vendure-mcp-graphql 1.5.0 → 1.6.1

package/dist/index.js

@@ -68,7 +68,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                     variables: { type: "object", description: "Optional variables" },
                     channelToken: {
                         type: "string",
-                        description: "Optional channel token to set channel context (e.g., 'default-channel', 'test-channel')",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
                     },
                 },
                 required: ["query"],
@@ -87,7 +87,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                     variables: { type: "object", description: "Optional variables" },
                     channelToken: {
                         type: "string",
-                        description: "Optional channel token to set channel context (e.g., 'default-channel', 'test-channel')",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
                     },
                 },
                 required: ["mutation"],
@@ -150,7 +150,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                     variables: { type: "object", description: "Optional variables" },
                     channelToken: {
                         type: "string",
-                        description: "Optional channel token to set channel context (e.g., 'default-channel', 'test-channel')",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
                     },
                 },
                 required: ["query"],
@@ -169,7 +169,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                     variables: { type: "object", description: "Optional variables" },
                     channelToken: {
                         type: "string",
-                        description: "Optional channel token to set channel context (e.g., 'default-channel', 'test-channel')",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
                     },
                 },
                 required: ["mutation"],
@@ -206,7 +206,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                     },
                     channelToken: {
                         type: "string",
-                        description: "Optional channel token to set channel context (e.g., 'default-channel', 'test-channel')",
+                        description: "Optional channel token to scope the request to a specific channel. Requires CHANNEL_API_KEY_MAP to be configured with a key for this channel.",
                     },
                 },
                 required: ["mutation", "ids"],
@@ -370,6 +370,20 @@ async function main() {
     console.error(`API Key: ${process.env.VENDURE_API_KEY ? "Present" : "Missing"}`);
     console.error(`Admin URL: ${process.env.ADMIN_API_URL || "default"}`);
     console.error(`Shop URL: ${process.env.SHOP_API_URL || "default"}`);
+    // Log available channel API key mappings
+    const raw = process.env.CHANNEL_API_KEY_MAP;
+    if (raw) {
+        try {
+            const map = JSON.parse(raw);
+            const channels = Object.keys(map);
+            if (channels.length > 0) {
+                console.error(`Channel API keys configured for: ${channels.join(", ")}`);
+            }
+        }
+        catch {
+            console.error("Invalid CHANNEL_API_KEY_MAP environment variable");
+        }
+    }
 }
 main().catch((error) => {
     console.error("Server error:", error);

package/dist/src/client.d.ts

@@ -1,6 +1,12 @@
 /**
  * GraphQL Client for Vendure API
- * Handles authentication via API Key for both Admin and Shop APIs
+ * Handles authentication via API Key for both Admin and Shop APIs.
+ *
+ * Channel switching is done via per-channel API keys (CHANNEL_API_KEY_MAP)
+ * combined with the vendure-token header. The per-channel API key provides
+ * authentication scoped to the target channel, and the vendure-token header
+ * tells Vendure which channel context to use for the request.
+ * Both are required for proper channel switching.
  */
 export interface GraphQLResponse<T = any> {
     data?: T;
@@ -10,8 +16,9 @@ export interface GraphQLResponse<T = any> {
     }>;
 }
 export declare class GraphQLClient {
-    private apiKey;
-    constructor(apiKey?: string | null);
+    private defaultApiKey;
+    private channelApiKeys;
+    constructor(defaultApiKey?: string | null, channelApiKeys?: Record<string, string>);
     request<T = any>(url: string, queryString: string, variables?: Record<string, any>, channelToken?: string): Promise<T>;
 }
 export declare function getClient(): GraphQLClient;

package/dist/src/client.js

@@ -1,19 +1,32 @@
 /**
  * GraphQL Client for Vendure API
- * Handles authentication via API Key for both Admin and Shop APIs
+ * Handles authentication via API Key for both Admin and Shop APIs.
+ *
+ * Channel switching is done via per-channel API keys (CHANNEL_API_KEY_MAP)
+ * combined with the vendure-token header. The per-channel API key provides
+ * authentication scoped to the target channel, and the vendure-token header
+ * tells Vendure which channel context to use for the request.
+ * Both are required for proper channel switching.
  */
 export class GraphQLClient {
-    apiKey;
-    constructor(apiKey = null) {
-        this.apiKey = apiKey;
+    defaultApiKey;
+    channelApiKeys;
+    constructor(defaultApiKey = null, channelApiKeys = {}) {
+        this.defaultApiKey = defaultApiKey;
+        this.channelApiKeys = channelApiKeys;
     }
     async request(url, queryString, variables, channelToken) {
+        // Resolve API key: use channel-specific key if available, fall back to default
+        const apiKey = (channelToken && this.channelApiKeys[channelToken]) || this.defaultApiKey;
         const headers = {
             "Content-Type": "application/json",
         };
-        if (this.apiKey) {
-            headers["vendure-api-key"] = this.apiKey;
+        if (apiKey) {
+            headers["vendure-api-key"] = apiKey;
         }
+        // Set vendure-token header when a channel token is provided and we have
+        // a mapped API key for it (ensuring the API key has access to this channel).
+        // The vendure-token header tells Vendure which channel context to use for the request.
         if (channelToken) {
             headers["vendure-token"] = channelToken;
         }
@@ -39,11 +52,20 @@ export class GraphQLClient {
 // Singleton instance
 let clientInstance = null;
 export function getClient() {
-    if (clientInstance) {
+    if (clientInstance)
         return clientInstance;
+    const defaultApiKey = process.env.VENDURE_API_KEY || null;
+    let channelApiKeys = {};
+    const raw = process.env.CHANNEL_API_KEY_MAP;
+    if (raw) {
+        try {
+            channelApiKeys = JSON.parse(raw);
+        }
+        catch (e) {
+            console.error("Invalid CHANNEL_API_KEY_MAP JSON:", e);
+        }
     }
-    const apiKey = process.env.VENDURE_API_KEY || null;
-    clientInstance = new GraphQLClient(apiKey);
+    clientInstance = new GraphQLClient(defaultApiKey, channelApiKeys);
     return clientInstance;
 }
 export function getAdminUrl() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vendure-mcp-graphql",
-  "version": "1.5.0",
+  "version": "1.6.1",
   "description": "MCP server for Vendure Admin and Shop GraphQL APIs",
   "type": "module",
   "bin": {