onlymcp 0.17.0 → 0.20.0

package/dist/registry/clients.js

@@ -1,402 +0,0 @@
-// Every command below is verified, not remembered: see the "Done 2026-09-25"
-// note under Task 1 Step 1 of
-// docs/superpowers/plans/2026-09-12-onlymcp-v2-07-mcp-clients.md for the
-// local `--help` runs (Claude Code, Codex) and the Continue
-// source check. Docs for every other client are linked below in `docsUrl`,
-// fetched and cross-checked on `verifiedOn`.
-//
-// Roo Code is excluded on purpose: its repository was archived on
-// 2026-05-15, and overview §4.7 forbids claiming unverified or dead
-// integrations.
-function bash(text) {
-    return { language: 'bash', text };
-}
-function json(value, path) {
-    return { language: 'json', text: JSON.stringify(value, null, 2), path };
-}
-// -- Claude Code --------------------------------------------------------
-// Verified locally: `claude mcp add --help` (Claude Code 2.1.281) has
-// `-s, --scope <scope>` (default "local") and `-H, --header <header...>`.
-// Docs: https://code.claude.com/docs/en/mcp-quickstart, confirms
-// `--transport http`, `--scope user` and
-// `--header "Authorization: Bearer <token>"` for servers that take a
-// static token instead of OAuth.
-const claudeCode = {
-    id: 'claude-code',
-    name: 'Claude Code',
-    category: 'coding',
-    brand: 'claudecode',
-    methods: ['remote-header', 'remote-oauth', 'stdio'],
-    docsUrl: 'https://code.claude.com/docs/en/mcp-quickstart',
-    verifiedOn: '2026-09-25',
-    caveats: ['clients.caveat.claudeCodeConnectorSynced'],
-    install: { configPath: '~/.claude.json', format: 'json', stubDir: null },
-    remote: (ctx) => [
-        bash(`claude mcp add --transport http --scope user onlymcp ${ctx.endpoint} --header "Authorization: Bearer ${ctx.token}"`),
-    ],
-};
-// -- Claude (claude.ai / Claude Desktop) ---------------------------------
-// Docs: https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp
-// Custom connectors are added at claude.ai/customize/connectors with a name
-// and a URL; the page documents an OAuth Client ID/Secret in "Advanced
-// settings" and does not document a static API key or header option, so
-// the only connect method is OAuth.
-// OAuth redirect (checked 2026-10-18): https://claude.ai/api/mcp/auth_callback per
-// https://support.claude.com/en/articles/11503834, which says it may move to claude.com and to allow both.
-const claudeApp = {
-    id: 'claude-app',
-    name: 'Claude',
-    category: 'chat',
-    brand: 'claude',
-    methods: ['remote-oauth'],
-    docsUrl: 'https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp',
-    verifiedOn: '2026-09-25',
-    caveats: ['clients.caveat.claudeHeaderBeta'],
-    install: null,
-    oauthRedirectHosts: ['claude.ai', 'claude.com'],
-    remote: () => null,
-};
-// -- ChatGPT --------------------------------------------------------------
-// Brand 'openai': OpenAI publishes the blossom only, no mark of its own for ChatGPT or for Codex. Both are OpenAI
-// services, so both show the official blossom files (web/public/brand/clients/SOURCES.md has the terms and conditions).
-// Docs: https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt
-// Developer mode (where custom MCP connectors are built and tested) is
-// available for ChatGPT Business and Enterprise/Edu customers on the web;
-// only admins/owners can enable it. Connectors authorize through OAuth.
-// OAuth redirect (checked 2026-10-18): https://chatgpt.com/connector/oauth/{callback_id}, and the legacy
-// https://chatgpt.com/connector_platform_oauth_redirect, per https://developers.openai.com/plugins/build/auth.
-const chatgpt = {
-    id: 'chatgpt',
-    name: 'ChatGPT',
-    category: 'chat',
-    brand: 'openai',
-    methods: ['remote-oauth'],
-    docsUrl: 'https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt',
-    verifiedOn: '2026-09-25',
-    caveats: ['clients.caveat.chatgptDeveloperMode'],
-    install: null,
-    oauthRedirectHosts: ['chatgpt.com'],
-    remote: () => null,
-};
-// -- Codex ------------------------------------------------------------
-// Verified locally: `codex mcp add --help` (codex-cli 0.154.0) has `--url`
-// and `--bearer-token-env-var`, no header flag.
-// Docs: https://learn.chatgpt.com/docs/extend/mcp?surface=cli (the current
-// redirect target of developers.openai.com/codex/mcp) confirms
-// `bearer_token_env_var` names an environment variable, read by Codex, not
-// a literal token; `http_headers` and `env_http_headers` exist as separate,
-// alternative fields for static/derived headers, never combined with
-// `--header` (Codex has no such flag).
-const codex = {
-    id: 'codex',
-    name: 'Codex',
-    category: 'coding',
-    brand: 'openai',
-    methods: ['remote-header', 'remote-oauth', 'stdio'],
-    docsUrl: 'https://learn.chatgpt.com/docs/extend/mcp?surface=cli',
-    verifiedOn: '2026-09-25',
-    // `bearer_token_env_var` stores only the environment variable's NAME in
-    // config.toml, never the token value: Codex must therefore read the
-    // variable itself at every startup, so the export belongs in the user's
-    // shell profile, not just the terminal session that ran `mcp add`.
-    caveats: ['clients.caveat.codexTokenEnv'],
-    install: { configPath: '~/.codex/config.toml', format: 'toml', stubDir: '~/.codex/skills' },
-    remote: (ctx) => [
-        bash([
-            `export ONLYMCP_TOKEN=${ctx.token}`,
-            `codex mcp add onlymcp --url ${ctx.endpoint} --bearer-token-env-var ONLYMCP_TOKEN`,
-        ].join('\n')),
-    ],
-};
-// -- Antigravity -------------------------------------------------------
-// Google retired its Gemini command line client for personal accounts on 2026-06-18
-// (github.com/google-gemini/gemini-cli/discussions/27274); the successor is
-// Antigravity, whose CLI is `agy`. The old id stays as an alias, so old links and
-// `install --client gemini-cli` land here.
-// Docs: https://antigravity.google/docs/mcp (checked 2026-10-17) - global
-// `~/.gemini/config/mcp_config.json`, workspace `.agents/mcp_config.json`, top-level
-// `mcpServers`. A remote server takes `serverUrl` (the keys `url` and `httpUrl` are
-// NOT supported) and optional `headers`; a remote server with OAuth and dynamic
-// client registration needs only `serverUrl`. Entries the retired client
-// left in `~/.gemini/settings.json` are left alone.
-// Brand 'antigravity': Google's own icon files, shown under the owner's decision D9
-// (web/public/brand/clients/SOURCES.md has the source, the wording and the residual risk).
-// OAuth redirect: the docs name none. Its registrations on only-mcp.com (seen 2026-10-18) all use
-// https://antigravity.google/oauth-callback, under the names "antigravity-client" and "Google Antigravity".
-const antigravity = {
-    id: 'antigravity',
-    aliases: ['gemini-cli'],
-    name: 'Antigravity',
-    category: 'coding',
-    brand: 'antigravity',
-    methods: ['remote-oauth', 'remote-header', 'stdio'],
-    docsUrl: 'https://antigravity.google/docs/mcp',
-    verifiedOn: '2026-10-17',
-    caveats: [],
-    install: { configPath: '~/.gemini/config/mcp_config.json', format: 'json', stubDir: null },
-    oauthRedirectHosts: ['antigravity.google'],
-    remote: (ctx) => [
-        json({ mcpServers: { onlymcp: { serverUrl: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, '~/.gemini/config/mcp_config.json'),
-    ],
-};
-// -- Gemini app (Gemini Spark) --------------------------------------------
-// Docs: https://support.google.com/gemini/answer/17209137
-// The page is live although a HEAD request says 404: support.google.com
-// answers HEAD with 404 for every article and GET with 200 (checked
-// 2026-10-05, also on answer/13695044), so a link check has to GET it.
-// Custom connected apps take an MCP server URL and require a personal
-// Google account that is 18+ and in the US, with Keep Activity on. On
-// 2026-09-25 the page limited them to Gemini Spark tasks; since 2026-10-05
-// it reads "workflows with Gemini Spark or take quick actions in chat".
-// The caveat says that since 2026-10-10 (page read with GET that day).
-const geminiApp = {
-    id: 'gemini-app',
-    name: 'Gemini',
-    category: 'chat',
-    brand: 'googlegemini',
-    methods: ['remote-oauth'],
-    docsUrl: 'https://support.google.com/gemini/answer/17209137',
-    verifiedOn: '2026-10-10',
-    caveats: ['clients.caveat.geminiAppSpark'],
-    install: null,
-    remote: () => null,
-};
-// -- Grok -----------------------------------------------------------------
-// Docs: https://docs.x.ai/grok/connectors (checked 2026-10-17) - custom remote MCP connectors live at
-// grok.com/connectors (New Connector, Custom, the server URL, then the server's own OAuth sign-in), on a paid plan;
-// Business and Enterprise need an admin to add the connector in console.x.ai first. No command exists, so the steps
-// are in the caveats.
-// Brand 'grok': xAI's official logomark files (web/public/brand/clients/SOURCES.md has the source and the terms).
-// OAuth redirect: the docs name none. Its registrations on only-mcp.com (seen 2026-10-18) use
-// https://grok.com/connectors-oauth-exchange-code/.
-const grok = {
-    id: 'grok',
-    name: 'Grok',
-    category: 'chat',
-    brand: 'grok',
-    methods: ['remote-oauth'],
-    docsUrl: 'https://docs.x.ai/grok/connectors',
-    verifiedOn: '2026-10-17',
-    caveats: ['clients.caveat.grokConnectors', 'clients.caveat.grokBusinessAdmin'],
-    install: null,
-    oauthRedirectHosts: ['grok.com'],
-    remote: () => null,
-};
-// -- GitHub Copilot in VS Code --------------------------------------------
-// Docs: https://code.visualstudio.com/docs/agents/reference/mcp-configuration
-// `.vscode/mcp.json` (workspace) with a top-level `servers` object, entries
-// take `type: "http"`, `url`, `headers`. Copilot policy per
-// https://docs.github.com/en/copilot/how-tos/provide-context/use-mcp-in-your-ide/set-up-the-github-mcp-server:
-// Business/Enterprise tenants must enable "MCP servers in Copilot" first.
-const copilotVscode = {
-    id: 'copilot-vscode',
-    name: 'GitHub Copilot (VS Code)',
-    category: 'ide',
-    brand: 'githubcopilot',
-    methods: ['remote-header', 'remote-oauth', 'stdio'],
-    docsUrl: 'https://code.visualstudio.com/docs/agents/reference/mcp-configuration',
-    verifiedOn: '2026-09-25',
-    caveats: ['clients.caveat.copilotPolicy'],
-    install: null,
-    remote: (ctx) => [
-        json({ servers: { onlymcp: { type: 'http', url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, '.vscode/mcp.json'),
-    ],
-};
-// -- Cursor ---------------------------------------------------------------
-// Docs: https://cursor.com/docs/mcp - `~/.cursor/mcp.json` (global) or
-// `.cursor/mcp.json` (project), top-level `mcpServers`, entries take `url`
-// and `headers`.
-const cursor = {
-    id: 'cursor',
-    name: 'Cursor',
-    category: 'ide',
-    brand: 'cursor',
-    methods: ['remote-header', 'remote-oauth', 'stdio'],
-    docsUrl: 'https://cursor.com/docs/mcp',
-    verifiedOn: '2026-09-25',
-    caveats: [],
-    install: null,
-    remote: (ctx) => [
-        json({ mcpServers: { onlymcp: { url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, '~/.cursor/mcp.json'),
-    ],
-};
-// -- Windsurf ---------------------------------------------------------
-// Docs: https://docs.windsurf.com/windsurf/cascade/mcp -
-// `~/.codeium/windsurf/mcp_config.json`, top-level `mcpServers`, entries
-// take `serverUrl` and `headers`. The 2026 Cognition rebrand to "Devin
-// Desktop" folds Cascade into "Devin Local", but the config path and MCP
-// JSON keys are unchanged (corroborated by a second, independent search,
-// since the docs.windsurf.com redirect briefly showed a Devin-only path).
-// Admin allowlist: once a team allowlists even one server, every
-// non-allowlisted server is blocked for that team.
-const windsurf = {
-    id: 'windsurf',
-    name: 'Windsurf',
-    category: 'ide',
-    brand: 'windsurf',
-    methods: ['remote-header', 'stdio'],
-    docsUrl: 'https://docs.windsurf.com/windsurf/cascade/mcp',
-    verifiedOn: '2026-09-25',
-    caveats: ['clients.caveat.windsurfAllowlist'],
-    install: null,
-    remote: (ctx) => [
-        json({ mcpServers: { onlymcp: { serverUrl: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, '~/.codeium/windsurf/mcp_config.json'),
-    ],
-};
-// -- Cline ------------------------------------------------------------
-// Docs: https://docs.cline.bot/mcp/mcp-overview - the transport type must
-// be the literal string "streamableHttp" (camelCase, no hyphen); "
-// streamable-http" or an omitted type falls back to legacy SSE and a 405.
-const cline = {
-    id: 'cline',
-    name: 'Cline',
-    category: 'ide',
-    brand: 'cline',
-    methods: ['remote-header', 'stdio'],
-    docsUrl: 'https://docs.cline.bot/mcp/mcp-overview',
-    verifiedOn: '2026-09-25',
-    caveats: [],
-    install: null,
-    remote: (ctx) => [
-        json({
-            mcpServers: {
-                onlymcp: { type: 'streamableHttp', url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } },
-            },
-        }, '~/.cline/mcp.json'),
-    ],
-};
-// -- Zed --------------------------------------------------------------
-// Docs: https://zed.dev/docs/assistant/model-context-protocol - a remote
-// server is keyed under `context_servers` with `url` and `headers`
-// directly (no local proxy needed); an entry without an `Authorization`
-// header triggers Zed's own OAuth prompt.
-const zed = {
-    id: 'zed',
-    name: 'Zed',
-    category: 'ide',
-    brand: 'zedindustries',
-    methods: ['remote-header', 'remote-oauth', 'stdio'],
-    docsUrl: 'https://zed.dev/docs/assistant/model-context-protocol',
-    verifiedOn: '2026-09-25',
-    caveats: [],
-    install: null,
-    remote: (ctx) => [
-        json({ context_servers: { onlymcp: { url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, 'settings.json'),
-    ],
-};
-// -- Continue -----------------------------------------------------------
-// No local binary to run `--help` against. Docs:
-// https://docs.continue.dev/customize/deep-dives/mcp - `config.yaml`,
-// `mcpServers` list entries take `type: streamable-http`, `url`, and
-// `requestOptions.headers`; confirmed a third way in
-// `core/context/mcp/MCPConnection.ts` on `main`, which builds the
-// streamable-http transport's headers from `requestOptions?.headers`.
-const continueClient = {
-    id: 'continue',
-    name: 'Continue',
-    category: 'ide',
-    brand: null,
-    methods: ['remote-header', 'stdio'],
-    docsUrl: 'https://docs.continue.dev/customize/deep-dives/mcp',
-    verifiedOn: '2026-09-25',
-    caveats: [],
-    install: null,
-    remote: (ctx) => [
-        {
-            language: 'yaml',
-            path: 'config.yaml',
-            text: [
-                'mcpServers:',
-                '  - name: onlymcp',
-                '    type: streamable-http',
-                `    url: ${ctx.endpoint}`,
-                '    requestOptions:',
-                '      headers:',
-                `        Authorization: Bearer ${ctx.token}`,
-            ].join('\n'),
-        },
-    ],
-};
-// -- opencode -----------------------------------------------------------
-// Docs: https://opencode.ai/docs/mcp-servers/ - `opencode.json`, servers
-// live under `mcp`, a remote entry takes `type: "remote"`, `url`, and
-// `headers`; OAuth is the default for a remote server unless `oauth:
-// false` is set for a header/API-key-only server. OnlyMCP uses a bearer
-// header here, so no `oauth` field is emitted.
-const opencode = {
-    id: 'opencode',
-    name: 'opencode',
-    category: 'coding',
-    brand: 'opencode',
-    methods: ['remote-header', 'remote-oauth', 'stdio'],
-    docsUrl: 'https://opencode.ai/docs/mcp-servers/',
-    verifiedOn: '2026-09-25',
-    caveats: [],
-    install: null,
-    remote: (ctx) => [
-        json({ mcp: { onlymcp: { type: 'remote', url: ctx.endpoint, headers: { Authorization: `Bearer ${ctx.token}` } } } }, 'opencode.json'),
-    ],
-};
-// -- GitLab Duo -------------------------------------------------------------
-// Docs: https://docs.gitlab.com/user/gitlab_duo/model_context_protocol/mcp_clients (checked 2026-10-18) - the user
-// file is `~/.gitlab/duo/mcp.json` (JetBrains IDEs and the GitLab Duo CLI; in VS Code the command "GitLab MCP: Open
-// User Settings (JSON)" opens it), a workspace file is `.gitlab/duo/mcp.json`; configuration files need the GitLab for
-// VS Code extension 6.35.6 or later. `mcpServers` entries take `type: "http"` and `url`. The docs document no
-// `headers` key and show a remote server's own sign-in starting by itself, so the only method is OAuth and the snippet
-// carries no token. `approvedTools` is left out: the user approves tools in the IDE.
-const gitlabDuo = {
-    id: 'gitlab-duo',
-    name: 'GitLab Duo',
-    category: 'ide',
-    brand: 'gitlab',
-    methods: ['remote-oauth'],
-    docsUrl: 'https://docs.gitlab.com/user/gitlab_duo/model_context_protocol/mcp_clients',
-    verifiedOn: '2026-10-18',
-    caveats: ['clients.caveat.gitlabDuoUserFile'],
-    install: null,
-    remote: (ctx) => [
-        json({ mcpServers: { onlymcp: { type: 'http', url: ctx.endpoint } } }, '~/.gitlab/duo/mcp.json'),
-    ],
-};
-// The AI apps come first (chat, then coding agents), the editors last; inside a group the order is the order below.
-export const CLIENTS = [
-    claudeApp,
-    chatgpt,
-    geminiApp,
-    grok,
-    claudeCode,
-    codex,
-    antigravity,
-    opencode,
-    copilotVscode,
-    cursor,
-    windsurf,
-    cline,
-    zed,
-    continueClient,
-    gitlabDuo,
-];
-export function clientById(id) {
-    return CLIENTS.find((c) => c.id === id);
-}
-/**
- * A client by its id or by one of its retired aliases (`gemini-cli` is Antigravity), or undefined. For input that
- * comes from outside, such as an address, where an old spelling must keep working. Code that holds a `ClientId`
- * uses `clientById`.
- */
-export function findClient(idOrAlias) {
-    return CLIENTS.find((c) => c.id === idOrAlias || c.aliases?.includes(idOrAlias));
-}
-export function remoteSnippets(id, ctx) {
-    return clientById(id)?.remote(ctx) ?? null;
-}
-/**
- * The local-install command for a client `npx onlymcp install` can set up,
- * or null for every other one. Spec 07 §3.4: always with `npx`, always with
- * `--client`, because the CLI without `--client` only lists the targets and
- * exits 2.
- */
-export function installCommand(id) {
-    return clientById(id)?.install ? `npx onlymcp install --client ${id}` : null;
-}
-//# sourceMappingURL=clients.js.map

package/dist/registry/clients.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../src/registry/clients.ts"],"names":[],"mappings":"AAGA,6EAA6E;AAC7E,8BAA8B;AAC9B,yEAAyE;AACzE,4DAA4D;AAC5D,2EAA2E;AAC3E,6CAA6C;AAC7C,EAAE;AACF,kEAAkE;AAClE,oEAAoE;AACpE,gBAAgB;AAEhB,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY;IACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,0EAA0E;AAC1E,sEAAsE;AACtE,0EAA0E;AAC1E,iEAAiE;AACjE,yCAAyC;AACzC,qEAAqE;AACrE,iCAAiC;AACjC,MAAM,UAAU,GAAiB;IAC/B,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,YAAY;IACnB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,gDAAgD;IACzD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,0CAA0C,CAAC;IACrD,OAAO,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;IACxE,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,wDAAwD,GAAG,CAAC,QAAQ,oCAAoC,GAAG,CAAC,KAAK,GAAG,CACrH;KACF;CACF,CAAC;AAEF,2EAA2E;AAC3E,4GAA4G;AAC5G,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,oCAAoC;AACpC,mFAAmF;AACnF,2GAA2G;AAC3G,MAAM,SAAS,GAAiB;IAC9B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,OAAO,EAAE,qGAAqG;IAC9G,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,iCAAiC,CAAC;IAC5C,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IAC/C,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;CACnB,CAAC;AAEF,4EAA4E;AAC5E,kHAAkH;AAClH,wHAAwH;AACxH,4FAA4F;AAC5F,uEAAuE;AACvE,0EAA0E;AAC1E,wEAAwE;AACxE,yGAAyG;AACzG,+GAA+G;AAC/G,MAAM,OAAO,GAAiB;IAC5B,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,OAAO,EAAE,qFAAqF;IAC9F,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,qCAAqC,CAAC;IAChD,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,CAAC,aAAa,CAAC;IACnC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;CACnB,CAAC;AAEF,wEAAwE;AACxE,2EAA2E;AAC3E,gDAAgD;AAChD,2EAA2E;AAC3E,+DAA+D;AAC/D,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,uCAAuC;AACvC,MAAM,KAAK,GAAiB;IAC1B,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,uDAAuD;IAChE,UAAU,EAAE,YAAY;IACxB,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,mEAAmE;IACnE,OAAO,EAAE,CAAC,8BAA8B,CAAC;IACzC,OAAO,EAAE,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAC3F,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF;YACE,wBAAwB,GAAG,CAAC,KAAK,EAAE;YACnC,+BAA+B,GAAG,CAAC,QAAQ,uCAAuC;SACnF,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;KACF;CACF,CAAC;AAEF,yEAAyE;AACzE,oFAAoF;AACpF,4EAA4E;AAC5E,kFAAkF;AAClF,2CAA2C;AAC3C,0EAA0E;AAC1E,qFAAqF;AACrF,oFAAoF;AACpF,gFAAgF;AAChF,yEAAyE;AACzE,oDAAoD;AACpD,oFAAoF;AACpF,2FAA2F;AAC3F,kGAAkG;AAClG,4GAA4G;AAC5G,MAAM,WAAW,GAAiB;IAChC,EAAE,EAAE,aAAa;IACjB,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,qCAAqC;IAC9C,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE,UAAU,EAAE,kCAAkC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1F,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAC3G,kCAAkC,CACnC;KACF;CACF,CAAC;AAEF,4EAA4E;AAC5E,0DAA0D;AAC1D,wEAAwE;AACxE,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,2EAA2E;AAC3E,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,SAAS,GAAiB;IAC9B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,OAAO,EAAE,mDAAmD;IAC5D,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,+BAA+B,CAAC;IAC1C,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;CACnB,CAAC;AAEF,4EAA4E;AAC5E,sGAAsG;AACtG,oHAAoH;AACpH,oHAAoH;AACpH,sBAAsB;AACtB,kHAAkH;AAClH,8FAA8F;AAC9F,oDAAoD;AACpD,MAAM,IAAI,GAAiB;IACzB,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,OAAO,EAAE,mCAAmC;IAC5C,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,+BAA+B,EAAE,kCAAkC,CAAC;IAC9E,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,CAAC,UAAU,CAAC;IAChC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;CACnB,CAAC;AAEF,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,4DAA4D;AAC5D,+GAA+G;AAC/G,0EAA0E;AAC1E,MAAM,aAAa,GAAiB;IAClC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,uEAAuE;IAChF,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,8BAA8B,CAAC;IACzC,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAChH,kBAAkB,CACnB;KACF;CACF,CAAC;AAEF,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,iBAAiB;AACjB,MAAM,MAAM,GAAiB;IAC3B,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,6BAA6B;IACtC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EACrG,oBAAoB,CACrB;KACF;CACF,CAAC;AAEF,wEAAwE;AACxE,yDAAyD;AACzD,yEAAyE;AACzE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,iEAAiE;AACjE,mDAAmD;AACnD,MAAM,QAAQ,GAAiB;IAC7B,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IACnC,OAAO,EAAE,gDAAgD;IACzD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,kCAAkC,CAAC;IAC7C,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAC3G,qCAAqC,CACtC;KACF;CACF,CAAC;AAEF,wEAAwE;AACxE,0EAA0E;AAC1E,mEAAmE;AACnE,0EAA0E;AAC1E,MAAM,KAAK,GAAiB;IAC1B,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IACnC,OAAO,EAAE,yCAAyC;IAClD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF;YACE,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE;aAC1G;SACF,EACD,mBAAmB,CACpB;KACF;CACF,CAAC;AAEF,wEAAwE;AACxE,yEAAyE;AACzE,mEAAmE;AACnE,wEAAwE;AACxE,0CAA0C;AAC1C,MAAM,GAAG,GAAiB;IACxB,EAAE,EAAE,KAAK;IACT,IAAI,EAAE,KAAK;IACX,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,uDAAuD;IAChE,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAC1G,eAAe,CAChB;KACF;CACF,CAAC;AAEF,0EAA0E;AAC1E,iDAAiD;AACjD,sEAAsE;AACtE,qEAAqE;AACrE,qDAAqD;AACrD,kEAAkE;AAClE,sEAAsE;AACtE,MAAM,cAAc,GAAiB;IACnC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IACnC,OAAO,EAAE,oDAAoD;IAC7D,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B;YACE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE;gBACJ,aAAa;gBACb,mBAAmB;gBACnB,2BAA2B;gBAC3B,YAAY,GAAG,CAAC,QAAQ,EAAE;gBAC1B,qBAAqB;gBACrB,gBAAgB;gBAChB,iCAAiC,GAAG,CAAC,KAAK,EAAE;aAC7C,CAAC,IAAI,CAAC,IAAI,CAAC;SACb;KACF;CACF,CAAC;AAEF,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,qEAAqE;AACrE,wEAAwE;AACxE,+CAA+C;AAC/C,MAAM,QAAQ,GAAiB;IAC7B,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC;IACnD,OAAO,EAAE,uCAAuC;IAChD,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CACF,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAC9G,eAAe,CAChB;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,mHAAmH;AACnH,oHAAoH;AACpH,uHAAuH;AACvH,8GAA8G;AAC9G,uHAAuH;AACvH,qFAAqF;AACrF,MAAM,SAAS,GAAiB;IAC9B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,OAAO,EAAE,4EAA4E;IACrF,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,CAAC,kCAAkC,CAAC;IAC7C,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,wBAAwB,CAAC;KACjG;CACF,CAAC;AAEF,oHAAoH;AACpH,MAAM,CAAC,MAAM,OAAO,GAA4B;IAC9C,SAAS;IACT,OAAO;IACP,SAAS;IACT,IAAI;IACJ,UAAU;IACV,KAAK;IACL,WAAW;IACX,QAAQ;IACR,aAAa;IACb,MAAM;IACN,QAAQ;IACR,KAAK;IACL,GAAG;IACH,cAAc;IACd,SAAS;CACV,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAY,EAAE,GAAkB;IAC7D,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,EAAY;IACzC,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC"}

package/dist/registry/index.d.ts

@@ -1,6 +0,0 @@
-export { CAVEATS, caveatText, type CaveatLanguage } from './caveats.js';
-export { CLIENTS, clientById, findClient, installCommand, remoteSnippets } from './clients.js';
-export { SERVERS } from './servers.js';
-export { serverInfo } from './serverInfo.js';
-export { TOOL_HINTS, type ToolHint } from './toolHints.js';
-export type { ClientCategory, ClientId, ClientInstall, ClientRecord, ConnectMethod, RemoteContext, ServerRecord, Snippet, SnippetLanguage, } from './types.js';

package/dist/registry/index.js

@@ -1,7 +0,0 @@
-// Generated by scripts/sync-registry.mjs. Do not edit.
-export { CAVEATS, caveatText } from './caveats.js';
-export { CLIENTS, clientById, findClient, installCommand, remoteSnippets } from './clients.js';
-export { SERVERS } from './servers.js';
-export { serverInfo } from './serverInfo.js';
-export { TOOL_HINTS } from './toolHints.js';
-//# sourceMappingURL=index.js.map

package/dist/registry/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAuB,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAiB,MAAM,gBAAgB,CAAC"}

package/dist/registry/serverInfo.d.ts

@@ -1,25 +0,0 @@
-/**
- * What an MCP client shows for OnlyMCP in its connector list (spec 2025-11-25: `title`, `icons`, `websiteUrl`).
- * One definition for the hosted server (api) and the stdio server (cli); the CLI gets it through the generated copy.
- * Icon URLs are absolute because a stdio server has no origin of its own. The PNG is a full-bleed square (no
- * transparent corners that a white list row turns into a tile on a white rectangle); the SVG is for clients that
- * prefer vectors.
- *
- * The icons carry no `sizes`: it is optional, and absent means "any size". The spec and MCP TS SDK 1.19.1+ type it as
- * an array, but 1.18.0 to 1.18.2 type it as a string and throw in `connect()` on an array, which would lock those
- * clients out of OnlyMCP altogether.
- *
- * `origin` must be http(s) and is reduced to scheme, host and port: a path, a query or credentials in it (the CLI
- * passes ONLYMCP_API_URL on as the user wrote it, after `apiBaseUrl` accepted it) must not end up in `websiteUrl` or
- * the icon URLs.
- */
-export declare function serverInfo(origin: string, version: string): {
-    name: "onlymcp";
-    title: "OnlyMCP";
-    version: string;
-    websiteUrl: string;
-    icons: {
-        src: string;
-        mimeType: string;
-    }[];
-};

package/dist/registry/serverInfo.js

@@ -1,33 +0,0 @@
-// Generated by scripts/sync-registry.mjs. Do not edit.
-/**
- * What an MCP client shows for OnlyMCP in its connector list (spec 2025-11-25: `title`, `icons`, `websiteUrl`).
- * One definition for the hosted server (api) and the stdio server (cli); the CLI gets it through the generated copy.
- * Icon URLs are absolute because a stdio server has no origin of its own. The PNG is a full-bleed square (no
- * transparent corners that a white list row turns into a tile on a white rectangle); the SVG is for clients that
- * prefer vectors.
- *
- * The icons carry no `sizes`: it is optional, and absent means "any size". The spec and MCP TS SDK 1.19.1+ type it as
- * an array, but 1.18.0 to 1.18.2 type it as a string and throw in `connect()` on an array, which would lock those
- * clients out of OnlyMCP altogether.
- *
- * `origin` must be http(s) and is reduced to scheme, host and port: a path, a query or credentials in it (the CLI
- * passes ONLYMCP_API_URL on as the user wrote it, after `apiBaseUrl` accepted it) must not end up in `websiteUrl` or
- * the icon URLs.
- */
-export function serverInfo(origin, version) {
-    const url = new URL(origin);
-    if (url.protocol !== 'http:' && url.protocol !== 'https:')
-        throw new TypeError(`serverInfo: "${origin}" is not an http(s) origin`);
-    const base = url.origin;
-    return {
-        name: 'onlymcp',
-        title: 'OnlyMCP',
-        version,
-        websiteUrl: base,
-        icons: [
-            { src: `${base}/brand/connector-512.png`, mimeType: 'image/png' },
-            { src: `${base}/brand/favicon.svg`, mimeType: 'image/svg+xml' },
-        ],
-    };
-}
-//# sourceMappingURL=serverInfo.js.map

package/dist/registry/serverInfo.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serverInfo.js","sourceRoot":"","sources":["../../src/registry/serverInfo.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,MAAM,4BAA4B,CAAC,CAAC;IACnI,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC;IACxB,OAAO;QACL,IAAI,EAAE,SAAkB;QACxB,KAAK,EAAE,SAAkB;QACzB,OAAO;QACP,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE;YACL,EAAE,GAAG,EAAE,GAAG,IAAI,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE;YACjE,EAAE,GAAG,EAAE,GAAG,IAAI,oBAAoB,EAAE,QAAQ,EAAE,eAAe,EAAE;SAChE;KACF,CAAC;AACJ,CAAC"}

package/dist/registry/servers.d.ts

@@ -1,58 +0,0 @@
-import type { ServerRecord } from './types.js';
-/**
- * The picture the product is named after: many MCP servers behind one
- * connection. This list backs the rotating tiles in
- * `packages/web/src/components/McpHub.tsx` and the docs page of connectable
- * servers. Since 2026-10-18 it also seeds the server catalogue table
- * (`packages/api/src/catalogue/store.ts`), which an admin edits and which
- * `/api/mcp-catalog` and the "add a server" step of Connect read; only the
- * addresses of this list are trusted for tool hints (api mcp/tool-hints.ts).
- *
- * Every server in the pool was verified, not remembered. Originally
- * (2026-09-05): each URL was pushed through this product's own
- * POST /api/mcp-connections/test, and only the ones that completed an MCP
- * handshake or answered UNAUTHORIZED (which means a real MCP server is
- * there and wants credentials) were listed. Dropped on that evidence:
- * GitLab (mcp.gitlab.com does not resolve), Figma, Google Drive, Slack.
- * Dropped for want of a brand icon: Canva, monday.com.
- * GitLab came back on 2026-10-18 at gitlab.com/api/v4/mcp: an unauthenticated
- * MCP initialize POST answered 401 with a `WWW-Authenticate: Bearer ...
- * resource_metadata=...` header, and the OAuth metadata names a registration
- * endpoint. Gamma joined the same day on the same evidence, with `brand: null`
- * (simple-icons has no Gamma mark; the catalogue draws a letter tile).
- *
- * Re-verified 2026-09-25 for this registry, this time against each
- * vendor's own documentation (`docsUrl` below) AND a fresh local probe: a
- * scratch script POSTed an MCP `initialize` request, unauthenticated, to
- * every URL below. All 17 answered `401` with a `WWW-Authenticate: Bearer`
- * header naming an OAuth protected-resource metadata document (for
- * example `resource_metadata="https://mcp.notion.com/.well-known/oauth-
- * protected-resource/mcp"`), which is exactly what a live MCP server
- * behind OAuth returns - confirming each URL is real and reachable, not
- * only documented. The finer distinction of `auth` below (whether a
- * static bearer token is ALSO accepted, alongside OAuth) came from each
- * vendor's docs, because a 401 alone cannot tell OAuth-only apart from
- * OAuth-or-bearer.
- *
- * One correction from the 2026-09-05 note: this pass found Linear's docs
- * now document `Authorization: Bearer <token>` as an accepted alternative
- * to the interactive OAuth flow. The original spec text (problem #6)
- * called Linear OAuth-only as of that date; either that capability is new,
- * or it was missed in the first pass. `auth` below reflects the current,
- * re-verified state, and this comment records the discrepancy rather than
- * silently overwriting it.
- *
- * The open MCP registry is not a usable source for this list, by the way -
- * anyone may publish there, and a search for "github" returns community
- * wrappers hosted by third parties, not GitHub's own server.
- *
- * `filesystem` and `postgres`, the textbook examples, are absent on purpose:
- * they are local stdio processes, and OnlyMCP deliberately does not run those
- * (a process we spawn on a user's behalf is code execution on our side, see
- * docs/SECURITY.md).
- *
- * The prefixes are real. `github__create_issue` is exactly what a client
- * sees, because the gateway namespaces every proxied tool with the
- * connection's slug (packages/api/src/mcp/gateway.ts).
- */
-export declare const SERVERS: readonly ServerRecord[];