untappd-mcp 2.2.4 → 2.3.1

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Untappd — beers, breweries, venues, check-ins, wishlists, and your friend feed",
-    "version": "2.2.4"
+    "version": "2.3.1"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Untappd",
       "source": "./",
       "description": "MCP server for Untappd — search beers/breweries/venues, read profiles/check-ins/wishlists, and post check-ins, toasts, and comments",
-      "version": "2.2.4",
+      "version": "2.3.1",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "untappd-mcp",
   "displayName": "Untappd",
-  "version": "2.2.4",
+  "version": "2.3.1",
   "description": "MCP server for Untappd — search beers/breweries/venues, read check-ins and wishlists, and post check-ins, toasts, and comments",
   "author": {
     "name": "Chris Hall",
@@ -18,5 +18,5 @@
     "mcp"
   ],
   "skills": "./skills/",
-  "mcp": "./.mcp.json"
+  "mcpServers": "./.mcp.json"
 }

package/.mcp.json

@@ -4,6 +4,7 @@
       "command": "node",
       "args": ["${CLAUDE_PLUGIN_ROOT}/dist/index.js"],
       "env": {
+        "UNTAPPD_ACCESS_TOKEN": "${UNTAPPD_ACCESS_TOKEN}",
         "UNTAPPD_USERNAME": "${UNTAPPD_USERNAME}",
         "UNTAPPD_PASSWORD": "${UNTAPPD_PASSWORD}",
         "UNTAPPD_CLIENT_ID": "${UNTAPPD_CLIENT_ID}",

package/README.md

@@ -13,9 +13,10 @@ activity feed; and post check-ins, toasts, and comments.
 
 Untappd's iPad/iPhone app authenticates with a username/password **xauth** login
 (`POST https://api.untappd.com/v4/xauth`) that returns an access token, then
-calls the v4 API. This server reproduces that exactly:
+calls the v4 API. This server reproduces that, except where the token goes:
 
-- Reads carry the token as an `access_token` query param.
+- Reads carry the token as an `Authorization: Bearer` header, never in the URL
+  (the app uses an `access_token` query param; the API accepts both).
 - Writes carry it as an `Authorization: Bearer` header (with the app's client
   credentials in the query), matching the app's real requests.
 
@@ -29,13 +30,13 @@ it goes stale.
 | `UNTAPPD_ACCESS_TOKEN` | no | An access token you already hold. Supply this and **no password is needed** — the xauth login is skipped entirely. |
 | `UNTAPPD_USERNAME` | if no token | Your Untappd username or login email. |
 | `UNTAPPD_PASSWORD` | if no token | Your Untappd password (used only for the xauth login that mints a token). |
-| `UNTAPPD_CLIENT_ID` | yes | The Untappd mobile app client id (see below). |
-| `UNTAPPD_CLIENT_SECRET` | yes | The Untappd mobile app client secret. |
+| `UNTAPPD_CLIENT_ID` | for login & writes | The Untappd mobile app client id (see below). A pre-seeded access token can read without it. |
+| `UNTAPPD_CLIENT_SECRET` | for login & writes | The Untappd mobile app client secret. |
 | `UNTAPPD_DEVICE_ID` | no | Stable device UUID the token is keyed to (a default is provided). |
 | `UNTAPPD_UTV` | no | API version param (default `4.0.0`). |
 | `UNTAPPD_USER_AGENT` | no | Override the User-Agent (default mimics the app). |
 | `UNTAPPD_TIMEZONE` | no | IANA timezone (e.g. `America/New_York`) that check-ins are stamped with when the call doesn't pass `timezone`. Set it when the server runs somewhere other than the drinker's zone (e.g. a hosted connector, usually UTC). Defaults to the server process's zone. |
-| `UNTAPPD_PHOTO_DIR` | no | Restrict `untappd_checkin`'s `photo_path` to files inside this directory (several allowed, separated by `:`). Recommended wherever the model can be steered by untrusted content. |
+| `UNTAPPD_PHOTO_DIR` | no | The directory `untappd_checkin`'s `photo_path` must be inside (several allowed, separated by `:`). Defaults to `~/Downloads/untappd-mcp` — put a photo there to attach it. Any other file is refused, so a prompt-injected shout or comment can't publish an arbitrary image from your disk. |
 | `UNTAPPD_CACHE_DB` | no | Path to the local check-in cache SQLite file (default `~/.untappd-mcp/checkins.db`; created owner-only — dir `0700`, file `0600`). Local/stdio only. |
 
 Copy `.env.example` to `.env` and fill it in for local use.
@@ -43,7 +44,7 @@ Copy `.env.example` to `.env` and fill it in for local use.
 ### Confirmations
 
 Every write asks you to confirm it first. A client that can show a confirmation
-prompt (Claude Code) shows one. Elsewhere the write takes two calls: the first
+prompt (Claude Code) shows one (unless `MCP_CONFIRM_ELICITATION=off`). Elsewhere the write takes two calls: the first
 does nothing and returns a preview of the exact request plus a `confirmToken`,
 and only a repeat call with the same arguments and that token performs it. A
 token works once, for that tool and those arguments only; change anything and
@@ -51,7 +52,8 @@ the call is refused with a fresh preview.
 
 | variable | default | |
 |---|---|---|
-| `MCP_CONFIRM_MODE` | `ask-user` | What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). `ask-user`: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. `auto`: the same two steps, but the model may use the token after reviewing the preview itself. `refuse`: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt. An unrecognised value is treated as `refuse`. |
+| `MCP_CONFIRM_MODE` | `ask-user` | What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). `ask-user`: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. `auto`: the same two steps, but the model may use the token after reviewing the preview itself. `refuse`: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt, unless `MCP_CONFIRM_ELICITATION=off`. An unrecognised value is treated as `refuse`. |
+| `MCP_CONFIRM_ELICITATION` | `on` | `off` never shows a confirmation prompt, so every client gets the `MCP_CONFIRM_MODE` behaviour. Set it for a client that says it can show prompts but never does (the write hangs — opencode 2.0.x). Any other value is treated as `on`, with a warning on stderr. |
 | `MCP_CONFIRM_TTL_SECONDS` | `600` | How long a token stays valid. |
 | `MCP_CONFIRM_SECRET` | random per process | Signing key; set it only if tokens must survive a server restart. |