skim-mcp 0.1.4 → 0.1.6

package/README.md

@@ -8,6 +8,8 @@
 
 `skim-mcp` is the official Model Context Protocol server for [Skim](https://skim402.com) — the canonical [x402](https://x402.org) clean reader API. It exposes one tool, `read_url`, that your agent can call to fetch any web page as agent-ready Markdown plus structured metadata (title, byline, published date, language, excerpt). Each call costs **$0.002 in USDC on Base**, paid automatically by your local wallet over HTTP 402.
 
+> **See it before you wire it:** [try Skim free in your browser](https://freeskims.skim402.com) — 10 free skims a day, no wallet, no signup. Paste a URL, see exactly what your agent gets back.
+
 > _A 30-second demo GIF coming here soon._
 
 ---

package/dist/index.js

@@ -7,6 +7,10 @@ import { z } from "zod";
 const BASE_URL = (process.env.SKIM_API_URL ?? "https://skim402.com").replace(/\/+$/, "");
 const PRIVATE_KEY = process.env.SKIM_WALLET_PRIVATE_KEY;
 const MAX_PRICE_USD = process.env.SKIM_MAX_PRICE_USD ?? "0.01";
+const TIMEOUT_MS = (() => {
+    const parsed = Number(process.env.SKIM_TIMEOUT_MS ?? "90000");
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : 90_000;
+})();
 let payFetch = fetch;
 let walletAddress = null;
 if (PRIVATE_KEY) {
@@ -23,7 +27,7 @@ if (PRIVATE_KEY) {
 }
 const server = new McpServer({
     name: "skim-mcp",
-    version: "0.1.3",
+    version: "0.1.6",
 });
 server.tool("read_url", "Fetch any URL and return clean, agent-ready Markdown via Skim (skim402.com). Strips nav, ads, and boilerplate; preserves the article body plus structured metadata (title, byline, published date, language, excerpt). Pays $0.002 per call in USDC on Base over the x402 protocol — no API keys, no signup. Use this whenever you need to read web content: articles, docs, blog posts, GitHub READMEs, research papers, etc.", {
     url: z
@@ -44,11 +48,32 @@ server.tool("read_url", "Fetch any URL and return clean, agent-ready Markdown vi
     }
     let res;
     try {
-        res = await payFetch(`${BASE_URL}/api/v1/read`, {
+        // Two layers of hang protection:
+        // 1. AbortSignal.timeout aborts the underlying HTTP requests (both the
+        //    initial 402 handshake and the paid retry — x402-fetch reuses init).
+        // 2. Promise.race is a hard watchdog for anything inside the payment
+        //    client that stalls without honoring the abort signal (e.g. a hung
+        //    RPC or signing step), so a single bad call can never freeze the
+        //    whole process.
+        const attempt = payFetch(`${BASE_URL}/api/v1/read`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify({ url, mode: "basic" }),
+            signal: AbortSignal.timeout(TIMEOUT_MS),
         });
+        let watchdog;
+        const deadline = new Promise((_, reject) => {
+            watchdog = setTimeout(() => reject(new Error(`timed out after ${TIMEOUT_MS}ms (SKIM_TIMEOUT_MS) — the request or payment client stalled`)), TIMEOUT_MS + 5_000);
+        });
+        try {
+            res = await Promise.race([attempt, deadline]);
+        }
+        finally {
+            clearTimeout(watchdog);
+            // If the watchdog won, make sure the losing fetch promise can't
+            // surface an unhandled rejection later.
+            attempt.catch(() => { });
+        }
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -57,7 +82,7 @@ server.tool("read_url", "Fetch any URL and return clean, agent-ready Markdown vi
             content: [
                 {
                     type: "text",
-                    text: `Skim request failed: ${msg}. Common causes: wallet has no USDC on Base, or the price exceeds SKIM_MAX_PRICE_USD (${MAX_PRICE_USD}).`,
+                    text: `Skim request failed: ${msg}. Common causes: wallet has no USDC on Base, the price exceeds SKIM_MAX_PRICE_USD (${MAX_PRICE_USD}), or a stalled network/payment connection (the call was aborted after ${TIMEOUT_MS}ms; retry is safe — you are not charged for unsettled calls).`,
                 },
             ],
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skim-mcp",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "mcpName": "io.github.JessieJanie/skim402",
   "description": "MCP server for Skim — clean web reader for AI agents. Pays $0.002 per call in USDC over x402. No signup, no API keys.",
   "type": "module",
@@ -13,21 +13,15 @@
     "README.md",
     "LICENSE"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.build.json && node -e \"require('fs').chmodSync('dist/index.js', 0o755)\"",
-    "typecheck": "tsc --noEmit",
-    "dev": "tsx src/index.ts",
-    "prepublishOnly": "pnpm build"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
     "viem": "^2.21.0",
     "x402-fetch": "^0.6.0",
-    "zod": "catalog:"
+    "zod": "^3.25.76"
   },
   "devDependencies": {
-    "@types/node": "catalog:",
-    "tsx": "catalog:",
+    "@types/node": "^25.3.3",
+    "tsx": "^4.21.0",
     "typescript": "^5.9.0"
   },
   "publishConfig": {
@@ -55,5 +49,11 @@
   "license": "MIT",
   "engines": {
     "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && node -e \"require('fs').chmodSync('dist/index.js', 0o755)\"",
+    "typecheck": "tsc --noEmit",
+    "dev": "tsx src/index.ts",
+    "audit:buyers": "node buyer-audit.mjs"
   }
-}
+}