opedd-mcp 0.6.0 → 0.6.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Opedd Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -84,7 +84,7 @@ Set environment variables to pre-configure the server:
 | `OPEDD_PAYMENT_METHOD_ID` | Recommended | Stripe `pm_...` ID — used for autonomous per-article purchasing |
 | `OPEDD_BUYER_TOKEN` | Optional | Buyer API token (`opedd_buyer_live_*` canonical; `opedd_buyer_test_*` for sandbox) — enables `get_content` |
 | `OPEDD_ACCESS_KEY` | Optional | Enterprise access key (`ent_*`) — enables `list_feed` + `stream_feed_ndjson` |
-| `OPEDD_BUYER_JWT` | Optional | Supabase session JWT from the buyer portal — enables `get_audit_events` + `get_compliance_dossier` |
+| `OPEDD_BUYER_JWT` | Optional | Supabase session JWT from the buyer portal — enables `get_buyer_account` + `get_audit_events` + `get_compliance_dossier` + `article_53_attestation` |
 | `OPEDD_PUB_BEARER` | Optional | Canonical Publisher API Bearer key (`opedd_pub_<env>_<32-hex>`; issued via `POST /publishers-api-keys action=create_api_key`) — enables `list_publisher_content` + `push_content`. **v0.4.0 canonical.** |
 | `OPEDD_API_KEY` | Deprecated | Legacy Publisher API key (`op_...`) — fallback during the transition window; will stop working when opedd-backend Phase C deploys. Migrate to `OPEDD_PUB_BEARER`. |
 | `OPEDD_API_URL` | Optional | Override the API base URL (default: Opedd production) |

package/dist/index.js

@@ -4,6 +4,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { pathToFileURL } from "node:url";
 import { initTelemetry, captureToolCall, shutdownTelemetry } from "./telemetry.js";
+import { SERVER_VERSION } from "./version.js";
 // ─── Configuration ────────────────────────────────────────────────────────────
 const API_BASE = process.env.OPEDD_API_URL ??
     "https://api.opedd.com";
@@ -607,7 +608,7 @@ if (PUB_BEARER || API_KEY) {
     });
 }
 // ─── MCP Server ───────────────────────────────────────────────────────────────
-const server = new Server({ name: "opedd-mcp", version: "0.6.0" }, { capabilities: { tools: {} } });
+const server = new Server({ name: "opedd-mcp", version: SERVER_VERSION }, { capabilities: { tools: {} } });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
     // Anonymous usage telemetry — captures only the tool name, duration, and
@@ -849,7 +850,12 @@ export async function dispatchTool(name, args) {
                     params.set("window_start", window_start);
                 if (window_end)
                     params.set("window_end", window_end);
-                const data = await opeddFetch(`/eu-ai-act/article-53-attestation?${params.toString()}`, { headers: { Authorization: `Bearer ${BUYER_JWT}` } });
+                // Function name is DASH-separated end to end: the api.opedd.com proxy
+                // rewrites /:path* verbatim into /functions/v1/:path*, so the prior
+                // slashed "/eu-ai-act/article-53-attestation" resolved to a
+                // nonexistent function named "eu-ai-act" and 404'd — this tool had
+                // NEVER worked in production until the 2026-07-10 fix (live-probed).
+                const data = await opeddFetch(`/eu-ai-act-article-53-attestation?${params.toString()}`, { headers: { Authorization: `Bearer ${BUYER_JWT}` } });
                 return ok(data);
             }
             // ── get_compliance_dossier (Phase 11 M4) ───────────────────────────────

package/dist/telemetry.js

@@ -14,11 +14,13 @@
 // so telemetry can never affect a tool call or the server.
 import { PostHog } from "posthog-node";
 import { randomUUID } from "node:crypto";
+// Version sourced from package.json (src/version.ts) — the previous hardcode
+// drifted within one release (reported 0.5.1 while 0.6.0 shipped).
+import { SERVER_VERSION } from "./version.js";
 // Public, write-only PostHog project key (EU cloud, project 218295). Safe to
 // embed — it can only send events, not read data.
 const POSTHOG_KEY = "phc_yfyXBNsf5nZncZBiZNQBBs5RWC3mtWNWpUJv5EfzfBir";
 const POSTHOG_HOST = "https://eu.i.posthog.com";
-const SERVER_VERSION = "0.5.1";
 /** Whether telemetry is allowed (respects OPEDD_MCP_TELEMETRY + DO_NOT_TRACK). Pure — exported for tests. */
 export function isTelemetryEnabled() {
     const t = process.env.OPEDD_MCP_TELEMETRY?.toLowerCase();

package/dist/version.js

@@ -0,0 +1,6 @@
+// Single source of truth for the server version: package.json. The prior
+// pattern (hardcoded string in telemetry.ts) drifted within one release
+// (0.5.1 reported while 0.6.0 shipped) — never hardcode the version again.
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+export const SERVER_VERSION = require("../package.json").version;

package/package.json

@@ -1,9 +1,18 @@
 {
   "name": "opedd-mcp",
-  "version": "0.6.0",
-  "description": "MCP server for Opedd \u2014 discover, purchase, verify, and audit content licenses from AI assistants. Covers Phase 11 buyer-side surfaces + Phase 12 Wave 1 + 3 regulatory surfaces (CDSM Article 4(3) RSL + EU AI Act Article 53 attestation + platform onboarding helper).",
+  "version": "0.6.1",
+  "description": "Licensed content for AI agents \u2014 discover, purchase, verify, and retrieve rights-cleared expert analysis with a verifiable license key per article, on-chain proof, and EU AI Act Article 53 attestation. The alternative to unlicensed scraping for RAG, AI search, and training pipelines.",
   "type": "module",
   "main": "dist/index.js",
+  "mcpName": "io.github.opedd/opedd-mcp",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Opedd/opedd-mcp.git"
+  },
+  "homepage": "https://opedd.com/for-ai-agents",
+  "bugs": {
+    "url": "https://github.com/Opedd/opedd-mcp/issues"
+  },
   "bin": {
     "opedd-mcp": "dist/index.js"
   },
@@ -17,11 +26,17 @@
   },
   "keywords": [
     "mcp",
+    "model-context-protocol",
     "opedd",
-    "licensing",
+    "content-licensing",
+    "licensed-content",
+    "rag",
+    "ai-agents",
+    "eu-ai-act",
+    "copyright",
+    "rights-management",
     "content",
-    "ai",
-    "model-context-protocol"
+    "ai"
   ],
   "author": "Opedd",
   "license": "MIT",