watermarkbuster-mcp 1.1.0 → 1.2.0

package/README.md

@@ -6,15 +6,16 @@ Connect an MCP client to hosted or local Watermark Buster tools. The default mod
 
 - Node.js 20 or newer
 - An internet connection to `https://watermarkbuster.com/mcp`
+- An operator-issued Watermark Buster bearer token in `WATERMARKS_API_TOKEN`
 
-No account, API token, GPU, Python, or local model is required for the default hosted mode.
+No GPU, Python, or local model is required for the default hosted mode.
 
 ## Run without installing
 
 Use `npx` to download and start the current package:
 
 ```bash
-npx -y watermarkbuster-mcp
+WATERMARKS_API_TOKEN=YOUR_CLIENT_BEARER_TOKEN npx -y watermarkbuster-mcp
 ```
 
 The command waits for MCP messages on standard input. It does not open a user interface or show a prompt. Normally, your MCP client starts this command for you.
@@ -27,10 +28,10 @@ Install the command on your computer:
 npm install --global watermarkbuster-mcp
 ```
 
-Your MCP client can then start:
+Your MCP client can then start it with `WATERMARKS_API_TOKEN` in its environment:
 
 ```text
-watermarkbuster-mcp
+WATERMARKS_API_TOKEN=YOUR_CLIENT_BEARER_TOKEN watermarkbuster-mcp
 ```
 
 To add the package to one Node.js project instead, run:
@@ -77,7 +78,8 @@ Clients that use an `mcpServers` JSON object commonly use this form:
   "mcpServers": {
     "watermark-buster": {
       "command": "npx",
-      "args": ["-y", "watermarkbuster-mcp"]
+      "args": ["-y", "watermarkbuster-mcp"],
+      "env": {"WATERMARKS_API_TOKEN": "YOUR_CLIENT_BEARER_TOKEN"}
     }
   }
 }
@@ -85,7 +87,7 @@ Clients that use an `mcpServers` JSON object commonly use this form:
 
 ## Connect directly to the remote server
 
-Clients that support remote Streamable HTTP MCP do not need this npm bridge. Connect them directly to:
+Clients that support remote Streamable HTTP MCP do not need this npm bridge. Connect them directly to the URL below and send `Authorization: Bearer YOUR_CLIENT_BEARER_TOKEN` on every protocol request:
 
 ```text
 https://watermarkbuster.com/mcp
@@ -93,30 +95,22 @@ https://watermarkbuster.com/mcp
 
 ### Codex
 
-Add this to `~/.codex/config.toml`:
-
-```toml
-[mcp_servers.watermark_buster]
-url = "https://watermarkbuster.com/mcp"
+```bash
+export WATERMARKS_API_TOKEN='YOUR_CLIENT_BEARER_TOKEN'
+codex mcp add watermark-buster \
+  --url https://watermarkbuster.com/mcp \
+  --bearer-token-env-var WATERMARKS_API_TOKEN
 ```
 
 Restart Codex, then run `codex mcp list` or use `/mcp` inside Codex.
 
 ### Claude Code
 
-```bash
-claude mcp add --transport http watermark-buster https://watermarkbuster.com/mcp
-```
-
-Run `claude mcp list` or use `/mcp` inside Claude Code.
+Use the authenticated npm bridge configuration above, then run `claude mcp list` or use `/mcp` inside Claude Code.
 
 ### Gemini CLI
 
-```bash
-gemini mcp add --transport http watermark-buster https://watermarkbuster.com/mcp
-```
-
-Run `gemini mcp list` to confirm the connection.
+Use the authenticated npm bridge configuration above, then run `gemini mcp list` to confirm the connection.
 
 ### Cursor
 
@@ -126,7 +120,9 @@ Add this to `.cursor/mcp.json` for one project or `~/.cursor/mcp.json` for all p
 {
   "mcpServers": {
     "watermark-buster": {
-      "url": "https://watermarkbuster.com/mcp"
+      "command": "npx",
+      "args": ["-y", "watermarkbuster-mcp"],
+      "env": {"WATERMARKS_API_TOKEN": "YOUR_CLIENT_BEARER_TOKEN"}
     }
   }
 }
@@ -142,7 +138,9 @@ Add this to `~/.gemini/config/mcp_config.json` for all workspaces or `.agents/mc
 {
   "mcpServers": {
     "watermark-buster": {
-      "serverUrl": "https://watermarkbuster.com/mcp"
+      "command": "npx",
+      "args": ["-y", "watermarkbuster-mcp"],
+      "env": {"WATERMARKS_API_TOKEN": "YOUR_CLIENT_BEARER_TOKEN"}
     }
   }
 }
@@ -156,13 +154,17 @@ The bridge reads the current tool list from the hosted MCP server when it starts
 
 - `inspect_text` — report supported hidden Unicode without changing the text
 - `clean_text` — remove supported hidden Unicode and exotic spaces
+- `scan_and_rewrite_text` — run the model-free English light rewrite and return estimate-only scores, quality metrics, highlights, and a diff; input is limited to 128 KB
 - `clean_file` — clean a supported file and return the cleaned copy
+- `clean_synthid_image` — run the supported best-effort CPU SynthID scan on one PNG or JPEG and return the PNG plus residual report
 - `get_capabilities` — read the current formats, limits, and behavior
 
 Example agent requests:
 
 - “Inspect this text for hidden Unicode.”
+- “Scan and lightly rewrite this English text, then show the diff and limits.”
 - “Clean this file and return the cleaned copy.”
+- “Run the SynthID image scan and tell me if a residual remains.”
 - “Show the current Watermark Buster capabilities.”
 
 Local mode exposes the larger local tool set: direct file paths, folder audit, opt-in website audit, local Ollama rewriting, and an adapter for the optional `noai-watermark` pixel tool. See the [local package guide](https://pypi.org/project/watermarkbuster-local/).
@@ -173,7 +175,7 @@ In the default mode, tool input is sent to `https://watermarkbuster.com` for pro
 
 ## Connection errors
 
-If the hosted service cannot be reached, the command writes `Watermark Buster MCP: <reason>` to standard error and exits with a failure status. Check that `https://watermarkbuster.com/mcp` is reachable, then let the MCP client start the command again.
+If the token is missing or the hosted service cannot be reached, the command writes `Watermark Buster MCP: <reason>` to standard error and exits with a failure status. Check `WATERMARKS_API_TOKEN` and connectivity, then let the MCP client start the command again.
 
 If local mode says that the local package is missing, run `pipx install watermarkbuster-local`, then start the command again.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "watermarkbuster-mcp",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Connect MCP clients to hosted or local Watermark Buster tools.",
   "type": "module",
   "bin": {
@@ -31,7 +31,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@modelcontextprotocol/client": "2.0.0",
-    "@modelcontextprotocol/server": "2.0.0"
+    "@modelcontextprotocol/client": "2.4.0",
+    "@modelcontextprotocol/server": "2.4.0"
   }
 }

package/src/cli.js

@@ -9,6 +9,7 @@ import { serveStdio } from "@modelcontextprotocol/server/stdio";
 import {
   PACKAGE_VERSION,
   REMOTE_MCP_ENDPOINT,
+  authenticatedRequestInit,
   createBridgeServer,
 } from "./server.js";
 import { startLocalServer } from "./local.js";
@@ -80,6 +81,7 @@ async function startBridge() {
   });
   const remoteTransport = new StreamableHTTPClientTransport(
     new URL(REMOTE_MCP_ENDPOINT),
+    { requestInit: authenticatedRequestInit() },
   );
   await remoteClient.connect(remoteTransport);
   const { tools } = await remoteClient.listTools();

package/src/server.js

@@ -14,6 +14,14 @@ const SERVER_INSTRUCTIONS = [
   "The hosted service does not archive submitted content.",
 ].join(" ");
 
+export function authenticatedRequestInit(environment = process.env) {
+  const apiToken = environment.WATERMARKS_API_TOKEN?.trim();
+  if (!apiToken) {
+    throw new Error("WATERMARKS_API_TOKEN is required for the hosted MCP server");
+  }
+  return { headers: { Authorization: `Bearer ${apiToken}` } };
+}
+
 function remoteToolConfiguration(remoteTool) {
   const configuration = {
     title: remoteTool.title,