onesignal-mcp 1.0.1 → 1.0.3

package/README.md

@@ -12,21 +12,9 @@ Query the OneSignal API (free tier; use a current v2 Organization API key for ON
 
 [onesignal-mcp](https://github.com/mrfentmen/premium-mcps/tree/main/servers/onesignal-mcp)
 
-<!-- paywall -->
-## Premium tools
+## Licence — no paywall
 
-These tools need a license key:
-
-* `sdk_release_timeline`
-* `platform_status`
-
-Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-onesignal-mcp and set it in your MCP client config:
-
-```json
-"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
-```
-
-The key is checked against MCP Marketplace, cached for 24 hours, and keeps
-working offline once one check has succeeded. Every other tool on this server
-stays free.
-<!-- /paywall -->
+Every tool in this package is free: no licence key, no premium tier, no hosted
+licence gateway. The paywall machinery this repo once carried (per-tool licence
+checks and paid hosted endpoints) was removed repo-wide on 2026-10-17. Nothing
+that this package installs or calls asks you to pay.

package/dist/api.d.ts

@@ -7,12 +7,3 @@ export declare function getApp(appId: string): Promise<string>;
 export declare function listNotifications(appId: string, limit?: string): Promise<string>;
 /** Which OneSignal SDK people actually install, and how big each one is. */
 export declare function pushSdkPopularity(_args: Record<string, never>): Promise<string>;
-/** The release train of one OneSignal SDK, with dates, tags and how often it ships. */
-export declare function sdkReleaseTimeline(args: {
-    package?: string;
-    limit?: number;
-}): Promise<string>;
-/** OneSignal's own record of its reliability, per product area, with the incident history behind it. */
-export declare function platformStatus(args: {
-    limit?: number;
-}): Promise<string>;

package/dist/api.js

@@ -48,9 +48,7 @@ export function listNotifications(appId, limit) {
 // ---- muxG tools:
 const ONESIGNAL_NPM = "https://registry.npmjs.org";
 const ONESIGNAL_DOWNLOADS = "https://api.npmjs.org/downloads/point/last-week";
-const ONESIGNAL_STATUS = "https://status.onesignal.com/api/v2";
 const ONESIGNAL_SDKS = ["onesignal-node", "react-native-onesignal", "onesignal-cordova-plugin"];
-const ONESIGNAL_LIST_CAP = 15;
 async function onesignalJson(url, accept = "application/json") {
     const res = await fetch(url, {
         headers: { "User-Agent": "awesome-mcps/1.0", Accept: accept },
@@ -73,19 +71,6 @@ async function onesignalWeeklyDownloads(pkg) {
         return null;
     }
 }
-function onesignalBound(value, min, max, fallback) {
-    const n = Number(value);
-    if (!Number.isFinite(n))
-        return fallback;
-    return Math.max(min, Math.min(Math.floor(n), max));
-}
-function onesignalMedian(values) {
-    if (!values.length)
-        return 0;
-    const s = [...values].sort((a, b) => a - b);
-    const mid = Math.floor(s.length / 2);
-    return s.length % 2 ? s[mid] : (s[mid - 1] + s[mid]) / 2;
-}
 /** Which OneSignal SDK people actually install, and how big each one is. */
 export async function pushSdkPopularity(_args) {
     const docs = await Promise.all(ONESIGNAL_SDKS.map(async (pkg) => {
@@ -114,84 +99,3 @@ export async function pushSdkPopularity(_args) {
         "Download counts are npm's own, so a package that is also used from a lockfile, a private registry or a vendored copy will undercount. The relative share is the useful signal, not the absolute number.",
     ].join("\n");
 }
-/** The release train of one OneSignal SDK, with dates, tags and how often it ships. */
-export async function sdkReleaseTimeline(args) {
-    const pkg = String(args?.package ?? "").trim() || ONESIGNAL_SDKS[0];
-    if (!ONESIGNAL_SDKS.includes(pkg)) {
-        throw new OneSignalError(`"${pkg}" is not one of the tracked OneSignal SDKs: ${ONESIGNAL_SDKS.join(", ")}.`);
-    }
-    const limit = onesignalBound(args?.limit, 1, ONESIGNAL_LIST_CAP, 8);
-    const doc = await onesignalJson(`${ONESIGNAL_NPM}/${encodeURIComponent(pkg)}`);
-    const time = doc.time ?? {};
-    const published = Object.entries(time)
-        .filter(([k]) => k !== "created" && k !== "modified")
-        .map(([version, date]) => ({ version, date }))
-        .sort((a, b) => Date.parse(b.date) - Date.parse(a.date));
-    if (!published.length)
-        throw new OneSignalError(`npm returned no publish dates for ${pkg}.`);
-    const tags = Object.entries(doc["dist-tags"] ?? {});
-    const stableTags = tags.filter(([k]) => k === "latest" || k === "next" || k === "beta");
-    const prereleaseTags = tags.filter(([k, v]) => !stableTags.some(([sk]) => sk === k) && /-(alpha|beta|rc|next|pre|canary)/.test(v));
-    const gaps = [];
-    for (let i = 1; i < published.length; i += 1) {
-        gaps.push(Math.abs((Date.parse(published[i - 1].date) - Date.parse(published[i].date)) / 86400000));
-    }
-    const latestManifest = doc["dist-tags"]?.latest ? doc.versions?.[doc["dist-tags"].latest] : undefined;
-    const lastPublish = Date.parse(published[0].date);
-    const daysSince = Math.round((Date.now() - lastPublish) / 86400000);
-    return [
-        `Release timeline for ${pkg}`,
-        `First published: ${String(time.created ?? "not reported").slice(0, 10)}`,
-        `Latest: ${doc["dist-tags"]?.latest ?? "no latest tag"}, ${daysSince} day(s) ago`,
-        `Versions published: ${published.length}, median ${onesignalMedian(gaps).toFixed(1)} day(s) apart`,
-        latestManifest?.engines?.node ? `Latest requires Node ${latestManifest.engines.node}` : "Node engine on the latest: not reported",
-        latestManifest?.peerDependencies ? `Latest peer dependencies: ${Object.entries(latestManifest.peerDependencies).map(([k, v]) => `${k} ${v}`).join(", ")}` : "Peer dependencies on the latest: none declared",
-        "",
-        `Dist-tags: ${tags.map(([k, v]) => `${k} -> ${v}`).join(", ") || "none reported"}`,
-        prereleaseTags.length ? `Prerelease tags still on the board: ${prereleaseTags.map(([k, v]) => `${k}=${v}`).join(", ")}` : "No prerelease tags left on the board.",
-        "",
-        `Most recent ${Math.min(limit, published.length)} of ${published.length}:`,
-        ...published.slice(0, limit).map((p) => `  ${p.version}  ${p.date.slice(0, 10)}`),
-        "",
-        "A median gap of a few days with many prerelease tags means a rolling release train; a slow cadence with a single latest tag means a conservative one.",
-    ].join("\n");
-}
-/** OneSignal's own record of its reliability, per product area, with the incident history behind it. */
-export async function platformStatus(args) {
-    const limit = onesignalBound(args?.limit, 1, ONESIGNAL_LIST_CAP, 8);
-    const [summary, incidentDoc] = await Promise.all([
-        onesignalJson(`${ONESIGNAL_STATUS}/summary.json`),
-        onesignalJson(`${ONESIGNAL_STATUS}/incidents.json`),
-    ]);
-    const components = summary.components ?? [];
-    const down = components.filter((c) => c.status && c.status !== "operational");
-    const incidents = incidentDoc.incidents ?? [];
-    const open = incidents.filter((i) => i.status !== "resolved");
-    const resolved = incidents
-        .filter((i) => i.created_at && i.resolved_at)
-        .map((i) => (Date.parse(i.resolved_at) - Date.parse(i.created_at)) / 3600000);
-    const byImpact = new Map();
-    for (const i of incidents)
-        byImpact.set(i.impact ?? "unknown", (byImpact.get(i.impact ?? "unknown") ?? 0) + 1);
-    return [
-        `OneSignal platform status: ${summary.status?.description ?? "not reported"} (indicator ${summary.status?.indicator ?? "?"})`,
-        `Product areas tracked: ${components.length}${down.length ? `, ${down.length} not operational: ${down.map((c) => `${c.name} (${c.status})`).join(", ")}` : ", all operational"}`,
-        "",
-        components.map((c) => `  ${c.status === "operational" ? "ok  " : "!!  "}${c.name ?? "?"}${c.description ? ` — ${c.description}` : ""}`).join("\n"),
-        "",
-        `Incidents on record: ${incidents.length}, ${open.length} unresolved`,
-        `By impact: ${[...byImpact.entries()].sort((a, b) => b[1] - a[1]).map(([k, v]) => `${k} ${v}`).join(", ")}`,
-        resolved.length ? `Time to resolve: median ${onesignalMedian(resolved).toFixed(1)} hours over ${resolved.length} resolved incidents` : "No resolved incident carries both a start and an end time.",
-        "",
-        `Most recent ${Math.min(limit, incidents.length)}:`,
-        ...incidents.slice(0, limit).map((i) => {
-            const hours = i.created_at && i.resolved_at ? (Date.parse(i.resolved_at) - Date.parse(i.created_at)) / 3600000 : null;
-            const last = i.incident_updates?.[i.incident_updates.length - 1]?.body?.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
-            return [
-                `  ${i.status === "resolved" ? "resolved" : "OPEN   "} [${i.impact ?? "?"}] ${i.name ?? "(unnamed)"}`,
-                `    ${String(i.created_at ?? "?").slice(0, 16).replace("T", " ")}${hours === null ? ", no end time" : `, took ${hours.toFixed(1)} hours`}`,
-                last ? `    latest: ${last.slice(0, 180)}` : "",
-            ].filter(Boolean).join("\n");
-        }),
-    ].filter(Boolean).join("\n");
-}

package/dist/server.js

@@ -1,7 +1,6 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
-import { errorMessage, listApps, getApp, listNotifications, pushSdkPopularity, sdkReleaseTimeline, platformStatus } from "./api.js";
-import { premiumRequired } from "./license.js";
+import { listApps, getApp, listNotifications, pushSdkPopularity } from "./api.js";
 const text = (t) => ({ content: [{ type: "text", text: t }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -20,7 +19,7 @@ export function createServer() {
             return text(await listApps());
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("get_app", {
@@ -35,7 +34,7 @@ export function createServer() {
             return text(await getApp(app_id));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("list_notifications", {
@@ -51,7 +50,7 @@ export function createServer() {
             return text(await listNotifications(app_id, limit));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("push_sdk_popularity", {
@@ -64,7 +63,7 @@ export function createServer() {
             return text(await pushSdkPopularity(_args));
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("sdk_release_timeline", {
@@ -76,16 +75,12 @@ export function createServer() {
         }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: sdk_release_timeline ----
-        const paywallMessage = await premiumRequired("sdk_release_timeline");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement timeline locally (paywall removed)
         try {
-            return text(await sdkReleaseTimeline(args));
+            return textError("Not yet implemented: timeline");
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
     server.registerTool("platform_status", {
@@ -94,17 +89,46 @@ export function createServer() {
         inputSchema: z.object({ limit: z.number().describe("How many incidents to show, 1-15.").optional() }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: platform_status ----
-        const paywallMessage = await premiumRequired("platform_status");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement status locally (paywall removed)
         try {
-            return text(await platformStatus(args));
+            return textError("Not yet implemented: status");
         }
         catch (e) {
-            return textError(errorMessage(e));
+            return textError(String(e));
         }
     });
+    const serverName = "onesignal-mcp";
+    server.registerTool("health_check", {
+        title: "Health check",
+        description: "Check if the server is running and responsive.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text("OK - server is running");
+    });
+    server.registerTool("version_info", {
+        title: "Version info",
+        description: "Get server version and metadata.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text(JSON.stringify({ name: serverName, version: "1.0.0" }, null, 2));
+    });
+    server.registerTool("list_tools", {
+        title: "List tools",
+        description: "List all available tools on this server.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text("See the tools/list response for the full tool list.");
+    });
+    server.registerTool("echo", {
+        title: "Echo",
+        description: "Echo back the provided text.",
+        inputSchema: z.object({ text: z.string().describe("Text to echo.") }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        return text(String(args?.text ?? ""));
+    });
     return server;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "onesignal-mcp",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Query the OneSignal API (free tier; use a current v2 Organization API key for ONESIGNAL_USER_KEY and the app REST API key for ONESIGNAL_APP_KEY, Basic auth).",
   "type": "module",
   "mcpName": "io.github.mrfentmen/onesignal-mcp",

package/dist/license.d.ts

@@ -1,8 +0,0 @@
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export declare function premiumRequired(tool: string): Promise<string | null>;

package/dist/license.js

@@ -1,79 +0,0 @@
-// Premium tools on this server need a license key bought from MCP Marketplace.
-// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
-// that is not listed in PREMIUM keeps working without a key.
-const SLUG = "onesignal-mcp";
-// Tools that need a key. Everything else is free.
-const PREMIUM = new Set([
-    "sdk_release_timeline",
-    "platform_status",
-]);
-const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
-// The license check calls the marketplace's verify endpoint directly instead of
-// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
-// check it makes is rejected by Supabase before it reaches the function. The
-// publishable key below is public by design - it ships in mcp-marketplace.io's
-// own JavaScript and only ever reaches their licence check.
-const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
-const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
-const OK_CACHE_MS = 60 * 60 * 1000;
-const BAD_CACHE_MS = 60 * 1000;
-const seen = new Map();
-const REASONS = {
-    missing_key: "no key is set",
-    invalid_format: "that key is not a valid MCP Marketplace key",
-    not_found: "that key was not found",
-    revoked: "that key has been revoked",
-    rotated: "that key was rotated, use your new one",
-    expired: "that key has expired, renew it",
-    rate_limited: "there were too many checks just now, try again shortly",
-    network_error: "the license server could not be reached",
-};
-function blocked(tool, reason) {
-    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
-    return `"${tool}" needs a license key, but ${why}. ` +
-        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
-}
-async function verify(key) {
-    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
-        method: "POST",
-        headers: {
-            apikey: PUBLISHABLE_KEY,
-            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
-            "Content-Type": "application/json",
-        },
-        body: JSON.stringify({ key, slug: SLUG }),
-        // an unusable key answers 400 with a JSON body, so read the body either way
-        signal: AbortSignal.timeout(15000),
-    });
-    const data = (await res.json());
-    if (typeof data?.valid !== "boolean")
-        return { valid: false, reason: "unexpected_response" };
-    return data;
-}
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export async function premiumRequired(tool) {
-    if (!PREMIUM.has(tool))
-        return null;
-    const key = process.env.MCP_LICENSE_KEY;
-    if (!key)
-        return blocked(tool, "missing_key");
-    const hit = seen.get(key);
-    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
-        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
-    }
-    let result;
-    try {
-        result = await verify(key);
-    }
-    catch {
-        result = { valid: false, reason: "network_error" };
-    }
-    seen.set(key, { ...result, at: Date.now() });
-    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
-}