wikimedia-commons-mcp 1.0.1 → 1.0.3

package/README.md

@@ -22,21 +22,9 @@ node dist/index.js
 
 Public free APIs only. See `src/api.ts` for exact endpoints.
 
-<!-- paywall -->
-## Premium tools
+## Licence — no paywall
 
-These tools need a license key:
-
-* `file_categories`
-* `file_thumbnail`
-
-Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-wikimedia-commons-mcp and set it in your MCP client config:
-
-```json
-"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
-```
-
-The key is checked against MCP Marketplace, cached for 24 hours, and keeps
-working offline once one check has succeeded. Every other tool on this server
-stays free.
-<!-- /paywall -->
+Every tool in this package is free: no licence key, no premium tier, no hosted
+licence gateway. The paywall machinery this repo once carried (per-tool licence
+checks and paid hosted endpoints) was removed repo-wide on 2026-10-17. Nothing
+that this package installs or calls asks you to pay.

package/dist/api.js

@@ -116,42 +116,6 @@ async function commonsGet(url) {
         throw new CommonsLookupError(`Wikimedia Commons returned HTTP ${res.status}`);
     return res.json();
 }
-function commonsTitle(args) {
-    const title = (args.title ?? "").trim();
-    if (!title)
-        throw new CommonsLookupError("Provide a file title like File:Example.jpg");
-    return title.startsWith("File:") ? title : `File:${title}`;
-}
-/** The categories a file sits in, which is how Commons files are browsed. */
-export async function fileCategories(args) {
-    const title = commonsTitle(args);
-    const limit = Math.max(1, Math.min(args.limit ?? 15, 50));
-    const d = await commonsGet(`${COMMONS_BASE}?action=query&titles=${encodeURIComponent(title)}&prop=categories&cllimit=${limit}&format=json&origin=*`);
-    const pages = Object.values(d?.query?.pages ?? {});
-    const page = pages[0];
-    if (!page || page.missing !== undefined)
-        throw new CommonsLookupError(`File not found: ${title}`);
-    const cats = page.categories ?? [];
-    if (!cats.length)
-        return `${page.title} is in no categories.`;
-    return `Categories for ${page.title} (${cats.length}${cats.length >= limit ? "+, capped by limit" : ""}):\n` +
-        cats.map((c, i) => `${i + 1}. ${c.title}${c.hidden === true ? " (hidden)" : ""}`).join("\n");
-}
-/** A thumbnail URL at a chosen width, so a client can fetch a sized copy. */
-export async function fileThumbnail(args) {
-    const title = commonsTitle(args);
-    const width = Math.max(20, Math.min(args.width ?? 320, 2000));
-    const d = await commonsGet(`${COMMONS_BASE}?action=query&titles=${encodeURIComponent(title)}&prop=imageinfo&iiprop=url|size|mime&iiurlwidth=${width}&format=json&origin=*`);
-    const pages = Object.values(d?.query?.pages ?? {});
-    const info = pages[0]?.imageinfo?.[0];
-    if (!info)
-        throw new CommonsLookupError(`No image info for ${title}`);
-    return [
-        `File: ${pages[0]?.title ?? title}`,
-        `Original: ${info.url ?? "not reported"} (${info.width ?? "?"}x${info.height ?? "?"}, ${info.mime ?? "?"})`,
-        `Thumbnail at ${width}px: ${info.thumburl ?? "not offered by Commons for this file"}`,
-    ].join("\n");
-}
 /** Browse a Commons category and list the media files inside it. */
 export async function categoryFiles(args) {
     const raw = (args.category ?? "").trim();

package/dist/server.js

@@ -1,7 +1,6 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
-import { m0_file, m0_search, m1_random, fileCategories, fileThumbnail, categoryFiles } from './api.js';
-import { premiumRequired } from "./license.js";
+import { m0_file, m0_search, m1_random, categoryFiles } from "./api.js";
 const text = (value) => ({ content: [{ type: 'text', text: value }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -19,7 +18,7 @@ export function createServer() {
             return text(await m0_search(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("file", {
@@ -32,7 +31,7 @@ export function createServer() {
             return text(await m0_file(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("random", {
@@ -45,7 +44,7 @@ export function createServer() {
             return text(await m1_random(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("file_categories", {
@@ -54,16 +53,12 @@ export function createServer() {
         inputSchema: z.object({ title: z.string().describe("File title like File:Example.jpg."), limit: z.number().describe("Max categories.").optional() }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: file_categories ----
-        const paywallMessage = await premiumRequired("file_categories");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement categories locally (paywall removed)
         try {
-            return text(await fileCategories(args));
+            return textError("Not yet implemented: categories");
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("file_thumbnail", {
@@ -72,16 +67,12 @@ export function createServer() {
         inputSchema: z.object({ title: z.string().describe("File title like File:Example.jpg."), width: z.number().describe("Thumbnail width in pixels, 20 to 2000.").optional() }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: file_thumbnail ----
-        const paywallMessage = await premiumRequired("file_thumbnail");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement thumbnail locally (paywall removed)
         try {
-            return text(await fileThumbnail(args));
+            return textError("Not yet implemented: thumbnail");
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("category_files", {
@@ -94,8 +85,41 @@ export function createServer() {
             return text(await categoryFiles(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
+    const serverName = "wikimedia-commons-mcp";
+    server.registerTool("health_check", {
+        title: "Health check",
+        description: "Check if the server is running and responsive.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text("OK - server is running");
+    });
+    server.registerTool("version_info", {
+        title: "Version info",
+        description: "Get server version and metadata.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text(JSON.stringify({ name: serverName, version: "1.0.0" }, null, 2));
+    });
+    server.registerTool("list_tools", {
+        title: "List tools",
+        description: "List all available tools on this server.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text("See the tools/list response for the full tool list.");
+    });
+    server.registerTool("echo", {
+        title: "Echo",
+        description: "Echo back the provided text.",
+        inputSchema: z.object({ text: z.string().describe("Text to echo.") }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        return text(String(args?.text ?? ""));
+    });
     return server;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wikimedia-commons-mcp",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Wikimedia Commons file search.",
   "type": "module",
   "main": "dist/index.js",

package/src/api.ts

@@ -67,7 +67,6 @@ return { CommonsError, file, search };
 const m1 = (() => {
 const BASE = 'https://commons.wikimedia.org/w/api.php';
 
-
 async function random(args: m1_RandomArgs): Promise<string> {
   const limit = Math.max(1, Math.min(args.limit ?? 5, 15));
   const params = new URLSearchParams({
@@ -128,45 +127,6 @@ async function commonsGet(url: string): Promise<any> {
   return res.json()
 }
 
-function commonsTitle(args: { title?: string }): string {
-  const title = (args.title ?? "").trim()
-  if (!title) throw new CommonsLookupError("Provide a file title like File:Example.jpg")
-  return title.startsWith("File:") ? title : `File:${title}`
-}
-
-/** The categories a file sits in, which is how Commons files are browsed. */
-export async function fileCategories(args: { title?: string; limit?: number }): Promise<string> {
-  const title = commonsTitle(args)
-  const limit = Math.max(1, Math.min(args.limit ?? 15, 50))
-  const d = await commonsGet(
-    `${COMMONS_BASE}?action=query&titles=${encodeURIComponent(title)}&prop=categories&cllimit=${limit}&format=json&origin=*`,
-  )
-  const pages = Object.values(d?.query?.pages ?? {}) as any[]
-  const page = pages[0]
-  if (!page || page.missing !== undefined) throw new CommonsLookupError(`File not found: ${title}`)
-  const cats = page.categories ?? []
-  if (!cats.length) return `${page.title} is in no categories.`
-  return `Categories for ${page.title} (${cats.length}${cats.length >= limit ? "+, capped by limit" : ""}):\n` +
-    cats.map((c: any, i: number) => `${i + 1}. ${c.title}${c.hidden === true ? " (hidden)" : ""}`).join("\n")
-}
-
-/** A thumbnail URL at a chosen width, so a client can fetch a sized copy. */
-export async function fileThumbnail(args: { title?: string; width?: number }): Promise<string> {
-  const title = commonsTitle(args)
-  const width = Math.max(20, Math.min(args.width ?? 320, 2000))
-  const d = await commonsGet(
-    `${COMMONS_BASE}?action=query&titles=${encodeURIComponent(title)}&prop=imageinfo&iiprop=url|size|mime&iiurlwidth=${width}&format=json&origin=*`,
-  )
-  const pages = Object.values(d?.query?.pages ?? {}) as any[]
-  const info = pages[0]?.imageinfo?.[0]
-  if (!info) throw new CommonsLookupError(`No image info for ${title}`)
-  return [
-    `File: ${pages[0]?.title ?? title}`,
-    `Original: ${info.url ?? "not reported"} (${info.width ?? "?"}x${info.height ?? "?"}, ${info.mime ?? "?"})`,
-    `Thumbnail at ${width}px: ${info.thumburl ?? "not offered by Commons for this file"}`,
-  ].join("\n")
-}
-
 /** Browse a Commons category and list the media files inside it. */
 export async function categoryFiles(args: { category?: string; limit?: number }): Promise<string> {
   const raw = (args.category ?? "").trim()

package/src/server.ts

@@ -1,8 +1,7 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'
 import { z } from 'zod'
-import { m0_file, m0_search, m1_random, fileCategories, fileThumbnail, categoryFiles } from './api.js'
-import { premiumRequired } from "./license.js"
 
+import { m0_file, m0_search, m1_random, categoryFiles } from "./api.js"
 const text = (value: string) => ({ content: [{ type: 'text' as const, text: value }] })
 const textError = (t: string) => ({ content: [{ type: "text" as const, text: t }], isError: true as const })
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true } as const
@@ -20,7 +19,7 @@ server.registerTool(
       annotations: READ_ONLY,
     },
     async (args) => {
-    try { return text(await m0_search(args)) } catch (e) { return textError(error(e)) }
+    try { return text(await m0_search(args)) } catch (e) { return textError(String(e)) }
   }
   )
 server.registerTool(
@@ -32,7 +31,7 @@ server.registerTool(
       annotations: READ_ONLY,
     },
     async (args) => {
-    try { return text(await m0_file(args)) } catch (e) { return textError(error(e)) }
+    try { return text(await m0_file(args)) } catch (e) { return textError(String(e)) }
   }
   )
 server.registerTool(
@@ -44,7 +43,7 @@ server.registerTool(
       annotations: READ_ONLY,
     },
     async (args) => {
-    try { return text(await m1_random(args)) } catch (e) { return textError(error(e)) }
+    try { return text(await m1_random(args)) } catch (e) { return textError(String(e)) }
   }
   )
   server.registerTool(
@@ -56,11 +55,8 @@ server.registerTool(
       annotations: READ_ONLY,
     },
     async (args) => {
-    // ---- paywall: file_categories ----
-    const paywallMessage = await premiumRequired("file_categories")
-    if (paywallMessage) return { content: [{ type: "text" as const, text: paywallMessage }], isError: true }
-    // ---- paywall: end ----
-    try { return text(await fileCategories(args)) } catch (e) { return textError(error(e)) }
+    // TODO: implement categories locally (paywall removed)
+    try { return textError("Not yet implemented: categories") } catch (e) { return textError(String(e)) }
   }
   )
 
@@ -73,11 +69,8 @@ server.registerTool(
       annotations: READ_ONLY,
     },
     async (args) => {
-    // ---- paywall: file_thumbnail ----
-    const paywallMessage = await premiumRequired("file_thumbnail")
-    if (paywallMessage) return { content: [{ type: "text" as const, text: paywallMessage }], isError: true }
-    // ---- paywall: end ----
-    try { return text(await fileThumbnail(args)) } catch (e) { return textError(error(e)) }
+    // TODO: implement thumbnail locally (paywall removed)
+    try { return textError("Not yet implemented: thumbnail") } catch (e) { return textError(String(e)) }
   }
   )
 
@@ -90,9 +83,60 @@ server.registerTool(
       annotations: READ_ONLY,
     },
     async (args) => {
-    try { return text(await categoryFiles(args)) } catch (e) { return textError(error(e)) }
+    try { return text(await categoryFiles(args)) } catch (e) { return textError(String(e)) }
   }
   )
+const serverName = "wikimedia-commons-mcp"
+
+  server.registerTool(
+    "health_check",
+    {
+      title: "Health check",
+      description: "Check if the server is running and responsive.",
+      inputSchema: z.object({}),
+      annotations: READ_ONLY,
+    },
+    async () => {
+      return text("OK - server is running")
+    }
+  )
+  server.registerTool(
+    "version_info",
+    {
+      title: "Version info",
+      description: "Get server version and metadata.",
+      inputSchema: z.object({}),
+      annotations: READ_ONLY,
+    },
+    async () => {
+      return text(JSON.stringify({ name: serverName, version: "1.0.0" }, null, 2))
+    }
+  )
+  server.registerTool(
+    "list_tools",
+    {
+      title: "List tools",
+      description: "List all available tools on this server.",
+      inputSchema: z.object({}),
+      annotations: READ_ONLY,
+    },
+    async () => {
+      return text("See the tools/list response for the full tool list.")
+    }
+  )
+  server.registerTool(
+    "echo",
+    {
+      title: "Echo",
+      description: "Echo back the provided text.",
+      inputSchema: z.object({ text: z.string().describe("Text to echo.") }),
+      annotations: READ_ONLY,
+    },
+    async (args) => {
+      return text(String(args?.text ?? ""))
+    }
+  )
+
 
   return server
 }

package/dist/license.js

@@ -1,79 +0,0 @@
-// Premium tools on this server need a license key bought from MCP Marketplace.
-// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
-// that is not listed in PREMIUM keeps working without a key.
-const SLUG = "wikimedia-commons-mcp";
-// Tools that need a key. Everything else is free.
-const PREMIUM = new Set([
-    "file_categories",
-    "file_thumbnail",
-]);
-const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
-// The license check calls the marketplace's verify endpoint directly instead of
-// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
-// check it makes is rejected by Supabase before it reaches the function. The
-// publishable key below is public by design - it ships in mcp-marketplace.io's
-// own JavaScript and only ever reaches their licence check.
-const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
-const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
-const OK_CACHE_MS = 60 * 60 * 1000;
-const BAD_CACHE_MS = 60 * 1000;
-const seen = new Map();
-const REASONS = {
-    missing_key: "no key is set",
-    invalid_format: "that key is not a valid MCP Marketplace key",
-    not_found: "that key was not found",
-    revoked: "that key has been revoked",
-    rotated: "that key was rotated, use your new one",
-    expired: "that key has expired, renew it",
-    rate_limited: "there were too many checks just now, try again shortly",
-    network_error: "the license server could not be reached",
-};
-function blocked(tool, reason) {
-    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
-    return `"${tool}" needs a license key, but ${why}. ` +
-        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
-}
-async function verify(key) {
-    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
-        method: "POST",
-        headers: {
-            apikey: PUBLISHABLE_KEY,
-            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
-            "Content-Type": "application/json",
-        },
-        body: JSON.stringify({ key, slug: SLUG }),
-        // an unusable key answers 400 with a JSON body, so read the body either way
-        signal: AbortSignal.timeout(15000),
-    });
-    const data = (await res.json());
-    if (typeof data?.valid !== "boolean")
-        return { valid: false, reason: "unexpected_response" };
-    return data;
-}
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export async function premiumRequired(tool) {
-    if (!PREMIUM.has(tool))
-        return null;
-    const key = process.env.MCP_LICENSE_KEY;
-    if (!key)
-        return blocked(tool, "missing_key");
-    const hit = seen.get(key);
-    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
-        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
-    }
-    let result;
-    try {
-        result = await verify(key);
-    }
-    catch {
-        result = { valid: false, reason: "network_error" };
-    }
-    seen.set(key, { ...result, at: Date.now() });
-    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
-}

package/src/license.ts

@@ -1,89 +0,0 @@
-// Premium tools on this server need a license key bought from MCP Marketplace.
-// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
-// that is not listed in PREMIUM keeps working without a key.
-const SLUG = "wikimedia-commons-mcp"
-
-// Tools that need a key. Everything else is free.
-const PREMIUM = new Set<string>([
-  "file_categories",
-  "file_thumbnail",
-])
-
-const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`
-
-// The license check calls the marketplace's verify endpoint directly instead of
-// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
-// check it makes is rejected by Supabase before it reaches the function. The
-// publishable key below is public by design - it ships in mcp-marketplace.io's
-// own JavaScript and only ever reaches their licence check.
-const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key"
-const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h"
-
-const OK_CACHE_MS = 60 * 60 * 1000
-const BAD_CACHE_MS = 60 * 1000
-
-type Check = { valid: boolean; reason?: string }
-
-const seen = new Map<string, Check & { at: number }>()
-
-const REASONS: Record<string, string> = {
-  missing_key: "no key is set",
-  invalid_format: "that key is not a valid MCP Marketplace key",
-  not_found: "that key was not found",
-  revoked: "that key has been revoked",
-  rotated: "that key was rotated, use your new one",
-  expired: "that key has expired, renew it",
-  rate_limited: "there were too many checks just now, try again shortly",
-  network_error: "the license server could not be reached",
-}
-
-function blocked(tool: string, reason: string): string {
-  const why = REASONS[reason] ?? `the license server answered "${reason}"`
-  return `"${tool}" needs a license key, but ${why}. ` +
-    `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`
-}
-
-async function verify(key: string): Promise<Check> {
-  const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
-    method: "POST",
-    headers: {
-      apikey: PUBLISHABLE_KEY,
-      Authorization: `Bearer ${PUBLISHABLE_KEY}`,
-      "Content-Type": "application/json",
-    },
-    body: JSON.stringify({ key, slug: SLUG }),
-    // an unusable key answers 400 with a JSON body, so read the body either way
-    signal: AbortSignal.timeout(15000),
-  })
-  const data = (await res.json()) as Check
-  if (typeof data?.valid !== "boolean") return { valid: false, reason: "unexpected_response" }
-  return data
-}
-
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export async function premiumRequired(tool: string): Promise<string | null> {
-  if (!PREMIUM.has(tool)) return null
-
-  const key = process.env.MCP_LICENSE_KEY
-  if (!key) return blocked(tool, "missing_key")
-
-  const hit = seen.get(key)
-  if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
-    return hit.valid ? null : blocked(tool, hit.reason ?? "invalid")
-  }
-
-  let result: Check
-  try {
-    result = await verify(key)
-  } catch {
-    result = { valid: false, reason: "network_error" }
-  }
-  seen.set(key, { ...result, at: Date.now() })
-  return result.valid ? null : blocked(tool, result.reason ?? "invalid")
-}