opedd-mcp 0.6.11 → 0.6.13

package/README.md

@@ -89,11 +89,11 @@ Exposes up to 17 tools to any AI assistant (some are conditional on env vars):
 | Tool | Description |
 |------|-------------|
 | `lookup_content` | Look up an article by URL — returns title, publisher, pricing |
-| `purchase_license` | Buy a single-article license via Stripe — returns OP-XXXX-XXXX key |
+| `purchase_license` | Buy a single-article license via Stripe — returns OP-XXXX-XXXX key. Requires `terms_accepted: true` (genuine buyer assent to opedd.com/terms; recorded with the licence) |
 | `verify_license` | Verify a license key — returns validity, article, publisher, blockchain proof |
 | `browse_registry` | Browse the public Opedd registry — lists issued LICENSES (use `publisher_directory` to browse publishers themselves) |
 | `publisher_directory` | Browse the public Opedd publisher catalog — paginated publishers with article counts + pricing + sample articles (primary buyer-discovery surface for AI labs) |
-| `purchase_enterprise_license` | Buy a bulk enterprise license covering multiple publishers (Phase 10) — returns Stripe `client_secret` |
+| `purchase_enterprise_license` | Buy a bulk enterprise license covering multiple publishers (Phase 10) — returns Stripe `client_secret`. Requires `terms_accepted: true`; the current Master Services Agreement version label is recorded with the licence (the backend rejects superseded labels) |
 | `rsl_get` | Fetch a publisher's RSL Standard manifest — public discovery surface; `jsonld: true` returns CDSM Article 4(3) signed receipt (Phase 12 W1.1) |
 | `detect_platform` | Detect the content platform behind a URL — returns suggested onboarding workflow for Substack / Beehiiv / Ghost / Medium / Brevo / custom (Phase 12 W3.1) |
 
@@ -107,8 +107,8 @@ Exposes up to 17 tools to any AI assistant (some are conditional on env vars):
 
 | Tool | Description |
 |------|-------------|
-| `list_feed` | List articles from a buyer's licensed catalog with `since` delta-feed support (Phase 11 M5) |
-| `stream_feed_ndjson` | Bulk-export up to 1000 articles per call via NDJSON wire format (Phase 11 M3) |
+| `list_feed` | List articles from a buyer's licensed catalog with `since` delta-feed support (Phase 11 M5). Flat-fee scopes carry full `content_body`; metered (filtered-scope) keys get a discovery-only feed (`content_body: null`, `content_access: "metered_per_call"`) — fetch text via `get_content` (billed per call) |
+| `stream_feed_ndjson` | Bulk-export up to 1000 articles per call via NDJSON wire format (Phase 11 M3). Same per-scope content contract as `list_feed` — metered keys export metadata only |
 
 **Requires `OPEDD_BUYER_JWT` (Supabase JWT) — buyer account + audit + compliance + EU AI Act surfaces**
 
@@ -266,7 +266,7 @@ npm run build # compiles to dist/
 | | Opedd | Generic search APIs |
 |---|---|---|
 | **What you get** | Licensed content + license key + on-chain proof — all in one API call | Scraped web content, no rights |
-| **Content delivery** | Full article text delivered via API (JSON), real-time feed via webhooks | Scraped snippets or full-page dumps |
+| **Content delivery** | Full article text via API (JSON) — bulk on flat-fee licenses, per-call (metered) on filtered licenses; real-time feed via webhooks | Scraped snippets or full-page dumps |
 | **Content quality** | Curated publisher content (niche B2B newsletters, expert analysis) | Whatever's on the open web |
 | **Rights** | Verifiable license key per article, publisher-authorized | No rights clearance |
 | **Proof** | On-chain (Tempo blockchain) — independently verifiable | None |

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { type Tool } from "@modelcontextprotocol/sdk/types.js";
+export declare const CURRENT_MSA_VERSION = "master-services-agreement-2026-07-22b";
 export interface Credentials {
     apiBase: string;
     buyerEmail?: string;

package/dist/index.js

@@ -5,6 +5,12 @@ import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextpro
 import { pathToFileURL } from "node:url";
 import { initTelemetry, captureToolCall, shutdownTelemetry } from "./telemetry.js";
 import { SERVER_VERSION } from "./version.js";
+// ─── Configuration ────────────────────────────────────────────────────────────
+// Current Opedd Master Services Agreement version label. MUST match
+// opedd-backend supabase/functions/_shared/msa-version.ts CURRENT_MSA_VERSION
+// (the backend rejects superseded labels). On an MSA version bump, update this
+// constant and cut a new package release.
+export const CURRENT_MSA_VERSION = "master-services-agreement-2026-07-22b";
 export function envCredentials() {
     return {
         apiBase: process.env.OPEDD_API_URL ?? "https://api.opedd.com",
@@ -322,11 +328,17 @@ function buildTools(has) {
                 "Returns a Stripe client_secret for payment completion + the enterprise_license_id. " +
                 "After payment, an ent_* access key is emailed to buyer_email. " +
                 "Scopes: 'custom' (pass-through publisher_ids), 'platform_wide' (auto-resolve all opted-in publishers), 'filtered' (Phase 10 filter_rules). " +
-                "License tiers: 'rag' (= ai_retrieval), 'training' (= ai_training, flat-fee not metered), 'inference' (= ai_retrieval), 'full_ai' (writes both retrieval + training records).",
+                "License tiers: 'rag' (= ai_retrieval), 'training' (= ai_training, flat-fee not metered), 'inference' (= ai_retrieval), 'full_ai' (writes both retrieval + training records). " +
+                "The buyer must accept the Opedd Master Services Agreement (opedd.com/terms) before purchase — set terms_accepted=true to record it.",
             inputSchema: {
                 type: "object",
-                required: ["publisher_ids", "buyer_email", "buyer_org"],
+                required: ["publisher_ids", "buyer_email", "buyer_org", "terms_accepted"],
                 properties: {
+                    terms_accepted: {
+                        type: "boolean",
+                        description: "REQUIRED. Set true only after the buyer (your principal) has accepted the Opedd Master Services Agreement at opedd.com/terms. " +
+                            "The current MSA version label is recorded with the licence; purchases without genuine acceptance are rejected (HTTP 400).",
+                    },
                     publisher_ids: {
                         type: "array",
                         items: { type: "string" },
@@ -403,6 +415,9 @@ function buildTools(has) {
         TOOLS.push({
             name: "list_feed",
             description: "List articles from a buyer's licensed catalog via GET /enterprise-license (Phase 10 + 11). " +
+                "Content contract: flat-fee scopes (custom/platform_wide) include full content_body; METERED " +
+                "(filtered-scope) keys get a discovery-only feed — content_body is null and content_access is " +
+                "'metered_per_call'; fetch article text via get_content (each retrieval is billed). " +
                 "Returns JSON-format response with paginated articles. " +
                 "Use `since` (ISO 8601) for delta-feed polling — only articles published after the timestamp. " +
                 "Use `cursor` for pagination across pages. " +
@@ -430,6 +445,8 @@ function buildTools(has) {
             name: "stream_feed_ndjson",
             description: "Bulk-export a buyer's licensed catalog via GET /enterprise-license?format=ndjson (Phase 11 M3). " +
                 "Returns up to 1000 articles per call (collected from line-delimited JSON wire format). " +
+                "Same per-scope content contract as list_feed: METERED (filtered-scope) keys export metadata only " +
+                "(content_body null, content_access 'metered_per_call') — use get_content for article text. " +
                 "Each article emits one usage_records row (analytics-only sentinel 'bulk-export:<request_id>:<article_id>' — not metered-billable per the revenue-model bifurcation invariant). " +
                 "Use `since` (ISO 8601) for delta-feed. Use `cursor` to paginate beyond 1000. " +
                 "Backend supports 5000 articles per call; the MCP cap is 1000 for transport reasonability. " +
@@ -794,7 +811,7 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
             }
             // ── purchase_enterprise_license (Phase 10) ─────────────────────────────
             case "purchase_enterprise_license": {
-                const { publisher_ids, buyer_email: pelEmail, buyer_org, billing_type = "annual", license_tier = "rag", duration_months = 12, scope = "custom", filter_rules, buyer_webhook_url, } = args;
+                const { publisher_ids, buyer_email: pelEmail, buyer_org, billing_type = "annual", license_tier = "rag", duration_months = 12, scope = "custom", filter_rules, buyer_webhook_url, terms_accepted, } = args;
                 if (!Array.isArray(publisher_ids) || publisher_ids.length === 0) {
                     if (scope === "custom") {
                         return err("publisher_ids array is required for scope='custom'");
@@ -804,6 +821,9 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
                     return err("buyer_email is required");
                 if (!buyer_org)
                     return err("buyer_org is required");
+                if (terms_accepted !== true) {
+                    return err("terms_accepted must be true — confirm with the buyer that they accept the Opedd Master Services Agreement (opedd.com/terms) before purchasing.");
+                }
                 const body = {
                     publisher_ids: publisher_ids ?? [],
                     buyer_email: pelEmail,
@@ -812,6 +832,12 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
                     license_tier,
                     duration_months,
                     scope,
+                    // Genuine assent moment: the agent asserted terms_accepted=true just
+                    // now. The backend requires the MSA version label (fail-closed since
+                    // 2026-07-31) and rejects superseded labels — on an MSA version bump
+                    // this constant must be updated (new package release) to match
+                    // opedd-backend _shared/msa-version.ts CURRENT_MSA_VERSION.
+                    terms_version: CURRENT_MSA_VERSION,
                     ...(filter_rules ? { filter_rules } : {}),
                     ...(buyer_webhook_url ? { buyer_webhook_url } : {}),
                 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opedd-mcp",
-  "version": "0.6.11",
+  "version": "0.6.13",
   "description": "Licensed, rights-cleared content for AI agents — verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
   "type": "module",
   "main": "dist/index.js",