onlymcp 0.10.0 → 0.12.0

package/dist/registry/clients.js

@@ -0,0 +1,333 @@
+// Every command below is verified, not remembered: see the "Done 2026-09-25"
+// note under Task 1 Step 1 of
+// docs/superpowers/plans/2026-09-12-onlymcp-v2-07-mcp-clients.md for the
+// local `--help` runs (Claude Code, Codex, Gemini CLI) and the Continue
+// source check. Docs for every other client are linked below in `docsUrl`,
+// fetched and cross-checked on `verifiedOn`.
+//
+// Roo Code is excluded on purpose: its repository was archived on
+// 2026-05-15, and overview §4.7 forbids claiming unverified or dead
+// integrations.
+function bash(text) {
+    return { language: 'bash', text };
+}
+function json(value, path) {
+    return { language: 'json', text: JSON.stringify(value, null, 2), path };
+}
+// -- Claude Code --------------------------------------------------------
+// Verified locally: `claude mcp add --help` (Claude Code 2.1.281) has
+// `-s, --scope <scope>` (default "local") and `-H, --header <header...>`.
+// Docs: https://code.claude.com/docs/en/mcp-quickstart, confirms
+// `--transport http`, `--scope user` and
+// `--header "Authorization: Bearer <token>"` for servers that take a
+// static token instead of OAuth.
+const claudeCode = {
+    id: 'claude-code',
+    name: 'Claude Code',
+    category: 'coding',
+    brand: 'claudecode',
+    methods: ['remote-header', 'remote-oauth', 'stdio'],
+    docsUrl: 'https://code.claude.com/docs/en/mcp-quickstart',
+    verifiedOn: '2026-09-25',
+    caveats: [],
+    install: { configPath: '~/.claude.json', format: 'json', stubDir: null },
+    remote: (ctx) => [
+        bash(`claude mcp add --transport http --scope user onlymcp ${ctx.endpoint} --header "Authorization: Bearer ${ctx.token}"`),
+    ],
+};
+// -- Claude (claude.ai / Claude Desktop) ---------------------------------
+// Docs: https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp
+// Custom connectors are added at claude.ai/customize/connectors with a name
+// and a URL; the page documents an OAuth Client ID/Secret in "Advanced
+// settings" and does not document a static API key or header option, so
+// the only connect method is OAuth.
+const claudeApp = {
+    id: 'claude-app',
+    name: 'Claude',
+    category: 'chat',
+    brand: 'claude',
+    methods: ['remote-oauth'],
+    docsUrl: 'https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp',
+    verifiedOn: '2026-09-25',
+    caveats: ['clients.caveat.claudeHeaderBeta'],
+    install: null,
+    remote: () => null,
+};
+// -- ChatGPT --------------------------------------------------------------
+// Brand 'openai': OpenAI publishes the blossom only, no mark of its own for ChatGPT or for Codex. Both are OpenAI
+// services, so both show the official blossom files (web/public/brand/clients/SOURCES.md has the terms and conditions).
+// Docs: https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt
+// Developer mode (where custom MCP connectors are built and tested) is
+// available for ChatGPT Business and Enterprise/Edu customers on the web;
+// only admins/owners can enable it. Connectors authorize through OAuth.
+const chatgpt = {
+    id: 'chatgpt',
+    name: 'ChatGPT',
+    category: 'chat',
+    brand: 'openai',
+    methods: ['remote-oauth'],
+    docsUrl: 'https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt',
+    verifiedOn: '2026-09-25',
+    caveats: ['clients.caveat.chatgptDeveloperMode'],
+    install: null,
+    remote: () => null,
+};
+// -- Codex ------------------------------------------------------------
+// Verified locally: `codex mcp add --help` (codex-cli 0.154.0) has `--url`
+// and `--bearer-token-env-var`, no header flag.
+// Docs: https://learn.chatgpt.com/docs/extend/mcp?surface=cli (the current
+// redirect target of developers.openai.com/codex/mcp) confirms
+// `bearer_token_env_var` names an environment variable, read by Codex, not
+// a literal token; `http_headers` and `env_http_headers` exist as separate,
+// alternative fields for static/derived headers, never combined with
+// `--header` (Codex has no such flag).
+const codex = {
+    id: 'codex',
+    name: 'Codex',
+    category: 'coding',
+    brand: 'openai',
+    methods: ['remote-header', 'remote-oauth', 'stdio'],
+    docsUrl: 'https://learn.chatgpt.com/docs/extend/mcp?surface=cli',
+    verifiedOn: '2026-09-25',
+    // `bearer_token_env_var` stores only the environment variable's NAME in
+    // config.toml, never the token value: Codex must therefore read the
+    // variable itself at every startup, so the export belongs in the user's
+    // shell profile, not just the terminal session that ran `mcp add`.
+    caveats: ['clients.caveat.codexTokenEnv'],
+    install: { configPath: '~/.codex/config.toml', format: 'toml', stubDir: '~/.codex/skills' },
+    remote: (ctx) => [
+        bash([
+            `export ONLYMCP_TOKEN=${ctx.token}`,
+            `codex mcp add onlymcp --url ${ctx.endpoint} --bearer-token-env-var ONLYMCP_TOKEN`,
+        ].join('\n')),
+    ],
+};
+// -- Gemini CLI -------------------------------------------------------
+// Verified locally: `npx @google/gemini-cli@0.61.0 mcp add --help` has
+// `-s, --scope (user or project) [default: "project"]`, `-t, --transport`,
+// `-H, --header`. Deviation from spec §3.4: without `--scope user` the
+// server lands in the settings of whatever directory the command runs in,
+// not in `~/.gemini/settings.json`, so `--scope user` is required here.
+// Docs: https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md
+const geminiCli = {
+    id: 'gemini-cli',
+    name: 'Gemini CLI',
+    category: 'coding',
+    brand: 'googlegemini',
+    methods: ['remote-header', 'remote-oauth', 'stdio'],
+    docsUrl: 'https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md',
+    verifiedOn: '2026-09-25',
+    caveats: [],
+    install: { configPath: '~/.gemini/settings.json', format: 'json', stubDir: null },
+    remote: (ctx) => [
+        bash(`gemini mcp add --transport http --scope user onlymcp ${ctx.endpoint} --header "Authorization: Bearer ${ctx.token}"`),
+    ],
+};
+// -- Gemini app (Gemini Spark) --------------------------------------------
+// Docs: https://support.google.com/gemini/answer/17209137
+// The page is live although a HEAD request says 404: support.google.com
+// answers HEAD with 404 for every article and GET with 200 (checked
+// 2026-10-05, also on answer/13695044), so a link check has to GET it.
+// Custom connected apps take an MCP server URL and require a personal
+// Google account that is 18+ and in the US, with Keep Activity on. On
+// 2026-09-25 the page limited them to Gemini Spark tasks; since 2026-10-05
+// it reads "workflows with Gemini Spark or take quick actions in chat".
+// The caveat says that since 2026-10-10 (page read with GET that day).
+const geminiApp = {
+    id: 'gemini-app',
+    name: 'Gemini',
+    category: 'chat',
+    brand: 'googlegemini',
+    methods: ['remote-oauth'],
+    docsUrl: 'https://support.google.com/gemini/answer/17209137',
+    verifiedOn: '2026-10-10',
+    caveats: ['clients.caveat.geminiAppSpark'],
+    install: null,
+    remote: () => null,
+};
+// -- GitHub Copilot in VS Code --------------------------------------------
+// Docs: https://code.visualstudio.com/docs/agents/reference/mcp-configuration
+// `.vscode/mcp.json` (workspace) with a top-level `servers` object, entries
+// take `type: "http"`, `url`, `headers`. Copilot policy per
+// https://docs.github.com/en/copilot/how-tos/provide-context/use-mcp-in-your-ide/set-up-the-github-mcp-server:
+// Business/Enterprise tenants must enable "MCP servers in Copilot" first.
+const copilotVscode = {
+    id: 'copilot-vscode',
+    name: 'GitHub Copilot (VS Code)',
+    category: 'ide',
+    brand: 'githubcopilot',
+    methods: ['remote-header', 'remote-oauth', 'stdio'],
+    docsUrl: 'https://code.visualstudio.com/docs/agents/reference/mcp-configuration',
+    verifiedOn: '2026-09-25',
+    caveats: ['clients.caveat.copilotPolicy'],
+    install: null,
+    remote: (ctx) => [
+        json({ servers: { onlymcp: { type: 'http', url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, '.vscode/mcp.json'),
+    ],
+};
+// -- Cursor ---------------------------------------------------------------
+// Docs: https://cursor.com/docs/mcp - `~/.cursor/mcp.json` (global) or
+// `.cursor/mcp.json` (project), top-level `mcpServers`, entries take `url`
+// and `headers`.
+const cursor = {
+    id: 'cursor',
+    name: 'Cursor',
+    category: 'ide',
+    brand: 'cursor',
+    methods: ['remote-header', 'remote-oauth', 'stdio'],
+    docsUrl: 'https://cursor.com/docs/mcp',
+    verifiedOn: '2026-09-25',
+    caveats: [],
+    install: null,
+    remote: (ctx) => [
+        json({ mcpServers: { onlymcp: { url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, '~/.cursor/mcp.json'),
+    ],
+};
+// -- Windsurf ---------------------------------------------------------
+// Docs: https://docs.windsurf.com/windsurf/cascade/mcp -
+// `~/.codeium/windsurf/mcp_config.json`, top-level `mcpServers`, entries
+// take `serverUrl` and `headers`. The 2026 Cognition rebrand to "Devin
+// Desktop" folds Cascade into "Devin Local", but the config path and MCP
+// JSON keys are unchanged (corroborated by a second, independent search,
+// since the docs.windsurf.com redirect briefly showed a Devin-only path).
+// Admin allowlist: once a team allowlists even one server, every
+// non-allowlisted server is blocked for that team.
+const windsurf = {
+    id: 'windsurf',
+    name: 'Windsurf',
+    category: 'ide',
+    brand: 'windsurf',
+    methods: ['remote-header', 'stdio'],
+    docsUrl: 'https://docs.windsurf.com/windsurf/cascade/mcp',
+    verifiedOn: '2026-09-25',
+    caveats: ['clients.caveat.windsurfAllowlist'],
+    install: null,
+    remote: (ctx) => [
+        json({ mcpServers: { onlymcp: { serverUrl: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, '~/.codeium/windsurf/mcp_config.json'),
+    ],
+};
+// -- Cline ------------------------------------------------------------
+// Docs: https://docs.cline.bot/mcp/mcp-overview - the transport type must
+// be the literal string "streamableHttp" (camelCase, no hyphen); "
+// streamable-http" or an omitted type falls back to legacy SSE and a 405.
+const cline = {
+    id: 'cline',
+    name: 'Cline',
+    category: 'ide',
+    brand: 'cline',
+    methods: ['remote-header', 'stdio'],
+    docsUrl: 'https://docs.cline.bot/mcp/mcp-overview',
+    verifiedOn: '2026-09-25',
+    caveats: [],
+    install: null,
+    remote: (ctx) => [
+        json({
+            mcpServers: {
+                onlymcp: { type: 'streamableHttp', url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } },
+            },
+        }, '~/.cline/mcp.json'),
+    ],
+};
+// -- Zed --------------------------------------------------------------
+// Docs: https://zed.dev/docs/assistant/model-context-protocol - a remote
+// server is keyed under `context_servers` with `url` and `headers`
+// directly (no local proxy needed); an entry without an `Authorization`
+// header triggers Zed's own OAuth prompt.
+const zed = {
+    id: 'zed',
+    name: 'Zed',
+    category: 'ide',
+    brand: 'zedindustries',
+    methods: ['remote-header', 'remote-oauth', 'stdio'],
+    docsUrl: 'https://zed.dev/docs/assistant/model-context-protocol',
+    verifiedOn: '2026-09-25',
+    caveats: [],
+    install: null,
+    remote: (ctx) => [
+        json({ context_servers: { onlymcp: { url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, 'settings.json'),
+    ],
+};
+// -- Continue -----------------------------------------------------------
+// No local binary to run `--help` against. Docs:
+// https://docs.continue.dev/customize/deep-dives/mcp - `config.yaml`,
+// `mcpServers` list entries take `type: streamable-http`, `url`, and
+// `requestOptions.headers`; confirmed a third way in
+// `core/context/mcp/MCPConnection.ts` on `main`, which builds the
+// streamable-http transport's headers from `requestOptions?.headers`.
+const continueClient = {
+    id: 'continue',
+    name: 'Continue',
+    category: 'ide',
+    brand: null,
+    methods: ['remote-header', 'stdio'],
+    docsUrl: 'https://docs.continue.dev/customize/deep-dives/mcp',
+    verifiedOn: '2026-09-25',
+    caveats: [],
+    install: null,
+    remote: (ctx) => [
+        {
+            language: 'yaml',
+            path: 'config.yaml',
+            text: [
+                'mcpServers:',
+                '  - name: onlymcp',
+                '    type: streamable-http',
+                `    url: ${ctx.endpoint}`,
+                '    requestOptions:',
+                '      headers:',
+                `        Authorization: Bearer ${ctx.token}`,
+            ].join('\n'),
+        },
+    ],
+};
+// -- opencode -----------------------------------------------------------
+// Docs: https://opencode.ai/docs/mcp-servers/ - `opencode.json`, servers
+// live under `mcp`, a remote entry takes `type: "remote"`, `url`, and
+// `headers`; OAuth is the default for a remote server unless `oauth:
+// false` is set for a header/API-key-only server. OnlyMCP uses a bearer
+// header here, so no `oauth` field is emitted.
+const opencode = {
+    id: 'opencode',
+    name: 'opencode',
+    category: 'coding',
+    brand: 'opencode',
+    methods: ['remote-header', 'remote-oauth', 'stdio'],
+    docsUrl: 'https://opencode.ai/docs/mcp-servers/',
+    verifiedOn: '2026-09-25',
+    caveats: [],
+    install: null,
+    remote: (ctx) => [
+        json({ mcp: { onlymcp: { type: 'remote', url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, 'opencode.json'),
+    ],
+};
+export const CLIENTS = [
+    claudeCode,
+    claudeApp,
+    chatgpt,
+    codex,
+    geminiCli,
+    geminiApp,
+    copilotVscode,
+    cursor,
+    windsurf,
+    cline,
+    zed,
+    continueClient,
+    opencode,
+];
+export function clientById(id) {
+    return CLIENTS.find((c) => c.id === id);
+}
+export function remoteSnippets(id, ctx) {
+    return clientById(id)?.remote(ctx) ?? null;
+}
+/**
+ * The local-install command for a client `npx onlymcp install` can set up,
+ * or null for every other one. Spec 07 §3.4: always with `npx`, always with
+ * `--client`, because the CLI without `--client` only lists the targets and
+ * exits 2.
+ */
+export function installCommand(id) {
+    return clientById(id)?.install ? `npx onlymcp install --client ${id}` : null;
+}
+//# sourceMappingURL=clients.js.map

package/dist/registry/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../src/registry/clients.ts"],"names":[],"mappings":"AAGA,6EAA6E;AAC7E,8BAA8B;AAC9B,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,6CAA6C;AAC7C,EAAE;AACF,kEAAkE;AAClE,oEAAoE;AACpE,gBAAgB;AAEhB,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY;IACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,0EAA0E;AAC1E,sEAAsE;AACtE,0EAA0E;AAC1E,iEAAiE;AACjE,yCAAyC;AACzC,qEAAqE;AACrE,iCAAiC;AACjC,MAAM,UAAU,GAAiB;IAC/B,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,YAAY;IACnB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,gDAAgD;IACzD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;IACxE,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,wDAAwD,GAAG,CAAC,QAAQ,oCAAoC,GAAG,CAAC,KAAK,GAAG,CACrH;KACF;CACF,CAAC;AAEF,2EAA2E;AAC3E,4GAA4G;AAC5G,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,oCAAoC;AACpC,MAAM,SAAS,GAAiB;IAC9B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,OAAO,EAAE,qGAAqG;IAC9G,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,iCAAiC,CAAC;IAC5C,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;CACnB,CAAC;AAEF,4EAA4E;AAC5E,kHAAkH;AAClH,wHAAwH;AACxH,4FAA4F;AAC5F,uEAAuE;AACvE,0EAA0E;AAC1E,wEAAwE;AACxE,MAAM,OAAO,GAAiB;IAC5B,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,OAAO,EAAE,qFAAqF;IAC9F,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,qCAAqC,CAAC;IAChD,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;CACnB,CAAC;AAEF,wEAAwE;AACxE,2EAA2E;AAC3E,gDAAgD;AAChD,2EAA2E;AAC3E,+DAA+D;AAC/D,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,uCAAuC;AACvC,MAAM,KAAK,GAAiB;IAC1B,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,uDAAuD;IAChE,UAAU,EAAE,YAAY;IACxB,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,mEAAmE;IACnE,OAAO,EAAE,CAAC,8BAA8B,CAAC;IACzC,OAAO,EAAE,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAC3F,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF;YACE,wBAAwB,GAAG,CAAC,KAAK,EAAE;YACnC,+BAA+B,GAAG,CAAC,QAAQ,uCAAuC;SACnF,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;KACF;CACF,CAAC;AAEF,wEAAwE;AACxE,uEAAuE;AACvE,2EAA2E;AAC3E,uEAAuE;AACvE,0EAA0E;AAC1E,wEAAwE;AACxE,uFAAuF;AACvF,MAAM,SAAS,GAAiB;IAC9B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,gFAAgF;IACzF,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;IACjF,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,wDAAwD,GAAG,CAAC,QAAQ,oCAAoC,GAAG,CAAC,KAAK,GAAG,CACrH;KACF;CACF,CAAC;AAEF,4EAA4E;AAC5E,0DAA0D;AAC1D,wEAAwE;AACxE,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,2EAA2E;AAC3E,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,SAAS,GAAiB;IAC9B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,OAAO,EAAE,mDAAmD;IAC5D,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,+BAA+B,CAAC;IAC1C,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;CACnB,CAAC;AAEF,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,4DAA4D;AAC5D,+GAA+G;AAC/G,0EAA0E;AAC1E,MAAM,aAAa,GAAiB;IAClC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,uEAAuE;IAChF,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,8BAA8B,CAAC;IACzC,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAChH,kBAAkB,CACnB;KACF;CACF,CAAC;AAEF,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,iBAAiB;AACjB,MAAM,MAAM,GAAiB;IAC3B,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,6BAA6B;IACtC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EACrG,oBAAoB,CACrB;KACF;CACF,CAAC;AAEF,wEAAwE;AACxE,yDAAyD;AACzD,yEAAyE;AACzE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,iEAAiE;AACjE,mDAAmD;AACnD,MAAM,QAAQ,GAAiB;IAC7B,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IACnC,OAAO,EAAE,gDAAgD;IACzD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,kCAAkC,CAAC;IAC7C,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAC3G,qCAAqC,CACtC;KACF;CACF,CAAC;AAEF,wEAAwE;AACxE,0EAA0E;AAC1E,mEAAmE;AACnE,0EAA0E;AAC1E,MAAM,KAAK,GAAiB;IAC1B,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IACnC,OAAO,EAAE,yCAAyC;IAClD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF;YACE,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE;aAC1G;SACF,EACD,mBAAmB,CACpB;KACF;CACF,CAAC;AAEF,wEAAwE;AACxE,yEAAyE;AACzE,mEAAmE;AACnE,wEAAwE;AACxE,0CAA0C;AAC1C,MAAM,GAAG,GAAiB;IACxB,EAAE,EAAE,KAAK;IACT,IAAI,EAAE,KAAK;IACX,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,uDAAuD;IAChE,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAC1G,eAAe,CAChB;KACF;CACF,CAAC;AAEF,0EAA0E;AAC1E,iDAAiD;AACjD,sEAAsE;AACtE,qEAAqE;AACrE,qDAAqD;AACrD,kEAAkE;AAClE,sEAAsE;AACtE,MAAM,cAAc,GAAiB;IACnC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IACnC,OAAO,EAAE,oDAAoD;IAC7D,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B;YACE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE;gBACJ,aAAa;gBACb,mBAAmB;gBACnB,2BAA2B;gBAC3B,YAAY,GAAG,CAAC,QAAQ,EAAE;gBAC1B,qBAAqB;gBACrB,gBAAgB;gBAChB,iCAAiC,GAAG,CAAC,KAAK,EAAE;aAC7C,CAAC,IAAI,CAAC,IAAI,CAAC;SACb;KACF;CACF,CAAC;AAEF,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,qEAAqE;AACrE,wEAAwE;AACxE,+CAA+C;AAC/C,MAAM,QAAQ,GAAiB;IAC7B,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,uCAAuC;IAChD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAC9G,eAAe,CAChB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAA4B;IAC9C,UAAU;IACV,SAAS;IACT,OAAO;IACP,KAAK;IACL,SAAS;IACT,SAAS;IACT,aAAa;IACb,MAAM;IACN,QAAQ;IACR,KAAK;IACL,GAAG;IACH,cAAc;IACd,QAAQ;CACT,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAY,EAAE,GAAkB;IAC7D,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,EAAY;IACzC,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC"}

package/dist/registry/index.d.ts

@@ -0,0 +1,5 @@
+export { CAVEATS, caveatText, type CaveatLanguage } from './caveats.js';
+export { CLIENTS, clientById, installCommand, remoteSnippets } from './clients.js';
+export { SERVERS } from './servers.js';
+export { serverInfo } from './serverInfo.js';
+export type { ClientCategory, ClientId, ClientInstall, ClientRecord, ConnectMethod, RemoteContext, ServerRecord, Snippet, SnippetLanguage, } from './types.js';

package/dist/registry/index.js

@@ -0,0 +1,6 @@
+// Generated by scripts/sync-registry.mjs. Do not edit.
+export { CAVEATS, caveatText } from './caveats.js';
+export { CLIENTS, clientById, installCommand, remoteSnippets } from './clients.js';
+export { SERVERS } from './servers.js';
+export { serverInfo } from './serverInfo.js';
+//# sourceMappingURL=index.js.map

package/dist/registry/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAuB,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/registry/serverInfo.d.ts

@@ -0,0 +1,25 @@
+/**
+ * What an MCP client shows for OnlyMCP in its connector list (spec 2025-11-25: `title`, `icons`, `websiteUrl`).
+ * One definition for the hosted server (api) and the stdio server (cli); the CLI gets it through the generated copy.
+ * Icon URLs are absolute because a stdio server has no origin of its own. The PNG is a full-bleed square (no
+ * transparent corners that a white list row turns into a tile on a white rectangle); the SVG is for clients that
+ * prefer vectors.
+ *
+ * The icons carry no `sizes`: it is optional, and absent means "any size". The spec and MCP TS SDK 1.19.1+ type it as
+ * an array, but 1.18.0 to 1.18.2 type it as a string and throw in `connect()` on an array, which would lock those
+ * clients out of OnlyMCP altogether.
+ *
+ * `origin` must be http(s) and is reduced to scheme, host and port: a path, a query or credentials in it (the CLI
+ * passes ONLYMCP_API_URL on as the user wrote it, after `apiBaseUrl` accepted it) must not end up in `websiteUrl` or
+ * the icon URLs.
+ */
+export declare function serverInfo(origin: string, version: string): {
+    name: "onlymcp";
+    title: "OnlyMCP";
+    version: string;
+    websiteUrl: string;
+    icons: {
+        src: string;
+        mimeType: string;
+    }[];
+};

package/dist/registry/serverInfo.js

@@ -0,0 +1,33 @@
+// Generated by scripts/sync-registry.mjs. Do not edit.
+/**
+ * What an MCP client shows for OnlyMCP in its connector list (spec 2025-11-25: `title`, `icons`, `websiteUrl`).
+ * One definition for the hosted server (api) and the stdio server (cli); the CLI gets it through the generated copy.
+ * Icon URLs are absolute because a stdio server has no origin of its own. The PNG is a full-bleed square (no
+ * transparent corners that a white list row turns into a tile on a white rectangle); the SVG is for clients that
+ * prefer vectors.
+ *
+ * The icons carry no `sizes`: it is optional, and absent means "any size". The spec and MCP TS SDK 1.19.1+ type it as
+ * an array, but 1.18.0 to 1.18.2 type it as a string and throw in `connect()` on an array, which would lock those
+ * clients out of OnlyMCP altogether.
+ *
+ * `origin` must be http(s) and is reduced to scheme, host and port: a path, a query or credentials in it (the CLI
+ * passes ONLYMCP_API_URL on as the user wrote it, after `apiBaseUrl` accepted it) must not end up in `websiteUrl` or
+ * the icon URLs.
+ */
+export function serverInfo(origin, version) {
+    const url = new URL(origin);
+    if (url.protocol !== 'http:' && url.protocol !== 'https:')
+        throw new TypeError(`serverInfo: "${origin}" is not an http(s) origin`);
+    const base = url.origin;
+    return {
+        name: 'onlymcp',
+        title: 'OnlyMCP',
+        version,
+        websiteUrl: base,
+        icons: [
+            { src: `${base}/brand/connector-512.png`, mimeType: 'image/png' },
+            { src: `${base}/brand/favicon.svg`, mimeType: 'image/svg+xml' },
+        ],
+    };
+}
+//# sourceMappingURL=serverInfo.js.map

package/dist/registry/serverInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverInfo.js","sourceRoot":"","sources":["../../src/registry/serverInfo.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,MAAM,4BAA4B,CAAC,CAAC;IACnI,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC;IACxB,OAAO;QACL,IAAI,EAAE,SAAkB;QACxB,KAAK,EAAE,SAAkB;QACzB,OAAO;QACP,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE;YACL,EAAE,GAAG,EAAE,GAAG,IAAI,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE;YACjE,EAAE,GAAG,EAAE,GAAG,IAAI,oBAAoB,EAAE,QAAQ,EAAE,eAAe,EAAE;SAChE;KACF,CAAC;AACJ,CAAC"}

package/dist/registry/servers.d.ts

@@ -0,0 +1,50 @@
+import type { ServerRecord } from './types.js';
+/**
+ * The picture the product is named after: many MCP servers behind one
+ * connection. This catalogue backs the rotating tiles in
+ * `packages/web/src/components/McpHub.tsx`, `/api/mcp-catalog`, and the
+ * "add a server" step of Connect.
+ *
+ * Every server in the pool was verified, not remembered. Originally
+ * (2026-09-05): each URL was pushed through this product's own
+ * POST /api/mcp-connections/test, and only the ones that completed an MCP
+ * handshake or answered UNAUTHORIZED (which means a real MCP server is
+ * there and wants credentials) were listed. Dropped on that evidence:
+ * GitLab (mcp.gitlab.com does not resolve), Figma, Google Drive, Slack.
+ * Dropped for want of a brand icon: Canva, monday.com.
+ *
+ * Re-verified 2026-09-25 for this registry, this time against each
+ * vendor's own documentation (`docsUrl` below) AND a fresh local probe: a
+ * scratch script POSTed an MCP `initialize` request, unauthenticated, to
+ * every URL below. All 17 answered `401` with a `WWW-Authenticate: Bearer`
+ * header naming an OAuth protected-resource metadata document (for
+ * example `resource_metadata="https://mcp.notion.com/.well-known/oauth-
+ * protected-resource/mcp"`), which is exactly what a live MCP server
+ * behind OAuth returns - confirming each URL is real and reachable, not
+ * only documented. The finer distinction of `auth` below (whether a
+ * static bearer token is ALSO accepted, alongside OAuth) came from each
+ * vendor's docs, because a 401 alone cannot tell OAuth-only apart from
+ * OAuth-or-bearer.
+ *
+ * One correction from the 2026-09-05 note: this pass found Linear's docs
+ * now document `Authorization: Bearer <token>` as an accepted alternative
+ * to the interactive OAuth flow. The original spec text (problem #6)
+ * called Linear OAuth-only as of that date; either that capability is new,
+ * or it was missed in the first pass. `auth` below reflects the current,
+ * re-verified state, and this comment records the discrepancy rather than
+ * silently overwriting it.
+ *
+ * The open MCP registry is not a usable source for this list, by the way -
+ * anyone may publish there, and a search for "github" returns community
+ * wrappers hosted by third parties, not GitHub's own server.
+ *
+ * `filesystem` and `postgres`, the textbook examples, are absent on purpose:
+ * they are local stdio processes, and OnlyMCP deliberately does not run those
+ * (a process we spawn on a user's behalf is code execution on our side, see
+ * docs/SECURITY.md).
+ *
+ * The prefixes are real. `github__create_issue` is exactly what a client
+ * sees, because the gateway namespaces every proxied tool with the
+ * connection's slug (packages/api/src/mcp/gateway.ts).
+ */
+export declare const SERVERS: readonly ServerRecord[];