
-### Data (Free)
+### Data
 | Tool | Description |
 |------|-------------|
-| `exchange_rate` | Real-time currency rates |
-| `crypto_price` | Cryptocurrency prices |
-| `domain_check` | Domain whois & availability |
-| `bmi_calculator` | BMI calculator |
-| `vcard_generator` | vCard (.vcf) generator |
-| `compare` | Side-by-side comparison |
-| `quote` | Random inspirational quotes |
+| `exchange_rate` | Real-time currency rates (API) |
+| `crypto_price` | Cryptocurrency prices (API) |
+| `domain_check` | Domain whois & availability (API) |
+| `bmi_calculator` | BMI calculator (local) |
+| `vcard_generator` | vCard (.vcf) generator (local) |
+| `compare` | Side-by-side comparison (API) |
+| `quote` | Random inspirational quotes (API) |
 
 ### Search & Content
 | Tool | Description |
@@ -70,9 +86,9 @@ claude mcp add myclaw-toolkit -- npx myclaw-toolkit
 ### Processing
 | Tool | Description |
 |------|-------------|
-| `markdown_to_html` | Markdown → HTML |
-| `wifi_qrcode` | WiFi QR code generator |
-| `ai_translate` | AI translation |
+| `markdown_to_html` | Markdown → HTML (local) |
+| `wifi_qrcode` | WiFi QR code generator (local — password never sent) |
+| `ai_translate` | AI translation via MyMemory API |
 
 ### Health
 | Tool | Description |
@@ -83,10 +99,14 @@ claude mcp add myclaw-toolkit -- npx myclaw-toolkit
 
 Listed on these MCP registries (help others find the toolkit):
 
-- [Glama](https://glama.ai/mcp/servers/Dusheh/myclaw-toolkit) — badge above
-- [mcp.so](https://mcp.so) — submitted via form
-- [Smithery](https://smithery.ai) — submitted via form
-- [awesome-mcp-servers](https://github.com/punkpeye/awesome-mcp-servers) — PR pending
+- [Glama](https://glama.ai/mcp/servers/Dusheh/myclaw-toolkit) — auto-indexed
+- [MCPFind](https://www.mcpfind.org/) — PR pending
+- [mcp.so](https://mcp.so) — submitted
+- [awesome-mcp-servers (punkpeye)](https://github.com/punkpeye/awesome-mcp-servers) — PR pending
+- [awesome-mcp-servers (appcypher)](https://github.com/appcypher/awesome-mcp-servers) — PR pending
+- [Awesome MCP List](https://github.com/MobinX/awesome-mcp-list) — PR pending
+- [MCP.Directory](https://mcp.directory) — submitted
+- [Official MCP Registry](https://registry.modelcontextprotocol.io) — published, awaiting indexing
 
 ## Environment Variables
 
@@ -98,11 +118,14 @@ Listed on these MCP registries (help others find the toolkit):
 
 ```bash
 git clone https://github.com/Dusheh/myclaw-toolkit
-cd toolkit
+cd myclaw-toolkit
 npm install
-npm run dev
+npm run dev     # Run with tsx
+npm run build   # Compile TypeScript
+npm test        # Run 24 unit tests
+npm run lint    # ESLint check
 ```
 
 ## License
 
-MIT — [MyClaw](https://myclaw.dev)
+MIT

package/dist/index.js

@@ -19,6 +19,18 @@ import { marked } from "marked";
 // ── Version (read from package.json, never hardcoded) ─────────────
 const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf-8"));
 const VERSION = pkg.version;
+// ── Rate Limiter (protects backend from runaway AI clients) ─────────
+const RATE_WINDOW_MS = 60_000; // 1 minute window
+const MAX_REQUESTS_PER_WINDOW = 100;
+let requestTimestamps = [];
+function checkRateLimit() {
+    const now = Date.now();
+    requestTimestamps = requestTimestamps.filter(t => now - t < RATE_WINDOW_MS);
+    if (requestTimestamps.length >= MAX_REQUESTS_PER_WINDOW)
+        return false;
+    requestTimestamps.push(now);
+    return true;
+}
 // ── Config ──────────────────────────────────────────────────────────
 const API_BASE = process.env.MYCLAW_API || "http://47.103.7.241";
 const USER_AGENT = `myclaw-toolkit-mcp/${VERSION}`;
@@ -28,6 +40,9 @@ const FETCH_TIMEOUT_MS = 15_000;
  * Only used for tools that genuinely need external data.
  */
 async function apiCall(path) {
+    if (!checkRateLimit()) {
+        return JSON.stringify({ error: "Rate limit exceeded", limit: `${MAX_REQUESTS_PER_WINDOW} requests per ${RATE_WINDOW_MS / 1000}s`, path });
+    }
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
     try {

package/dist/tools.test.js

@@ -237,3 +237,34 @@ describe("wifi_qrcode format", () => {
         expect(wifiString).toBe("WIFI:S:MyNetwork;T:WPA;P:secret123;;");
     });
 });
+// ═══════════════════════════════════════════════════════════════════
+// Rate Limiter Tests
+// ═══════════════════════════════════════════════════════════════════
+describe("rate_limiter", () => {
+    it("allows requests within limit", () => {
+        const RATE_WINDOW_MS = 60_000;
+        const MAX = 100;
+        let timestamps = [];
+        const check = () => {
+            const now = Date.now();
+            timestamps = timestamps.filter(t => now - t < RATE_WINDOW_MS);
+            if (timestamps.length >= MAX)
+                return false;
+            timestamps.push(now);
+            return true;
+        };
+        // First 100 requests should pass
+        for (let i = 0; i < MAX; i++) {
+            expect(check()).toBe(true);
+        }
+        // 101st should fail
+        expect(check()).toBe(false);
+    });
+    it("resets after window expires", () => {
+        const now = Date.now();
+        // Create 100 timestamps all older than the window
+        const timestamps = Array.from({ length: 100 }, () => now - 90_000);
+        const filtered = timestamps.filter(t => now - t < 60_000);
+        expect(filtered.length).toBe(0); // all expired
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "myclaw-toolkit",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "description": "23-in-1 developer utility toolkit as an MCP server — search, exchange rates, crypto, QR codes, translation, and more",
   "mcpName": "io.github.Dusheh/myclaw-toolkit",
   "type": "module",