tru-mcp 0.2.0 → 0.3.1

package/README.md

@@ -8,9 +8,17 @@ MCP server for [tru](https://tru-by29.onrender.com) — auth and billing API in
 npx tru-mcp init
 ```
 
-This detects your MCP client (Claude Code, Claude Desktop, Cursor) and writes the config automatically.
+No API key needed. This detects your MCP client (Claude Code, Claude Desktop, Cursor) and writes the config automatically. Then tell your agent:
 
-Don't have an API key yet? That's fine — add the MCP server first, then ask your agent to run `get_started`. It walks you through the entire setup.
+> "Run get_started to set up tru"
+
+Your agent will register your app, get you an API key, connect Stripe, and discover your API — all in one conversation.
+
+If you already have an API key:
+
+```bash
+npx tru-mcp init --key tru_ak_your_key_here
+```
 
 ### Manual Config
 
@@ -23,8 +31,7 @@ Add to your `.mcp.json` (Claude Code) or equivalent:
       "command": "npx",
       "args": ["-y", "tru-mcp"],
       "env": {
-        "TRU_API_URL": "https://tru-by29.onrender.com",
-        "TRU_API_KEY": "your_api_key_here"
+        "TRU_API_URL": "https://tru-by29.onrender.com"
       }
     }
   }
@@ -35,7 +42,7 @@ Add to your `.mcp.json` (Claude Code) or equivalent:
 
 | Variable | Required | Description |
 |----------|----------|-------------|
-| `TRU_API_KEY` | Yes | Your tru API key (starts with `tru_ak_`) |
+| `TRU_API_KEY` | No | Your tru API key (starts with `tru_ak_`). Not needed for initial setup — `register_app` will create one. |
 | `TRU_API_URL` | No | tru server URL (default: `https://tru-by29.onrender.com`) |
 
 ## Getting Started
@@ -56,14 +63,17 @@ After that, you're live. All the tools below work immediately.
 | `get_started` | Full setup guide — what tru is, how to integrate, risk signals explained |
 | `register_app` | Register a new app on tru and get an API key |
 | `connect_stripe` | Link your existing Stripe account to receive payments |
-| **Identity & Credentials** | |
+| `discover_api` | Crawl your site and generate an agent skill (SKILL.md) |
+| **Identity & Data** | |
 | `check_identity` | Verify a user + get risk signals (level, score, card funding, country) |
-| `request_credentials` | Request verified data from a user's vault (name, email, phone, address) |
+| `request_user_data` | Request verified data from a user's vault (name, email, phone, address) |
 | `check_request_status` | Poll the status of a credential request |
 | **Billing** | |
 | `create_charge` | Create a direct charge or subscription |
 | `check_charge_status` | Check the status of a charge request |
 | `request_virtual_card` | Issue a single-use virtual card for agent purchases |
+| **Provisioning** | |
+| `provision_user` | Auto-create a user account on a third-party app |
 | **Discovery** | |
 | `discover_apps` | Browse registered apps on the tru platform |
 | `read_skill` | Read an app's agent skill guide |
@@ -95,6 +105,20 @@ Agent: Now let's connect your Stripe account.
 Agent: You're live. Charges approved by tru users will flow to your Stripe account.
 ```
 
+## Example: Auto-Provisioning
+
+```
+User: Sign me up for clayking
+
+Agent: → check_identity(email: "user@example.com")
+       ✓ Verified — risk: low
+
+Agent: → provision_user(email: "user@example.com", service_name: "clayking")
+       ✓ Provisioned — got API key and account ID
+
+Agent: Now using clayking API on behalf of user...
+```
+
 ## Example: End User Flow
 
 ```
@@ -103,7 +127,7 @@ User: Sign me up for that new service
 Agent: → check_identity(email: "user@example.com")
        ✓ Verified — risk: low, score: 12, debit card, US
 
-Agent: → request_credentials(email: "user@example.com", fields: ["name", "email"])
+Agent: → request_user_data(email: "user@example.com", fields: ["name", "email"])
        ⏳ Pending — approve on your tru dashboard
 
 Agent: → check_request_status(request_id: "req_abc123")

package/dist/api-client.d.ts

@@ -79,6 +79,7 @@ export interface RegisterAppParams {
     website?: string;
     allowed_fields?: string[];
     redirect_uris?: string[];
+    provision_url?: string;
 }
 export interface RegisterAppResponse {
     app: {
@@ -113,5 +114,22 @@ export interface ConnectOAuthResponse {
     payouts_enabled?: boolean;
 }
 export declare function getConnectOAuthUrl(serviceName: string): Promise<ConnectOAuthResponse>;
+export interface DiscoverApiResponse {
+    endpoints_found: number;
+    pages_crawled: number;
+    skill_url: string;
+    skill_preview: string;
+}
+export declare function discoverApi(serviceName: string): Promise<DiscoverApiResponse>;
+export interface ProvisionResponse {
+    credentials: Record<string, unknown>;
+    provisioned: boolean;
+}
+export interface AppCredentialsResponse {
+    status: "active" | "not_provisioned";
+    credentials?: Record<string, unknown>;
+}
+export declare function provisionUser(email: string, serviceName: string): Promise<ProvisionResponse>;
+export declare function getAppCredentials(email: string, serviceName: string): Promise<AppCredentialsResponse>;
 export declare function requestAgentCard(email: string, amountCents: number, description?: string, targetService?: string, currency?: string, action?: string): Promise<AgentCardResponse>;
 export {};

package/dist/api-client.js

@@ -1,12 +1,15 @@
 const BASE_URL = process.env.TRU_API_URL || "http://localhost:3000";
-const API_KEY = process.env.TRU_API_KEY || "";
+// API key is read dynamically so register_app can set it at runtime
+function getApiKey() {
+    return process.env.TRU_API_KEY || "";
+}
 async function request(path, options = {}) {
     const url = `${BASE_URL}${path}`;
     const res = await fetch(url, {
         ...options,
         headers: {
             "Content-Type": "application/json",
-            "X-API-Key": API_KEY,
+            "X-API-Key": getApiKey(),
             ...options.headers,
         },
     });
@@ -62,6 +65,53 @@ export async function getChargeStatus(id) {
 export async function getConnectOAuthUrl(serviceName) {
     return (await request(`/api/connect/by-service/${encodeURIComponent(serviceName)}/oauth-url`));
 }
+export async function discoverApi(serviceName) {
+    const url = `${BASE_URL}/apps/${encodeURIComponent(serviceName)}/discover`;
+    const res = await fetch(url, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            "X-API-Key": getApiKey(),
+        },
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(`API error ${res.status}: ${body}`);
+    }
+    // The response is NDJSON — read all lines and extract the final results
+    const text = await res.text();
+    const lines = text.trim().split("\n");
+    let endpointsFound = 0;
+    let pagesCrawled = 0;
+    let skillContent = "";
+    for (const line of lines) {
+        try {
+            const event = JSON.parse(line);
+            if (event.type === "endpoints")
+                endpointsFound = event.count;
+            if (event.type === "pages")
+                pagesCrawled = event.count;
+            if (event.type === "skill")
+                skillContent = event.content;
+        }
+        catch { }
+    }
+    return {
+        endpoints_found: endpointsFound,
+        pages_crawled: pagesCrawled,
+        skill_url: `${BASE_URL}/apps/${encodeURIComponent(serviceName)}/SKILL.md`,
+        skill_preview: skillContent.slice(0, 2000),
+    };
+}
+export async function provisionUser(email, serviceName) {
+    return (await request(`/api/apps/by-service/${encodeURIComponent(serviceName)}/provision`, {
+        method: "POST",
+        body: JSON.stringify({ email }),
+    }));
+}
+export async function getAppCredentials(email, serviceName) {
+    return (await request(`/api/apps/by-service/${encodeURIComponent(serviceName)}/credentials/${encodeURIComponent(email)}`));
+}
 export async function requestAgentCard(email, amountCents, description, targetService, currency, action) {
     return (await request("/api/billing/agent-card", {
         method: "POST",

package/dist/api-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,uBAAuB,CAAC;AACpE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;AA8B9C,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,UAAuB,EAAE;IAC5D,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,IAAI,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,GAAG,OAAO;QACV,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,OAAO;YACpB,GAAG,OAAO,CAAC,OAAO;SACnB;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,OAAO,CAAC,MAAM,OAAO,CAAC,0BAA0B,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAA0B,CAAC;AACzG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,OAAe,EACf,MAAgB;IAEhB,OAAO,CAAC,MAAM,OAAO,CAAC,kBAAkB,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,OAAO;YACP,MAAM;SACP,CAAC;KACH,CAAC,CAAsB,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU;IAC/C,OAAO,CAAC,MAAM,OAAO,CAAC,oBAAoB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAsB,CAAC;AAC5F,CAAC;AAmBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,WAAmB,EACnB,WAAoB,EACpB,IAAa,EACb,QAAiB,EACjB,QAAiB,EACjB,WAAoB,EACpB,MAAe;IAEf,OAAO,CAAC,MAAM,OAAO,CAAC,sBAAsB,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,YAAY,EAAE,WAAW;YACzB,QAAQ,EAAE,QAAQ,IAAI,KAAK;YAC3B,WAAW;YACX,IAAI,EAAE,IAAI,IAAI,UAAU;YACxB,QAAQ;YACR,YAAY,EAAE,WAAW,IAAI,QAAQ;YACrC,MAAM;SACP,CAAC;KACH,CAAC,CAAmB,CAAC;AACxB,CAAC;AAoCD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IAC9D,OAAO,CAAC,MAAM,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAsB,CAAC;AACzG,CAAC;AAyBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAyB;IACzD,OAAO,CAAC,MAAM,OAAO,CAAC,oBAAoB,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAwB,CAAC;AAC7B,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU;IAC9C,OAAO,CAAC,MAAM,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAyB,CAAC;AACnG,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IAC1D,OAAO,CAAC,MAAM,OAAO,CAAC,2BAA2B,kBAAkB,CAAC,WAAW,CAAC,YAAY,CAAC,CAAyB,CAAC;AACzH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,WAAmB,EACnB,WAAoB,EACpB,aAAsB,EACtB,QAAiB,EACjB,MAAe;IAEf,OAAO,CAAC,MAAM,OAAO,CAAC,yBAAyB,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,YAAY,EAAE,WAAW;YACzB,QAAQ,EAAE,QAAQ,IAAI,KAAK;YAC3B,WAAW;YACX,cAAc,EAAE,aAAa;YAC7B,MAAM;SACP,CAAC;KACH,CAAC,CAAsB,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,uBAAuB,CAAC;AAEpE,oEAAoE;AACpE,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;AACvC,CAAC;AA8BD,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,UAAuB,EAAE;IAC5D,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,IAAI,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,GAAG,OAAO;QACV,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,SAAS,EAAE;YACxB,GAAG,OAAO,CAAC,OAAO;SACnB;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,OAAO,CAAC,MAAM,OAAO,CAAC,0BAA0B,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAA0B,CAAC;AACzG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,OAAe,EACf,MAAgB;IAEhB,OAAO,CAAC,MAAM,OAAO,CAAC,kBAAkB,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,OAAO;YACP,MAAM;SACP,CAAC;KACH,CAAC,CAAsB,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU;IAC/C,OAAO,CAAC,MAAM,OAAO,CAAC,oBAAoB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAsB,CAAC;AAC5F,CAAC;AAmBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,WAAmB,EACnB,WAAoB,EACpB,IAAa,EACb,QAAiB,EACjB,QAAiB,EACjB,WAAoB,EACpB,MAAe;IAEf,OAAO,CAAC,MAAM,OAAO,CAAC,sBAAsB,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,YAAY,EAAE,WAAW;YACzB,QAAQ,EAAE,QAAQ,IAAI,KAAK;YAC3B,WAAW;YACX,IAAI,EAAE,IAAI,IAAI,UAAU;YACxB,QAAQ;YACR,YAAY,EAAE,WAAW,IAAI,QAAQ;YACrC,MAAM;SACP,CAAC;KACH,CAAC,CAAmB,CAAC;AACxB,CAAC;AAoCD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IAC9D,OAAO,CAAC,MAAM,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAsB,CAAC;AACzG,CAAC;AA0BD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAyB;IACzD,OAAO,CAAC,MAAM,OAAO,CAAC,oBAAoB,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAwB,CAAC;AAC7B,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU;IAC9C,OAAO,CAAC,MAAM,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAyB,CAAC;AACnG,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IAC1D,OAAO,CAAC,MAAM,OAAO,CAAC,2BAA2B,kBAAkB,CAAC,WAAW,CAAC,YAAY,CAAC,CAAyB,CAAC;AACzH,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAmB;IACnD,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,kBAAkB,CAAC,WAAW,CAAC,WAAW,CAAC;IAC3E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,SAAS,EAAE;SACzB;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,wEAAwE;IACxE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC;YAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC;YACvD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,OAAO;QACL,eAAe,EAAE,cAAc;QAC/B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,GAAG,QAAQ,SAAS,kBAAkB,CAAC,WAAW,CAAC,WAAW;QACzE,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;KAC3C,CAAC;AACJ,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAa,EACb,WAAmB;IAEnB,OAAO,CAAC,MAAM,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,WAAW,CAAC,YAAY,EAAE;QACzF,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;KAChC,CAAC,CAAsB,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,WAAmB;IAEnB,OAAO,CAAC,MAAM,OAAO,CACnB,wBAAwB,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CACnG,CAA2B,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,WAAmB,EACnB,WAAoB,EACpB,aAAsB,EACtB,QAAiB,EACjB,MAAe;IAEf,OAAO,CAAC,MAAM,OAAO,CAAC,yBAAyB,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,YAAY,EAAE,WAAW;YACzB,QAAQ,EAAE,QAAQ,IAAI,KAAK;YAC3B,WAAW;YACX,cAAc,EAAE,aAAa;YAC7B,MAAM;SACP,CAAC;KACH,CAAC,CAAsB,CAAC;AAC3B,CAAC"}

package/dist/init.js

@@ -1,21 +1,14 @@
 #!/usr/bin/env node
-import { createInterface } from "node:readline/promises";
-import { stdin, stdout } from "node:process";
-import { readFile, writeFile, access } from "node:fs/promises";
-import { join } from "node:path";
+import { readFile, writeFile, access, mkdir } from "node:fs/promises";
+import { join, dirname } from "node:path";
 import { homedir } from "node:os";
 const DEFAULT_URL = "https://tru-by29.onrender.com";
 function detectTargets() {
     const targets = [];
     const cwd = process.cwd();
-    // Claude Code — .mcp.json in current directory
-    targets.push({
-        name: "Claude Code",
-        path: join(cwd, ".mcp.json"),
-    });
-    // Claude Desktop
     const home = homedir();
     const platform = process.platform;
+    targets.push({ name: "Claude Code", path: join(cwd, ".mcp.json") });
     if (platform === "darwin") {
         targets.push({
             name: "Claude Desktop",
@@ -34,119 +27,81 @@ function detectTargets() {
             path: join(home, ".config", "Claude", "claude_desktop_config.json"),
         });
     }
-    // Cursor — .cursor/mcp.json in current directory
-    targets.push({
-        name: "Cursor",
-        path: join(cwd, ".cursor", "mcp.json"),
-    });
+    targets.push({ name: "Cursor", path: join(cwd, ".cursor", "mcp.json") });
     return targets;
 }
-async function fileExists(path) {
+async function fileExists(p) {
     try {
-        await access(path);
+        await access(p);
         return true;
     }
     catch {
         return false;
     }
 }
-async function readJsonFile(path) {
+async function readJsonFile(p) {
     try {
-        const raw = await readFile(path, "utf-8");
+        const raw = await readFile(p, "utf-8");
         return JSON.parse(raw);
     }
     catch {
         return {};
     }
 }
-function buildTruEntry(apiUrl, apiKey) {
-    return {
+function buildEntry(apiKey) {
+    const entry = {
         command: "npx",
         args: ["-y", "tru-mcp"],
-        env: {
-            TRU_API_URL: apiUrl,
-            TRU_API_KEY: apiKey,
-        },
     };
+    if (apiKey) {
+        entry.env = { TRU_API_URL: DEFAULT_URL, TRU_API_KEY: apiKey };
+    }
+    else {
+        entry.env = { TRU_API_URL: DEFAULT_URL };
+    }
+    return entry;
 }
-async function main() {
-    const rl = createInterface({ input: stdin, output: stdout });
-    console.log("\n  tru MCP Server Setup\n");
-    // Prompt for config values
-    const apiUrl = (await rl.question(`  tru API URL [${DEFAULT_URL}]: `)).trim() || DEFAULT_URL;
-    const apiKey = (await rl.question("  tru API Key: ")).trim();
-    if (!apiKey) {
-        console.log("\n  Error: API key is required.\n");
-        rl.close();
-        process.exit(1);
+function parseArgs() {
+    const args = process.argv.slice(2).filter((a) => a !== "init");
+    let key;
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === "--key" && args[i + 1]) {
+            key = args[i + 1];
+            i++;
+        }
     }
-    // Detect available targets
+    return { key };
+}
+async function main() {
+    const { key } = parseArgs();
+    console.log("\n  tru MCP — setting up...\n");
     const targets = detectTargets();
-    const existing = [];
-    const creatable = [];
+    const written = [];
+    const entry = buildEntry(key);
     for (const t of targets) {
-        if (await fileExists(t.path)) {
-            existing.push(t);
-        }
-        else {
-            // For Claude Code, always offer to create .mcp.json
-            // For others, only offer if the parent dir exists
-            if (t.name === "Claude Code") {
-                creatable.push(t);
-            }
-        }
+        // Write to existing config files, or create .mcp.json for Claude Code
+        const exists = await fileExists(t.path);
+        if (!exists && t.name !== "Claude Code")
+            continue;
+        // Ensure parent dir exists
+        await mkdir(dirname(t.path), { recursive: true });
+        const config = exists ? await readJsonFile(t.path) : {};
+        if (!config.mcpServers)
+            config.mcpServers = {};
+        config.mcpServers.tru = entry;
+        await writeFile(t.path, JSON.stringify(config, null, 2) + "\n");
+        written.push(t.name);
     }
-    const available = [...existing, ...creatable];
-    if (available.length === 0) {
-        // No config files found — print manual snippet
-        console.log("\n  No MCP client config files detected. Add this to your config:\n");
-        printManualConfig(apiUrl, apiKey);
-        rl.close();
+    if (written.length === 0) {
+        console.log("  No MCP client detected. Add this to your config:\n");
+        console.log(JSON.stringify({ mcpServers: { tru: entry } }, null, 2) + "\n");
         return;
     }
-    // Show detected targets
-    console.log("\n  Detected MCP clients:");
-    available.forEach((t, i) => {
-        const tag = existing.includes(t) ? "(existing)" : "(will create)";
-        console.log(`    ${i + 1}. ${t.name} ${tag} — ${t.path}`);
-    });
-    const choice = (await rl.question(`\n  Configure which? [1-${available.length}, or "all"]: `)).trim();
-    let selected;
-    if (choice.toLowerCase() === "all") {
-        selected = available;
-    }
-    else {
-        const idx = parseInt(choice, 10) - 1;
-        if (isNaN(idx) || idx < 0 || idx >= available.length) {
-            console.log("\n  Invalid choice. Here's the manual config instead:\n");
-            printManualConfig(apiUrl, apiKey);
-            rl.close();
-            return;
-        }
-        selected = [available[idx]];
-    }
-    // Write configs
-    const entry = buildTruEntry(apiUrl, apiKey);
-    for (const target of selected) {
-        const config = await readJsonFile(target.path);
-        if (!config.mcpServers) {
-            config.mcpServers = {};
-        }
-        config.mcpServers.tru = entry;
-        await writeFile(target.path, JSON.stringify(config, null, 2) + "\n");
-        console.log(`  ✓ Updated ${target.name} — ${target.path}`);
+    for (const name of written) {
+        console.log(`  ✓ ${name}`);
     }
-    console.log("\n  Done! Restart your MCP client to connect.\n");
-    rl.close();
-}
-function printManualConfig(apiUrl, apiKey) {
-    const snippet = {
-        mcpServers: {
-            tru: buildTruEntry(apiUrl, apiKey),
-        },
-    };
-    console.log(JSON.stringify(snippet, null, 2));
-    console.log();
+    console.log("\n  Done. Restart your MCP client, then tell your agent:\n");
+    console.log('    "Run get_started to set up tru"\n');
 }
 main().catch((err) => {
     console.error("Error:", err);

package/dist/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,WAAW,GAAG,+BAA+B,CAAC;AAepD,SAAS,aAAa;IACpB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,+CAA+C;IAC/C,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;KAC7B,CAAC,CAAC;IAEH,iBAAiB;IACjB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC;SAC/E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC;SACpE,CAAC,CAAC;IACL,CAAC;IAED,iDAAiD;IACjD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC;KACvC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,MAAc;IACnD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;QACvB,GAAG,EAAE;YACH,WAAW,EAAE,MAAM;YACnB,WAAW,EAAE,MAAM;SACpB;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7D,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAE1C,2BAA2B;IAC3B,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,WAAW,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC;IAC7F,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,2BAA2B;IAC3B,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,oDAAoD;YACpD,kDAAkD;YAClD,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC7B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC;IAE9C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,+CAA+C;QAC/C,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,wBAAwB;IACxB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,SAAS,CAAC,MAAM,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtG,IAAI,QAAkB,CAAC;IACvB,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACnC,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;YACvE,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAClC,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,gBAAgB;IAChB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE5C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,KAAK,CAAC;QAC9B,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC/D,EAAE,CAAC,KAAK,EAAE,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,MAAc;IACvD,MAAM,OAAO,GAAG;QACd,UAAU,EAAE;YACV,GAAG,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;SACnC;KACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,WAAW,GAAG,+BAA+B,CAAC;AAkBpD,SAAS,aAAa;IACpB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IAEpE,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,IAAI,CACR,IAAI,EACJ,SAAS,EACT,qBAAqB,EACrB,QAAQ,EACR,4BAA4B,CAC7B;SACF,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,IAAI,CACR,IAAI,EACJ,SAAS,EACT,SAAS,EACT,QAAQ,EACR,4BAA4B,CAC7B;SACF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC;SACpE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAEzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,CAAS;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAe;IACjC,MAAM,KAAK,GAIP;QACF,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;KACxB,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,GAAG,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,GAAG,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAC/D,IAAI,GAAuB,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;IAE5B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,sEAAsE;QACtE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;YAAE,SAAS;QAElD,2BAA2B;QAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAElD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;QAC/C,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,KAAK,CAAC;QAC9B,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAC/D,CAAC;QACF,OAAO;IACT,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;AACvD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server.js

@@ -1,7 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { checkIdentityTool } from "./tools/check_identity.js";
-import { requestCredentialsTool } from "./tools/request_credentials.js";
+import { requestUserDataTool } from "./tools/request_user_data.js";
 import { checkRequestStatusTool } from "./tools/check_request_status.js";
 import { requestVirtualCardTool } from "./tools/request_virtual_card.js";
 import { discoverAppsTool } from "./tools/discover_apps.js";
@@ -12,13 +12,15 @@ import { registerAppTool } from "./tools/register_app.js";
 import { initiateOAuthTool } from "./tools/initiate_oauth.js";
 import { connectStripeTool } from "./tools/connect_stripe.js";
 import { getStartedTool } from "./tools/get_started.js";
+import { discoverApiTool } from "./tools/discover_api.js";
+import { provisionUserTool } from "./tools/provision_user.js";
 const server = new McpServer({
     name: "tru-identity",
     version: "0.1.0",
 });
 // Register tools
 server.tool(checkIdentityTool.name, checkIdentityTool.description, checkIdentityTool.inputSchema, checkIdentityTool.handler);
-server.tool(requestCredentialsTool.name, requestCredentialsTool.description, requestCredentialsTool.inputSchema, requestCredentialsTool.handler);
+server.tool(requestUserDataTool.name, requestUserDataTool.description, requestUserDataTool.inputSchema, requestUserDataTool.handler);
 server.tool(checkRequestStatusTool.name, checkRequestStatusTool.description, checkRequestStatusTool.inputSchema, checkRequestStatusTool.handler);
 server.tool(requestVirtualCardTool.name, requestVirtualCardTool.description, requestVirtualCardTool.inputSchema, requestVirtualCardTool.handler);
 server.tool(discoverAppsTool.name, discoverAppsTool.description, discoverAppsTool.inputSchema, discoverAppsTool.handler);
@@ -29,6 +31,8 @@ server.tool(registerAppTool.name, registerAppTool.description, registerAppTool.i
 server.tool(initiateOAuthTool.name, initiateOAuthTool.description, initiateOAuthTool.inputSchema, initiateOAuthTool.handler);
 server.tool(connectStripeTool.name, connectStripeTool.description, connectStripeTool.inputSchema, connectStripeTool.handler);
 server.tool(getStartedTool.name, getStartedTool.description, getStartedTool.inputSchema, getStartedTool.handler);
+server.tool(discoverApiTool.name, discoverApiTool.description, discoverApiTool.inputSchema, discoverApiTool.handler);
+server.tool(provisionUserTool.name, provisionUserTool.description, provisionUserTool.inputSchema, provisionUserTool.handler);
 export async function run() {
     const transport = new StdioServerTransport();
     await server.connect(transport);

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,iBAAiB;AACjB,MAAM,CAAC,IAAI,CACT,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,OAAO,CAC1B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,CAAC,IAAI,EAC3B,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,OAAO,CAC/B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,CAAC,IAAI,EAC3B,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,OAAO,CAC/B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,CAAC,IAAI,EAC3B,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,OAAO,CAC/B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,CAAC,IAAI,EACrB,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,OAAO,CACzB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,aAAa,CAAC,IAAI,EAClB,aAAa,CAAC,WAAW,EACzB,aAAa,CAAC,WAAW,EACzB,aAAa,CAAC,OAAO,CACtB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,CAAC,IAAI,EACrB,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,OAAO,CACzB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,CAAC,IAAI,EAC1B,qBAAqB,CAAC,WAAW,EACjC,qBAAqB,CAAC,WAAW,EACjC,qBAAqB,CAAC,OAAO,CAC9B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,eAAe,CAAC,IAAI,EACpB,eAAe,CAAC,WAAW,EAC3B,eAAe,CAAC,WAAW,EAC3B,eAAe,CAAC,OAAO,CACxB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,OAAO,CAC1B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,OAAO,CAC1B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,cAAc,CAAC,IAAI,EACnB,cAAc,CAAC,WAAW,EAC1B,cAAc,CAAC,WAAW,EAC1B,cAAc,CAAC,OAAO,CACvB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,iBAAiB;AACjB,MAAM,CAAC,IAAI,CACT,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,OAAO,CAC1B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,CAAC,IAAI,EACxB,mBAAmB,CAAC,WAAW,EAC/B,mBAAmB,CAAC,WAAW,EAC/B,mBAAmB,CAAC,OAAO,CAC5B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,CAAC,IAAI,EAC3B,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,OAAO,CAC/B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,CAAC,IAAI,EAC3B,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,WAAW,EAClC,sBAAsB,CAAC,OAAO,CAC/B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,CAAC,IAAI,EACrB,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,OAAO,CACzB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,aAAa,CAAC,IAAI,EAClB,aAAa,CAAC,WAAW,EACzB,aAAa,CAAC,WAAW,EACzB,aAAa,CAAC,OAAO,CACtB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,CAAC,IAAI,EACrB,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,OAAO,CACzB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,CAAC,IAAI,EAC1B,qBAAqB,CAAC,WAAW,EACjC,qBAAqB,CAAC,WAAW,EACjC,qBAAqB,CAAC,OAAO,CAC9B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,eAAe,CAAC,IAAI,EACpB,eAAe,CAAC,WAAW,EAC3B,eAAe,CAAC,WAAW,EAC3B,eAAe,CAAC,OAAO,CACxB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,OAAO,CAC1B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,OAAO,CAC1B,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,cAAc,CAAC,IAAI,EACnB,cAAc,CAAC,WAAW,EAC1B,cAAc,CAAC,WAAW,EAC1B,cAAc,CAAC,OAAO,CACvB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,eAAe,CAAC,IAAI,EACpB,eAAe,CAAC,WAAW,EAC3B,eAAe,CAAC,WAAW,EAC3B,eAAe,CAAC,OAAO,CACxB,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,WAAW,EAC7B,iBAAiB,CAAC,OAAO,CAC1B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;AAC5D,CAAC"}

package/dist/tools/discover_api.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+export declare const discoverApiTool: {
+    name: string;
+    description: string;
+    inputSchema: {
+        service_name: z.ZodString;
+    };
+    handler: (args: {
+        service_name: string;
+    }) => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/dist/tools/discover_api.js

@@ -0,0 +1,73 @@
+import { z } from "zod";
+import { discoverApi, lookupAppByServiceName } from "../api-client.js";
+export const discoverApiTool = {
+    name: "discover_api",
+    description: "Crawl a registered app's website to discover its API endpoints, documentation, and developer guides. " +
+        "Generates an agent skill (SKILL.md) that teaches AI agents how to use the app. " +
+        "The app must have a website URL set. Call this after register_app to make your app agent-friendly.",
+    inputSchema: {
+        service_name: z
+            .string()
+            .describe("The service_name of the app to discover (e.g. 'my-app')"),
+    },
+    handler: async (args) => {
+        try {
+            // Verify the app exists first
+            const lookup = await lookupAppByServiceName(args.service_name);
+            if (lookup.status === "not_found") {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `App "${args.service_name}" not found. Use register_app to create it first.`,
+                        },
+                    ],
+                };
+            }
+            const result = await discoverApi(args.service_name);
+            const lines = [
+                `API discovery complete for "${args.service_name}".`,
+                ``,
+                `Pages crawled: ${result.pages_crawled}`,
+                `API endpoints found: ${result.endpoints_found}`,
+                ``,
+                `Generated agent skill available at:`,
+                `${result.skill_url}`,
+                ``,
+                `Any AI agent can now fetch this skill to learn how to sign up, authenticate, and use your app's API.`,
+                ``,
+                `To view the full skill: use the read_skill tool with service_name "${args.service_name}".`,
+            ];
+            if (result.endpoints_found === 0) {
+                lines.push(``, `No API endpoints were auto-detected. To improve discovery:`, `- Add an /openapi.json or /swagger.json file to your app`, `- Add an /agent.md file with your API documentation`, `- Make sure your /docs or /api/docs pages are publicly accessible`, `- Or edit the skill manually in the tru dashboard`);
+            }
+            return {
+                content: [{ type: "text", text: lines.join("\n") }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (message.includes("website URL")) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `App "${args.service_name}" doesn't have a website URL set. Ask the developer for their domain and update the app:\n\nPUT /api/apps/:id with { "website": "https://their-domain.com" }\n\nOr re-register with the website field included.`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Error discovering API: ${message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=discover_api.js.map

package/dist/tools/discover_api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover_api.js","sourceRoot":"","sources":["../../src/tools/discover_api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAEvE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,uGAAuG;QACvG,iFAAiF;QACjF,oGAAoG;IACtG,WAAW,EAAE;QACX,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,CAAC,yDAAyD,CAAC;KACvE;IACD,OAAO,EAAE,KAAK,EAAE,IAA8B,EAAE,EAAE;QAChD,IAAI,CAAC;YACH,8BAA8B;YAC9B,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,QAAQ,IAAI,CAAC,YAAY,mDAAmD;yBACnF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEpD,MAAM,KAAK,GAAG;gBACZ,+BAA+B,IAAI,CAAC,YAAY,IAAI;gBACpD,EAAE;gBACF,kBAAkB,MAAM,CAAC,aAAa,EAAE;gBACxC,wBAAwB,MAAM,CAAC,eAAe,EAAE;gBAChD,EAAE;gBACF,qCAAqC;gBACrC,GAAG,MAAM,CAAC,SAAS,EAAE;gBACrB,EAAE;gBACF,sGAAsG;gBACtG,EAAE;gBACF,sEAAsE,IAAI,CAAC,YAAY,IAAI;aAC5F,CAAC;YAEF,IAAI,MAAM,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,4DAA4D,EAC5D,0DAA0D,EAC1D,qDAAqD,EACrD,mEAAmE,EACnE,mDAAmD,CACpD,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;aAC7D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEjE,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,QAAQ,IAAI,CAAC,YAAY,iNAAiN;yBACjP;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,0BAA0B,OAAO,EAAE;qBAC1C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/get_started.js

@@ -2,8 +2,8 @@ export const getStartedTool = {
     name: "get_started",
     description: "Returns a complete guide for developers integrating tru into their app. " +
         "Covers what tru is (auth + billing API with risk signals), why it matters, " +
-        "and walks through setup step-by-step using the MCP tools: register_app, connect_stripe, " +
-        "and then using create_charge, request_credentials, and check_identity. " +
+        "and walks through setup step-by-step using the MCP tools: register_app, connect_stripe, discover_api, " +
+        "and then using create_charge, request_user_data, and check_identity. " +
         "Call this first when a developer wants to integrate tru.",
     inputSchema: {},
     handler: async (_args) => {
@@ -51,10 +51,14 @@ register_app(
 )
 \`\`\`
 
-This creates your app on tru and returns an **API key** (starts with \`tru_ak_\`). Save it — you'll need it for API calls. The API key is also your app's authentication for the REST API.
+This creates your app on tru and returns an **API key** (starts with \`tru_ak_\`). The key is automatically:
+- **Set for this session** — all subsequent tru tools work immediately
+- **Saved to your MCP config** — future sessions pick it up without manual steps
 
 The \`service_name\` is your app's unique identifier on tru (lowercase, letters/numbers/hyphens).
 
+**Important:** Always ask the developer for their \`website\` URL. tru uses it to crawl their docs and generate an agent skill (Step 3), and it's needed for the agent widget (Step 4). Without it, agents won't be able to discover the app.
+
 ### Step 2: Connect your Stripe account
 
 \`\`\`
@@ -72,12 +76,40 @@ This generates a URL. Open it in your browser, log into your existing Stripe acc
 
 **If you don't have a Stripe account yet**, the OAuth flow will let you create one. But most developers already have one, and the whole point is that nothing about it changes.
 
-### Step 3: You're live
+### Step 3: Discover your API
+
+\`\`\`
+discover_api(service_name: "my-app")
+\`\`\`
+
+tru will crawl your website — homepage, docs pages, API references, OpenAPI specs — and generate a **SKILL.md** that teaches AI agents how to use your app. The more docs you have publicly accessible, the better the generated skill.
+
+**Tips for better discovery:**
+- Serve an \`/openapi.json\` or \`/swagger.json\` for structured endpoint detection
+- Add an \`/agent.md\` with custom agent instructions
+- Make your \`/docs\` pages publicly accessible (no auth wall on docs)
+- You can also edit the generated skill in the tru dashboard
+
+### Step 4: Add the agent widget
+
+Add this script tag to your app's HTML (in \`<head>\` or before \`</body>\`):
+
+\`\`\`html
+<script src="https://tru-by29.onrender.com/widget/agent.js" data-app="my-app" defer></script>
+\`\`\`
+
+Replace \`my-app\` with your \`service_name\`. This does two things:
+- **For AI agents** visiting your site: shows them a link to your SKILL.md so they know how to use your app (sign up, authenticate, call your API)
+- **For humans**: shows a subtle "agent guide" link
+
+This is how agents discover your app's capabilities when they land on your site. Without it, they have to be told about your app explicitly.
+
+### Step 5: You're live
 
 That's it. Your app can now:
 
 - **Verify users** — \`check_identity(email)\` returns whether they're verified, plus risk signals
-- **Request credentials** — \`request_credentials(email, service, fields)\` asks the user to share verified data
+- **Request credentials** — \`request_user_data(email, service, fields)\` asks the user to share verified data
 - **Charge users** — \`create_charge(email, amount_cents, description)\` creates a charge that the user approves
 - **Issue virtual cards** — \`request_virtual_card(email, amount_cents)\` for agent purchases on other sites
 - **Check risk** — every identity check includes risk level, score, card funding type, country, and fingerprint reuse
@@ -121,10 +153,75 @@ These signals come from Stripe's Radar and Identity — the same fraud detection
 
 ---
 
+## Auto-provisioning: Let tru users fly through signup
+
+The biggest conversion killer is making users create yet another account on your app. tru solves this with **provisioning** — you add a single endpoint, and tru automatically creates accounts for verified users.
+
+### How it works
+
+1. Register a \`provision_url\` on your app (via \`register_app\` or the dashboard)
+2. When an agent calls \`provision_user(email, service_name)\`, tru:
+   - Verifies the user's identity
+   - POSTs their verified info to your \`provision_url\`
+   - Stores the credentials you return
+3. The agent gets back API keys / account IDs and can use your service immediately
+
+The user never fills out a signup form, never verifies their email (tru already did that), and never hunts for an API key page.
+
+### Your provision endpoint
+
+tru sends a signed POST request:
+
+\`\`\`
+POST {your_provision_url}
+Headers:
+  Content-Type: application/json
+  X-Tru-Signature: {HMAC-SHA256 of body using your webhook_secret}
+  X-Tru-Event: user.provision
+
+Body:
+  { "email": "user@example.com", "name": "Jane Doe", "tru_user_id": "user@example.com" }
+\`\`\`
+
+Your endpoint should:
+1. Create an account for the user (or find existing)
+2. Generate an API key or credentials
+3. Return them as JSON (any shape — tru stores the whole response)
+
+\`\`\`json
+{ "api_key": "sk_live_abc123", "account_id": "acct_xyz" }
+\`\`\`
+
+### Verify the signature
+
+Use your app's \`webhook_secret\` to verify the \`X-Tru-Signature\` header:
+
+\`\`\`javascript
+const crypto = require('crypto');
+const expected = crypto.createHmac('sha256', WEBHOOK_SECRET).update(rawBody).digest('hex');
+if (signature !== expected) return res.status(401).json({ error: 'Invalid signature' });
+\`\`\`
+
+### Example: register with provisioning
+
+\`\`\`
+register_app(
+  service_name: "my-app",
+  display_name: "My App",
+  owner_email: "dev@example.com",
+  provision_url: "https://myapp.com/api/tru/provision"
+)
+\`\`\`
+
+Then any tru agent can:
+\`\`\`
+provision_user(email: "user@example.com", service_name: "my-app")
+→ { api_key: "sk_live_abc123", account_id: "acct_xyz" }
+\`\`\`
+
 ## What's next
 
 - **Set up webhooks** — get notified when charges are approved/rejected, credentials shared, etc.
-- **Write an Agent Skill** — a SKILL.md that teaches AI agents how to use your app (tru hosts it for you)
 - **Configure App Rules** — users can set per-app spending rules; you can set default limits on your side
 - **Add "Login with tru"** — OAuth 2.0 flow for browser-based auth (see integration docs)
 
@@ -135,12 +232,14 @@ These signals come from Stripe's Radar and Identity — the same fraud detection
 | \`get_started\` | This guide |
 | \`register_app\` | Create your app, get API key |
 | \`connect_stripe\` | Link your Stripe account |
+| \`discover_api\` | Crawl your site, generate agent skill |
 | \`check_identity\` | Verify a user + get risk signals |
-| \`request_credentials\` | Ask user to share verified data |
+| \`request_user_data\` | Ask user to share verified data |
 | \`check_request_status\` | Poll credential request status |
 | \`create_charge\` | Charge a user (one-time or subscription) |
 | \`check_charge_status\` | Poll charge status |
 | \`request_virtual_card\` | Issue single-use card for agent purchases |
+| \`provision_user\` | Auto-create account on a third-party app |
 | \`discover_apps\` | Browse tru app directory |
 | \`read_skill\` | Read an app's agent guide |
 | \`initiate_oauth\` | Start OAuth login flow |

package/dist/tools/get_started.js.map

@@ -1 +1 @@
-{"version":3,"file":"get_started.js","sourceRoot":"","sources":["../../src/tools/get_started.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,0EAA0E;QAC1E,6EAA6E;QAC7E,0FAA0F;QAC1F,yEAAyE;QACzE,0DAA0D;IAC5D,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,KAAK,EAAE,KAA4B,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyIjB,CAAC;QAEE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;CACF,CAAC"}
+{"version":3,"file":"get_started.js","sourceRoot":"","sources":["../../src/tools/get_started.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,0EAA0E;QAC1E,6EAA6E;QAC7E,wGAAwG;QACxG,uEAAuE;QACvE,0DAA0D;IAC5D,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,KAAK,EAAE,KAA4B,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4OjB,CAAC;QAEE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/provision_user.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+export declare const provisionUserTool: {
+    name: string;
+    description: string;
+    inputSchema: {
+        email: z.ZodString;
+        service_name: z.ZodString;
+    };
+    handler: (args: {
+        email: string;
+        service_name: string;
+    }) => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    }>;
+};

package/dist/tools/provision_user.js

@@ -0,0 +1,84 @@
+import { z } from "zod";
+import { checkIdentity, provisionUser } from "../api-client.js";
+export const provisionUserTool = {
+    name: "provision_user",
+    description: "Provision a tru user on a third-party app. The app must have a provision_url configured. " +
+        "tru sends the user's verified identity to the app's provision endpoint, the app creates an account " +
+        "and returns credentials (API key, account ID, etc.), and tru stores them. " +
+        "Returns the credentials so the agent can use the service immediately. " +
+        "If the user was already provisioned, returns the stored credentials without hitting the app again.",
+    inputSchema: {
+        email: z
+            .string()
+            .describe("Email address of the tru user to provision"),
+        service_name: z
+            .string()
+            .describe("The service_name of the app to provision the user on"),
+    },
+    handler: async (args) => {
+        try {
+            // First verify the user exists on tru
+            const identity = await checkIdentity(args.email);
+            if (!identity.verified) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `User ${args.email} is not verified on tru (reason: ${identity.reason || "unknown"}). They need to sign up at tru first.`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            // Call the provision API
+            const result = await provisionUser(args.email, args.service_name);
+            const lines = [
+                result.provisioned
+                    ? `Successfully provisioned ${args.email} on ${args.service_name}.`
+                    : `${args.email} was already provisioned on ${args.service_name}. Returning stored credentials.`,
+                ``,
+                `Credentials:`,
+                `\`\`\`json`,
+                JSON.stringify(result.credentials, null, 2),
+                `\`\`\``,
+                ``,
+                `Use these credentials to make API calls to ${args.service_name} on behalf of the user.`,
+            ];
+            return {
+                content: [{ type: "text", text: lines.join("\n") }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (message.includes("no provision_url")) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: [
+                                `The app "${args.service_name}" doesn't have a provision_url configured.`,
+                                ``,
+                                `The app developer needs to:`,
+                                `1. Add a POST endpoint that accepts { email, name, tru_user_id } and returns credentials (e.g. { api_key, account_id })`,
+                                `2. Register the endpoint URL as provision_url on their tru app settings`,
+                                ``,
+                                `See the tru developer docs for the full provisioning spec.`,
+                            ].join("\n"),
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Error provisioning user: ${message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=provision_user.js.map

package/dist/tools/provision_user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision_user.js","sourceRoot":"","sources":["../../src/tools/provision_user.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,2FAA2F;QAC3F,qGAAqG;QACrG,4EAA4E;QAC5E,wEAAwE;QACxE,oGAAoG;IACtG,WAAW,EAAE;QACX,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CAAC,4CAA4C,CAAC;QACzD,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,CAAC,sDAAsD,CAAC;KACpE;IACD,OAAO,EAAE,KAAK,EAAE,IAA6C,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,sCAAsC;YACtC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,QAAQ,IAAI,CAAC,KAAK,oCAAoC,QAAQ,CAAC,MAAM,IAAI,SAAS,uCAAuC;yBAChI;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,yBAAyB;YACzB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAElE,MAAM,KAAK,GAAG;gBACZ,MAAM,CAAC,WAAW;oBAChB,CAAC,CAAC,4BAA4B,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,YAAY,GAAG;oBACnE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,+BAA+B,IAAI,CAAC,YAAY,iCAAiC;gBAClG,EAAE;gBACF,cAAc;gBACd,YAAY;gBACZ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3C,QAAQ;gBACR,EAAE;gBACF,8CAA8C,IAAI,CAAC,YAAY,yBAAyB;aACzF,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;aAC7D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEjE,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACzC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE;gCACJ,YAAY,IAAI,CAAC,YAAY,4CAA4C;gCACzE,EAAE;gCACF,6BAA6B;gCAC7B,yHAAyH;gCACzH,yEAAyE;gCACzE,EAAE;gCACF,4DAA4D;6BAC7D,CAAC,IAAI,CAAC,IAAI,CAAC;yBACb;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4BAA4B,OAAO,EAAE;qBAC5C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/register_app.d.ts

@@ -10,6 +10,7 @@ export declare const registerAppTool: {
         website: z.ZodOptional<z.ZodString>;
         allowed_fields: z.ZodOptional<z.ZodArray<z.ZodString>>;
         redirect_uris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        provision_url: z.ZodOptional<z.ZodString>;
     };
     handler: (args: {
         service_name: string;
@@ -19,6 +20,7 @@ export declare const registerAppTool: {
         website?: string;
         allowed_fields?: string[];
         redirect_uris?: string[];
+        provision_url?: string;
     }) => Promise<{
         content: {
             type: "text";

package/dist/tools/register_app.js

@@ -1,9 +1,46 @@
 import { z } from "zod";
+import { readFile, writeFile, access } from "node:fs/promises";
+import { join } from "node:path";
+import { homedir } from "node:os";
 import { registerApp } from "../api-client.js";
+/** Find and update tru API key in MCP config files */
+async function persistApiKey(apiKey) {
+    const cwd = process.cwd();
+    const home = homedir();
+    const platform = process.platform;
+    const paths = [
+        join(cwd, ".mcp.json"),
+        join(cwd, ".cursor", "mcp.json"),
+        platform === "darwin"
+            ? join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json")
+            : platform === "win32"
+                ? join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json")
+                : join(home, ".config", "Claude", "claude_desktop_config.json"),
+    ];
+    const updated = [];
+    for (const p of paths) {
+        try {
+            await access(p);
+            const raw = await readFile(p, "utf-8");
+            const config = JSON.parse(raw);
+            if (config.mcpServers?.tru) {
+                if (!config.mcpServers.tru.env)
+                    config.mcpServers.tru.env = {};
+                config.mcpServers.tru.env.TRU_API_KEY = apiKey;
+                await writeFile(p, JSON.stringify(config, null, 2) + "\n");
+                updated.push(p);
+            }
+        }
+        catch {
+            // File doesn't exist or isn't valid JSON — skip
+        }
+    }
+    return updated;
+}
 export const registerAppTool = {
     name: "register_app",
     description: "[Developer tool] Register a new app on the tru platform. This is for developers integrating tru into their service — not for end users. " +
-        "Returns an API key that the developer must save immediately.",
+        "Returns an API key and automatically configures it for this session and in MCP config files.",
     inputSchema: {
         service_name: z
             .string()
@@ -21,7 +58,7 @@ export const registerAppTool = {
         website: z
             .string()
             .optional()
-            .describe("The app's public URL"),
+            .describe("The app's public URL. Required for API discovery (discover_api) and the agent widget. Always ask the developer for this."),
         allowed_fields: z
             .array(z.string())
             .optional()
@@ -30,27 +67,39 @@ export const registerAppTool = {
             .array(z.string())
             .optional()
             .describe("OAuth redirect URIs for the app"),
+        provision_url: z
+            .string()
+            .optional()
+            .describe("URL of your provision endpoint. tru POSTs { email, name, tru_user_id } here to auto-create accounts for tru users."),
     },
     handler: async (args) => {
         try {
             const result = await registerApp(args);
+            // Set key in-memory so subsequent tools work without restart
+            process.env.TRU_API_KEY = result.api_key;
+            // Persist key to MCP config files for future sessions
+            const configsUpdated = await persistApiKey(result.api_key);
+            const lines = [
+                `App registered successfully.`,
+                ``,
+                `App ID: ${result.app.id}`,
+                `Service name: ${result.app.service_name}`,
+                `Display name: ${result.app.display_name}`,
+                `Status: ${result.app.status}`,
+                ``,
+                `API Key: ${result.api_key}`,
+            ];
+            if (configsUpdated.length > 0) {
+                lines.push(``, `API key auto-saved to:`, ...configsUpdated.map((p) => `  ${p}`), ``, `This session is already configured. Future sessions will pick up the key automatically.`);
+            }
+            else {
+                lines.push(``, `This session is configured. To persist the key for future sessions, add TRU_API_KEY to your MCP config.`);
+            }
             return {
                 content: [
                     {
                         type: "text",
-                        text: [
-                            `App registered successfully.`,
-                            ``,
-                            `App ID: ${result.app.id}`,
-                            `Service name: ${result.app.service_name}`,
-                            `Display name: ${result.app.display_name}`,
-                            `Status: ${result.app.status}`,
-                            ``,
-                            `API Key: ${result.api_key}`,
-                            ``,
-                            `WARNING: Save this API key now — it cannot be retrieved later.`,
-                            `Use it as TRU_API_KEY when configuring the tru MCP server or REST API.`,
-                        ].join("\n"),
+                        text: lines.join("\n"),
                     },
                 ],
             };

package/dist/tools/register_app.js.map

@@ -1 +1 @@
-{"version":3,"file":"register_app.js","sourceRoot":"","sources":["../../src/tools/register_app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,0IAA0I;QAC1I,8DAA8D;IAChE,WAAW,EAAE;QACX,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,CAAC,yEAAyE,CAAC;QACtF,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,CAAC,yCAAyC,CAAC;QACtD,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,2CAA2C,CAAC;QACxD,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,sBAAsB,CAAC;QACnC,cAAc,EAAE,CAAC;aACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,0EAA0E,CAAC;QACvF,aAAa,EAAE,CAAC;aACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,iCAAiC,CAAC;KAC/C;IACD,OAAO,EAAE,KAAK,EAAE,IAQf,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YAEvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE;4BACJ,8BAA8B;4BAC9B,EAAE;4BACF,WAAW,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;4BAC1B,iBAAiB,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE;4BAC1C,iBAAiB,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE;4BAC1C,WAAW,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE;4BAC9B,EAAE;4BACF,YAAY,MAAM,CAAC,OAAO,EAAE;4BAC5B,EAAE;4BACF,gEAAgE;4BAChE,wEAAwE;yBACzE,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEjE,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,6BAA6B,IAAI,CAAC,YAAY,4CAA4C;yBACjG;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,0BAA0B,OAAO,EAAE;qBAC1C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"register_app.js","sourceRoot":"","sources":["../../src/tools/register_app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,sDAAsD;AACtD,KAAK,UAAU,aAAa,CAAC,MAAc;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QACtB,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC;QAChC,QAAQ,KAAK,QAAQ;YACnB,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC;YACtF,CAAC,CAAC,QAAQ,KAAK,OAAO;gBACpB,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC;gBAC1E,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC;KACpE,CAAC;IAEF,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG;oBAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC/D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC;gBAC/C,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,0IAA0I;QAC1I,8FAA8F;IAChG,WAAW,EAAE;QACX,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,CAAC,yEAAyE,CAAC;QACtF,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,CAAC,yCAAyC,CAAC;QACtD,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,2CAA2C,CAAC;QACxD,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0HAA0H,CAAC;QACvI,cAAc,EAAE,CAAC;aACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,0EAA0E,CAAC;QACvF,aAAa,EAAE,CAAC;aACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,iCAAiC,CAAC;QAC9C,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,oHAAoH,CAAC;KAClI;IACD,OAAO,EAAE,KAAK,EAAE,IASf,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YAEvC,6DAA6D;YAC7D,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;YAEzC,sDAAsD;YACtD,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE3D,MAAM,KAAK,GAAG;gBACZ,8BAA8B;gBAC9B,EAAE;gBACF,WAAW,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;gBAC1B,iBAAiB,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE;gBAC1C,iBAAiB,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE;gBAC1C,WAAW,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE;gBAC9B,EAAE;gBACF,YAAY,MAAM,CAAC,OAAO,EAAE;aAC7B,CAAC;YAEF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CACR,EAAE,EACF,wBAAwB,EACxB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EACtC,EAAE,EACF,yFAAyF,CAC1F,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CACR,EAAE,EACF,yGAAyG,CAC1G,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;qBACvB;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEjE,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,6BAA6B,IAAI,CAAC,YAAY,4CAA4C;yBACjG;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,0BAA0B,OAAO,EAAE;qBAC1C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/request_user_data.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export declare const requestUserDataTool: {
+    name: string;
+    description: string;
+    inputSchema: {
+        email: z.ZodString;
+        service: z.ZodString;
+        fields: z.ZodArray<z.ZodString>;
+    };
+    handler: (args: {
+        email: string;
+        service: string;
+        fields: string[];
+    }) => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/dist/tools/request_user_data.js

@@ -0,0 +1,63 @@
+import { z } from "zod";
+import { checkIdentity, requestCredentials } from "../api-client.js";
+export const requestUserDataTool = {
+    name: "request_user_data",
+    description: "Request verified data from a tru user (name, email, phone, address, banking). The user will be notified and must approve the request on their dashboard.",
+    inputSchema: {
+        email: z.string().describe("Email address of the tru user"),
+        service: z.string().describe("Name of the service requesting data"),
+        fields: z
+            .array(z.string())
+            .describe("List of fields to request, e.g. ['name', 'email', 'phone', 'address', 'banking']"),
+    },
+    handler: async (args) => {
+        try {
+            // First check if the user exists and is verified
+            const identity = await checkIdentity(args.email);
+            if (!identity.verified) {
+                const reason = identity.reason === "user_not_found"
+                    ? "No tru account found for this email."
+                    : identity.reason === "not_verified"
+                        ? "This user has not completed tru identity verification."
+                        : identity.reason === "no_vault"
+                            ? "This user's credential vault is not populated."
+                            : `User is not verified (${identity.reason}).`;
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `Cannot request user data: ${reason}`,
+                        },
+                    ],
+                };
+            }
+            // User is verified — create the data request
+            const request = await requestCredentials(args.email, args.service, args.fields);
+            const lines = [
+                `User data request created successfully.`,
+                ``,
+                `Request ID: ${request.id}`,
+                `User: ${args.email}`,
+                `Service: ${args.service}`,
+                `Fields requested: ${args.fields.join(", ")}`,
+                `Status: pending`,
+                ``,
+                `The user has been notified and must approve this request on their tru dashboard.`,
+                `Use the check_request_status tool with request ID "${request.id}" to check if the user has responded.`,
+            ];
+            return {
+                content: [{ type: "text", text: lines.join("\n") }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return {
+                content: [
+                    { type: "text", text: `Error requesting user data: ${message}` },
+                ],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=request_user_data.js.map

package/dist/tools/request_user_data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request_user_data.js","sourceRoot":"","sources":["../../src/tools/request_user_data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAErE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,0JAA0J;IAC5J,WAAW,EAAE;QACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC3D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QACnE,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,CACP,kFAAkF,CACnF;KACJ;IACD,OAAO,EAAE,KAAK,EAAE,IAA0D,EAAE,EAAE;QAC5E,IAAI,CAAC;YACH,iDAAiD;YACjD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEjD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvB,MAAM,MAAM,GACV,QAAQ,CAAC,MAAM,KAAK,gBAAgB;oBAClC,CAAC,CAAC,sCAAsC;oBACxC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,cAAc;wBAClC,CAAC,CAAC,wDAAwD;wBAC1D,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU;4BAC9B,CAAC,CAAC,gDAAgD;4BAClD,CAAC,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,CAAC;gBAEvD,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,6BAA6B,MAAM,EAAE;yBAC5C;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,6CAA6C;YAC7C,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAEhF,MAAM,KAAK,GAAG;gBACZ,yCAAyC;gBACzC,EAAE;gBACF,eAAe,OAAO,CAAC,EAAE,EAAE;gBAC3B,SAAS,IAAI,CAAC,KAAK,EAAE;gBACrB,YAAY,IAAI,CAAC,OAAO,EAAE;gBAC1B,qBAAqB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC7C,iBAAiB;gBACjB,EAAE;gBACF,kFAAkF;gBAClF,sDAAsD,OAAO,CAAC,EAAE,uCAAuC;aACxG,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;aAC7D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,+BAA+B,OAAO,EAAE,EAAE;iBAC1E;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tru-mcp",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "MCP server for tru — auth, billing, and risk signals in one API",
   "type": "module",
   "bin": {