opedd-mcp 0.6.4 → 0.6.6

package/README.md

@@ -33,6 +33,53 @@ npx opedd-mcp
 
 Then add it to your MCP host (see [Claude Desktop / Cursor / Windsurf setup](#claude-desktop-setup) below). Discovery + verification tools work with no configuration; purchasing and content retrieval use optional API keys from [opedd.com](https://opedd.com).
 
+## Hosted endpoint — no install (mcp.opedd.com)
+
+Prefer zero-install? The same 17 tools are served hosted at **`https://mcp.opedd.com/mcp`** (Streamable HTTP). Auth is an `Authorization: Bearer` header with any Opedd key — public discovery tools need no auth at all.
+
+**Claude Messages API** (production agents):
+
+```json
+{
+  "mcp_servers": [{
+    "type": "url",
+    "url": "https://mcp.opedd.com/mcp",
+    "name": "opedd",
+    "authorization_token": "opedd_buyer_live_..."
+  }]
+}
+```
+
+**OpenAI Responses API**:
+
+```json
+{
+  "tools": [{
+    "type": "mcp",
+    "server_label": "opedd",
+    "server_url": "https://mcp.opedd.com/mcp",
+    "authorization": "opedd_buyer_live_..."
+  }]
+}
+```
+
+**claude.ai / Claude Desktop custom connector** (all plans): Settings → Connectors → *Add custom connector* → URL `https://mcp.opedd.com/mcp`; add a `Authorization: Bearer <your key>` request header for the credentialed tools.
+
+**Cursor** (`.cursor/mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "opedd": {
+      "url": "https://mcp.opedd.com/mcp",
+      "headers": { "Authorization": "Bearer ${env:OPEDD_KEY}" }
+    }
+  }
+}
+```
+
+Key routing: `opedd_pub_*` → publisher tools · `opedd_buyer_*` → content retrieval · `ent_*` → bulk feeds · buyer-portal JWT → audit/compliance/EU-AI-Act tools. Your key is forwarded per request and never stored by the gateway.
+
 ## What it does
 
 Exposes up to 17 tools to any AI assistant (some are conditional on env vars):

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import { type Tool } from "@modelcontextprotocol/sdk/types.js";
+export interface Credentials {
+    apiBase: string;
+    buyerEmail?: string;
+    paymentMethodId?: string;
+    /** canonical opedd_pub_<env>_<32-hex> key */
+    pubBearer?: string;
+    /** LEGACY op_<32-hex> — retiring per backend Phase C */
+    apiKey?: string;
+    /** buyer API token (opedd_buyer_live_/_test_) */
+    buyerToken?: string;
+    /** enterprise access key (ent_*) — /enterprise-license GET feed */
+    accessKey?: string;
+    /** Supabase JWT — buyer-audit + compliance + Article 53 surfaces */
+    buyerJwt?: string;
+}
+export declare function envCredentials(): Credentials;
+type TextContent = {
+    type: "text";
+    text: string;
+};
+type ToolResult = {
+    content: TextContent[];
+    isError?: boolean;
+};
+export declare const TOOLS: Tool[];
+export declare const ALL_TOOLS: Tool[];
+export declare function dispatchTool(name: string, args: Record<string, unknown>, creds?: Credentials): Promise<ToolResult>;
+export {};

package/dist/telemetry.d.ts

@@ -0,0 +1,11 @@
+/** Whether telemetry is allowed (respects OPEDD_MCP_TELEMETRY + DO_NOT_TRACK). Pure — exported for tests. */
+export declare function isTelemetryEnabled(): boolean;
+/**
+ * The ONLY properties ever sent for a tool call — no parameters, responses,
+ * PII, keys, or content by construction. Pure; exported so a test can assert
+ * the privacy invariant directly.
+ */
+export declare function toolCallProperties(tool: string, durationMs: number, ok: boolean): Record<string, string | number | boolean>;
+export declare function initTelemetry(): void;
+export declare function captureToolCall(tool: string, durationMs: number, ok: boolean): void;
+export declare function shutdownTelemetry(): Promise<void>;

package/dist/version.d.ts

@@ -0,0 +1 @@
+export declare const SERVER_VERSION: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opedd-mcp",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "Licensed, rights-cleared content for AI agents — verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
   "type": "module",
   "main": "dist/index.js",
@@ -55,5 +55,6 @@
   },
   "files": [
     "dist"
-  ]
+  ],
+  "types": "dist/index.d.ts"
 }