sceneview-mcp 3.6.4 → 4.0.0-beta.1

package/README.md

@@ -18,26 +18,40 @@ Connect it to Claude, Cursor, Windsurf, or any MCP client. The assistant gets 26
 
 ---
 
-## 🚀 Pro Products
+## 🚀 Hosted-first mode (v4 beta)
 
-| Product | Price | Description |
-|---------|-------|-------------|
-| [MCP Creator Kit](https://buy.polar.sh/polar_cl_tb87ROB9Xn0c5aohdn3NvkTINDF1xjW5zpkg70UwmcF) | €29 | Everything to create your own MCP server — template, CLI, docs, examples |
-| [SceneView Pro Starter Kit](https://buy.polar.sh/polar_cl_tb87ROB9Xn0c5aohdn3NvkTINDF1xjW5zpkg70UwmcF) | €49 | Complete Android 3D + AR app template — 4 screens, ready to customize |
-| [SceneView MCP Pro](https://buy.polar.sh/polar_cl_tb87ROB9Xn0c5aohdn3NvkTINDF1xjW5zpkg70UwmcF) | €9.99/mo | Premium MCP tools and priority support |
+Starting with **v4.0.0-beta.1**, `sceneview-mcp` is a **lite stdio package**: free tools run locally (no network round-trip) and Pro tools are transparently forwarded to the hosted gateway at **https://sceneview-mcp.mcp-tools-lab.workers.dev/mcp**.
 
-⭐ [Sponsor on GitHub](https://github.com/sponsors/sceneview) — Help us build the future of 3D/AR development
+| What | Where |
+|---|---|
+| 17 free tools (samples, guides, validator, search, analyze) | Local, zero network |
+| 36+ Pro tools (AR, multi-platform, scene gen, artifacts, packages) | Forwarded to the gateway — Bearer auth + Stripe-metered |
+| Auth, metering, Stripe webhooks, API-key provisioning | Gateway (Cloudflare Workers + D1 + KV) |
+
+**Pricing** (subscribe at https://sceneview-mcp.mcp-tools-lab.workers.dev/pricing):
+
+| Plan | Price | Use case |
+|---|---|---|
+| Free | 0 € | Samples, guides, validator — no signup |
+| Pro | 19 €/mo or 190 €/yr | Individual devs, full Pro tool access |
+| Team | 49 €/mo or 490 €/yr | Teams with higher rate limits |
+
+After subscribing, you'll receive a `sv_live_…` API key. Set it via the `SCENEVIEW_API_KEY` env var in your MCP client config (see snippets below) to unlock Pro tools.
+
+⭐ [Sponsor on GitHub](https://github.com/sponsors/sceneview) — help keep the free tier free.
 
 ---
 
-## Quick start
+## Quick start (free tier)
 
 **One command -- no install required:**
 
 ```bash
-npx sceneview-mcp
+npx sceneview-mcp@beta
 ```
 
+On startup you'll see a `[sceneview-mcp] v4.0.0-beta.1 — LITE (free tools only)` banner on stderr. Set `SCENEVIEW_API_KEY` to flip into `HOSTED` mode.
+
 > **Anonymous telemetry** is enabled on the free tier (MCP client name/version and tool names — no personal data, no prompt content). Opt out with `SCENEVIEW_TELEMETRY=0`. See [PRIVACY.md](./PRIVACY.md#telemetry-free-tier) for the full payload shape.
 
 ### Claude Desktop

package/dist/index.js

@@ -17,12 +17,33 @@ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { CallToolRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, ReadResourceRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { fetchKnownIssues } from "./issues.js";
-import { checkToolAccess, filterToolsForTier, createAccessDeniedResponse } from "./auth.js";
-import { recordUsage, getConfiguredApiKey } from "./billing.js";
 import { recordClientInit, recordToolCall } from "./telemetry.js";
-import { getToolTier } from "./tiers.js";
+import { isProTool, getToolTier } from "./tiers.js";
+import { dispatchProxyToolCall, isProxyConfigured, DEFAULT_PRICING_URL, } from "./proxy.js";
 import { API_DOCS, TOOL_DEFINITIONS, dispatchTool, } from "./tools/index.js";
-const server = new Server({ name: "sceneview-mcp", version: "3.6.4" }, { capabilities: { resources: {}, tools: {} } });
+// ─── v4 lite-mode startup banner ─────────────────────────────────────────────
+//
+// MCP servers must keep stdout clean for JSON-RPC, so we log to stderr.
+// Claude Desktop surfaces this in the server's "Logs" panel. The banner
+// tells the user which mode they're in (hosted vs free) and where to
+// upgrade, without blocking the transport handshake.
+const PACKAGE_VERSION = "4.0.0-beta.1";
+function logStartupBanner() {
+    if (process.env.SCENEVIEW_MCP_QUIET === "1")
+        return;
+    const proxied = isProxyConfigured();
+    const mode = proxied ? "HOSTED (Pro tools → gateway)" : "LITE (free tools only)";
+    const lines = [
+        `[sceneview-mcp] v${PACKAGE_VERSION} — ${mode}`,
+        proxied
+            ? `[sceneview-mcp] Pro tool calls will be forwarded to the hosted gateway.`
+            : `[sceneview-mcp] Set SCENEVIEW_API_KEY to unlock 36+ Pro tools — ${DEFAULT_PRICING_URL}`,
+    ];
+    for (const line of lines)
+        process.stderr.write(`${line}\n`);
+}
+logStartupBanner();
+const server = new Server({ name: "sceneview-mcp", version: PACKAGE_VERSION }, { capabilities: { resources: {}, tools: {} } });
 // ─── Telemetry (anonymous, opt-out via SCENEVIEW_TELEMETRY=0) ────────────────
 //
 // Fire once when the client finishes the handshake. See `telemetry.ts` and
@@ -65,32 +86,41 @@ server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
 });
 // ─── Tools ───────────────────────────────────────────────────────────────────
 server.setRequestHandler(ListToolsRequestSchema, async () => {
-    // filterToolsForTier has a looser parameter type (index signature) than
-    // our strict ToolDefinition. The cast is safe: ToolDefinition is a
-    // superset of { name, description, inputSchema } and filterToolsForTier
-    // only reads `name` and `description`.
-    const tools = await filterToolsForTier(TOOL_DEFINITIONS);
+    // v4 lite mode: we trust the gateway to enforce Pro access at call time,
+    // so listing is purely cosmetic here. If no API key is set we still prefix
+    // Pro tool descriptions with "[PRO]" so the AI knows an upgrade is needed
+    // and surfaces the upsell in its responses; with a key we expose the full
+    // list unmodified.
+    const unlocked = isProxyConfigured();
+    const tools = TOOL_DEFINITIONS.map((tool) => {
+        if (unlocked || !isProTool(tool.name))
+            return tool;
+        return { ...tool, description: `[PRO] ${tool.description}` };
+    });
     return { tools };
 });
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const toolName = request.params.name;
-    // ── Pro tier access check ──────────────────────────────────────────────────
-    const access = await checkToolAccess(toolName);
-    if (!access.allowed) {
-        return createAccessDeniedResponse(toolName, access.message);
-    }
+    const args = request.params.arguments;
     // Record anonymous telemetry (fire-and-forget, non-blocking, opt-out via
     // SCENEVIEW_TELEMETRY=0). See `telemetry.ts` and `PRIVACY.md`.
     recordToolCall(toolName, getToolTier(toolName));
-    // Record usage for billing (async, fire-and-forget)
-    const apiKey = getConfiguredApiKey();
-    if (apiKey) {
-        recordUsage(apiKey, toolName).catch(() => { });
+    // ── v4 lite-mode routing ─────────────────────────────────────────────────
+    //
+    // Free tools execute locally, same as 3.6.x. Pro tools are forwarded to
+    // the hosted gateway at sceneview-mcp.mcp-tools-lab.workers.dev/mcp —
+    // that's where auth, metering, and Stripe live. If no API key is set,
+    // `dispatchProxyToolCall` returns a friendly stub that points at the
+    // pricing page (handles the upsell itself, no separate denied-response
+    // step needed).
+    if (isProTool(toolName)) {
+        const result = await dispatchProxyToolCall(toolName, args);
+        return result;
     }
     // The dispatcher returns the narrower SceneView `ToolResult` shape, which
     // structurally matches the MCP SDK's `CallToolResult` but TS can't prove
     // it (the SDK's zod-derived type has additional optional members).
-    const result = await dispatchTool(toolName, request.params.arguments);
+    const result = await dispatchTool(toolName, args);
     return result;
 });
 const transport = new StdioServerTransport();

package/dist/proxy.js

@@ -0,0 +1,176 @@
+/**
+ * Proxy helper for the v4 "lite" npm package.
+ *
+ * In v4 the stdio package keeps serving free-tier tools locally (no
+ * network round-trip), but Pro-tier tools are forwarded as JSON-RPC
+ * `tools/call` requests to the hosted gateway. This keeps the install
+ * footprint small for free users while letting paying customers hit a
+ * metered, auth'd backend.
+ *
+ * The gateway lives at
+ *   https://sceneview-mcp.mcp-tools-lab.workers.dev/mcp
+ * (Cloudflare Workers, post-Stripe-first pivot). Override with
+ * `SCENEVIEW_MCP_URL` if you run a self-hosted fork or the staging
+ * worker.
+ *
+ * This module is intentionally dependency-free: it relies on the
+ * global `fetch` that Node 18+ exposes and on nothing else from the
+ * package.
+ */
+/** Default URL of the hosted gateway (post-Stripe-first, Apr 2026). */
+export const DEFAULT_GATEWAY_URL = "https://sceneview-mcp.mcp-tools-lab.workers.dev/mcp";
+/** Public pricing/signup page shown in stubs when no API key is set. */
+export const DEFAULT_PRICING_URL = "https://sceneview-mcp.mcp-tools-lab.workers.dev/pricing";
+// Minimal JSON-RPC 2.0 request id, auto-incremented per process.
+let nextRpcId = 1;
+/**
+ * Forwards a Pro-tier tool call to the hosted gateway and returns its
+ * `ToolResult`. Network, HTTP, and JSON-RPC errors are converted into
+ * a user-visible error block so the MCP client surfaces them in Claude.
+ *
+ * When no API key is configured at all, returns a helpful stub that
+ * points at the pricing page instead of trying to call the gateway.
+ * The stub is the user's first touch point with the Pro upsell — it
+ * shows up verbatim in the Claude UI.
+ */
+export async function dispatchProxyToolCall(toolName, args, options = {}) {
+    const apiKey = options.apiKey ?? process.env.SCENEVIEW_API_KEY;
+    if (!apiKey) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `## 🔒 Pro feature\n\n` +
+                        `\`${toolName}\` is a SceneView MCP Pro tool. ` +
+                        `Set \`SCENEVIEW_API_KEY\` to an API key from ` +
+                        `${DEFAULT_PRICING_URL} to unlock it.\n\n` +
+                        `Pro unlocks 36+ premium tools: AR, multi-platform setup, ` +
+                        `scene generation, 3D artifacts, and the Automotive / Gaming ` +
+                        `/ Healthcare / Interior packages.`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const gatewayUrl = options.gatewayUrl ??
+        process.env.SCENEVIEW_MCP_URL ??
+        DEFAULT_GATEWAY_URL;
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const requestBody = {
+        jsonrpc: "2.0",
+        id: nextRpcId++,
+        method: "tools/call",
+        params: { name: toolName, arguments: args ?? {} },
+    };
+    let response;
+    try {
+        response = await fetchImpl(gatewayUrl, {
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${apiKey}`,
+                "content-type": "application/json",
+                accept: "application/json",
+            },
+            body: JSON.stringify(requestBody),
+        });
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Failed to reach SceneView MCP gateway (${gatewayUrl}): ${detail}.\n\n` +
+                        `The gateway may be temporarily down. Try again in a few seconds, ` +
+                        `or check status at ${DEFAULT_PRICING_URL}.`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const text = await response.text().catch(() => "");
+    if (response.status === 401 || response.status === 403) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `## 🔑 Invalid or expired API key\n\n` +
+                        `The gateway rejected your \`SCENEVIEW_API_KEY\` (HTTP ${response.status}).\n\n` +
+                        `- If you just subscribed, make sure you copied the full key from ` +
+                        `the Stripe success page.\n` +
+                        `- If your subscription was cancelled, reactivate it at ${DEFAULT_PRICING_URL}.\n\n` +
+                        (text ? `Gateway response: ${text}` : ""),
+                },
+            ],
+            isError: true,
+        };
+    }
+    if (response.status === 429) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `## ⏳ Rate limited\n\n` +
+                        `You've hit the rate limit for \`${toolName}\` (HTTP 429). ` +
+                        `Wait a few seconds and retry, or upgrade your tier at ` +
+                        `${DEFAULT_PRICING_URL}.\n\n` +
+                        (text ? `Gateway response: ${text}` : ""),
+                },
+            ],
+            isError: true,
+        };
+    }
+    if (!response.ok) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Gateway HTTP ${response.status} while calling ${toolName}. ` +
+                        (text || "No response body."),
+                },
+            ],
+            isError: true,
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Gateway returned non-JSON response: ${text}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    if (parsed.error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: parsed.error.message ??
+                        `Gateway error while calling ${toolName}.`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const result = parsed.result;
+    return {
+        content: result?.content ?? [{ type: "text", text: "" }],
+        isError: result?.isError ?? false,
+    };
+}
+/**
+ * Returns true when proxy mode is active: an API key is configured
+ * (either via `SCENEVIEW_API_KEY` env var or an explicit override).
+ */
+export function isProxyConfigured(apiKey) {
+    if (apiKey && apiKey.length > 0)
+        return true;
+    return !!process.env.SCENEVIEW_API_KEY;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sceneview-mcp",
-  "version": "3.6.4",
+  "version": "4.0.0-beta.1",
   "mcpName": "io.github.sceneview/mcp",
   "description": "MCP server for SceneView — cross-platform 3D & AR SDK for Android and iOS. Give Claude the full SceneView SDK so it writes correct, compilable code.",
   "keywords": [