pulsemcp-cms-admin-mcp-server 0.9.13 → 0.9.15

package/README.md

@@ -69,6 +69,8 @@ This server is built and tested on macOS with Claude Desktop. It should work wit
 | `get_official_mirror`                  | official_mirrors   | read       | Get detailed official mirror info by ID or name.                                                           |
 | `get_tenants`                          | tenants            | read       | List tenants with search and admin status filtering.                                                       |
 | `get_tenant`                           | tenants            | read       | Get detailed tenant info by ID or slug.                                                                    |
+| `create_tenant`                        | tenants            | write      | Create a new tenant for sub-registry provisioning.                                                         |
+| `create_api_key`                       | tenants            | write      | Create an API key for a tenant. Returns the raw key (only available at creation time).                     |
 | `get_mcp_jsons`                        | mcp_jsons          | read       | List MCP JSON configs with mirror and server filtering.                                                    |
 | `get_mcp_json`                         | mcp_jsons          | read       | Get a single MCP JSON configuration by ID.                                                                 |
 | `create_mcp_json`                      | mcp_jsons          | write      | Create a new MCP JSON configuration for an unofficial mirror.                                              |
@@ -77,6 +79,7 @@ This server is built and tested on macOS with Claude Desktop. It should work wit
 | `list_mcp_servers`                     | mcp_servers        | read       | List/search MCP servers with filtering by status, classification, pagination.                              |
 | `get_mcp_server`                       | mcp_servers        | read       | Get detailed MCP server info by slug (unified view of all admin UI fields).                                |
 | `update_mcp_server`                    | mcp_servers        | write      | Update an MCP server's fields (all admin UI fields supported).                                             |
+| `recache_mcp_server`                   | mcp_servers        | write      | Refresh the cache for a specific MCP server (show page, cards, canonicals, parent pages).                  |
 | `get_redirects`                        | redirects          | read       | List URL redirects with search, status filtering, and pagination.                                          |
 | `get_redirect`                         | redirects          | read       | Get detailed redirect info by ID.                                                                          |
 | `create_redirect`                      | redirects          | write      | Create a new URL redirect entry.                                                                           |
@@ -125,11 +128,11 @@ This server organizes tools into groups that can be selectively enabled or disab
 | `unofficial_mirrors_readonly` | 2     | Unofficial mirrors read-only                                                                                                                                                |
 | `official_mirrors`            | 2     | Official mirrors REST API (read-only)                                                                                                                                       |
 | `official_mirrors_readonly`   | 2     | Official mirrors read-only (alias)                                                                                                                                          |
-| `tenants`                     | 2     | Tenants REST API (read-only)                                                                                                                                                |
-| `tenants_readonly`            | 2     | Tenants read-only (alias)                                                                                                                                                   |
+| `tenants`                     | 4     | Tenant management including API key provisioning (read + write)                                                                                                             |
+| `tenants_readonly`            | 2     | Tenants read-only (list, get)                                                                                                                                               |
 | `mcp_jsons`                   | 5     | Full MCP JSON configurations (read + write)                                                                                                                                 |
 | `mcp_jsons_readonly`          | 2     | MCP JSON configurations read-only                                                                                                                                           |
-| `mcp_servers`                 | 3     | Full MCP servers management (read + write)                                                                                                                                  |
+| `mcp_servers`                 | 4     | Full MCP servers management (read + write)                                                                                                                                  |
 | `mcp_servers_readonly`        | 2     | MCP servers read-only (list, get)                                                                                                                                           |
 | `redirects`                   | 5     | Full URL redirect management (read + write)                                                                                                                                 |
 | `redirects_readonly`          | 2     | URL redirects read-only (list, get)                                                                                                                                         |
@@ -149,7 +152,7 @@ This server organizes tools into groups that can be selectively enabled or disab
   - Write: `draft_newsletter_post`, `update_newsletter_post`, `upload_image`
 - **server_directory** / **server_directory_readonly** (superset — includes tools from mcp_servers, unofficial_mirrors, official_mirrors, official_queue, and mcp_jsons):
   - Read-only: `search_mcp_implementations`, `get_draft_mcp_implementations`, `find_providers`, `list_mcp_servers`, `get_mcp_server`, `get_unofficial_mirrors`, `get_unofficial_mirror`, `get_official_mirrors`, `get_official_mirror`, `get_official_mirror_queue_items`, `get_official_mirror_queue_item`, `get_mcp_jsons`, `get_mcp_json`
-  - Write: `save_mcp_implementation`, `send_impl_posted_notif`, `update_mcp_server`, `create_unofficial_mirror`, `update_unofficial_mirror`, `delete_unofficial_mirror`, `approve_official_mirror_queue_item`, `approve_mirror_no_modify`, `reject_official_mirror_queue_item`, `add_official_mirror_to_regular_queue`, `unlink_official_mirror_queue_item`, `create_mcp_json`, `update_mcp_json`, `delete_mcp_json`
+  - Write: `save_mcp_implementation`, `send_impl_posted_notif`, `update_mcp_server`, `recache_mcp_server`, `create_unofficial_mirror`, `update_unofficial_mirror`, `delete_unofficial_mirror`, `approve_official_mirror_queue_item`, `approve_mirror_no_modify`, `reject_official_mirror_queue_item`, `add_official_mirror_to_regular_queue`, `unlink_official_mirror_queue_item`, `create_mcp_json`, `update_mcp_json`, `delete_mcp_json`
 - **official_queue** / **official_queue_readonly**:
   - Read-only: `get_official_mirror_queue_items`, `get_official_mirror_queue_item`
   - Write: `approve_official_mirror_queue_item`, `approve_mirror_no_modify`, `reject_official_mirror_queue_item`, `add_official_mirror_to_regular_queue`, `unlink_official_mirror_queue_item`
@@ -160,12 +163,13 @@ This server organizes tools into groups that can be selectively enabled or disab
   - Read-only: `get_official_mirrors`, `get_official_mirror`
 - **tenants** / **tenants_readonly**:
   - Read-only: `get_tenants`, `get_tenant`
+  - Write: `create_tenant`, `create_api_key`
 - **mcp_jsons** / **mcp_jsons_readonly**:
   - Read-only: `get_mcp_jsons`, `get_mcp_json`
   - Write: `create_mcp_json`, `update_mcp_json`, `delete_mcp_json`
 - **mcp_servers** / **mcp_servers_readonly**:
   - Read-only: `list_mcp_servers`, `get_mcp_server`
-  - Write: `update_mcp_server`
+  - Write: `update_mcp_server`, `recache_mcp_server`
 - **redirects** / **redirects_readonly**:
   - Read-only: `get_redirects`, `get_redirect`
   - Write: `create_redirect`, `update_redirect`, `delete_redirect`
@@ -183,9 +187,12 @@ This server organizes tools into groups that can be selectively enabled or disab
 
 ## Environment Variables
 
-| Variable      | Description                                 | Default                                                                                                                                                                          |
-| ------------- | ------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `TOOL_GROUPS` | Comma-separated list of enabled tool groups | `newsletter,server_directory,official_queue,unofficial_mirrors,official_mirrors,tenants,mcp_jsons,mcp_servers,redirects,good_jobs,proctor,discovered_urls,moz` (all base groups) |
+| Variable                         | Description                                                                                                                                                                                                                                                                                                                 | Default                                                                                                                                                                          |
+| -------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `PULSEMCP_ADMIN_API_KEY`         | API key sent as `X-API-Key` for admin-API authentication. Required.                                                                                                                                                                                                                                                         | —                                                                                                                                                                                |
+| `PULSEMCP_ADMIN_API_URL`         | Base URL for the admin API.                                                                                                                                                                                                                                                                                                 | `https://admin.pulsemcp.com`                                                                                                                                                     |
+| `PULSEMCP_ADMIN_INTERNAL_SECRET` | Optional shared secret sent as the `X-PulseMCP-Internal` header. A Cloudflare custom rule uses it to route trusted internal traffic past the WAF and rate limiter in front of `admin.pulsemcp.com`. Needed in production to avoid spurious 403s; leave unset locally and against staging (staging is grey-clouded, no WAF). | unset                                                                                                                                                                            |
+| `TOOL_GROUPS`                    | Comma-separated list of enabled tool groups                                                                                                                                                                                                                                                                                 | `newsletter,server_directory,official_queue,unofficial_mirrors,official_mirrors,tenants,mcp_jsons,mcp_servers,redirects,good_jobs,proctor,discovered_urls,moz` (all base groups) |
 
 ## Examples
 

package/build/shared/src/pulsemcp-admin-client/lib/add-official-mirror-to-regular-queue.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 function mapQueueItem(item) {
     return {
         id: item.id,
@@ -23,7 +24,7 @@ function mapQueueItem(item) {
 }
 export async function addOfficialMirrorToRegularQueue(apiKey, baseUrl, id) {
     const url = new URL(`/api/official_mirror_queues/${id}/add_to_regular_queue`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/admin-fetch.js

@@ -0,0 +1,33 @@
+// The admin API origin (admin.pulsemcp.com) sits behind Cloudflare, which
+// applies rate limits (100 GET/min/IP → Managed Challenge) and Super Bot
+// Fight Mode to all traffic. Internal clients (this MCP server, the discovery
+// pipeline, etc.) can trip those rules and see spurious 403s even when their
+// X-API-Key is valid. A Cloudflare custom rule skips the WAF stack when the
+// X-PulseMCP-Internal header carries a shared secret.
+//
+// This helper wraps fetch() and injects that header from the env var
+// PULSEMCP_ADMIN_INTERNAL_SECRET when set. When unset, requests still work
+// but are subject to the full WAF treatment — fine for local dev, tests, and
+// staging (admin.staging.pulsemcp.com is grey-clouded, so Cloudflare is not
+// in the path). See pulsemcp/pulsemcp#2882 for context.
+const INTERNAL_HEADER = 'X-PulseMCP-Internal';
+const INTERNAL_SECRET_ENV_VAR = 'PULSEMCP_ADMIN_INTERNAL_SECRET';
+function defaultGetInternalSecret() {
+    const value = process.env[INTERNAL_SECRET_ENV_VAR];
+    return value && value.length > 0 ? value : undefined;
+}
+// `input` is intentionally narrowed to `string | URL` rather than the broader
+// `RequestInfo`. A `Request`'s body is a single-use `ReadableStream`, and
+// narrowing keeps semantics predictable if a retry wrapper is ever layered
+// on top. All call sites in this client lib pass URL strings.
+export async function adminFetch(input, init, deps = {}) {
+    const fetchFn = deps.fetchFn ?? fetch;
+    const getSecret = deps.getInternalSecret ?? defaultGetInternalSecret;
+    const secret = getSecret();
+    if (!secret) {
+        return fetchFn(input, init);
+    }
+    const headers = new Headers(init?.headers);
+    headers.set(INTERNAL_HEADER, secret);
+    return fetchFn(input, { ...init, headers });
+}

package/build/shared/src/pulsemcp-admin-client/lib/approve-official-mirror-queue-item-without-modifying.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 function mapQueueItem(item) {
     return {
         id: item.id,
@@ -23,7 +24,7 @@ function mapQueueItem(item) {
 }
 export async function approveOfficialMirrorQueueItemWithoutModifying(apiKey, baseUrl, id) {
     const url = new URL(`/api/official_mirror_queues/${id}/approve_without_modifying`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/approve-official-mirror-queue-item.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 function mapQueueItem(item) {
     return {
         id: item.id,
@@ -25,7 +26,7 @@ export async function approveOfficialMirrorQueueItem(apiKey, baseUrl, id, mcpSer
     const url = new URL(`/api/official_mirror_queues/${id}/approve`, baseUrl);
     const formData = new URLSearchParams();
     formData.append('mcp_server_slug', mcpServerSlug);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/cleanup-good-jobs.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function cleanupGoodJobs(apiKey, baseUrl, params) {
     const url = new URL('/api/good_jobs/cleanup', baseUrl);
     const body = {};
@@ -7,7 +8,7 @@ export async function cleanupGoodJobs(apiKey, baseUrl, params) {
     if (params?.status !== undefined) {
         body.status = params.status;
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'DELETE',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/create-api-key.js

@@ -0,0 +1,51 @@
+import { adminFetch } from './admin-fetch.js';
+export async function createApiKey(apiKey, baseUrl, params) {
+    const url = new URL('/api/api_keys', baseUrl);
+    const body = {
+        tenant_slug: params.tenant_slug,
+    };
+    if (params.name !== undefined) {
+        body.name = params.name;
+    }
+    if (params.permission_level !== undefined) {
+        body.permission_level = params.permission_level;
+    }
+    const response = await adminFetch(url.toString(), {
+        method: 'POST',
+        headers: {
+            'X-API-Key': apiKey,
+            'Content-Type': 'application/json',
+            Accept: 'application/json',
+        },
+        body: JSON.stringify(body),
+    });
+    if (!response.ok) {
+        if (response.status === 401) {
+            throw new Error('Invalid API key');
+        }
+        if (response.status === 403) {
+            throw new Error('User lacks write privileges');
+        }
+        if (response.status === 404) {
+            const errorData = (await response.json());
+            throw new Error(errorData.error || 'Tenant not found');
+        }
+        if (response.status === 422) {
+            const errorData = (await response.json());
+            const message = errorData.errors?.join(', ') || errorData.error || 'Unknown error';
+            throw new Error(`Validation failed: ${message}`);
+        }
+        throw new Error(`Failed to create API key: ${response.status} ${response.statusText}`);
+    }
+    const result = (await response.json());
+    return {
+        id: result.id,
+        name: result.name,
+        tenant_id: result.tenant_id,
+        tenant_slug: result.tenant_slug,
+        tenant_is_admin: result.tenant_is_admin,
+        permission_level: result.permission_level,
+        key: result.key,
+        created_at: result.created_at,
+    };
+}

package/build/shared/src/pulsemcp-admin-client/lib/create-mcp-implementation.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function createMCPImplementation(apiKey, baseUrl, params) {
     const url = new URL(`/api/implementations`, baseUrl);
     // Build form data for the POST request
@@ -141,7 +142,7 @@ export async function createMCPImplementation(apiKey, baseUrl, params) {
             });
         }
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/create-mcp-json.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function createMcpJson(apiKey, baseUrl, params) {
     const url = new URL('/api/mcp_jsons', baseUrl);
     const body = {
@@ -8,7 +9,7 @@ export async function createMcpJson(apiKey, baseUrl, params) {
     if (params.description !== undefined) {
         body.description = params.description;
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/create-post.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function createPost(apiKey, baseUrl, params) {
     const url = new URL('/posts', baseUrl);
     // Build form data for the POST request
@@ -47,7 +48,7 @@ export async function createPost(apiKey, baseUrl, params) {
             formData.append('post[featured_mcp_client_ids][]', id.toString());
         });
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/create-redirect.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function createRedirect(apiKey, baseUrl, params) {
     const url = new URL('/api/redirects', baseUrl);
     const body = {
@@ -7,7 +8,7 @@ export async function createRedirect(apiKey, baseUrl, params) {
     if (params.status !== undefined) {
         body.status = params.status;
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/create-tenant.js

@@ -0,0 +1,35 @@
+import { adminFetch } from './admin-fetch.js';
+export async function createTenant(apiKey, baseUrl, params) {
+    const url = new URL('/api/tenants', baseUrl);
+    const response = await adminFetch(url.toString(), {
+        method: 'POST',
+        headers: {
+            'X-API-Key': apiKey,
+            'Content-Type': 'application/json',
+            Accept: 'application/json',
+        },
+        body: JSON.stringify({ slug: params.slug }),
+    });
+    if (!response.ok) {
+        if (response.status === 401) {
+            throw new Error('Invalid API key');
+        }
+        if (response.status === 403) {
+            throw new Error('User lacks write privileges');
+        }
+        if (response.status === 422) {
+            const errorData = (await response.json());
+            throw new Error(`Validation failed: ${errorData.errors?.join(', ') || 'Unknown error'}`);
+        }
+        throw new Error(`Failed to create tenant: ${response.status} ${response.statusText}`);
+    }
+    const tenant = (await response.json());
+    return {
+        id: tenant.id,
+        slug: tenant.slug,
+        is_admin: tenant.is_admin,
+        enrichments: tenant.enrichments,
+        created_at: tenant.created_at,
+        updated_at: tenant.updated_at,
+    };
+}

package/build/shared/src/pulsemcp-admin-client/lib/create-unofficial-mirror.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function createUnofficialMirror(apiKey, baseUrl, params) {
     const url = new URL('/api/unofficial_mirrors', baseUrl);
     const body = {
@@ -14,7 +15,7 @@ export async function createUnofficialMirror(apiKey, baseUrl, params) {
     if (params.next_name !== undefined) {
         body.next_name = params.next_name;
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/delete-mcp-json.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function deleteMcpJson(apiKey, baseUrl, id) {
     const url = new URL(`/api/mcp_jsons/${id}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'DELETE',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/delete-redirect.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function deleteRedirect(apiKey, baseUrl, id) {
     const url = new URL(`/api/redirects/${id}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'DELETE',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/delete-unofficial-mirror.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function deleteUnofficialMirror(apiKey, baseUrl, id) {
     const url = new URL(`/api/unofficial_mirrors/${id}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'DELETE',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/discard-good-job.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function discardGoodJob(apiKey, baseUrl, id) {
     const url = new URL(`/api/good_jobs/${id}/discard`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/force-trigger-good-job-cron.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function forceTriggerGoodJobCron(apiKey, baseUrl, cronKey) {
     const url = new URL(`/api/good_jobs/cron_schedules/${cronKey}/trigger`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-author-by-id.js

@@ -1,10 +1,11 @@
+import { adminFetch } from './admin-fetch.js';
 // Simple in-memory cache for authors with TTL
 let authorsCache = null;
 let authorsCacheTimestamp = 0;
 const CACHE_TTL_MS = 60000; // 1 minute cache
 async function fetchAndCacheAuthors(apiKey, baseUrl) {
     const url = new URL('/supervisor/authors', baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-author-by-slug.js

@@ -1,7 +1,8 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getAuthorBySlug(apiKey, baseUrl, slug) {
     // Use the supervisor endpoint which supports JSON
     const url = new URL(`/supervisor/authors/${slug}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-authors.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getAuthors(apiKey, baseUrl, params) {
     // Use the supervisor endpoint which supports JSON
     const url = new URL('/supervisor/authors', baseUrl);
@@ -8,7 +9,7 @@ export async function getAuthors(apiKey, baseUrl, params) {
     if (params?.page) {
         url.searchParams.append('page', params.page.toString());
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-discovered-url-stats.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getDiscoveredUrlStats(apiKey, baseUrl) {
     const url = new URL('/api/discovered_urls/stats', baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-discovered-urls.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 function mapDiscoveredUrl(raw) {
     const { id, url, source, created_at, ...rest } = raw;
     return {
@@ -19,7 +20,7 @@ export async function getDiscoveredUrls(apiKey, baseUrl, params) {
     if (params?.per_page) {
         url.searchParams.append('per_page', params.per_page.toString());
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-draft-mcp-implementations.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 function mapServerTags(tags) {
     if (!tags)
         return undefined;
@@ -58,7 +59,7 @@ export async function getDraftMCPImplementations(apiKey, baseUrl, params) {
     if (params?.search) {
         url.searchParams.append('search', params.search);
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-good-job-cron-schedules.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getGoodJobCronSchedules(apiKey, baseUrl) {
     const url = new URL('/api/good_jobs/cron_schedules', baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-good-job-processes.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getGoodJobProcesses(apiKey, baseUrl) {
     const url = new URL('/api/good_jobs/processes', baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-good-job-statistics.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getGoodJobStatistics(apiKey, baseUrl) {
     const url = new URL('/api/good_jobs/statistics', baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-good-job.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getGoodJob(apiKey, baseUrl, id) {
     const url = new URL(`/api/good_jobs/${id}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-good-jobs.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 function mapGoodJob(job) {
     return {
         id: job.id,
@@ -36,7 +37,7 @@ export async function getGoodJobs(apiKey, baseUrl, params) {
     if (params?.offset) {
         url.searchParams.append('offset', params.offset.toString());
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-mcp-client-by-id.js

@@ -1,8 +1,9 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getMCPClientById(apiKey, baseUrl, id) {
     // The API doesn't have a direct endpoint to get MCP client by ID,
     // so we need to fetch all clients and find the one with matching ID
     const url = new URL('/supervisor/mcp_clients', baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-mcp-client-by-slug.js

@@ -1,7 +1,8 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getMCPClientBySlug(apiKey, baseUrl, slug) {
     // Use the supervisor endpoint which supports JSON
     const url = new URL(`/supervisor/mcp_clients/${slug}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-mcp-implementation-by-id.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getMCPImplementationById(apiKey, baseUrl, id) {
     const url = new URL(`/api/implementations/${id}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-mcp-json.js

@@ -1,6 +1,7 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getMcpJson(apiKey, baseUrl, id) {
     const url = new URL(`/api/mcp_jsons/${id}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-mcp-jsons.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 function mapMcpJson(mcpJson) {
     return {
         id: mcpJson.id,
@@ -26,7 +27,7 @@ export async function getMcpJsons(apiKey, baseUrl, params) {
     if (params?.offset) {
         url.searchParams.append('offset', params.offset.toString());
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-mcp-server-by-id.js

@@ -1,8 +1,9 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getMCPServerById(apiKey, baseUrl, id) {
     // The API doesn't have a direct endpoint to get MCP server by ID,
     // so we need to fetch all servers and find the one with matching ID
     const url = new URL('/supervisor/mcp_servers', baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-mcp-server-by-slug.js

@@ -1,7 +1,8 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getMCPServerBySlug(apiKey, baseUrl, slug) {
     // Use the supervisor endpoint which supports JSON
     const url = new URL(`/supervisor/mcp_servers/${slug}`, baseUrl);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,

package/build/shared/src/pulsemcp-admin-client/lib/get-moz-backlinks.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function getMozBacklinks(apiKey, baseUrl, params) {
     const apiUrl = new URL('/api/moz/backlinks', baseUrl);
     apiUrl.searchParams.append('url', params.url);
@@ -7,7 +8,7 @@ export async function getMozBacklinks(apiKey, baseUrl, params) {
     if (params.limit !== undefined) {
         apiUrl.searchParams.append('limit', params.limit.toString());
     }
-    const response = await fetch(apiUrl.toString(), {
+    const response = await adminFetch(apiUrl.toString(), {
         method: 'GET',
         headers: {
             'X-API-Key': apiKey,