projoflow-mcp-server 1.0.5 → 1.1.1

package/index.js

@@ -8,32 +8,92 @@ import {
 } from "@modelcontextprotocol/sdk/types.js";
 import { createClient } from "@supabase/supabase-js";
 
-// Supabase config - all values from environment variables
-const SUPABASE_URL = process.env.PROJOFLOW_SUPABASE_URL || process.env.ZFLOW_SUPABASE_URL;
-const SUPABASE_ANON_KEY = process.env.PROJOFLOW_SUPABASE_ANON_KEY || process.env.ZFLOW_SUPABASE_ANON_KEY;
-
-// MCP service account credentials
+// =============================================================================
+// CONFIGURATION - Supports two auth methods:
+// 1. API Key (recommended): PROJOFLOW_API_KEY=pf_xxx
+// 2. Email/Password: PROJOFLOW_MCP_EMAIL + PROJOFLOW_MCP_PASSWORD
+// =============================================================================
+
+// Supabase config
+const SUPABASE_URL = process.env.PROJOFLOW_SUPABASE_URL || "https://bylvbbadzzznjdrymiyg.supabase.co";
+const SUPABASE_ANON_KEY = process.env.PROJOFLOW_SUPABASE_ANON_KEY || "sb_publishable_gJQ-XaYwsWccrTxWBrQ6nA_nQAf0XDU";
+const SUPABASE_SERVICE_KEY = process.env.PROJOFLOW_SERVICE_KEY;
+
+// Auth options
+const API_KEY = process.env.PROJOFLOW_API_KEY;
 const MCP_EMAIL = process.env.PROJOFLOW_MCP_EMAIL || process.env.ZFLOW_MCP_EMAIL;
 const MCP_PASSWORD = process.env.PROJOFLOW_MCP_PASSWORD || process.env.ZFLOW_MCP_PASSWORD;
 
-// Validate required env vars
-const missing = [];
-if (!SUPABASE_URL) missing.push("PROJOFLOW_SUPABASE_URL");
-if (!SUPABASE_ANON_KEY) missing.push("PROJOFLOW_SUPABASE_ANON_KEY");
-if (!MCP_EMAIL) missing.push("PROJOFLOW_MCP_EMAIL");
-if (!MCP_PASSWORD) missing.push("PROJOFLOW_MCP_PASSWORD");
+// Determine auth method
+const useApiKey = !!API_KEY;
+const useEmailPassword = !!(MCP_EMAIL && MCP_PASSWORD);
 
-if (missing.length > 0) {
-  console.error(`ERROR: Missing required environment variables: ${missing.join(", ")}`);
-  console.error("Set these in your shell profile (~/.zshrc or ~/.bashrc)");
+if (!useApiKey && !useEmailPassword) {
+  console.error(`ERROR: Authentication required. Provide ONE of:`);
+  console.error(`  1. PROJOFLOW_API_KEY=pf_xxx (recommended - get from ProjoFlow dashboard)`);
+  console.error(`  2. PROJOFLOW_MCP_EMAIL + PROJOFLOW_MCP_PASSWORD`);
   process.exit(1);
 }
 
-// Create Supabase client with anon key (will authenticate as user)
-const supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY);
+// Create Supabase client - use service key for API key validation, anon for email/password
+let supabase;
+let authContext = null; // Will store { user_id, workspace_id } for API key auth
 
 // Authenticate on startup
 async function authenticate() {
+  if (useApiKey) {
+    // API Key auth - validate token and get user context
+    console.error(`Authenticating with API key (${API_KEY.substring(0, 12)}...)`);
+    
+    // Need service key to validate tokens
+    if (!SUPABASE_SERVICE_KEY) {
+      // Fall back to calling an edge function or RPC with anon key
+      supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY);
+      
+      // Try to validate via RPC (requires the function to be accessible)
+      const { data, error } = await supabase.rpc('validate_mcp_token', { p_token: API_KEY });
+      
+      if (error || !data || data.length === 0) {
+        console.error(`API key validation failed: ${error?.message || 'Invalid or expired token'}`);
+        process.exit(1);
+      }
+      
+      authContext = {
+        user_id: data[0].user_id,
+        workspace_id: data[0].workspace_id,
+        token_id: data[0].token_id
+      };
+      
+      console.error(`Authenticated via API key for workspace ${authContext.workspace_id}`);
+      return authContext;
+    }
+    
+    // Use service key for validation
+    supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_KEY);
+    
+    const { data, error } = await supabase.rpc('validate_mcp_token', { p_token: API_KEY });
+    
+    if (error || !data || data.length === 0) {
+      console.error(`API key validation failed: ${error?.message || 'Invalid or expired token'}`);
+      process.exit(1);
+    }
+    
+    authContext = {
+      user_id: data[0].user_id,
+      workspace_id: data[0].workspace_id,
+      token_id: data[0].token_id
+    };
+    
+    // Update last_used_at
+    await supabase.from('mcp_api_tokens').update({ last_used_at: new Date().toISOString() }).eq('id', authContext.token_id);
+    
+    console.error(`Authenticated via API key for workspace ${authContext.workspace_id}`);
+    return authContext;
+  }
+  
+  // Email/password auth
+  supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY);
+  
   const { data, error } = await supabase.auth.signInWithPassword({
     email: MCP_EMAIL,
     password: MCP_PASSWORD

package/package.json

@@ -1,17 +1,18 @@
 {
   "name": "projoflow-mcp-server",
-  "version": "1.0.5",
-  "description": "MCP server for TaskFlow Pro project management",
+  "version": "1.1.1",
+  "description": "MCP server for ProjoFlow project management - connect AI tools to your projects",
   "main": "index.js",
   "type": "module",
   "bin": {
+    "projoflow-mcp-server": "./index.js",
     "taskflow-mcp": "./index.js"
   },
   "scripts": {
     "start": "node index.js"
   },
-  "keywords": ["mcp", "project-management", "taskflow-pro"],
-  "author": "TaskFlow Pro",
+  "keywords": ["mcp", "project-management", "projoflow", "ai", "claude", "cursor"],
+  "author": "ProjoFlow",
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",