vendure-mcp-graphql 1.4.0 → 1.6.0

package/dist/index.js

@@ -66,6 +66,10 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                 properties: {
                     query: { type: "string", description: "The GraphQL query string" },
                     variables: { type: "object", description: "Optional variables" },
+                    channelToken: {
+                        type: "string",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
+                    },
                 },
                 required: ["query"],
             },
@@ -81,6 +85,10 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                         description: "The GraphQL mutation string",
                     },
                     variables: { type: "object", description: "Optional variables" },
+                    channelToken: {
+                        type: "string",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
+                    },
                 },
                 required: ["mutation"],
             },
@@ -114,6 +122,10 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                         type: "number",
                         description: "Max number of concurrent mutations. Default: 5.",
                     },
+                    channelToken: {
+                        type: "string",
+                        description: "Optional channel token to set channel context (e.g., 'default-channel', 'test-channel')",
+                    },
                 },
                 required: ["mutation", "ids"],
             },
@@ -136,6 +148,10 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                 properties: {
                     query: { type: "string", description: "The GraphQL query string" },
                     variables: { type: "object", description: "Optional variables" },
+                    channelToken: {
+                        type: "string",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
+                    },
                 },
                 required: ["query"],
             },
@@ -151,6 +167,10 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                         description: "The GraphQL mutation string",
                     },
                     variables: { type: "object", description: "Optional variables" },
+                    channelToken: {
+                        type: "string",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
+                    },
                 },
                 required: ["mutation"],
             },
@@ -184,6 +204,10 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                         type: "number",
                         description: "Max number of concurrent mutations. Default: 5.",
                     },
+                    channelToken: {
+                        type: "string",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
+                    },
                 },
                 required: ["mutation", "ids"],
             },
@@ -229,7 +253,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                     content: [
                         {
                             type: "text",
-                            text: JSON.stringify(await adminQuery(args?.query, args?.variables), null, 2),
+                            text: JSON.stringify(await adminQuery(args?.query, args?.variables, args?.channelToken), null, 2),
                         },
                     ],
                 };
@@ -238,7 +262,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                     content: [
                         {
                             type: "text",
-                            text: JSON.stringify(await adminMutation(args?.mutation, args?.variables), null, 2),
+                            text: JSON.stringify(await adminMutation(args?.mutation, args?.variables, args?.channelToken), null, 2),
                         },
                     ],
                 };
@@ -247,7 +271,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                     content: [
                         {
                             type: "text",
-                            text: JSON.stringify(await adminBatchMutation(args?.mutation, args?.ids, args?.variableName || "id", args?.extraVariables, args?.concurrency || 5), null, 2),
+                            text: JSON.stringify(await adminBatchMutation(args?.mutation, args?.ids, args?.variableName || "id", args?.extraVariables, args?.concurrency || 5, args?.channelToken), null, 2),
                         },
                     ],
                 };
@@ -274,7 +298,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                     content: [
                         {
                             type: "text",
-                            text: JSON.stringify(await shopQuery(args?.query, args?.variables), null, 2),
+                            text: JSON.stringify(await shopQuery(args?.query, args?.variables, args?.channelToken), null, 2),
                         },
                     ],
                 };
@@ -283,7 +307,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                     content: [
                         {
                             type: "text",
-                            text: JSON.stringify(await shopMutation(args?.mutation, args?.variables), null, 2),
+                            text: JSON.stringify(await shopMutation(args?.mutation, args?.variables, args?.channelToken), null, 2),
                         },
                     ],
                 };
@@ -292,7 +316,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                     content: [
                         {
                             type: "text",
-                            text: JSON.stringify(await shopBatchMutation(args?.mutation, args?.ids, args?.variableName || "id", args?.extraVariables, args?.concurrency || 5), null, 2),
+                            text: JSON.stringify(await shopBatchMutation(args?.mutation, args?.ids, args?.variableName || "id", args?.extraVariables, args?.concurrency || 5, args?.channelToken), null, 2),
                         },
                     ],
                 };
@@ -346,6 +370,20 @@ async function main() {
     console.error(`API Key: ${process.env.VENDURE_API_KEY ? "Present" : "Missing"}`);
     console.error(`Admin URL: ${process.env.ADMIN_API_URL || "default"}`);
     console.error(`Shop URL: ${process.env.SHOP_API_URL || "default"}`);
+    // Log available channel API key mappings
+    const raw = process.env.CHANNEL_API_KEY_MAP;
+    if (raw) {
+        try {
+            const map = JSON.parse(raw);
+            const channels = Object.keys(map);
+            if (channels.length > 0) {
+                console.error(`Channel API keys configured for: ${channels.join(", ")}`);
+            }
+        }
+        catch {
+            console.error("Invalid CHANNEL_API_KEY_MAP environment variable");
+        }
+    }
 }
 main().catch((error) => {
     console.error("Server error:", error);

package/dist/src/client.d.ts

@@ -1,6 +1,12 @@
 /**
  * GraphQL Client for Vendure API
- * Handles authentication via API Key for both Admin and Shop APIs
+ * Handles authentication via API Key for both Admin and Shop APIs.
+ *
+ * Channel switching is done via per-channel API keys (CHANNEL_API_KEY_MAP)
+ * combined with the vendure-token header. The per-channel API key provides
+ * authentication scoped to the target channel, and the vendure-token header
+ * tells Vendure which channel context to use for the request.
+ * Both are required for proper channel switching.
  */
 export interface GraphQLResponse<T = any> {
     data?: T;
@@ -10,9 +16,10 @@ export interface GraphQLResponse<T = any> {
     }>;
 }
 export declare class GraphQLClient {
-    private apiKey;
-    constructor(apiKey?: string | null);
-    request<T = any>(url: string, queryString: string, variables?: Record<string, any>): Promise<T>;
+    private defaultApiKey;
+    private channelApiKeys;
+    constructor(defaultApiKey?: string | null, channelApiKeys?: Record<string, string>);
+    request<T = any>(url: string, queryString: string, variables?: Record<string, any>, channelToken?: string): Promise<T>;
 }
 export declare function getClient(): GraphQLClient;
 export declare function getAdminUrl(): string;

package/dist/src/client.js

@@ -1,18 +1,34 @@
 /**
  * GraphQL Client for Vendure API
- * Handles authentication via API Key for both Admin and Shop APIs
+ * Handles authentication via API Key for both Admin and Shop APIs.
+ *
+ * Channel switching is done via per-channel API keys (CHANNEL_API_KEY_MAP)
+ * combined with the vendure-token header. The per-channel API key provides
+ * authentication scoped to the target channel, and the vendure-token header
+ * tells Vendure which channel context to use for the request.
+ * Both are required for proper channel switching.
  */
 export class GraphQLClient {
-    apiKey;
-    constructor(apiKey = null) {
-        this.apiKey = apiKey;
+    defaultApiKey;
+    channelApiKeys;
+    constructor(defaultApiKey = null, channelApiKeys = {}) {
+        this.defaultApiKey = defaultApiKey;
+        this.channelApiKeys = channelApiKeys;
     }
-    async request(url, queryString, variables) {
+    async request(url, queryString, variables, channelToken) {
+        // Resolve API key: use channel-specific key if available, fall back to default
+        const apiKey = (channelToken && this.channelApiKeys[channelToken]) || this.defaultApiKey;
         const headers = {
             "Content-Type": "application/json",
         };
-        if (this.apiKey) {
-            headers["vendure-api-key"] = this.apiKey;
+        if (apiKey) {
+            headers["vendure-api-key"] = apiKey;
+        }
+        // Set vendure-token header when a channel token is provided and we have
+        // a mapped API key for it (ensuring the API key has access to this channel).
+        // The vendure-token header tells Vendure which channel context to use for the request.
+        if (channelToken) {
+            headers["vendure-token"] = channelToken;
         }
         const response = await fetch(url, {
             method: "POST",
@@ -36,11 +52,20 @@ export class GraphQLClient {
 // Singleton instance
 let clientInstance = null;
 export function getClient() {
-    if (clientInstance) {
+    if (clientInstance)
         return clientInstance;
+    const defaultApiKey = process.env.VENDURE_API_KEY || null;
+    let channelApiKeys = {};
+    const raw = process.env.CHANNEL_API_KEY_MAP;
+    if (raw) {
+        try {
+            channelApiKeys = JSON.parse(raw);
+        }
+        catch (e) {
+            console.error("Invalid CHANNEL_API_KEY_MAP JSON:", e);
+        }
     }
-    const apiKey = process.env.VENDURE_API_KEY || null;
-    clientInstance = new GraphQLClient(apiKey);
+    clientInstance = new GraphQLClient(defaultApiKey, channelApiKeys);
     return clientInstance;
 }
 export function getAdminUrl() {

package/dist/src/tools/graphql-operations.d.ts

@@ -1,19 +1,19 @@
 /**
  * Execute a GraphQL query on the Admin API
  */
-export declare function adminQuery(queryString: string, variables?: Record<string, any>): Promise<any>;
+export declare function adminQuery(queryString: string, variables?: Record<string, any>, channelToken?: string): Promise<any>;
 /**
  * Execute a GraphQL mutation on the Admin API
  */
-export declare function adminMutation(mutationString: string, variables?: Record<string, any>): Promise<any>;
+export declare function adminMutation(mutationString: string, variables?: Record<string, any>, channelToken?: string): Promise<any>;
 /**
  * Execute a GraphQL query on the Shop API
  */
-export declare function shopQuery(queryString: string, variables?: Record<string, any>): Promise<any>;
+export declare function shopQuery(queryString: string, variables?: Record<string, any>, channelToken?: string): Promise<any>;
 /**
  * Execute a GraphQL mutation on the Shop API
  */
-export declare function shopMutation(mutationString: string, variables?: Record<string, any>): Promise<any>;
+export declare function shopMutation(mutationString: string, variables?: Record<string, any>, channelToken?: string): Promise<any>;
 /**
  * Fetch the Admin GraphQL schema introspection
  */
@@ -63,9 +63,9 @@ export interface BatchResult {
  * Execute a GraphQL mutation in batch for multiple IDs on the Admin API.
  * Runs mutations concurrently with configurable concurrency.
  */
-export declare function adminBatchMutation(mutationString: string, ids: string[], variableName?: string, extraVariables?: Record<string, any>, concurrency?: number): Promise<BatchResult>;
+export declare function adminBatchMutation(mutationString: string, ids: string[], variableName?: string, extraVariables?: Record<string, any>, concurrency?: number, channelToken?: string): Promise<BatchResult>;
 /**
  * Execute a GraphQL mutation in batch for multiple IDs on the Shop API.
  * Runs mutations concurrently with configurable concurrency.
  */
-export declare function shopBatchMutation(mutationString: string, ids: string[], variableName?: string, extraVariables?: Record<string, any>, concurrency?: number): Promise<BatchResult>;
+export declare function shopBatchMutation(mutationString: string, ids: string[], variableName?: string, extraVariables?: Record<string, any>, concurrency?: number, channelToken?: string): Promise<BatchResult>;

package/dist/src/tools/graphql-operations.js

@@ -2,30 +2,30 @@ import { getClient, getAdminUrl, getShopUrl } from "../client.js";
 /**
  * Execute a GraphQL query on the Admin API
  */
-export async function adminQuery(queryString, variables) {
+export async function adminQuery(queryString, variables, channelToken) {
     const client = getClient();
-    return client.request(getAdminUrl(), queryString, variables);
+    return client.request(getAdminUrl(), queryString, variables, channelToken);
 }
 /**
  * Execute a GraphQL mutation on the Admin API
  */
-export async function adminMutation(mutationString, variables) {
+export async function adminMutation(mutationString, variables, channelToken) {
     const client = getClient();
-    return client.request(getAdminUrl(), mutationString, variables);
+    return client.request(getAdminUrl(), mutationString, variables, channelToken);
 }
 /**
  * Execute a GraphQL query on the Shop API
  */
-export async function shopQuery(queryString, variables) {
+export async function shopQuery(queryString, variables, channelToken) {
     const client = getClient();
-    return client.request(getShopUrl(), queryString, variables);
+    return client.request(getShopUrl(), queryString, variables, channelToken);
 }
 /**
  * Execute a GraphQL mutation on the Shop API
  */
-export async function shopMutation(mutationString, variables) {
+export async function shopMutation(mutationString, variables, channelToken) {
     const client = getClient();
-    return client.request(getShopUrl(), mutationString, variables);
+    return client.request(getShopUrl(), mutationString, variables, channelToken);
 }
 const introspectionQuery = `
   query IntrospectionQuery {
@@ -497,17 +497,17 @@ export async function describeOperation(operationName, api) {
  * Execute a GraphQL mutation in batch for multiple IDs on the Admin API.
  * Runs mutations concurrently with configurable concurrency.
  */
-export async function adminBatchMutation(mutationString, ids, variableName = "id", extraVariables, concurrency = 5) {
-    return executeBatch(getAdminUrl(), mutationString, ids, variableName, extraVariables, concurrency);
+export async function adminBatchMutation(mutationString, ids, variableName = "id", extraVariables, concurrency = 5, channelToken) {
+    return executeBatch(getAdminUrl(), mutationString, ids, variableName, extraVariables, concurrency, channelToken);
 }
 /**
  * Execute a GraphQL mutation in batch for multiple IDs on the Shop API.
  * Runs mutations concurrently with configurable concurrency.
  */
-export async function shopBatchMutation(mutationString, ids, variableName = "id", extraVariables, concurrency = 5) {
-    return executeBatch(getShopUrl(), mutationString, ids, variableName, extraVariables, concurrency);
+export async function shopBatchMutation(mutationString, ids, variableName = "id", extraVariables, concurrency = 5, channelToken) {
+    return executeBatch(getShopUrl(), mutationString, ids, variableName, extraVariables, concurrency, channelToken);
 }
-async function executeBatch(url, mutationString, ids, variableName, extraVariables, concurrency) {
+async function executeBatch(url, mutationString, ids, variableName, extraVariables, concurrency, channelToken) {
     const client = getClient();
     const results = [];
     const queue = [...ids];
@@ -518,7 +518,7 @@ async function executeBatch(url, mutationString, ids, variableName, extraVariabl
             const id = queue.shift();
             const variables = { ...extraVariables, [variableName]: id };
             try {
-                const data = await client.request(url, mutationString, variables);
+                const data = await client.request(url, mutationString, variables, channelToken);
                 succeeded++;
                 results.push({ id, success: true, data });
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vendure-mcp-graphql",
-  "version": "1.4.0",
+  "version": "1.6.0",
     "description": "MCP server for Vendure Admin and Shop GraphQL APIs",
   "type": "module",
   "bin": {