portkey-admin-mcp 0.3.8 → 0.4.1

package/README.md

@@ -1,22 +1,18 @@
 <div align="center">
 
-# Portkey Admin MCP Server
+<img src="./assets/portkey-balloon-spin-light.webp" alt="Portkey Admin MCP icon" width="180" height="180">
 
-<picture>
-  <source media="(prefers-color-scheme: dark)" srcset="https://readme-typing-svg.demolab.com?font=Fira+Code&pause=1000&color=FFFFFF&center=true&vCenter=true&width=500&lines=150+tools+for+Portkey+Admin+API;Prompts%2C+Configs%2C+Analytics;Full+MCP+Protocol+1.0+Server">
-  <source media="(prefers-color-scheme: light)" srcset="https://readme-typing-svg.demolab.com?font=Fira+Code&pause=1000&color=000000&center=true&vCenter=true&width=500&lines=150+tools+for+Portkey+Admin+API;Prompts%2C+Configs%2C+Analytics;Full+MCP+Protocol+1.0+Server">
-  <img src="https://readme-typing-svg.demolab.com?font=Fira+Code&pause=1000&color=000000&center=true&vCenter=true&width=500&lines=150+tools+for+Portkey+Admin+API;Prompts%2C+Configs%2C+Analytics;Full+MCP+Protocol+1.0+Server" alt="Typing SVG">
-</picture>
+# Portkey Admin MCP Server
 
 MCP server for the [Portkey](https://portkey.ai/) Admin API. Manage prompts, configs, analytics, API keys, and more from any MCP client.
 
 <a href="https://www.npmjs.com/package/portkey-admin-mcp"><img src="https://img.shields.io/npm/v/portkey-admin-mcp.svg" alt="npm version"></a>
 <a href="https://www.npmjs.com/package/portkey-admin-mcp"><img src="https://img.shields.io/npm/dm/portkey-admin-mcp.svg" alt="npm downloads"></a>
 <a href="https://github.com/CodesWhat/portkey-admin-mcp/actions/workflows/ci.yml"><img src="https://github.com/CodesWhat/portkey-admin-mcp/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
-<a href="https://nodejs.org/"><img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen.svg" alt="Node.js"></a>
+<a href="https://nodejs.org/"><img src="https://img.shields.io/badge/node-%3E%3D24-brightgreen.svg" alt="Node.js"></a>
 <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
 <a href="https://github.com/punkpeye/awesome-mcp-servers"><img src="https://awesome.re/mentioned-badge.svg" alt="Mentioned in Awesome MCP Servers"></a>
-<a href="https://lobehub.com/mcp/codeswhat-portkey-admin-mcp"><img src="https://lobehub.com/badge/mcp/codeswhat-portkey-admin-mcp?style=flat" alt="MCP Badge"></a>
+[![MCP Badge](https://lobehub.com/badge/mcp-full/codeswhat-portkey-admin-mcp?theme=light)](https://lobehub.com/mcp/codeswhat-portkey-admin-mcp)
 
 <a href="https://glama.ai/mcp/servers/CodesWhat/portkey-admin-mcp"><img src="https://glama.ai/mcp/servers/CodesWhat/portkey-admin-mcp/badges/card.svg" alt="portkey-admin-mcp MCP server"></a>
 
@@ -220,6 +216,7 @@ Key points:
 docker build -t portkey-admin-mcp .
 docker run \
   -e PORTKEY_API_KEY=your_key \
+  -e MCP_TRANSPORT=http \
   -e MCP_HOST=0.0.0.0 \
   -e MCP_PORT=3000 \
   -e MCP_AUTH_MODE=bearer \

package/build/index.js

@@ -2797,8 +2797,14 @@ function registerConfigsTools(server, service) {
   );
   server.tool(
     "update_config",
-    "Update a config by slug and create a new version. Only provided fields change; name and status are editable, while the slug stays fixed. Use list_config_versions if you need history first.",
+    "Update a config by slug; every call creates a new config version rather than overwriting, so earlier versions stay recoverable via list_config_versions. Only provided fields change: name, status, and all routing/cache/retry settings (cache_mode, cache_max_age, retry_attempts, retry_on_status_codes, strategy_mode, targets) are editable, while the slug stays fixed. Changes apply immediately to every API key and prompt referencing the config; get the slug from list_configs and review current settings with get_config before editing. Returns the config id, slug, and updated config payload.",
     CONFIGS_TOOL_SCHEMAS.updateConfig,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
     async (params) => {
       const config = buildConfigPayload(params);
       const updateData = {};
@@ -2897,7 +2903,7 @@ var GUARDRAILS_TOOL_SCHEMAS = {
   listGuardrails: {
     workspace_id: z5.string().optional().describe("Filter guardrails by workspace ID"),
     organisation_id: z5.string().optional().describe("Filter guardrails by organization ID"),
-    page_size: z5.coerce.number().min(1).max(1e3).optional().describe("Number of items per page (1-1000, default: 100)"),
+    page_size: z5.coerce.number().min(1).max(100).optional().describe("Number of items per page (1-100, default: 100)"),
     current_page: z5.coerce.number().positive().optional().describe("Page number for pagination")
   },
   getGuardrail: {
@@ -3262,8 +3268,14 @@ function registerIntegrationsTools(server, service) {
   );
   server.tool(
     "create_integration",
-    "Create an org-level provider integration. Some backends need provider-specific fields, and the new integration becomes the source for downstream providers and workspace access. Returns the new integration id and slug.",
+    "Create an org-level provider integration that stores an AI provider's API key and becomes the source workspace providers (create_provider) build on. ai_provider_id takes a provider identifier such as 'openai' or 'anthropic'; some backends (azure-openai, aws-bedrock, vertex-ai) need provider-specific fields, and the key is write-only afterwards (get_integration shows it masked). Provision models and workspace access afterwards with update_integration_models and update_integration_workspaces. Returns the new integration id and slug.",
     INTEGRATIONS_TOOL_SCHEMAS.createIntegration,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
     async (params) => {
       const result = await service.integrations.createIntegration({
         name: params.name,
@@ -3323,8 +3335,14 @@ function registerIntegrationsTools(server, service) {
   );
   server.tool(
     "update_integration",
-    "Update an integration's name, key, or provider-specific config. Key and config changes take effect immediately and can disrupt dependent providers or live requests.",
+    "Update an org-level integration's name, description, API key, or provider-specific config by slug. Only provided fields change and the update is in place (no version history); key and config changes take effect immediately and can disrupt dependent providers or live requests, so review current settings with get_integration first. Get the slug from list_integrations; model provisioning and workspace access are managed separately via update_integration_models and update_integration_workspaces. Returns a success flag.",
     INTEGRATIONS_TOOL_SCHEMAS.updateIntegration,
+    {
+      readOnlyHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
+      openWorldHint: false
+    },
     async (params) => {
       const result = await service.integrations.updateIntegration(params.slug, {
         name: params.name,
@@ -5131,8 +5149,14 @@ function registerMcpIntegrationsTools(server, service) {
   );
   server.tool(
     "update_mcp_integration_capabilities",
-    "Bulk enable or disable capabilities on an MCP integration. Changes take effect immediately for connected users and hide or expose the selected tools, resources, and prompts; use list_mcp_integration_capabilities first if you need the current state.",
+    "Bulk enable or disable capabilities (tools, prompts, resources) on an MCP integration. A reversible toggle, not a deletion: only the capabilities named in the array change state, the change hides or exposes them immediately for connected users, and re-running with enabled flipped restores them. Source the integration id from list_mcp_integrations and current capability names, types, and states from list_mcp_integration_capabilities. Returns a success confirmation message.",
     MCP_INTEGRATIONS_TOOL_SCHEMAS.updateMcpIntegrationCapabilities,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
     async (params) => {
       await service.mcpIntegrations.updateMcpIntegrationCapabilities(
         params.id,
@@ -5177,8 +5201,14 @@ function registerMcpIntegrationsTools(server, service) {
   );
   server.tool(
     "update_mcp_integration_workspaces",
-    "Grant or revoke workspace access to an MCP integration in bulk. Changes take effect immediately for all users in the selected workspaces; use list_mcp_integration_workspaces first to review the current access state.",
+    "Grant or revoke workspace access to an MCP integration in bulk. Reversible: only the workspaces listed change, access applies or is removed immediately for all users in those workspaces, and re-running with enabled flipped undoes a change. Source the integration id from list_mcp_integrations, workspace ids from list_workspaces, and the current access state from list_mcp_integration_workspaces. Returns a success confirmation message.",
     MCP_INTEGRATIONS_TOOL_SCHEMAS.updateMcpIntegrationWorkspaces,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
     async (params) => {
       await service.mcpIntegrations.updateMcpIntegrationWorkspaces(params.id, {
         workspaces: params.workspaces
@@ -6375,8 +6405,14 @@ function registerPromptsTools(server, service) {
   );
   server.tool(
     "migrate_prompt",
-    "Create or update a prompt in one idempotent step for CI/CD and prompt-as-code flows. Finds existing prompts by name within the collection, stores app/env in template_metadata, and supports dry_run for safe preflight checks.",
+    "Create or update a prompt in one idempotent step for CI/CD and prompt-as-code flows, unlike create_prompt which always makes a new prompt. Looks up the prompt by name within collection_id: if found it adds a new version (nothing is overwritten), otherwise it creates the prompt; dry_run reports what would happen without changing anything. Stores app/env in template_metadata; get collection_id from list_collections. Returns the action taken (created or updated), dry_run flag, prompt id, slug, and version id.",
     PROMPTS_TOOL_SCHEMAS.migratePrompt,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
     async (params) => {
       const templateString = normalizePromptTemplateString(params);
       if (templateString === void 0) {
@@ -6891,7 +6927,7 @@ var USERS_TOOL_SCHEMAS = {
     cost_max: z18.coerce.number().positive().optional().describe("Maximum cost in cents to filter by"),
     status_code: z18.string().optional().describe("Filter by specific HTTP status codes (comma-separated)"),
     virtual_keys: z18.string().optional().describe("Filter by specific virtual key slugs (comma-separated)"),
-    page_size: z18.coerce.number().positive().optional().describe("Number of results per page (for pagination)")
+    page_size: z18.coerce.number().positive().max(100).optional().describe("Number of results per page (max 100)")
   },
   getUser: {
     user_id: z18.string().describe("The user ID to retrieve")
@@ -7145,9 +7181,7 @@ function registerUsersTools(server, service) {
 import { z as z19 } from "zod";
 var WORKSPACES_TOOL_SCHEMAS = {
   listWorkspaces: {
-    page_size: z19.coerce.number().positive().optional().describe(
-      "Number of workspaces to return per page (default varies by endpoint)"
-    ),
+    page_size: z19.coerce.number().positive().max(100).optional().describe("Number of workspaces to return per page (max 100)"),
     current_page: z19.coerce.number().positive().optional().describe("Page number to retrieve when results are paginated")
   },
   getWorkspace: {

package/build/server.js

@@ -2811,8 +2811,14 @@ function registerConfigsTools(server, service) {
   );
   server.tool(
     "update_config",
-    "Update a config by slug and create a new version. Only provided fields change; name and status are editable, while the slug stays fixed. Use list_config_versions if you need history first.",
+    "Update a config by slug; every call creates a new config version rather than overwriting, so earlier versions stay recoverable via list_config_versions. Only provided fields change: name, status, and all routing/cache/retry settings (cache_mode, cache_max_age, retry_attempts, retry_on_status_codes, strategy_mode, targets) are editable, while the slug stays fixed. Changes apply immediately to every API key and prompt referencing the config; get the slug from list_configs and review current settings with get_config before editing. Returns the config id, slug, and updated config payload.",
     CONFIGS_TOOL_SCHEMAS.updateConfig,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
     async (params) => {
       const config = buildConfigPayload(params);
       const updateData = {};
@@ -2911,7 +2917,7 @@ var GUARDRAILS_TOOL_SCHEMAS = {
   listGuardrails: {
     workspace_id: z5.string().optional().describe("Filter guardrails by workspace ID"),
     organisation_id: z5.string().optional().describe("Filter guardrails by organization ID"),
-    page_size: z5.coerce.number().min(1).max(1e3).optional().describe("Number of items per page (1-1000, default: 100)"),
+    page_size: z5.coerce.number().min(1).max(100).optional().describe("Number of items per page (1-100, default: 100)"),
     current_page: z5.coerce.number().positive().optional().describe("Page number for pagination")
   },
   getGuardrail: {
@@ -3276,8 +3282,14 @@ function registerIntegrationsTools(server, service) {
   );
   server.tool(
     "create_integration",
-    "Create an org-level provider integration. Some backends need provider-specific fields, and the new integration becomes the source for downstream providers and workspace access. Returns the new integration id and slug.",
+    "Create an org-level provider integration that stores an AI provider's API key and becomes the source workspace providers (create_provider) build on. ai_provider_id takes a provider identifier such as 'openai' or 'anthropic'; some backends (azure-openai, aws-bedrock, vertex-ai) need provider-specific fields, and the key is write-only afterwards (get_integration shows it masked). Provision models and workspace access afterwards with update_integration_models and update_integration_workspaces. Returns the new integration id and slug.",
     INTEGRATIONS_TOOL_SCHEMAS.createIntegration,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
     async (params) => {
       const result = await service.integrations.createIntegration({
         name: params.name,
@@ -3337,8 +3349,14 @@ function registerIntegrationsTools(server, service) {
   );
   server.tool(
     "update_integration",
-    "Update an integration's name, key, or provider-specific config. Key and config changes take effect immediately and can disrupt dependent providers or live requests.",
+    "Update an org-level integration's name, description, API key, or provider-specific config by slug. Only provided fields change and the update is in place (no version history); key and config changes take effect immediately and can disrupt dependent providers or live requests, so review current settings with get_integration first. Get the slug from list_integrations; model provisioning and workspace access are managed separately via update_integration_models and update_integration_workspaces. Returns a success flag.",
     INTEGRATIONS_TOOL_SCHEMAS.updateIntegration,
+    {
+      readOnlyHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
+      openWorldHint: false
+    },
     async (params) => {
       const result = await service.integrations.updateIntegration(params.slug, {
         name: params.name,
@@ -5145,8 +5163,14 @@ function registerMcpIntegrationsTools(server, service) {
   );
   server.tool(
     "update_mcp_integration_capabilities",
-    "Bulk enable or disable capabilities on an MCP integration. Changes take effect immediately for connected users and hide or expose the selected tools, resources, and prompts; use list_mcp_integration_capabilities first if you need the current state.",
+    "Bulk enable or disable capabilities (tools, prompts, resources) on an MCP integration. A reversible toggle, not a deletion: only the capabilities named in the array change state, the change hides or exposes them immediately for connected users, and re-running with enabled flipped restores them. Source the integration id from list_mcp_integrations and current capability names, types, and states from list_mcp_integration_capabilities. Returns a success confirmation message.",
     MCP_INTEGRATIONS_TOOL_SCHEMAS.updateMcpIntegrationCapabilities,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
     async (params) => {
       await service.mcpIntegrations.updateMcpIntegrationCapabilities(
         params.id,
@@ -5191,8 +5215,14 @@ function registerMcpIntegrationsTools(server, service) {
   );
   server.tool(
     "update_mcp_integration_workspaces",
-    "Grant or revoke workspace access to an MCP integration in bulk. Changes take effect immediately for all users in the selected workspaces; use list_mcp_integration_workspaces first to review the current access state.",
+    "Grant or revoke workspace access to an MCP integration in bulk. Reversible: only the workspaces listed change, access applies or is removed immediately for all users in those workspaces, and re-running with enabled flipped undoes a change. Source the integration id from list_mcp_integrations, workspace ids from list_workspaces, and the current access state from list_mcp_integration_workspaces. Returns a success confirmation message.",
     MCP_INTEGRATIONS_TOOL_SCHEMAS.updateMcpIntegrationWorkspaces,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
     async (params) => {
       await service.mcpIntegrations.updateMcpIntegrationWorkspaces(params.id, {
         workspaces: params.workspaces
@@ -6389,8 +6419,14 @@ function registerPromptsTools(server, service) {
   );
   server.tool(
     "migrate_prompt",
-    "Create or update a prompt in one idempotent step for CI/CD and prompt-as-code flows. Finds existing prompts by name within the collection, stores app/env in template_metadata, and supports dry_run for safe preflight checks.",
+    "Create or update a prompt in one idempotent step for CI/CD and prompt-as-code flows, unlike create_prompt which always makes a new prompt. Looks up the prompt by name within collection_id: if found it adds a new version (nothing is overwritten), otherwise it creates the prompt; dry_run reports what would happen without changing anything. Stores app/env in template_metadata; get collection_id from list_collections. Returns the action taken (created or updated), dry_run flag, prompt id, slug, and version id.",
     PROMPTS_TOOL_SCHEMAS.migratePrompt,
+    {
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
     async (params) => {
       const templateString = normalizePromptTemplateString(params);
       if (templateString === void 0) {
@@ -6905,7 +6941,7 @@ var USERS_TOOL_SCHEMAS = {
     cost_max: z18.coerce.number().positive().optional().describe("Maximum cost in cents to filter by"),
     status_code: z18.string().optional().describe("Filter by specific HTTP status codes (comma-separated)"),
     virtual_keys: z18.string().optional().describe("Filter by specific virtual key slugs (comma-separated)"),
-    page_size: z18.coerce.number().positive().optional().describe("Number of results per page (for pagination)")
+    page_size: z18.coerce.number().positive().max(100).optional().describe("Number of results per page (max 100)")
   },
   getUser: {
     user_id: z18.string().describe("The user ID to retrieve")
@@ -7159,9 +7195,7 @@ function registerUsersTools(server, service) {
 import { z as z19 } from "zod";
 var WORKSPACES_TOOL_SCHEMAS = {
   listWorkspaces: {
-    page_size: z19.coerce.number().positive().optional().describe(
-      "Number of workspaces to return per page (default varies by endpoint)"
-    ),
+    page_size: z19.coerce.number().positive().max(100).optional().describe("Number of workspaces to return per page (max 100)"),
     current_page: z19.coerce.number().positive().optional().describe("Page number to retrieve when results are paginated")
   },
   getWorkspace: {

package/package.json

@@ -22,11 +22,13 @@
 		"knip": "knip",
 		"ci": "npm run lint && npm run knip && npm run typecheck && npm run test && npm run build && npm run test:e2e && npm run verify:readme-tools",
 		"start:http": "node build/server.js",
+		"generate:lobehub-tools": "npm run build && node scripts/generate-lobehub-tools.mjs",
+		"publish:lobehub": "npm run generate:lobehub-tools && npx -y @lobehub/market-cli plugin publish --dir \"$PWD\"",
 		"prepare": "[ -n \"$CI\" ] || [ -f /.dockerenv ] || [ ! -d .git ] || lefthook install",
 		"prepublishOnly": "npm run ci"
 	},
 	"engines": {
-		"node": ">=20"
+		"node": ">=24"
 	},
 	"files": [
 		"build"
@@ -42,7 +44,7 @@
 	},
 	"name": "portkey-admin-mcp",
 	"mcpName": "io.github.CodesWhat/portkey-admin-mcp",
-	"version": "0.3.8",
+	"version": "0.4.1",
 	"main": "build/index.js",
 	"keywords": [
 		"mcp",