untappd-mcp 2.3.0 → 2.3.1

package/server.json

@@ -6,43 +6,92 @@
     "url": "https://github.com/chrischall/untappd-mcp",
     "source": "github"
   },
-  "version": "2.3.0",
+  "version": "2.3.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "untappd-mcp",
-      "version": "2.3.0",
+      "version": "2.3.1",
       "transport": {
         "type": "stdio"
       },
       "environmentVariables": [
+        {
+          "name": "UNTAPPD_ACCESS_TOKEN",
+          "description": "An Untappd access token you already hold. Supply it and no password is needed (username/password become optional).",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": true
+        },
         {
           "name": "UNTAPPD_USERNAME",
-          "description": "Your Untappd username or login email.",
-          "isRequired": true,
+          "description": "Your Untappd username or login email. Required unless UNTAPPD_ACCESS_TOKEN is set.",
+          "isRequired": false,
           "format": "string",
           "isSecret": false
         },
         {
           "name": "UNTAPPD_PASSWORD",
-          "description": "Your Untappd account password (used only for xauth login).",
-          "isRequired": true,
+          "description": "Your Untappd account password (used only for xauth login). Required unless UNTAPPD_ACCESS_TOKEN is set.",
+          "isRequired": false,
           "format": "string",
           "isSecret": true
         },
         {
           "name": "UNTAPPD_CLIENT_ID",
-          "description": "Untappd mobile app client id (obtained by intercepting the app; see README).",
-          "isRequired": true,
+          "description": "Untappd mobile app client id (obtained by intercepting the app; see README). Needed to log in with username/password and for every write; a pre-seeded access token can read without it.",
+          "isRequired": false,
           "format": "string",
           "isSecret": true
         },
         {
           "name": "UNTAPPD_CLIENT_SECRET",
-          "description": "Untappd mobile app client secret.",
-          "isRequired": true,
+          "description": "Untappd mobile app client secret. Needed to log in with username/password and for every write; a pre-seeded access token can read without it.",
+          "isRequired": false,
           "format": "string",
           "isSecret": true
+        },
+        {
+          "name": "UNTAPPD_DEVICE_ID",
+          "description": "Stable device UUID the token is keyed to (a default is provided).",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
+        },
+        {
+          "name": "UNTAPPD_UTV",
+          "description": "API version param (default 4.0.0).",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
+        },
+        {
+          "name": "UNTAPPD_USER_AGENT",
+          "description": "Override the User-Agent (default mimics the app).",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
+        },
+        {
+          "name": "UNTAPPD_TIMEZONE",
+          "description": "IANA timezone (e.g. America/New_York) that check-ins are stamped with when the call doesn't pass timezone. Set it when the server runs somewhere other than the drinker's zone (e.g. a hosted connector, usually UTC). Defaults to the server process's zone.",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
+        },
+        {
+          "name": "UNTAPPD_PHOTO_DIR",
+          "description": "The directory untappd_checkin's photo_path must be inside (several allowed, separated by :). Defaults to ~/Downloads/untappd-mcp — put a photo there to attach it. Any other file is refused, so a prompt-injected shout or comment can't publish an arbitrary image from your disk.",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
+        },
+        {
+          "name": "UNTAPPD_CACHE_DB",
+          "description": "Path to the local check-in cache SQLite file (default ~/.untappd-mcp/checkins.db; created owner-only — dir 0700, file 0600). Local/stdio only.",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
         }
       ]
     }

package/skills/untappd-mcp/SKILL.md

@@ -143,7 +143,7 @@ parameter, because an undeclared key is dropped by zod without a warning:
 ## Write tools (confirmation-gated — these post to your public account)
 
 Each asks the user to confirm first. Where the client can show a confirmation
-prompt, it does. Otherwise the first call makes NO network call and returns
+prompt, it does (unless the server sets `MCP_CONFIRM_ELICITATION=off`). Otherwise the first call makes NO network call and returns
 `status: "confirmation-required"` with a `preview` of the exact request and a
 `confirmToken`; show the preview to the user, and only after they approve call
 the tool again with the same arguments plus `confirmToken`. A token works once