opensecrets-mcp 1.0.0 → 1.0.1

package/README.md

@@ -25,3 +25,22 @@ The server uses stdio, so it can be connected to Claude Desktop, Cursor, VS Code
 ## Limits and privacy
 
 This project is intentionally narrow. It should be treated as a practical helper, not a complete certification or security audit. Check the implementation and the returned data before using it with sensitive material. Your key stays local and is only sent to OpenSecrets. Read-only.
+
+<!-- paywall -->
+## Premium tools
+
+These tools need a license key:
+
+* `fec_candidate_search`
+* `fec_committee_search`
+
+Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-opensecrets-mcp and set it in your MCP client config:
+
+```json
+"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
+```
+
+The key is checked against MCP Marketplace, cached for 24 hours, and keeps
+working offline once one check has succeeded. Every other tool on this server
+stays free.
+<!-- /paywall -->

package/dist/api.d.ts

@@ -10,3 +10,14 @@ export interface Candidate {
 export declare function searchCandidates(query: string, cycle?: string): Promise<Candidate[]>;
 export declare function candidateSummary(cid: string, cycle?: string): Promise<string>;
 export declare function formatCandidate(c: Candidate, index?: number): string;
+export declare function fecCandidateSearch(args: {
+    query: string;
+    office?: string;
+    state?: string;
+    party?: string;
+    limit?: number;
+}): Promise<string>;
+export declare function fecCommitteeSearch(args: {
+    query: string;
+    limit?: number;
+}): Promise<string>;

package/dist/api.js

@@ -61,3 +61,99 @@ export function formatCandidate(c, index) {
     const prefix = index !== undefined ? `${index + 1}. ` : "";
     return `${prefix}[${c.id ?? "?"}] ${c.name ?? "(unnamed)"}${c.party ? ` (${c.party}${c.state ? `-${c.state}` : ""})` : ""}${c.chamber ? ` — ${c.chamber}` : ""}`;
 }
+// ---- muxB tools:
+// OpenFEC, the FEC's own open API. DEMO_KEY is the placeholder the FEC
+// documents for public use and reaches the candidate and committee indexes.
+const FEC_BASE = "https://api.open.fec.gov/v1";
+const FEC_DEMO_KEY = "DEMO_KEY";
+async function fecGet(path, params = []) {
+    const qs = new URLSearchParams([...params, ["api_key", FEC_DEMO_KEY]]);
+    const res = await fetch(`${FEC_BASE}${path}?${qs.toString()}`, {
+        headers: { "User-Agent": "opensecrets-mcp/1.0", Accept: "application/json" },
+        signal: AbortSignal.timeout(25000),
+    });
+    if (res.status === 429)
+        throw new OpenSecretsError("OpenFEC DEMO_KEY is limited to 40 calls an hour; wait or register a key at api.data.gov.");
+    if (res.status === 422) {
+        const detail = (await res.json().catch(() => ({}))).message;
+        throw new OpenSecretsError(`OpenFEC rejected the query${detail ? `: ${String(detail).slice(0, 200)}` : "."}`);
+    }
+    if (!res.ok)
+        throw new OpenSecretsError(`OpenFEC error ${res.status}`);
+    return (await res.json());
+}
+function fecCycles(row) {
+    const list = Array.isArray(row.cycles) ? row.cycles : [];
+    if (list.length === 0)
+        return "cycles not reported";
+    const shown = list.slice(0, 6).map(String);
+    return shown.join(", ") + (list.length > 6 ? `, +${list.length - 6} more` : "");
+}
+function fecCommitteeLine(c) {
+    const designation = c.designation_full ?? c.designation ?? "";
+    return `      ${c.committee_id ?? "?"} ${c.name ?? "(unnamed)"}${designation ? ` [${designation}]` : ""}${c.committee_type_full ? ` (${c.committee_type_full})` : ""}`;
+}
+export async function fecCandidateSearch(args) {
+    const q = (args.query ?? "").trim();
+    if (!q)
+        throw new OpenSecretsError("Query is empty.");
+    const limit = Math.min(Math.max(args.limit ?? 5, 1), 20);
+    const params = [["q", q], ["per_page", String(limit)], ["sort", "-receipts"]];
+    const office = (args.office ?? "").trim().toUpperCase();
+    if (office)
+        params.push(["office", office]);
+    const state = (args.state ?? "").trim().toUpperCase();
+    if (state)
+        params.push(["state", state]);
+    const party = (args.party ?? "").trim().toUpperCase();
+    if (party)
+        params.push(["party", party]);
+    const data = await fecGet("/candidates/search/", params);
+    const rows = Array.isArray(data.results) ? data.results : [];
+    if (rows.length === 0)
+        return `No FEC candidate records match "${q}".`;
+    const total = (data.pagination ?? {}).count;
+    return [
+        `FEC candidate index for "${q}"${office ? `, office ${office}` : ""}${state ? `, ${state}` : ""}${party ? `, ${party}` : ""} - ${Number(total ?? 0).toLocaleString()} match, showing ${rows.length}:`,
+        ...rows.map((r, i) => {
+            const committees = Array.isArray(r.principal_committees) ? r.principal_committees : [];
+            return [
+                `${i + 1}. ${r.name ?? "(unnamed)"} [${r.candidate_id ?? "?"}]`,
+                `      ${r.office_full ?? r.office ?? "office not reported"}${r.district && r.district !== "00" ? `-${r.district}` : ""} · ${r.state ?? "?"} · ${r.party_full ?? r.party ?? "party not reported"}`,
+                `      status ${r.candidate_status ?? "not reported"}${r.incumbent_challenge_full ? `, ${r.incumbent_challenge_full}` : ""} · raised funds: ${r.has_raised_funds === true ? "yes" : r.has_raised_funds === false ? "no" : "not reported"}`,
+                `      cycles: ${fecCycles(r)}`,
+                committees.length ? `      principal committees:` : "      principal committees: not reported",
+                ...committees.slice(0, 3).map(fecCommitteeLine),
+                committees.length > 3 ? `      ...and ${committees.length - 3} more committees` : "",
+            ].filter(Boolean).join("\n");
+        }),
+    ].join("\n");
+}
+export async function fecCommitteeSearch(args) {
+    const q = (args.query ?? "").trim();
+    if (!q)
+        throw new OpenSecretsError("Query is empty.");
+    const limit = Math.min(Math.max(args.limit ?? 5, 1), 20);
+    const data = await fecGet("/committees/", [["q", q], ["per_page", String(limit)], ["sort", "-receipts"]]);
+    const rows = Array.isArray(data.results) ? data.results : [];
+    if (rows.length === 0)
+        return `No FEC committees match "${q}".`;
+    const total = (data.pagination ?? {}).count;
+    return [
+        `FEC committee index for "${q}" - ${Number(total ?? 0).toLocaleString()} match, showing ${rows.length}:`,
+        ...rows.map((r, i) => {
+            const agent = [r.designated_agent_name, r.designated_agent_city, r.designated_agent_state].filter(Boolean).join(", ");
+            const sponsor = Array.isArray(r.sponsor_candidate_list) ? r.sponsor_candidate_list.map((s) => String(s.name ?? s.candidate_id ?? "?")) : [];
+            const candidates = Array.isArray(r.candidate_ids) ? r.candidate_ids.map(String) : [];
+            return [
+                `${i + 1}. ${r.name ?? "(unnamed committee)"} [${r.committee_id ?? "?"}]`,
+                `      ${r.committee_type_full ?? "type not reported"}${r.designation_full ? ` · ${r.designation_full}` : ""}${r.party_full ? ` · ${r.party_full}` : ""}${r.state ? ` · ${r.state}` : ""}`,
+                `      treasurer ${r.treasurer_name ?? "not reported"}${agent ? ` (designated agent ${agent})` : ""} · filing ${r.filing_frequency ?? "not reported"}`,
+                `      cycles: ${fecCycles(r)} · first file ${r.first_file_date ?? "not reported"} · last file ${r.last_file_date ?? "not reported"}`,
+                sponsor.length ? `      sponsored by: ${sponsor.slice(0, 3).join(", ")}${sponsor.length > 3 ? `, +${sponsor.length - 3} more` : ""}` : "",
+                candidates.length ? `      linked candidate ids: ${candidates.slice(0, 4).join(", ")}${candidates.length > 4 ? `, +${candidates.length - 4} more` : ""}` : "",
+                r.affiliated_committee_name ? `      affiliated with: ${r.affiliated_committee_name}` : "",
+            ].filter(Boolean).join("\n");
+        }),
+    ].join("\n");
+}

package/dist/license.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Returns null when the caller may run the tool, or a short message telling
+ * them how to get a key.
+ *
+ * A good key is remembered for an hour, so a busy session does not hit the
+ * license server on every call and keeps working through a brief outage.
+ */
+export declare function premiumRequired(tool: string): Promise<string | null>;

package/dist/license.js

@@ -0,0 +1,79 @@
+// Premium tools on this server need a license key bought from MCP Marketplace.
+// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
+// that is not listed in PREMIUM keeps working without a key.
+const SLUG = "opensecrets-mcp";
+// Tools that need a key. Everything else is free.
+const PREMIUM = new Set([
+    "fec_candidate_search",
+    "fec_committee_search",
+]);
+const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
+// The license check calls the marketplace's verify endpoint directly instead of
+// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
+// check it makes is rejected by Supabase before it reaches the function. The
+// publishable key below is public by design - it ships in mcp-marketplace.io's
+// own JavaScript and only ever reaches their licence check.
+const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
+const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
+const OK_CACHE_MS = 60 * 60 * 1000;
+const BAD_CACHE_MS = 60 * 1000;
+const seen = new Map();
+const REASONS = {
+    missing_key: "no key is set",
+    invalid_format: "that key is not a valid MCP Marketplace key",
+    not_found: "that key was not found",
+    revoked: "that key has been revoked",
+    rotated: "that key was rotated, use your new one",
+    expired: "that key has expired, renew it",
+    rate_limited: "there were too many checks just now, try again shortly",
+    network_error: "the license server could not be reached",
+};
+function blocked(tool, reason) {
+    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
+    return `"${tool}" needs a license key, but ${why}. ` +
+        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
+}
+async function verify(key) {
+    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
+        method: "POST",
+        headers: {
+            apikey: PUBLISHABLE_KEY,
+            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ key, slug: SLUG }),
+        // an unusable key answers 400 with a JSON body, so read the body either way
+        signal: AbortSignal.timeout(15000),
+    });
+    const data = (await res.json());
+    if (typeof data?.valid !== "boolean")
+        return { valid: false, reason: "unexpected_response" };
+    return data;
+}
+/**
+ * Returns null when the caller may run the tool, or a short message telling
+ * them how to get a key.
+ *
+ * A good key is remembered for an hour, so a busy session does not hit the
+ * license server on every call and keeps working through a brief outage.
+ */
+export async function premiumRequired(tool) {
+    if (!PREMIUM.has(tool))
+        return null;
+    const key = process.env.MCP_LICENSE_KEY;
+    if (!key)
+        return blocked(tool, "missing_key");
+    const hit = seen.get(key);
+    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
+        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
+    }
+    let result;
+    try {
+        result = await verify(key);
+    }
+    catch {
+        result = { valid: false, reason: "network_error" };
+    }
+    seen.set(key, { ...result, at: Date.now() });
+    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
+}

package/dist/server.js

@@ -1,6 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
-import { candidateSummary, formatCandidate, OpenSecretsError, searchCandidates } from "./api.js";
+import { candidateSummary, formatCandidate, OpenSecretsError, searchCandidates, fecCandidateSearch, fecCommitteeSearch } from "./api.js";
+import { premiumRequired } from "./license.js";
 const text = (t) => ({ content: [{ type: "text", text: t }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -43,6 +44,51 @@ export function createServer() {
             return textError(errorMessage(e));
         }
     });
+    server.registerTool("fec_candidate_search", {
+        title: "Search the FEC candidate index",
+        description: "Federal campaign-finance candidate index by name fragment, with office, state and party filters, plus each candidate's principal committees and cycle history.",
+        inputSchema: z.object({
+            query: z.string().describe("Name fragment, e.g. 'Sanders'"),
+            office: z.string().default("").describe("Office code: H for House, S for Senate, P for President, empty = all"),
+            state: z.string().default("").describe("Two-letter state or 'US', empty = all"),
+            party: z.string().default("").describe("DEM, REP, IND or empty = all"),
+            limit: z.number().int().min(1).max(20).default(5),
+        }),
+        annotations: READ_ONLY,
+    }, async ({ query, office, state, party, limit }) => {
+        // ---- paywall: fec_candidate_search ----
+        const paywallMessage = await premiumRequired("fec_candidate_search");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await fecCandidateSearch({ query, office, state, party, limit }));
+        }
+        catch (e) {
+            return textError(errorMessage(e));
+        }
+    });
+    server.registerTool("fec_committee_search", {
+        title: "Search the FEC committee index",
+        description: "Federal campaign committees by name keyword: type, designation, party, treasurer, filing frequency, cycle span and sponsored candidates.",
+        inputSchema: z.object({
+            query: z.string().describe("Committee name fragment, e.g. 'for Senate'"),
+            limit: z.number().int().min(1).max(20).default(5),
+        }),
+        annotations: READ_ONLY,
+    }, async ({ query, limit }) => {
+        // ---- paywall: fec_committee_search ----
+        const paywallMessage = await premiumRequired("fec_committee_search");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await fecCommitteeSearch({ query, limit }));
+        }
+        catch (e) {
+            return textError(errorMessage(e));
+        }
+    });
     return server;
 }
 function errorMessage(e) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opensecrets-mcp",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "MCP server for OpenSecrets: money in U.S. politics. Needs a free API key.",
   "type": "module",
   "mcpName": "io.github.mrfentmen/opensecrets-mcp",