screenpipe-mcp 0.16.0 → 0.16.2

package/dist/index.js

@@ -53,23 +53,57 @@ for (let i = 0; i < args.length; i++) {
     }
 }
 const SCREENPIPE_API = `http://localhost:${port}`;
-// Discover API key: env var > screenpipe JS lib > npx fallback
+// Discover API key: env var > db.sqlite direct read > npx fallbacks
 function discoverApiKey() {
     const envKey = process.env.SCREENPIPE_LOCAL_API_KEY || process.env.SCREENPIPE_API_KEY;
     if (envKey)
         return envKey;
-    // Use the screenpipe npm package's JS API — resolves the bundled native
-    // binary directly, no PATH dependency, no subprocess spawning of npx.
+    const os = require("os");
+    const path = require("path");
+    const fs = require("fs");
+    const { execFileSync, execSync } = require("child_process");
+    // Read api_auth_key directly from ~/.screenpipe/db.sqlite.
+    // The local API key is stored as base64 plaintext (nonce=zeros, not encrypted).
+    // This is the most reliable method — no PATH, no subprocess, no keychain.
     try {
-        const { getApiKey } = require("screenpipe");
-        const token = getApiKey();
+        const dbPath = path.join(os.homedir(), ".screenpipe", "db.sqlite");
+        if (fs.existsSync(dbPath)) {
+            // Use sqlite3 CLI which is pre-installed on macOS/Linux
+            const sqliteBin = process.platform === "win32" ? "sqlite3.exe" : "sqlite3";
+            const result = execFileSync(sqliteBin, [
+                dbPath,
+                "SELECT value FROM secrets WHERE key = 'api_auth_key';",
+            ], {
+                timeout: 5000,
+                encoding: "utf-8",
+                stdio: ["pipe", "pipe", "pipe"],
+            }).trim();
+            if (result) {
+                // Value is base64-encoded — decode it
+                const decoded = Buffer.from(result, "base64").toString("utf-8");
+                if (decoded && decoded.startsWith("sp-"))
+                    return decoded;
+                // If not base64 or not sp- prefixed, use raw value
+                if (result.startsWith("sp-"))
+                    return result;
+            }
+        }
+    }
+    catch { }
+    // Fallback: use the current Node binary to find npx (no PATH dependency)
+    try {
+        const npxPath = path.join(path.dirname(process.execPath), "npx");
+        const token = execFileSync(npxPath, ["screenpipe@latest", "auth", "token"], {
+            timeout: 15000,
+            encoding: "utf-8",
+            stdio: ["pipe", "pipe", "pipe"],
+        }).trim();
         if (token)
             return token;
     }
     catch { }
-    // Fallback: shell out to npx (works when screenpipe pkg isn't installed as dependency)
+    // Last resort: npx on PATH
     try {
-        const { execSync } = require("child_process");
         const token = execSync("npx screenpipe@latest auth token", {
             timeout: 15000,
             encoding: "utf-8",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "screenpipe-mcp",
-  "version": "0.16.0",
+  "version": "0.16.2",
   "description": "MCP server for screenpipe - search your screen recordings and audio transcriptions",
   "main": "dist/index.js",
   "bin": {

package/src/index.ts

@@ -28,22 +28,55 @@ for (let i = 0; i < args.length; i++) {
 
 const SCREENPIPE_API = `http://localhost:${port}`;
 
-// Discover API key: env var > screenpipe JS lib > npx fallback
+// Discover API key: env var > db.sqlite direct read > npx fallbacks
 function discoverApiKey(): string {
   const envKey = process.env.SCREENPIPE_LOCAL_API_KEY || process.env.SCREENPIPE_API_KEY;
   if (envKey) return envKey;
 
-  // Use the screenpipe npm package's JS API — resolves the bundled native
-  // binary directly, no PATH dependency, no subprocess spawning of npx.
+  const os = require("os");
+  const path = require("path");
+  const fs = require("fs");
+  const { execFileSync, execSync } = require("child_process");
+
+  // Read api_auth_key directly from ~/.screenpipe/db.sqlite.
+  // The local API key is stored as base64 plaintext (nonce=zeros, not encrypted).
+  // This is the most reliable method — no PATH, no subprocess, no keychain.
+  try {
+    const dbPath = path.join(os.homedir(), ".screenpipe", "db.sqlite");
+    if (fs.existsSync(dbPath)) {
+      // Use sqlite3 CLI which is pre-installed on macOS/Linux
+      const sqliteBin = process.platform === "win32" ? "sqlite3.exe" : "sqlite3";
+      const result = execFileSync(sqliteBin, [
+        dbPath,
+        "SELECT value FROM secrets WHERE key = 'api_auth_key';",
+      ], {
+        timeout: 5000,
+        encoding: "utf-8",
+        stdio: ["pipe", "pipe", "pipe"],
+      }).trim();
+      if (result) {
+        // Value is base64-encoded — decode it
+        const decoded = Buffer.from(result, "base64").toString("utf-8");
+        if (decoded && decoded.startsWith("sp-")) return decoded;
+        // If not base64 or not sp- prefixed, use raw value
+        if (result.startsWith("sp-")) return result;
+      }
+    }
+  } catch {}
+
+  // Fallback: use the current Node binary to find npx (no PATH dependency)
   try {
-    const { getApiKey } = require("screenpipe");
-    const token = getApiKey();
+    const npxPath = path.join(path.dirname(process.execPath), "npx");
+    const token = execFileSync(npxPath, ["screenpipe@latest", "auth", "token"], {
+      timeout: 15000,
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"],
+    }).trim();
     if (token) return token;
   } catch {}
 
-  // Fallback: shell out to npx (works when screenpipe pkg isn't installed as dependency)
+  // Last resort: npx on PATH
   try {
-    const { execSync } = require("child_process");
     const token = execSync("npx screenpipe@latest auth token", {
       timeout: 15000,
       encoding: "utf-8",