opedd-mcp 0.6.5 → 0.6.7

package/README.md

@@ -18,7 +18,7 @@
 <p align="center">
   <a href="cursor://anysphere.cursor-deeplink/mcp/install?name=opedd&config=eyJjb21tYW5kIjoibnB4IC15IG9wZWRkLW1jcCJ9"><img src="https://img.shields.io/badge/Add%20to-Cursor-000?logo=cursor" alt="Add to Cursor"></a>
   <a href="https://insiders.vscode.dev/redirect/mcp/install?name=opedd&config=%7B%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22opedd-mcp%22%5D%7D"><img src="https://img.shields.io/badge/Install%20in-VS%20Code-007ACC?logo=visualstudiocode" alt="Install in VS Code"></a>
-  <a href="https://opedd.com/for-ai-agents"><img src="https://img.shields.io/badge/Docs-opedd.com-111" alt="Docs"></a>
+  <a href="https://opedd.com/for-ai-agents?utm_source=github&utm_medium=readme&utm_campaign=mcp"><img src="https://img.shields.io/badge/Docs-opedd.com-111" alt="Docs"></a>
 </p>
 
 Lets AI assistants (Claude Desktop, Cursor, Windsurf, or any MCP-compatible host) discover, purchase, and verify content licenses autonomously — mid-conversation, without opening a browser. Every license is registered on-chain (Tempo blockchain) with cryptographic proof.
@@ -31,7 +31,54 @@ Lets AI assistants (Claude Desktop, Cursor, Windsurf, or any MCP-compatible host
 npx opedd-mcp
 ```
 
-Then add it to your MCP host (see [Claude Desktop / Cursor / Windsurf setup](#claude-desktop-setup) below). Discovery + verification tools work with no configuration; purchasing and content retrieval use optional API keys from [opedd.com](https://opedd.com).
+Then add it to your MCP host (see [Claude Desktop / Cursor / Windsurf setup](#claude-desktop-setup) below). Discovery + verification tools work with no configuration; purchasing and content retrieval use optional API keys from [opedd.com](https://opedd.com?utm_source=github&utm_medium=readme&utm_campaign=mcp).
+
+## Hosted endpoint — no install (mcp.opedd.com)
+
+Prefer zero-install? The same 17 tools are served hosted at **`https://mcp.opedd.com/mcp`** (Streamable HTTP). Auth is an `Authorization: Bearer` header with any Opedd key — public discovery tools need no auth at all.
+
+**Claude Messages API** (production agents):
+
+```json
+{
+  "mcp_servers": [{
+    "type": "url",
+    "url": "https://mcp.opedd.com/mcp",
+    "name": "opedd",
+    "authorization_token": "opedd_buyer_live_..."
+  }]
+}
+```
+
+**OpenAI Responses API**:
+
+```json
+{
+  "tools": [{
+    "type": "mcp",
+    "server_label": "opedd",
+    "server_url": "https://mcp.opedd.com/mcp",
+    "authorization": "opedd_buyer_live_..."
+  }]
+}
+```
+
+**claude.ai / Claude Desktop custom connector** (all plans): Settings → Connectors → *Add custom connector* → URL `https://mcp.opedd.com/mcp`; add a `Authorization: Bearer <your key>` request header for the credentialed tools.
+
+**Cursor** (`.cursor/mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "opedd": {
+      "url": "https://mcp.opedd.com/mcp",
+      "headers": { "Authorization": "Bearer ${env:OPEDD_KEY}" }
+    }
+  }
+}
+```
+
+Key routing: `opedd_pub_*` → publisher tools · `opedd_buyer_*` → content retrieval · `ent_*` → bulk feeds · buyer-portal JWT → audit/compliance/EU-AI-Act tools. Your key is forwarded per request and never stored by the gateway.
 
 ## What it does
 
@@ -232,9 +279,9 @@ Opedd is the **licensed content delivery layer** for AI — not just a licensing
 
 ## Learn more
 
-- [Opedd for AI Agents](https://opedd.com/for-ai-agents) — full documentation, code examples, endpoint reference
+- [Opedd for AI Agents](https://opedd.com/for-ai-agents?utm_source=github&utm_medium=readme&utm_campaign=mcp) — full documentation, code examples, endpoint reference
 - [API Docs](https://docs.opedd.com) — OpenAPI spec with agent endpoints
-- [Opedd Registry](https://opedd.com/registry) — browse on-chain license proofs
+- [Opedd Registry](https://opedd.com/registry?utm_source=github&utm_medium=readme&utm_campaign=mcp) — browse on-chain license proofs
 
 ## License
 

package/dist/telemetry.d.ts

@@ -5,7 +5,7 @@ export declare function isTelemetryEnabled(): boolean;
  * PII, keys, or content by construction. Pure; exported so a test can assert
  * the privacy invariant directly.
  */
-export declare function toolCallProperties(tool: string, durationMs: number, ok: boolean): Record<string, string | number | boolean>;
+export declare function toolCallProperties(tool: string, durationMs: number, ok: boolean, extra?: Record<string, string | number | boolean>): Record<string, string | number | boolean>;
 export declare function initTelemetry(): void;
-export declare function captureToolCall(tool: string, durationMs: number, ok: boolean): void;
+export declare function captureToolCall(tool: string, durationMs: number, ok: boolean, extra?: Record<string, string | number | boolean>): void;
 export declare function shutdownTelemetry(): Promise<void>;

package/dist/telemetry.js

@@ -36,12 +36,13 @@ export function isTelemetryEnabled() {
  * PII, keys, or content by construction. Pure; exported so a test can assert
  * the privacy invariant directly.
  */
-export function toolCallProperties(tool, durationMs, ok) {
+export function toolCallProperties(tool, durationMs, ok, extra) {
     return {
         tool,
         duration_ms: Math.round(durationMs),
         ok,
         server_version: SERVER_VERSION,
+        ...extra,
     };
 }
 let client = null;
@@ -63,14 +64,18 @@ export function initTelemetry() {
         client = null;
     }
 }
-export function captureToolCall(tool, durationMs, ok) {
+export function captureToolCall(tool, durationMs, ok, 
+// Extra event properties (still no params/PII/keys by construction).
+// The hosted gateway uses this to tag internal probes ({ internal: true })
+// so channel metrics can be filtered to genuinely external callers.
+extra) {
     if (!client)
         return;
     try {
         client.capture({
             distinctId: sessionId,
             event: "mcp_tool_call",
-            properties: toolCallProperties(tool, durationMs, ok),
+            properties: toolCallProperties(tool, durationMs, ok, extra),
         });
     }
     catch {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "opedd-mcp",
-  "version": "0.6.5",
-  "description": "Licensed, rights-cleared content for AI agents — verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
+  "version": "0.6.7",
+  "description": "Licensed, rights-cleared content for AI agents \u2014 verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
   "type": "module",
   "main": "dist/index.js",
   "mcpName": "com.opedd/opedd-mcp",
@@ -56,5 +56,8 @@
   "files": [
     "dist"
   ],
-  "types": "dist/index.d.ts"
+  "types": "dist/index.d.ts",
+  "overrides": {
+    "esbuild": "^0.28.1"
+  }
 }