glpi-mcp 0.1.0__tar.gz

glpi_mcp-0.1.0/.dockerignore

@@ -0,0 +1,9 @@
+.git
+.venv
+.opencode
+__pycache__
+*.py[cod]
+dist
+build
+*.egg-info
+.DS_Store

glpi_mcp-0.1.0/.env.example

@@ -0,0 +1,15 @@
+# URL base del sitio GLPI (obligatoria), sin apirest.php. Ej: https://glpi.ejemplo.com
+GLPI_BASE_URL=
+
+# App Token generado en GLPI (Setup > General > API) (obligatorio)
+GLPI_APP_TOKEN=
+
+# User Token del usuario de API (obligatorio)
+GLPI_USER_TOKEN=
+
+# Transporte del servidor MCP: stdio | streamable-http (o alias http) | sse (default: stdio)
+TRANSPORT=stdio
+
+# Config solo para transporte http/sse
+HOST=127.0.0.1
+PORT=8000

glpi_mcp-0.1.0/.gitignore

@@ -0,0 +1,9 @@
+.venv/
+__pycache__/
+*.py[cod]
+.env
+dist/
+build/
+*.egg-info/
+.DS_Store
+.opencode

glpi_mcp-0.1.0/.gitlab-ci.yml

@@ -0,0 +1,144 @@
+image: alpine:3.17.3
+
+services:
+  - name: docker:dind
+
+stages:
+  - test
+  - build
+  - environment
+  - deploy
+
+sonar:
+  except:
+    - develop
+    - main
+    - cicd
+    - stage
+  stage: test
+  tags:
+    - sonar
+  image:
+    name: sonarsource/sonar-scanner-cli:11.1
+    entrypoint: ['']
+  cache:
+    key: '${CI_JOB_NAME}'
+    paths:
+      - .sonar/cache
+  script:
+    - sleep 10 && sonar-scanner -X -Dsonar.qualitygate.wait=true
+      -Dsonar.host.url=$SONAR_HOST_URL
+      -Dsonar.login=$SONAR_TOKEN
+
+test:
+  except:
+    - develop
+    - main
+    - cicd
+    - stage
+  stage: test
+  tags:
+    - npm
+  image:
+    name: node:22.12.0-alpine
+    entrypoint: ['']
+  script:
+    - npm install
+    - npm test
+
+
+## Build the docker image to deploy
+build:
+  image:
+    name: alpine:latest
+    entrypoint: ['']
+  only:
+    - develop
+    - main
+  stage: build
+  tags:
+    - server3
+  script:
+    - apk add docker
+    - export DOCKER_HOST=$DEV_DOCKER_HOST
+    - export DOCKER_IMAGE_NAME=$CI_REGISTRY/$CI_PROJECT_NAMESPACE/$CI_PROJECT_NAME:$CI_COMMIT_SHA
+    - docker login gitlab.globalsoftm.com:5050 -u $DOCKER_USER -p $DOCKER_PASS
+
+    ## Build & push docker image
+    - docker build -t $DOCKER_IMAGE_NAME .
+    - docker push $DOCKER_IMAGE_NAME
+
+
+############ DEV ###########
+
+environment:
+  image:
+    name: rarzate/kubectl-with-wget:latest
+    entrypoint: ['']
+  only:
+    - develop
+  stage: environment
+  tags:
+    - server3
+  script:
+    # kubectl config
+    - kubectl config use-context globalsoft/k8s-integration:desarrollo001
+    ### CHANGE THIS VARIABLES AS YOU NEEDS ###
+    - export DOMAIN=gservicio.com # Change for domain to deploy
+
+    # Define environment variables
+    - export PROJECT_NAME=${CI_PROJECT_NAME//_/-}
+    - export DOCKER_IMAGE_NAME=$CI_REGISTRY\\/$CI_PROJECT_NAMESPACE\\/$CI_PROJECT_NAME:$CI_COMMIT_SHA
+    - export BRANCH_NAME=`echo $CI_COMMIT_BRANCH | tr '[:upper:]' '[:lower:]'`
+    - export DNS_SUBDOMAIN=$BRANCH_NAME.$PROJECT_NAME
+    - export DNS_DOMAIN=$DNS_SUBDOMAIN.$DOMAIN
+    - export NAME_SPACE=$BRANCH_NAME-$PROJECT_NAME
+
+    # Create namespace
+    - kubectl get ns $NAME_SPACE || kubectl create ns $NAME_SPACE
+    - kubectl config set-context --current --namespace $NAME_SPACE
+
+    # Create secret for registry
+    - kubectl get secret gitlab-secret || kubectl create secret docker-registry gitlab-secret  --docker-server=gitlab.globalsoftm.com:5050  --docker-username=$GITLAB_SECRET_USER --docker-password=$GITLAB_SECRET_PASSWORD --docker-email=$GITLAB_SECRET_EMAIL
+    
+    # Create configmap for env vars
+    - env | grep "${CI_COMMIT_BRANCH}_ENV" |  sed -e "s/${CI_COMMIT_BRANCH}_ENV=//" | base64 -d > env.txt
+    - kubectl get cm envvars && kubectl delete cm envvars || echo "Configmap does not extsts"
+    - kubectl create configmap envvars --from-file=env.txt
+
+    # Show result
+    - echo "DNS created $DNS_DOMAIN || K8s namespace created $NAME_SPACE"
+
+deploy:
+  image:
+    name: rarzate/kubectl-with-wget:latest
+    entrypoint: ['']
+  only:
+    - develop
+  stage: deploy
+  tags:
+    - server3
+  script:
+    # kubectl config
+    - kubectl config use-context globalsoft/k8s-integration:desarrollo001
+    ### CHANGE THIS VARIABLES AS YOUR NEEDS ###
+    - export DOMAIN=gservicio.com # Change for domain to deploy
+
+    # Define environment variables
+    - export PROJECT_NAME=${CI_PROJECT_NAME//_/-}
+    - export DOCKER_IMAGE_NAME=$CI_REGISTRY\\/$CI_PROJECT_NAMESPACE\\/$CI_PROJECT_NAME:$CI_COMMIT_SHA
+    - export BRANCH_NAME=`echo $CI_COMMIT_BRANCH | tr '[:upper:]' '[:lower:]'`
+    - export DNS_SUBDOMAIN=$BRANCH_NAME.$PROJECT_NAME
+    - export DNS_DOMAIN=$DNS_SUBDOMAIN.$DOMAIN
+    - export NAME_SPACE=$BRANCH_NAME-$PROJECT_NAME
+
+    # Set namespace
+    - kubectl config set-context --current --namespace $NAME_SPACE
+
+    # Deploy application
+    - sed -i "s/\$DOCKER_IMAGE_NAME/$DOCKER_IMAGE_NAME/g" k8s/deploy.yml
+    - sed -i "s/\$DNS_DOMAIN/$DNS_DOMAIN/g" k8s/deploy.yml
+    - kubectl delete deployment backend && sleep 10
+    - kubectl apply -f k8s/deploy.yml
+    - echo "Application deployed on https://$DNS_DOMAIN K8s namespace created $NAME_SPACE"
+

glpi_mcp-0.1.0/.python-version

@@ -0,0 +1 @@
+3.12

glpi_mcp-0.1.0/AGENTS.md

@@ -0,0 +1,44 @@
+# AGENTS.md
+
+## Qué es
+
+Servidor MCP en Python que expone tools para consultar la API REST de GLPI
+vía HTTP. Stack: SDK `mcp` v1 (`MCPServer`, no FastMCP) + `httpx`, gestionado
+con `uv` (Python 3.12, `requires-python >=3.11`).
+
+## Comandos
+
+```sh
+uv run glpi-mcp            # arranca el servidor (entrypoint server:main)
+uv run python -m glpi_mcp  # equivalente
+```
+
+- Transporte controlado por `TRANSPORT`: `stdio` (default) | `streamable-http` (alias `http`) | `sse`. Para http/sse se usan `HOST`/`PORT` (default 127.0.0.1:8000).
+- No hay tests, linter, formatter ni CI configurados. Verificación mínima:
+  `uv run python -c "import glpi_mcp.server; from glpi_mcp.config import get_settings; get_settings()"` (falla con `SettingsError` si no hay `.env`).
+
+## Configuración
+
+- `.env` es obligatorio y está gitignored; copiar `.env.example`. Requiere 3 variables:
+  `GLPI_BASE_URL` (raíz del GLPI, sin `/apirest.php`), `GLPI_APP_TOKEN` (Setup > General > API) y
+  `GLPI_USER_TOKEN` (del usuario de API). Sin ellas el server sale con error.
+  `.env` se carga desde el cwd o desde la raíz del repo (`config._load_env`).
+- **Autenticación**: la API de GLPI usa App Token + token de sesión. `client.request`
+  inicia una sesión por cada petición (initSession) y la cierra (killSession).
+  Los paths de endpoints deben usar el prefijo `/apirest.php/`.
+
+## Agregar una tool (flujo principal de trabajo)
+
+1. Crea `src/glpi_mcp/tools/<modulo>.py` con una función `register(mcp: MCPServer) -> None` y tools decoradas con `@mcp.tool()`.
+2. Regístralo en `TOOL_MODULES` de `src/glpi_mcp/server.py`.
+
+Detalles no obvios:
+- Las tools devuelven `str` (JSON serializado), no objetos; los `ApiError` se capturan y se devuelven como string.
+- `client.request(method, path, params, json_body)` devuelve JSON parseado o texto; los paths se normalizan con `/` inicial.
+- `client.init_session` / `client.kill_session` son públicos por si alguna tool necesita control manual de la sesión.
+
+## Gotchas
+
+- La fuente de verdad de las tools registradas es `server.py:TOOL_MODULES` (actualmente vacío: aún no hay tools).
+- `base_url` NO debe incluir `/apirest.php`; los paths de los endpoints sí lo llevan.
+- Rama de git por defecto: `develop`. Sin commits iniciales todavía.

glpi_mcp-0.1.0/Dockerfile

@@ -0,0 +1,24 @@
+# syntax=docker/dockerfile:1
+
+FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim
+
+ENV UV_COMPILE_BYTECODE=1 \
+    UV_LINK_MODE=copy \
+    PATH="/app/.venv/bin:$PATH"
+
+WORKDIR /app
+
+COPY pyproject.toml uv.lock ./
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync --frozen --no-dev --no-install-project
+
+COPY README.md ./
+COPY src ./src
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync --frozen --no-dev
+
+RUN useradd --create-home --uid 1000 mcpuser && chown -R mcpuser:mcpuser /app
+USER mcpuser
+
+
+CMD ["glpi-mcp"]

glpi_mcp-0.1.0/PKG-INFO

@@ -0,0 +1,46 @@
+Metadata-Version: 2.5
+Name: glpi-mcp
+Version: 0.1.0
+Summary: MCP server con tools para consultar la API REST de GLPI
+Requires-Python: >=3.11
+Requires-Dist: httpx>=0.27.0
+Requires-Dist: mcp>=1.0.0
+Requires-Dist: python-dotenv>=1.0.0
+Description-Content-Type: text/markdown
+
+# GLPI MCP
+
+Servidor MCP en Python para interactuar con la [API REST de GLPI](https://glpi-project.org) (App Token + User Token).
+
+## Requisitos
+
+- Python 3.11+ (desarrollado con 3.12)
+- [uv](https://docs.astral.sh/uv/)
+
+## Configuración
+
+```sh
+cp .env.example .env
+# Rellena GLPI_BASE_URL, GLPI_APP_TOKEN y GLPI_USER_TOKEN
+```
+
+## Uso
+
+```sh
+uv sync
+uv run glpi-mcp
+```
+
+## Transportes
+
+`TRANSPORT` controla el transporte MCP: `stdio` (default), `streamable-http` (o `http`) y `sse`.
+
+## Estructura
+
+```
+src/glpi_mcp/
+├── client.py   # Cliente HTTP con auth por sesión GLPI
+├── config.py   # Settings desde variables de entorno
+├── server.py   # Registro de tools y arranque
+└── tools/      # Módulos de tools (uno por área)
+```

glpi_mcp-0.1.0/README.md

@@ -0,0 +1,36 @@
+# GLPI MCP
+
+Servidor MCP en Python para interactuar con la [API REST de GLPI](https://glpi-project.org) (App Token + User Token).
+
+## Requisitos
+
+- Python 3.11+ (desarrollado con 3.12)
+- [uv](https://docs.astral.sh/uv/)
+
+## Configuración
+
+```sh
+cp .env.example .env
+# Rellena GLPI_BASE_URL, GLPI_APP_TOKEN y GLPI_USER_TOKEN
+```
+
+## Uso
+
+```sh
+uv sync
+uv run glpi-mcp
+```
+
+## Transportes
+
+`TRANSPORT` controla el transporte MCP: `stdio` (default), `streamable-http` (o `http`) y `sse`.
+
+## Estructura
+
+```
+src/glpi_mcp/
+├── client.py   # Cliente HTTP con auth por sesión GLPI
+├── config.py   # Settings desde variables de entorno
+├── server.py   # Registro de tools y arranque
+└── tools/      # Módulos de tools (uno por área)
+```

glpi_mcp-0.1.0/k8s/deploy.yml

@@ -0,0 +1,103 @@
+# apiVersion: v1
+# kind: PersistentVolumeClaim
+# metadata:
+#   name: parkit-pvc
+# spec:
+#   storageClassName: oci-bv
+#   accessModes:
+#     - ReadWriteOnce
+#   resources:
+#     requests:
+#       storage: 5Gi
+# ---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: backend
+  labels:
+    app: backend
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: backend
+  strategy:
+    rollingUpdate:
+      maxUnavailable: 25%
+  template:
+    metadata:
+      labels:
+        app: backend
+    spec:
+      imagePullSecrets:
+        - name: gitlab-secret
+      containers:
+        - image: $DOCKER_IMAGE_NAME
+          volumeMounts:
+            - name: envvars
+              mountPath: '/app/.env'
+              subPath: .env
+              readOnly: true
+
+          resources:
+            limits:
+              cpu: 200m
+              memory: 512Mi
+            requests:
+              cpu: 100m
+              memory: 256Mi
+
+          imagePullPolicy: Always
+          name: backend
+          ports:
+            - containerPort: 8000
+              protocol: TCP
+          securityContext:
+            capabilities:
+              drop:
+                - all
+              add: ['NET_BIND_SERVICE']
+            allowPrivilegeEscalation: false
+
+      restartPolicy: Always
+      volumes:
+        - name: envvars
+          configMap:
+            name: envvars
+            items:
+              - key: env.txt
+                path: .env
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: backend-service
+spec:
+  selector:
+    app: backend
+  ports:
+    - port: 80
+      protocol: TCP
+      targetPort: 8000
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ingress-backed
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    nginx.ingress.kubernetes.io/proxy-body-size: 2048m
+    nginx.org/client-max-body-size: 2048m
+spec:
+  rules:
+    - host: '$DNS_DOMAIN'
+      http:
+        paths:
+          - pathType: Prefix
+            path: '/'
+            backend:
+              service:
+                name: backend-service
+                port:
+                  number: 80

glpi_mcp-0.1.0/opencode.json

@@ -0,0 +1,22 @@
+{
+	"$schema": "https://opencode.ai/config.json",
+	"mcp": {
+		// "glpi": {
+		// 	"type": "remote",
+		// 	"url": "https://develop.gs-glpi-mcp.gservicio.com/mcp",
+		// 	"headers": {
+		// 		"Authorization": "Bearer {env:GLPI_MCP_TOKEN}"
+		// 	},
+		// 	"enabled": true
+		// }
+		"glpi": {
+			"type": "local",
+			"command": [
+				"uv",
+				"run",
+				"glpi-mcp"
+			],
+			"enabled": true
+		}
+	}
+}

glpi_mcp-0.1.0/pyproject.toml

@@ -0,0 +1,24 @@
+[project]
+name = "glpi-mcp"
+version = "0.1.0"
+description = "MCP server con tools para consultar la API REST de GLPI"
+readme = "README.md"
+requires-python = ">=3.11"
+dependencies = [
+    "mcp>=1.0.0",
+    "httpx>=0.27.0",
+    "python-dotenv>=1.0.0",
+]
+
+[project.scripts]
+glpi-mcp = "glpi_mcp.server:main"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/glpi_mcp"]
+
+[tool.uv]
+package = true

glpi_mcp-0.1.0/src/glpi_mcp/__init__.py

@@ -0,0 +1,4 @@
+from glpi_mcp.config import Settings, get_settings
+
+__all__ = ["Settings", "get_settings"]
+__version__ = "0.1.0"

glpi_mcp-0.1.0/src/glpi_mcp/__main__.py

@@ -0,0 +1,3 @@
+from glpi_mcp.server import main
+
+main()

glpi_mcp-0.1.0/src/glpi_mcp/auth.py

@@ -0,0 +1,55 @@
+"""Autenticación Bearer para los transportes http/sse.
+
+Integra el mecanismo de auth nativo del SDK mcp: el servidor envuelve el
+endpoint con RequireAuthMiddleware cuando se le pasa un TokenVerifier, de
+modo que cada petición sin header `Authorization: Bearer` (o con token
+inválido) responde 401 + WWW-Authenticate.
+
+Los tokens se comparan en tiempo constante (secrets.compare_digest) y se
+aceptan varios a la vez para poder rotarlos con solapamiento.
+"""
+
+from __future__ import annotations
+
+import secrets
+
+from mcp.server.auth.provider import AccessToken, TokenVerifier
+from mcp.server.auth.settings import AuthSettings
+
+from glpi_mcp.config import Settings
+
+# Ruta del endpoint streamable-http que se expone con auth.
+MCP_HTTP_PATH = "/mcp"
+
+
+class StaticTokenVerifier(TokenVerifier):
+    """Valida un bearer token contra una lista fija de tokens permitidos."""
+
+    def __init__(self, tokens: tuple[str, ...]) -> None:
+        self._tokens = tokens
+
+    async def verify_token(self, token: str) -> AccessToken | None:
+        if not token:
+            return None
+        for valid in self._tokens:
+            if valid and secrets.compare_digest(token, valid):
+                return AccessToken(token=token, client_id="glpi-mcp", scopes=[])
+        return None
+
+
+def build_auth(settings: Settings) -> tuple[AuthSettings, TokenVerifier] | None:
+    """Construye la configuración de auth del MCPServer.
+
+    Devuelve None si no hay tokens configurados (p. ej. transporte stdio).
+    issuer_url y resource_server_url son campos obligatorios de AuthSettings;
+    aquí alimentan el metadata RFC 9728 y el header WWW-Authenticate.
+    """
+    if not settings.bearer_tokens:
+        return None
+
+    base_url = f"http://{settings.host}:{settings.port}"
+    auth_settings = AuthSettings(
+        issuer_url=base_url,
+        resource_server_url=f"{base_url}{MCP_HTTP_PATH}",
+    )
+    return auth_settings, StaticTokenVerifier(settings.bearer_tokens)