notifycx-mcp 1.1.0 → 1.2.0

package/README.md

@@ -6,6 +6,8 @@ Use this in Cursor, Claude Code, or other MCP hosts when a coding agent should c
 
 ## Install (Cursor)
 
+**Already have a key:**
+
 ```json
 {
   "mcpServers": {
@@ -20,23 +22,27 @@ Use this in Cursor, Claude Code, or other MCP hosts when a coding agent should c
 }
 ```
 
-Get your API key from [Credentials](https://notify.cx/dashboard/credentials). Docs: [notify.cx/mcp](https://notify.cx/mcp).
+**No key yet:** omit `NOTIFY_API_KEY`, call `bootstrap_start` → user pastes email OTP → `bootstrap_confirm` → put the returned `api_key` into MCP env. See [agent bootstrap docs](https://notify.cx/docs/agent-bootstrap-no-dashboard).
+
+Never paste API key secrets into chat logs.
 
 ## Tools
 
 | Tool | When to use |
 |------|-------------|
+| `bootstrap_start` / `bootstrap_confirm` | Sign up or recover without the dashboard (no API key required) |
 | `send_email` | Production transactional send (verified `from`) |
 | `send_test_email` | Non-delivering API rehearsal |
-| `add_domain` | Add domain + get DNS records (SPF/DKIM) |
+| `add_domain` | Add domain + structured `dnsRecords` (type/name/value) for the user to publish at their host |
 | `check_domain` | Poll verification after DNS is configured |
-| `list_domains` / `get_domain` | Domain / SPF / DKIM status |
+| `list_domains` / `get_domain` | Domain status + `dnsRecords` |
 | `list_webhooks` / `create_webhook` / `update_webhook` / `delete_webhook` / `get_webhook` / `test_webhook` | Webhook setup (Pro+) |
 | `list_email_logs` | Recent delivery logs |
 | `get_usage` | Quota / account_verified |
-| `list_api_keys` | Key metadata (prefix only — create keys in the dashboard) |
+| `list_api_keys` / `create_api_key` / `regenerate_api_key` / `delete_api_key` | Manage keys |
+| `create_billing_checkout` | Stripe Checkout URL for Pro/Scale |
 
-Typical setup path: `add_domain` → add DNS → `check_domain` → `send_email`. Optional: `create_webhook` after a verified domain.
+Typical setup path: bootstrap → `add_domain` → user publishes `dnsRecords` → `check_domain` → `send_email`.
 
 ## Pricing
 

package/dist/index.d.ts

@@ -1,2 +1 @@
-
-export {  }
+#!/usr/bin/env node

package/dist/index.js

@@ -1,15 +1,22 @@
 #!/usr/bin/env node
+#!/usr/bin/env node
 
 // src/index.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import Notify, { NotifyError } from "notifycx";
 import { z } from "zod";
+function baseUrl() {
+  return process.env.NOTIFY_BASE_URL;
+}
+function optionalApiKey() {
+  return process.env.NOTIFY_API_KEY;
+}
 function requireApiKey() {
-  const apiKey = process.env.NOTIFY_API_KEY;
+  const apiKey = optionalApiKey();
   if (!apiKey) {
     throw new Error(
-      "Missing NOTIFY_API_KEY. Set it in your MCP server env (dashboard \u2192 Credentials)."
+      "Missing NOTIFY_API_KEY. Run bootstrap_start + bootstrap_confirm first, then set NOTIFY_API_KEY in MCP env to the returned api_key (never paste secrets into chat)."
     );
   }
   return apiKey;
@@ -17,7 +24,7 @@ function requireApiKey() {
 function client() {
   return new Notify({
     apiKey: requireApiKey(),
-    baseUrl: process.env.NOTIFY_BASE_URL,
+    baseUrl: baseUrl(),
     client: "mcp"
   });
 }
@@ -77,8 +84,56 @@ var webhookWriteShape = {
 };
 var server = new McpServer({
   name: "notifycx-mcp",
-  version: "1.1.0"
+  version: "1.2.0"
 });
+server.tool(
+  "bootstrap_start",
+  "Start Notify agent signup or key recovery without the dashboard. Sends a 6-digit email OTP. No NOTIFY_API_KEY required. Ask the user to paste the code, then call bootstrap_confirm. Requires acceptTerms: true (https://notify.cx/terms).",
+  {
+    email: z.string().email().describe("User email for the Notify account"),
+    intent: z.enum(["signup", "recover"]).optional().describe("signup (default) or recover existing account"),
+    acceptTerms: z.boolean().describe("Must be true \u2014 user accepts Terms and AUP")
+  },
+  async (args) => {
+    try {
+      return ok(
+        await Notify.bootstrapStart({
+          email: args.email,
+          intent: args.intent,
+          acceptTerms: args.acceptTerms,
+          baseUrl: baseUrl()
+        })
+      );
+    } catch (err) {
+      return fail(err);
+    }
+  }
+);
+server.tool(
+  "bootstrap_confirm",
+  "Confirm the email OTP from bootstrap_start. Returns api_key once \u2014 instruct the user to put it in MCP env NOTIFY_API_KEY (do not leave the secret in chat). Then use add_domain / send_email. No NOTIFY_API_KEY required for this call.",
+  {
+    email: z.string().email(),
+    code: z.string().regex(/^\d{6}$/).describe("6-digit code from email"),
+    intent: z.enum(["signup", "recover"]).optional(),
+    clientHint: z.string().max(64).optional().describe("e.g. cursor, chatgpt")
+  },
+  async (args) => {
+    try {
+      return ok(
+        await Notify.bootstrapConfirm({
+          email: args.email,
+          code: args.code,
+          intent: args.intent,
+          clientHint: args.clientHint,
+          baseUrl: baseUrl()
+        })
+      );
+    } catch (err) {
+      return fail(err);
+    }
+  }
+);
 server.tool(
   "send_email",
   "Send transactional email via Notify (password reset, receipt, magic link, invoice, etc.) with a verified from domain. Use when the user wants production delivery. Prefer html for the body. For non-delivering API rehearsal before domain verification, use send_test_email instead.",
@@ -105,7 +160,7 @@ server.tool(
 );
 server.tool(
   "list_domains",
-  "List Notify sending domains and verification status (SPF/DKIM). Use when wiring a production from address or debugging domain auth. Includes DNS tokens when present.",
+  "List Notify sending domains and verification status (SPF/DKIM). Includes structured dnsRecords (type/name/value) for the user to publish at their DNS host.",
   {},
   async () => {
     try {
@@ -117,7 +172,7 @@ server.tool(
 );
 server.tool(
   "get_domain",
-  "Get one Notify sending domain by hostname, including DNS records/tokens for pending verification.",
+  "Get one Notify sending domain by hostname, including dnsRecords (type/name/value) and raw DNS tokens for pending verification. Show dnsRecords to the user so they can add them at their hosting provider.",
   {
     domain: z.string().min(1).describe("Domain hostname, e.g. example.com")
   },
@@ -131,7 +186,7 @@ server.tool(
 );
 server.tool(
   "add_domain",
-  "Add a sending domain and start SPF/DKIM verification. Returns DNS records the user must add. After DNS is configured, call check_domain. Then use send_email with a from address on that domain.",
+  "Add a sending domain and start SPF/DKIM verification. Returns dnsRecords (type/name/value) the user must add at their DNS host \u2014 Notify does not publish DNS. After DNS is configured, call check_domain. Then use send_email with a from address on that domain.",
   {
     domain: z.string().min(1).describe("Domain hostname to verify, e.g. example.com"),
     dnsProvider: z.enum([
@@ -142,7 +197,7 @@ server.tool(
       "godaddy",
       "route53",
       "other"
-    ]).optional().describe("Optional DNS provider hint for dashboard UX")
+    ]).optional().describe("Optional DNS provider hint for host/name formatting")
   },
   async (args) => {
     try {
@@ -154,7 +209,7 @@ server.tool(
 );
 server.tool(
   "check_domain",
-  "Poll SES for domain SPF/DKIM verification status after DNS records were added. Call after add_domain. When both succeed, production send_email with that from domain is unlocked.",
+  "Poll SES for domain SPF/DKIM verification status after DNS records were added. Call after add_domain. When both succeed, production send_email with that from domain is unlocked and the plan email limit lifts.",
   {
     domain: z.string().min(1).describe("Domain hostname to check")
   },
@@ -196,7 +251,7 @@ server.tool(
 );
 server.tool(
   "list_api_keys",
-  "List API key metadata for the account (id, name, prefix only \u2014 never the full secret). Create or rotate keys in the Notify dashboard Credentials page.",
+  "List API key metadata for the account (id, name, prefix only \u2014 never the full secret).",
   {},
   async () => {
     try {
@@ -206,6 +261,64 @@ server.tool(
     }
   }
 );
+server.tool(
+  "create_api_key",
+  "Create an API key (full_access required). Free plan allows one key. Prefer sending_access + domainId for app keys on Pro+.",
+  {
+    name: z.string().min(1),
+    permission: z.enum(["full_access", "sending_access"]).optional(),
+    domainId: z.string().uuid().optional()
+  },
+  async (args) => {
+    try {
+      return ok(await client().createApiKey(args));
+    } catch (err) {
+      return fail(err);
+    }
+  }
+);
+server.tool(
+  "regenerate_api_key",
+  "Rotate an API key secret by keyId. Returns the new api_key once \u2014 update NOTIFY_API_KEY / app secrets.",
+  {
+    keyId: z.string().uuid()
+  },
+  async (args) => {
+    try {
+      return ok(await client().regenerateApiKey(args.keyId));
+    } catch (err) {
+      return fail(err);
+    }
+  }
+);
+server.tool(
+  "delete_api_key",
+  "Deactivate an API key by keyId. Cannot delete the last full_access key.",
+  {
+    keyId: z.string().uuid()
+  },
+  async (args) => {
+    try {
+      return ok(await client().deleteApiKey(args.keyId));
+    } catch (err) {
+      return fail(err);
+    }
+  }
+);
+server.tool(
+  "create_billing_checkout",
+  "Get a Stripe Checkout URL for Pro or Scale (full_access key). User opens the URL in a browser to pay \u2014 not the Notify dashboard.",
+  {
+    plan: z.enum(["pro", "scale"]).optional()
+  },
+  async (args) => {
+    try {
+      return ok(await client().createBillingCheckout({ plan: args.plan }));
+    } catch (err) {
+      return fail(err);
+    }
+  }
+);
 server.tool(
   "list_webhooks",
   "List Notify webhook subscriptions (URL, events, domain scope).",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "notifycx-mcp",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Official MCP server for Notify — transactional email tools for coding agents",
   "type": "module",
   "bin": {
@@ -27,7 +27,7 @@
   "homepage": "https://notify.cx/mcp",
   "repository": {
     "type": "git",
-    "url": "https://github.com/sunil-sandhu/notifycx.git",
+    "url": "https://github.com/notifycx/notifycx.git",
     "directory": "mcp"
   },
   "author": "notify.cx",
@@ -37,7 +37,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
-    "notifycx": "^1.1.0",
+    "notifycx": "^1.2.0",
     "zod": "^3.24.2"
   },
   "devDependencies": {