skim-mcp 0.1.5 → 0.1.7

package/README.md

@@ -8,6 +8,8 @@
 
 `skim-mcp` is the official Model Context Protocol server for [Skim](https://skim402.com) — the canonical [x402](https://x402.org) clean reader API. It exposes one tool, `read_url`, that your agent can call to fetch any web page as agent-ready Markdown plus structured metadata (title, byline, published date, language, excerpt). Each call costs **$0.002 in USDC on Base**, paid automatically by your local wallet over HTTP 402.
 
+> **See it before you wire it:** [try Skim free in your browser](https://freeskims.skim402.com) — 10 free skims a day, no wallet, no signup. Paste a URL, see exactly what your agent gets back.
+
 > _A 30-second demo GIF coming here soon._
 
 ---
@@ -105,6 +107,7 @@ That's it. One tool, one input, one shape of output. Designed to drop into any a
 | `SKIM_WALLET_PRIVATE_KEY` | **yes**  | —                     | Hex private key for the Base wallet that pays for reads. With or without `0x` prefix. Use a dedicated wallet — never your personal one.                                            |
 | `SKIM_MAX_PRICE_USD`      | no       | `0.01`                | Hard cap on per-call price in USD. The wallet refuses to sign for anything above this. Skim is currently `$0.002`/call, well under the default cap — leave it alone unless tuning. |
 | `SKIM_API_URL`            | no       | `https://skim402.com` | Override the API base URL. For self-hosting or local development.                                                                                                                  |
+| `SKIM_TIMEOUT_MS`         | no       | `90000`               | Hard deadline per call in milliseconds. Aborts stalled requests or payment steps so a single bad call can never hang your agent. Unsettled calls are never charged, so retry is safe. |
 
 ---
 

package/dist/index.js

@@ -7,6 +7,10 @@ import { z } from "zod";
 const BASE_URL = (process.env.SKIM_API_URL ?? "https://skim402.com").replace(/\/+$/, "");
 const PRIVATE_KEY = process.env.SKIM_WALLET_PRIVATE_KEY;
 const MAX_PRICE_USD = process.env.SKIM_MAX_PRICE_USD ?? "0.01";
+const TIMEOUT_MS = (() => {
+    const parsed = Number(process.env.SKIM_TIMEOUT_MS ?? "90000");
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : 90_000;
+})();
 let payFetch = fetch;
 let walletAddress = null;
 if (PRIVATE_KEY) {
@@ -23,7 +27,7 @@ if (PRIVATE_KEY) {
 }
 const server = new McpServer({
     name: "skim-mcp",
-    version: "0.1.3",
+    version: "0.1.6",
 });
 server.tool("read_url", "Fetch any URL and return clean, agent-ready Markdown via Skim (skim402.com). Strips nav, ads, and boilerplate; preserves the article body plus structured metadata (title, byline, published date, language, excerpt). Pays $0.002 per call in USDC on Base over the x402 protocol — no API keys, no signup. Use this whenever you need to read web content: articles, docs, blog posts, GitHub READMEs, research papers, etc.", {
     url: z
@@ -44,11 +48,32 @@ server.tool("read_url", "Fetch any URL and return clean, agent-ready Markdown vi
     }
     let res;
     try {
-        res = await payFetch(`${BASE_URL}/api/v1/read`, {
+        // Two layers of hang protection:
+        // 1. AbortSignal.timeout aborts the underlying HTTP requests (both the
+        //    initial 402 handshake and the paid retry — x402-fetch reuses init).
+        // 2. Promise.race is a hard watchdog for anything inside the payment
+        //    client that stalls without honoring the abort signal (e.g. a hung
+        //    RPC or signing step), so a single bad call can never freeze the
+        //    whole process.
+        const attempt = payFetch(`${BASE_URL}/api/v1/read`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify({ url, mode: "basic" }),
+            signal: AbortSignal.timeout(TIMEOUT_MS),
         });
+        let watchdog;
+        const deadline = new Promise((_, reject) => {
+            watchdog = setTimeout(() => reject(new Error(`timed out after ${TIMEOUT_MS}ms (SKIM_TIMEOUT_MS) — the request or payment client stalled`)), TIMEOUT_MS + 5_000);
+        });
+        try {
+            res = await Promise.race([attempt, deadline]);
+        }
+        finally {
+            clearTimeout(watchdog);
+            // If the watchdog won, make sure the losing fetch promise can't
+            // surface an unhandled rejection later.
+            attempt.catch(() => { });
+        }
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -57,7 +82,7 @@ server.tool("read_url", "Fetch any URL and return clean, agent-ready Markdown vi
             content: [
                 {
                     type: "text",
-                    text: `Skim request failed: ${msg}. Common causes: wallet has no USDC on Base, or the price exceeds SKIM_MAX_PRICE_USD (${MAX_PRICE_USD}).`,
+                    text: `Skim request failed: ${msg}. Common causes: wallet has no USDC on Base, the price exceeds SKIM_MAX_PRICE_USD (${MAX_PRICE_USD}), or a stalled network/payment connection (the call was aborted after ${TIMEOUT_MS}ms; retry is safe — you are not charged for unsettled calls).`,
                 },
             ],
         };

package/dist/src/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skim-mcp",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "mcpName": "io.github.JessieJanie/skim402",
   "description": "MCP server for Skim — clean web reader for AI agents. Pays $0.002 per call in USDC over x402. No signup, no API keys.",
   "type": "module",
@@ -17,10 +17,12 @@
     "@modelcontextprotocol/sdk": "^1.0.0",
     "viem": "^2.21.0",
     "x402-fetch": "^0.6.0",
-    "zod": "^3.25.76"
+    "zod": "3.25.76"
   },
   "devDependencies": {
+    "@anthropic-ai/mcpb": "^2.0.0",
     "@types/node": "^25.3.3",
+    "esbuild": "^0.27.0",
     "tsx": "^4.21.0",
     "typescript": "^5.9.0"
   },
@@ -52,7 +54,9 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && node -e \"require('fs').chmodSync('dist/index.js', 0o755)\"",
-    "typecheck": "tsc --noEmit",
-    "dev": "tsx src/index.ts"
+    "typecheck": "tsc --build tsconfig.json",
+    "dev": "tsx src/index.ts",
+    "mcpb": "node mcpb-build.mjs",
+    "audit:buyers": "node buyer-audit.mjs"
   }
 }