planpost-mcp 0.2.0 → 0.2.1

package/README.md

@@ -42,6 +42,12 @@ The server can also run as a shared, multi-tenant HTTP endpoint — no local ins
 npx -y planpost-mcp --http --port 3020     # exposes POST /mcp (+ /health)
 ```
 
+Behind a reverse proxy, bind to loopback so the port isn't reachable directly:
+
+```bash
+HOST=127.0.0.1 npx -y planpost-mcp --http --port 3020
+```
+
 Connect from any HTTP-capable MCP client, e.g.:
 
 ```bash
@@ -51,6 +57,8 @@ claude mcp add --transport http planpost https://mcp.yourhost.com/mcp \
 
 The transport is stateless (streamable HTTP); the `Authorization: Bearer pk_...` header is required on every request and scoped per request, so one hosted instance serves many users safely. Put it behind HTTPS (reverse proxy) in production.
 
+`--host` / `HOST` default to `0.0.0.0`, so containers and LAN use work without extra flags.
+
 ### 3. Talk to it
 
 > "Schedule this post to my Polish Pages group for tomorrow 9:00: …"

package/dist/index.js

@@ -813,7 +813,7 @@ function readBody(req) {
  * (e.g. `claude mcp add --transport http planpost https://host/mcp --header
  * "Authorization: Bearer pk_..."`) at it without local installs.
  */
-async function startHttp(port) {
+async function startHttp(port, host) {
     const httpServer = createHttpServer(async (req, res) => {
         const fail = (status, message) => {
             res.writeHead(status, { "Content-Type": "application/json" });
@@ -855,8 +855,8 @@ async function startHttp(port) {
                 fail(500, "Internal error");
         }
     });
-    httpServer.listen(port, () => {
-        console.log(`planpost-mcp listening on http://0.0.0.0:${port}/mcp (streamable HTTP, stateless)`);
+    httpServer.listen(port, host, () => {
+        console.log(`planpost-mcp listening on http://${host}:${port}/mcp (streamable HTTP, stateless)`);
     });
 }
 async function main() {
@@ -864,7 +864,12 @@ async function main() {
     if (args.includes("--http")) {
         const portArg = args[args.indexOf("--port") + 1];
         const port = Number(portArg) || Number(process.env.PORT) || 3020;
-        await startHttp(port);
+        // Defaults to all interfaces so `--http` works in a container or on a LAN
+        // without extra flags. Behind a reverse proxy set HOST=127.0.0.1 so the
+        // port isn't reachable except through the proxy.
+        const hostArg = args.includes("--host") ? args[args.indexOf("--host") + 1] : undefined;
+        const host = hostArg || process.env.HOST || "0.0.0.0";
+        await startHttp(port, host);
         return;
     }
     await startStdio();

package/package.json

@@ -1,6 +1,8 @@
 {
   "name": "planpost-mcp",
-  "version": "0.2.0",
+  "version": "0.2.1",
+  "//mcpName": "Ownership marker for the official MCP Registry: must equal `name` in server.json, or publishing fails validation.",
+  "mcpName": "st.planpo/mcp",
   "description": "PlanPost MCP server — let Claude and other AI agents schedule posts, manage social media, create videos and carousels, and read analytics via the PlanPost public API",
   "license": "MIT",
   "type": "module",
@@ -17,12 +19,7 @@
   "engines": {
     "node": ">=18"
   },
-  "homepage": "https://planpo.st",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/lukBB/social-poster-v2.git",
-    "directory": "packages/mcp-server"
-  },
+  "homepage": "https://planpo.st/agent",
   "keywords": [
     "mcp",
     "model-context-protocol",