redash-mcp 3.0.3 → 3.0.4

package/dist/redash-client.js

@@ -1,4 +1,28 @@
-const REDASH_URL = process.env.REDASH_URL?.replace(/\/$/, "");
+function validateRedashUrl(raw) {
+    if (raw === undefined)
+        return undefined;
+    const trimmed = raw.trim();
+    if (trimmed.length === 0)
+        return undefined;
+    if (/[\n\r]/.test(raw)) {
+        throw new Error("REDASH_URL must not contain newlines");
+    }
+    let parsed;
+    try {
+        parsed = new URL(trimmed);
+    }
+    catch {
+        throw new Error(`REDASH_URL is not a valid URL: ${raw}`);
+    }
+    if (parsed.username || parsed.password) {
+        throw new Error("REDASH_URL must not contain credentials");
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        throw new Error(`REDASH_URL must use http or https scheme, got: ${parsed.protocol}`);
+    }
+    return trimmed.replace(/\/$/, "");
+}
+const REDASH_URL = validateRedashUrl(process.env.REDASH_URL);
 const REDASH_API_KEY = process.env.REDASH_API_KEY;
 export { REDASH_URL, REDASH_API_KEY };
 export async function redashFetch(path, options) {

package/dist/tool-error.js

@@ -0,0 +1,40 @@
+/**
+ * Shared error handler for MCP tool callbacks.
+ * Logs the full error to stderr for debugging, then returns a
+ * user-friendly MCP error response without leaking internal details.
+ */
+export function handleToolError(toolName, error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    // Log full detail to stderr so operators can debug.
+    console.error(`[${toolName}] ${detail}`);
+    // Derive a safe, user-facing message.
+    let userMessage;
+    if (detail.includes("Query timed out")) {
+        userMessage = "The query timed out. Try simplifying the query or increasing timeout_secs.";
+    }
+    else if (detail.includes("Query failed")) {
+        userMessage = "The query execution failed. Please check the SQL syntax and try again.";
+    }
+    else if (detail.includes("401") || detail.includes("Check your REDASH_API_KEY")) {
+        userMessage = "Authentication failed. Please verify your Redash API key.";
+    }
+    else if (detail.includes("403") || detail.includes("Access denied")) {
+        userMessage = "Access denied. You do not have permission for this resource.";
+    }
+    else if (/\b404\b/.test(detail) || detail.includes("Redash API error (404)")) {
+        userMessage = "The requested resource was not found. Please check the ID and try again.";
+    }
+    else if (detail.includes("Redash API error")) {
+        userMessage = "The Redash API returned an error. Please try again later.";
+    }
+    else if (detail.includes("fetch failed") || detail.includes("ECONNREFUSED") || detail.includes("ENOTFOUND")) {
+        userMessage = "Unable to connect to the Redash server. Please check REDASH_URL and network connectivity.";
+    }
+    else {
+        userMessage = "An unexpected error occurred. Please try again or check the server logs.";
+    }
+    return {
+        content: [{ type: "text", text: userMessage }],
+        isError: true,
+    };
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "redash-mcp",
   "mcpName": "io.github.seob717/redash-mcp",
-  "version": "3.0.3",
+  "version": "3.0.4",
   "description": "MCP server for Redash",
   "license": "MIT",
   "author": "seob717",