netintel-mcp 1.1.54 → 1.1.56

package/README.md

@@ -38,7 +38,7 @@ Or add manually to your Claude Desktop config:
 
 ## Requirements
 - **Optional:** `EVM_PRIVATE_KEY` — a dedicated agent wallet holding USDC on Base mainnet (gasless; a few dollars is plenty). With it, every tool pays its listed price automatically.
-- **Without a wallet** the server still runs: `netintel_dns_lookup`, `netintel_ssl_cert`, `netintel_whois_lookup`, `netintel_subnet_calc` and `netintel_email_auth` work free (about 30 calls/hour per client, then the normal price), and paid tools reply with what they cost and how to fund. `netintel_wallet_status` shows the wallet, its USDC balance and the free tools.
+- **Without a wallet** the server still runs: `netintel_dns_lookup`, `netintel_ssl_cert`, `netintel_whois_lookup`, `netintel_subnet_calc` and `netintel_email_auth` work free (about 30 calls/hour per client, then the normal price), and paid tools reply with what they cost and how to fund. `netintel_wallet_status` shows the wallet, its USDC balance and the free tools. **Spending limits (≥1.1.55):** the server refuses to sign a payment above `NETINTEL_MAX_PER_CALL_USD` (default $0.25) or once it has authorized `NETINTEL_MAX_SESSION_USD` (default $5) in total per process; a refusal returns `SPEND_LIMIT: …` and nothing is paid. Listed prices are what a call costs, not a cap — with a wallet configured every 402 (including a free-tier route past its quota) is paid automatically, so authorize paid calls with your user first.
 
 ## Tools
 

package/dist/client.js

@@ -18,6 +18,40 @@ export const FREE_TOOLS = [
     "netintel_email_auth",
 ];
 let walletAddress = null;
+/**
+ * Spending limits, enforced INSIDE the x402 client immediately before a payment
+ * payload is signed — the only place a limit can be real, because with a wallet
+ * configured every 402 (including a free-tier route past its quota) is paid
+ * automatically. The listed per-call prices are what a route costs, not a cap.
+ *   NETINTEL_MAX_PER_CALL_USD  — refuse any single payment above this (default $0.25)
+ *   NETINTEL_MAX_SESSION_USD   — refuse once this MCP server process has authorized
+ *                                this much in total (default $5.00)
+ * A refusal aborts the payment (nothing is signed or sent) and the tool returns
+ * "SPEND_LIMIT: …" telling the agent which limit and how to raise it. Session
+ * spend counts every authorized payment, whether or not the call then succeeds
+ * (conservative: a payment that settles for a failed call is not charged by
+ * NetIntel, but the signature was still handed out).
+ */
+const SPEND_LIMIT = "SPEND_LIMIT";
+function limit(envName, fallback) {
+    const n = Number(process.env[envName]);
+    return Number.isFinite(n) && n >= 0 ? n : fallback;
+}
+export const MAX_PER_CALL_USD = limit("NETINTEL_MAX_PER_CALL_USD", 0.25);
+export const MAX_SESSION_USD = limit("NETINTEL_MAX_SESSION_USD", 5);
+let sessionAuthorizedUsd = 0;
+let refusedPayments = 0;
+/** What the limits are and how much this server process has authorized so far. */
+export function spendStatus() {
+    return {
+        max_per_call_usd: MAX_PER_CALL_USD,
+        max_session_usd: MAX_SESSION_USD,
+        session_authorized_usd: Number(sessionAuthorizedUsd.toFixed(6)),
+        session_remaining_usd: Number(Math.max(0, MAX_SESSION_USD - sessionAuthorizedUsd).toFixed(6)),
+        refused_payments: refusedPayments,
+        configure: "NETINTEL_MAX_PER_CALL_USD / NETINTEL_MAX_SESSION_USD (env, or the Claude Code plugin config); limits are per MCP server process",
+    };
+}
 /** The configured agent wallet's address, or null when the server runs wallet-less. */
 export function configuredWallet() {
     return walletAddress;
@@ -41,6 +75,25 @@ export async function createClient() {
     walletAddress = signer.address;
     const client = new x402Client();
     registerExactEvmScheme(client, { signer });
+    client.onBeforePaymentCreation(async (context) => {
+        const req = context?.selectedRequirements;
+        const atomic = Number(req?.amount);
+        const usd = atomic / 1_000_000;
+        if (!Number.isFinite(usd) || usd < 0) {
+            refusedPayments += 1;
+            return { abort: true, reason: `${SPEND_LIMIT}: the payment requirements carry no usable amount (got ${JSON.stringify(req?.amount)}); refusing to sign` };
+        }
+        if (usd > MAX_PER_CALL_USD) {
+            refusedPayments += 1;
+            return { abort: true, reason: `${SPEND_LIMIT}: this call costs ${usd} — above the per-call limit of ${MAX_PER_CALL_USD}. Ask the user; to allow it, raise NETINTEL_MAX_PER_CALL_USD (env or plugin config) and restart the server` };
+        }
+        if (sessionAuthorizedUsd + usd > MAX_SESSION_USD) {
+            refusedPayments += 1;
+            return { abort: true, reason: `${SPEND_LIMIT}: this call costs ${usd} and this session has already authorized ${sessionAuthorizedUsd.toFixed(3)} of its ${MAX_SESSION_USD} limit. Ask the user; to continue, raise NETINTEL_MAX_SESSION_USD (env or plugin config) and restart the server` };
+        }
+        sessionAuthorizedUsd += usd;
+        return undefined;
+    });
     return wrapAxiosWithPayment(plain, client);
 }
 /** USDC balance of the configured wallet on Base (keyless public RPC). */

package/dist/index.js

@@ -2,7 +2,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-import { createClient, configuredWallet, walletUsdcBalance, FREE_TOOLS } from "./client.js";
+import { createClient, configuredWallet, walletUsdcBalance, spendStatus, FREE_TOOLS } from "./client.js";
 function ok(data) {
     return { content: [{ type: "text", text: JSON.stringify(data) }] };
 }
@@ -10,6 +10,12 @@ function err(e) {
     const ax = e;
     const status = ax.response?.status ?? "unknown";
     const msg = ax.message ?? String(e);
+    // A spending-limit refusal: the SDK aborted BEFORE signing, so no payment was
+    // made. Hand the agent the exact reason (which limit, how to raise it).
+    const limitAt = msg.indexOf("SPEND_LIMIT:");
+    if (limitAt >= 0) {
+        return { content: [{ type: "text", text: `Payment refused by your spending limit — nothing was paid. ${msg.slice(limitAt)}` }], isError: true };
+    }
     if (status === 402) {
         // The one error a user can act on: the call needs a payment that did not
         // happen. Say what it costs and exactly what to do, instead of "402".
@@ -1278,7 +1284,7 @@ function registerTools(server, api) {
 // server.tool() in there with the api.get/post path that follows it, and this
 // tool makes no API call.
 function registerWalletTool(server) {
-    server.tool("netintel_wallet_status", "Check the agent wallet this MCP server pays NetIntel with: whether a key is configured, its address, and its USDC balance on Base. Free and local (no NetIntel call). Use when a paid tool reports 'Payment required', before funding, or to confirm a top-up arrived. Also lists the tools that work with no wallet at all.", {}, async () => {
+    server.tool("netintel_wallet_status", "Check the agent wallet this MCP server pays NetIntel with: whether a key is configured, its address, its USDC balance on Base, and the spending limits (per call and per session) with how much this session has authorized. Free and local (no NetIntel call). Use when a paid tool reports 'Payment required' or 'SPEND_LIMIT', before funding, or to confirm a top-up arrived. Also lists the tools that work with no wallet at all.", {}, async () => {
         const address = configuredWallet();
         const free = { free_without_wallet: [...FREE_TOOLS], note: "Free tools are rate-limited per client (about 30/hour); over the quota they cost their normal price." };
         if (!address) {
@@ -1286,10 +1292,10 @@ function registerWalletTool(server) {
         }
         try {
             const usdc = await walletUsdcBalance();
-            return ok({ wallet_configured: true, address, usdc_balance_base: usdc, funded: Number(usdc) > 0, top_up: Number(usdc) > 0 ? undefined : `Send USDC on Base to ${address}`, ...free });
+            return ok({ wallet_configured: true, address, usdc_balance_base: usdc, funded: Number(usdc) > 0, top_up: Number(usdc) > 0 ? undefined : `Send USDC on Base to ${address}`, spending_limits: spendStatus(), ...free });
         }
         catch (e) {
-            return ok({ wallet_configured: true, address, usdc_balance_base: null, balance_error: String(e.message).slice(0, 160), ...free });
+            return ok({ wallet_configured: true, address, usdc_balance_base: null, balance_error: String(e.message).slice(0, 160), spending_limits: spendStatus(), ...free });
         }
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "netintel-mcp",
-  "version": "1.1.54",
+  "version": "1.1.56",
   "mcpName": "io.github.kjgueye/netintel-mcp",
   "repository": {
     "type": "git",