mcp-server-appwrite 2.2.3__tar.gz → 2.3.0__tar.gz

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/.env.example

@@ -32,6 +32,11 @@ PORT=8000
 # Generate a key with `openssl rand -base64 32`.
 # MCP_EVENTS_SEALING_KEYS=k1:<base64 key>
 
+# stdio only. The project environment (Appwrite Cloud) to act in, with
+# APPWRITE_PROJECT_ID set to the ID of the project it belongs to. Sent as
+# X-Appwrite-Environment on every request.
+# APPWRITE_ENVIRONMENT_ID=staging
+
 # Integration tests only (not used by the running server).
 # The live integration suite authenticates to the Appwrite API with an API key
 # and runs against APPWRITE_PROJECT_ID (above).

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/AGENTS.md

@@ -13,7 +13,8 @@ operator-style tools, supporting two deployments from one codebase:
   Appwrite REST API. Served primarily at `mcp.appwrite.io/`, with `/mcp` also
   available as a conventional alias.
 - **Self-hosted (`stdio`):** runs locally and authenticates with a project API
-  key (`APPWRITE_PROJECT_ID`, `APPWRITE_API_KEY`, `APPWRITE_ENDPOINT`).
+  key (`APPWRITE_PROJECT_ID`, `APPWRITE_API_KEY`, `APPWRITE_ENDPOINT`, and
+  optionally `APPWRITE_ENVIRONMENT_ID` for a project environment).
 
 Python ≥ 3.12, packaged with `hatchling`, managed with `uv`.
 
@@ -31,7 +32,8 @@ Source lives in `src/mcp_server_appwrite/`:
 | `tool_manager.py` | Registry of all services and their generated tools. |
 | `operator.py` | The compact "operator" surface — `appwrite_search_tools`, `appwrite_call_tool` / `appwrite_call_write_tool`, tool annotations, result/resource storage, write confirmation. |
 | `instructions.py` | `serverInfo.description` and the server instructions sent on initialize, rendered from `assets/instructions.json` (a description plus ordered, transport/docs-conditional Markdown sections). Edit the JSON to change the wording; keep the `pyproject.toml` description in sync (a test enforces it). |
-| `context.py` | `appwrite_get_context` — workspace summary (project, services, account/org for OAuth). |
+| `context.py` | `appwrite_get_context` — workspace summary (project, services, account/org for OAuth, a focused project's environments). |
+| `headers.py` | Per-call request headers: `X-Appwrite-Environment` (a project environment, next to the project's ID) and `X-Appwrite-Reason` (why a write is made, validated and percent-encoded as Appwrite expects). |
 | `docs_search.py` | In-process semantic docs search (`appwrite_search_docs`) over a prebuilt index. |
 | `docs_source.py` | Fetches the published docs (`/docs/llms.txt` + per-page `.md` exports on appwrite.io) and chunks them for the index build. |
 | `docs_index.py` | Writes the index artifact deterministically and atomically: page and chunk hashes, reuse of cached chunk vectors, build lock, and the added/changed/removed page report. |
@@ -59,8 +61,9 @@ reads, `appwrite_call_write_tool` for everything else, and optionally
 `appwrite_search_docs`), while the full OAuth Appwrite catalog (41
 services) stays internal and is searched at runtime. API-key stdio uses a filtered
 27-service catalog. Mutating hidden tools run only through
-`appwrite_call_write_tool` and require `confirm_write=true`, so each exposed
-tool's annotations match every call it accepts. Large outputs are stored as MCP
+`appwrite_call_write_tool` and require `confirm_write=true` and a one-line
+`reason` (sent as `X-Appwrite-Reason`, recorded on the audit log), so each
+exposed tool's annotations match every call it accepts. Large outputs are stored as MCP
 resources and returned as a preview + resource URI.
 
 With MCP Apps on (`flags.APPS`), hosts that render them also see

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: mcp-server-appwrite
-Version: 2.2.3
+Version: 2.3.0
 Summary: Build and deploy application backends. Add authentication, PostgreSQL/MySQL databases, vector databases, storage, serverless functions, realtime, messaging, hosting, domains, CDN and firewall.
 License-File: LICENSE
 Requires-Python: >=3.12
@@ -339,6 +339,17 @@ A browser window opens to authenticate on first connect.
 
 </details>
 
+## Reasons and environments
+
+Every write the agent makes carries a short `reason` (why it made the change).
+Appwrite records it on the project's audit log, so you can review what your
+agent changed, and why, in the project's **Activity** tab.
+
+On Appwrite Cloud, the agent can act in a project's environments (for example
+`staging`): `appwrite_get_context` lists them, and each call takes the
+environment's ID as `environment_id` next to the project's `project_id`. See
+[Tool surface](docs/tool-surface.md#behavior).
+
 ## Self-hosted Appwrite
 
 Running your own Appwrite instance? Run the MCP server locally over `stdio` and

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/README.md

@@ -307,6 +307,17 @@ A browser window opens to authenticate on first connect.
 
 </details>
 
+## Reasons and environments
+
+Every write the agent makes carries a short `reason` (why it made the change).
+Appwrite records it on the project's audit log, so you can review what your
+agent changed, and why, in the project's **Activity** tab.
+
+On Appwrite Cloud, the agent can act in a project's environments (for example
+`staging`): `appwrite_get_context` lists them, and each call takes the
+environment's ID as `environment_id` next to the project's `project_id`. See
+[Tool surface](docs/tool-surface.md#behavior).
+
 ## Self-hosted Appwrite
 
 Running your own Appwrite instance? Run the MCP server locally over `stdio` and

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/docs/apps.md

@@ -10,7 +10,7 @@ interactive view inside the chat. This server offers one view,
 | Name | Seen by | What it does |
 | --- | --- | --- |
 | `appwrite_show` | model and view | `view=table`: a page of a table's rows, newest first, with `cursor` paging. `view=deployment`: a Function or Site deployment (the latest unless `deployment_id` is given) with the last 200 build log lines. `view=executions`: a Function's executions, newest first, optionally one `status`, with `cursor` paging; `execution_id` also opens one with its request and response headers, status code, duration, and the last 200 lines of logs and of errors. `view=files`: a Storage bucket's files, newest first, with `search` (file name) and `cursor` paging; `file_id` also opens one. `view=users`: the project's Auth users, newest first, with `search` (name, email, phone or ID) and `cursor` paging; `user_id` also opens one with their ten newest sessions. `view=usage`: a project's requests, bandwidth (in and out) and executions per interval over `range` (`24h` hourly, `7d` or `30d` daily), with totals and the newest snapshot of its users, resource counts and storage. Read-only. |
-| `appwrite_view_write` | view only (`visibility: ["app"]`) | Runs one of `tables_db_update_row`, `functions_update_deployment_status`, `sites_update_deployment_status`, `users_update_status`, `users_update_labels`, `users_update_email_verification`, only with `confirm_write=true`. |
+| `appwrite_view_write` | view only (`visibility: ["app"]`) | Runs one of `tables_db_update_row`, `functions_update_deployment_status`, `sites_update_deployment_status`, `users_update_status`, `users_update_labels`, `users_update_email_verification`, only with `confirm_write=true`. A `reason` is optional here (a person confirmed the change in the view) and sent as `X-Appwrite-Reason` when given. |
 | `ui://appwrite/view` | host | One HTML document (`assets/view.html`) that renders every view. |
 
 `appwrite_show` returns a text summary in `content`, which is what the model and

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/docs/self-hosted.md

@@ -43,6 +43,31 @@ For a local Docker Appwrite instance the endpoint is typically
 `http://localhost:9501/v1` (HTTP, not HTTPS). The value must be the API base
 (`…/v1`), not the Console URL.
 
+## Project environments
+
+On Appwrite Cloud, a project can have environments (for example `staging`).
+To point a local server at one, keep `APPWRITE_PROJECT_ID` set to the ID of
+the project it belongs to and add the environment's ID:
+
+```bash
+APPWRITE_PROJECT_ID=<YOUR_PROJECT_ID> \
+APPWRITE_ENVIRONMENT_ID=staging \
+APPWRITE_API_KEY=<YOUR_API_KEY> \
+uvx mcp-server-appwrite
+```
+
+Every request then carries `X-Appwrite-Environment: staging` next to the
+project's ID. The environment is fixed for the server's lifetime: a tool call
+that names another `environment_id` is refused rather than run in this one.
+Run one server per environment you want the agent to reach.
+
+## Reasons on writes
+
+Every write the agent makes through `appwrite_call_write_tool` carries a
+one-line `reason`, which Appwrite records on the project's audit log
+(`X-Appwrite-Reason`). Self-hosted Appwrite versions that predate the header
+ignore it.
+
 ## Connect your client
 
 <details open>

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/docs/tool-surface.md

@@ -35,10 +35,10 @@ flowchart LR
 
 | Tool | What it does |
 | --- | --- |
-| `appwrite_get_context` | Workspace summary. API key → project + readable service totals/samples. OAuth → also account, organization, discovered projects. |
+| `appwrite_get_context` | Workspace summary. API key → project + readable service totals/samples. OAuth → also account, organization, discovered projects. A project in focus lists its environments; `environment_id` summarizes one of them instead. |
 | `appwrite_search_tools` | Searches the internal catalog at runtime. |
 | `appwrite_call_tool` | Runs a read catalog tool (`list`, `get`). |
-| `appwrite_call_write_tool` | Runs every other catalog tool (create, update, delete, upsert, unknown verbs). Requires `confirm_write=true`. |
+| `appwrite_call_write_tool` | Runs every other catalog tool (create, update, delete, upsert, unknown verbs). Requires `confirm_write=true` and a `reason`. |
 | `appwrite_search_docs` | Semantic search over Appwrite docs (conditional — see above). |
 
 ## Behavior
@@ -50,7 +50,21 @@ flowchart LR
   idempotent, `appwrite_call_write_tool` is destructive. Each search result
   names its `call_tool`, and calling a tool through the other one returns an
   error naming the right one.
-- **Writes** require `confirm_write=true`.
+- **Writes** require `confirm_write=true` and a `reason`: one line, at most 256
+  characters, saying why the change is made. It is sent as `X-Appwrite-Reason`
+  (percent-encoded like `encodeURIComponent`), and Appwrite records it on the
+  project's audit log, shown in the Activity tab next to the change. A reason
+  Appwrite would refuse (blank, too long, or with line breaks or other control
+  characters) is refused before any request is made. Reads send no reason.
+- **Environments**: `appwrite_call_tool`, `appwrite_call_write_tool`,
+  `appwrite_get_context` and `appwrite_show` take an optional `environment_id`
+  to act in one of a project's environments (Appwrite Cloud). It is sent as
+  `X-Appwrite-Environment` together with the project's own ID in
+  `X-Appwrite-Project`, since an environment's project ID is internal, and
+  needs `project_id` on the hosted server. `appwrite_get_context` with
+  `project_id` lists the project's environments (with the `project.read` scope;
+  self-hosted Appwrite has none). Over stdio the environment is fixed by
+  `APPWRITE_ENVIRONMENT_ID`, and a call naming another one is refused.
 - **Annotations**: every exposed tool sets a `title` and all four hints
   (`readOnlyHint`, `destructiveHint`, `idempotentHint`, `openWorldHint`)
   explicitly, as the Anthropic and OpenAI connector directories require.

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/src/mcp_server_appwrite/apps/views.py

@@ -35,7 +35,12 @@ from . import executions, files, protocol, resource, usage, users
 
 Run = Callable[[dict[str, Any], bool], list[Any]]
 """Runs a hidden catalog tool from raw call arguments (``tool_name``,
-``arguments``, ``project_id``, ``confirm_write``), as a write or a read."""
+``arguments``, ``project_id``, ``environment_id``, ``confirm_write``,
+``reason``), as a write or a read."""
+
+Read = Callable[[str, Any, dict[str, Any]], dict[str, Any]]
+"""Reads one catalog tool's JSON result in the project (and environment) a
+view shows: ``(tool_name, project_id, arguments)``."""
 
 Handler = Callable[[dict[str, Any]], types.CallToolResult]
 
@@ -100,26 +105,39 @@ class Views:
 
     def _show(self, arguments: dict[str, Any]) -> types.CallToolResult:
         view = arguments.get("view")
+        # A view shows one project, or one of its environments, and every read
+        # it makes stays there.
+        environment_id = arguments.get("environment_id") or None
+
+        def read(tool_name: str, project_id: Any, target: dict[str, Any]) -> Any:
+            return self._read(tool_name, project_id, target, environment_id)
+
+        def preview(project_id: Any, target: dict[str, Any]) -> str | None:
+            return self._preview(project_id, target, environment_id)
+
         if view == View.TABLE:
-            data = self._table(arguments)
+            data = self._table(read, arguments)
             text = _table_summary(data)
         elif view == View.DEPLOYMENT:
-            data = self._deployment(arguments)
+            data = self._deployment(read, arguments)
             text = _deployment_summary(data)
         elif view == View.EXECUTIONS:
-            data = executions.read(self._read, arguments)
+            data = executions.read(read, arguments)
             text = executions.summary(data)
         elif view == View.FILES:
-            data = files.read(self._read, self._preview, arguments)
+            data = files.read(read, preview, arguments)
             text = files.summary(data)
         elif view == View.USERS:
-            data = users.read(self._read, arguments)
+            data = users.read(read, arguments)
             text = users.summary(data)
         elif view == View.USAGE:
-            data = usage.read(self._read, arguments)
+            data = usage.read(read, arguments)
             text = usage.summary(data)
         else:
             raise ValueError(f"view must be one of: {', '.join(View)}. Got {view!r}.")
+        if environment_id:
+            # The view sends it back on every call it makes, as it does projectId.
+            data["environmentId"] = environment_id
         return types.CallToolResult(
             content=[types.TextContent(type="text", text=text)],
             structured_content=data,
@@ -160,13 +178,18 @@ class Views:
         )
 
     def _read(
-        self, tool_name: str, project_id: Any, arguments: dict[str, Any]
+        self,
+        tool_name: str,
+        project_id: Any,
+        arguments: dict[str, Any],
+        environment_id: str | None = None,
     ) -> dict[str, Any]:
         result = _json(
             self._run(
                 {
                     "tool_name": tool_name,
                     "project_id": project_id,
+                    "environment_id": environment_id,
                     "arguments": arguments,
                 },
                 False,
@@ -176,7 +199,12 @@ class Views:
             raise ValueError(f"{tool_name} returned an unexpected response.")
         return result
 
-    def _preview(self, project_id: Any, arguments: dict[str, Any]) -> str | None:
+    def _preview(
+        self,
+        project_id: Any,
+        arguments: dict[str, Any],
+        environment_id: str | None = None,
+    ) -> str | None:
         """A file preview as a data URI. A file Appwrite cannot transform
         shows without one rather than failing the page."""
         try:
@@ -184,6 +212,7 @@ class Views:
                 {
                     "tool_name": "storage_get_file_preview",
                     "project_id": project_id,
+                    "environment_id": environment_id,
                     "arguments": arguments,
                 },
                 False,
@@ -195,21 +224,19 @@ class Views:
                 return f"data:{item.mime_type};base64,{item.data}"
         return None
 
-    def _table(self, arguments: dict[str, Any]) -> dict[str, Any]:
+    def _table(self, read: Read, arguments: dict[str, Any]) -> dict[str, Any]:
         project_id = arguments.get("project_id")
         database_id = _required(arguments, "database_id")
         table_id = _required(arguments, "table_id")
         cursor = arguments.get("cursor")
         target = {"database_id": database_id, "table_id": table_id}
 
-        table = self._read("tables_db_get_table", project_id, target)
+        table = read("tables_db_get_table", project_id, target)
         # One row past the page tells whether another page follows.
         queries = [Query.order_desc("$createdAt"), Query.limit(PAGE_SIZE + 1)]
         if cursor:
             queries.append(Query.cursor_after(str(cursor)))
-        page = self._read(
-            "tables_db_list_rows", project_id, {**target, "queries": queries}
-        )
+        page = read("tables_db_list_rows", project_id, {**target, "queries": queries})
         rows = [_row(each) for each in page.get("rows") or []]
         more = len(rows) > PAGE_SIZE
         rows = rows[:PAGE_SIZE]
@@ -231,7 +258,7 @@ class Views:
             "next": rows[-1].get("$id") if more else None,
         }
 
-    def _deployment(self, arguments: dict[str, Any]) -> dict[str, Any]:
+    def _deployment(self, read: Read, arguments: dict[str, Any]) -> dict[str, Any]:
         project_id = arguments.get("project_id")
         function_id = arguments.get("function_id")
         site_id = arguments.get("site_id")
@@ -247,13 +274,13 @@ class Views:
 
         deployment_id = arguments.get("deployment_id")
         if deployment_id:
-            deployment = self._read(
+            deployment = read(
                 f"{service}_get_deployment",
                 project_id,
                 {**target, "deployment_id": deployment_id},
             )
         else:
-            latest = self._read(
+            latest = read(
                 f"{service}_list_deployments",
                 project_id,
                 {
@@ -321,6 +348,14 @@ def _show_tool() -> types.Tool:
                     "type": "string",
                     "description": "Appwrite project ID the data lives in.",
                 },
+                "environment_id": {
+                    "type": "string",
+                    "description": (
+                        "ID of the project environment (Appwrite Cloud) the data "
+                        "lives in, with project_id set to the project it belongs "
+                        "to. Omit for the project itself."
+                    ),
+                },
                 "database_id": {
                     "type": "string",
                     "description": "view=table: the TablesDB database ID.",
@@ -424,7 +459,9 @@ def _write_tool() -> types.Tool:
                 "tool_name": {"type": "string", "enum": list(WRITES)},
                 "arguments": {"type": "object"},
                 "project_id": {"type": "string"},
+                "environment_id": {"type": "string"},
                 "confirm_write": {"type": "boolean"},
+                "reason": {"type": "string"},
             },
             "required": ["tool_name", "arguments", "confirm_write"],
             "additionalProperties": False,

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/src/mcp_server_appwrite/assets/instructions.json

@@ -80,7 +80,8 @@
       "lines": [
         "Using these tools",
         "- Use appwrite_get_context to understand the current connection and available project resources, then use appwrite_search_tools to find the operation you need.",
-        "- Run read operations (list, get) with appwrite_call_tool. Run every other operation (create, update, delete, upsert) with appwrite_call_write_tool and confirm_write=true; each search result names its call_tool."
+        "- Run read operations (list, get) with appwrite_call_tool. Run every other operation (create, update, delete, upsert) with appwrite_call_write_tool and confirm_write=true; each search result names its call_tool.",
+        "- Give every write a reason: one line (max 256 characters) saying why you are making the change, such as \"Add the orders table the checkout flow reads\". Appwrite records it on the project's audit log, where the user reviews it in the Activity tab next to the change."
       ]
     },
     {
@@ -92,7 +93,7 @@
     {
       "transports": ["stdio"],
       "lines": [
-        "- This local connection uses the API key, endpoint, and project configured in the server environment. Appwrite API calls target that configured APPWRITE_PROJECT_ID by default.",
+        "- This local connection uses the API key, endpoint, and project configured in the server environment. Appwrite API calls target that configured APPWRITE_PROJECT_ID by default, and act in the project environment APPWRITE_ENVIRONMENT_ID names when it is set.",
         "- Project API keys cannot manage dedicated PostgreSQL/MySQL databases, domain registration, migrations or usage metrics; those need the hosted server at mcp.appwrite.io.",
         "- Large results are stored as resources; read the URI returned by the tool."
       ]
@@ -103,6 +104,7 @@
         "- You authenticate against the Appwrite console, which can list your organizations and projects but stores no project data itself.",
         "- Project-scoped tools (every database type, users, teams, storage, functions, sites, messaging, firewall, advisor) need a target project: use appwrite_get_context first, then pass the selected project id as project_id to appwrite_call_tool or appwrite_call_write_tool.",
         "- Organization-scoped console tools (e.g. creating a project or managing domains) need organization_id.",
+        "- A project can have environments, such as staging, each with its own resources and users. appwrite_get_context with project_id lists them. To act in one, pass its ID as environment_id together with the project's ID as project_id; without environment_id, calls act in the project itself.",
         "- File/image uploads: pass a public URL as the file argument (e.g. {\"url\": \"https://...\"}) so the server downloads it directly; for very small files you may pass inline base64 ({\"filename\": ..., \"content\": ..., \"encoding\": \"base64\"}).",
         "- Hosted HTTP returns tool results inline, including images and other binary payloads."
       ]

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/src/mcp_server_appwrite/assets/view.html

@@ -576,6 +576,7 @@ details.headers td { height: 32px; max-width: none; white-space: normal; overflo
   function showArgs(extra) {
     const args = { view: data.view };
     if (data.projectId) args.project_id = data.projectId;
+    if (data.environmentId) args.environment_id = data.environmentId;
     return { ...args, ...extra };
   }
 
@@ -728,6 +729,7 @@ details.headers td { height: 32px; max-width: none; white-space: normal; overflo
       const result = await callTool(WRITE_TOOL, {
         tool_name: "tables_db_update_row",
         project_id: data.projectId || undefined,
+        environment_id: data.environmentId || undefined,
         confirm_write: true,
         arguments: { database_id: data.databaseId, table_id: data.tableId, row_id: row.$id, data: values },
       });
@@ -1320,7 +1322,8 @@ details.headers td { height: 32px; max-width: none; white-space: normal; overflo
     render();
     try {
       const result = await callTool(WRITE_TOOL, {
-        tool_name: change.tool, project_id: data.projectId || undefined, confirm_write: true, arguments: change.arguments,
+        tool_name: change.tool, project_id: data.projectId || undefined, environment_id: data.environmentId || undefined,
+        confirm_write: true, arguments: change.arguments,
       });
       const updated = { ...user, ...(result.structuredContent || {}) };
       data.user = updated;
@@ -1515,6 +1518,7 @@ details.headers td { height: 32px; max-width: none; white-space: normal; overflo
       await callTool(WRITE_TOOL, {
         tool_name: data.kind === "site" ? "sites_update_deployment_status" : "functions_update_deployment_status",
         project_id: data.projectId || undefined,
+        environment_id: data.environmentId || undefined,
         confirm_write: true,
         arguments: { [data.kind === "site" ? "site_id" : "function_id"]: data.resourceId, deployment_id: data.deployment.id },
       });

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/src/mcp_server_appwrite/context.py

@@ -11,6 +11,7 @@ from appwrite_console.models.user import User
 from appwrite_console.query import Query
 
 from .constants import REDACTED_KEYS, SERVICE_PROBES
+from .headers import environment, scoped
 
 ContextClientFactory = Callable[[str | None, str | None], Client]
 DEFAULT_SERVICE_PROJECT_LIMIT = 5
@@ -25,10 +26,17 @@ def get_appwrite_context(
     client_factory: ContextClientFactory | None = None,
     project_id: str | None = None,
     organization_id: str | None = None,
+    environment_id: str | None = None,
     include_services: bool = True,
     sample_limit: int = 5,
     service_detail: str = DEFAULT_SERVICE_DETAIL,
 ) -> dict[str, Any]:
+    """Summarize what the connection can reach.
+
+    A project in focus (``project_id``, or the API key's project) lists its
+    environments, so the model can pass one as ``environment_id``. With
+    ``environment_id`` (or ``APPWRITE_ENVIRONMENT_ID`` on the API-key client)
+    the project is summarized as that environment instead."""
     sample_limit = _normalize_sample_limit(sample_limit)
     service_detail = _normalize_service_detail(service_detail)
     client_factory = client_factory or (
@@ -50,15 +58,22 @@ def get_appwrite_context(
         project = _get_current_project(project_client, configured_project_id)
         if project is None:
             project = {"$id": configured_project_id}
-        context["projects"] = [
-            _project_context(
-                project,
-                project_client,
-                include_services=include_services,
-                sample_limit=sample_limit,
-                service_detail=service_detail,
-            )
-        ]
+        summary = _project_context(
+            project,
+            project_client,
+            include_services=include_services,
+            sample_limit=sample_limit,
+            service_detail=service_detail,
+        )
+        acting_in = environment(project_client)
+        if acting_in:
+            summary["environmentId"] = acting_in
+        else:
+            # Listed only from the project itself: an environment has none.
+            environments = _list_environments(project_client)
+            if environments is not None:
+                summary["environments"] = environments
+        context["projects"] = [summary]
         context["serviceSummary"] = _service_summary_metadata(
             include_services=include_services,
             effective_include_services=include_services,
@@ -137,18 +152,36 @@ def get_appwrite_context(
             if needs_project_client
             else console_client
         )
+        environments = None
+        requested = project_id is not None and discovered_project_id == project_id
+        if project_id and requested:
+            # Environments are listed through the project they belong to, and
+            # only for the project asked about: a request per discovered
+            # project would multiply with the account's projects.
+            parent_client = (
+                project_client
+                if needs_project_client
+                else client_factory(project_id, project_organization_id)
+            )
+            environments = _list_environments(parent_client)
+            if environment_id:
+                project_client = scoped(parent_client, environment_id=environment_id)
+                project = _get_current_project(project_client, project_id) or project
         if project_id and project == {"$id": project_id}:
             project = _get_current_project(project_client, project_id) or project
-        projects.append(
-            _project_context(
-                project,
-                project_client,
-                organization_id=project_organization_id,
-                include_services=effective_include_services,
-                sample_limit=sample_limit,
-                service_detail=service_detail,
-            )
+        summary = _project_context(
+            project,
+            project_client,
+            organization_id=project_organization_id,
+            include_services=effective_include_services,
+            sample_limit=sample_limit,
+            service_detail=service_detail,
         )
+        if requested and environment_id:
+            summary["environmentId"] = environment_id
+        if environments is not None:
+            summary["environments"] = environments
+        projects.append(summary)
 
     context["projects"] = projects
     context["serviceSummary"] = _service_summary_metadata(
@@ -202,6 +235,28 @@ def _get_current_project(client: Client, project_id: str) -> dict[str, Any] | No
     return {"$id": project_id, "error": result.error} if not result.ok else None
 
 
+def _list_environments(client: Client) -> list[dict[str, Any]] | None:
+    """The environments of ``client``'s project, by the ID passed as
+    ``environment_id``. ``None`` when they cannot be listed: environments are
+    an Appwrite Cloud feature (self-hosted Appwrite has no such route), and
+    listing them needs the ``project.read`` scope."""
+    result = _safe_call(client, "get", "/project/environments")
+    if not result.ok or not isinstance(result.value, dict):
+        return None
+    items = result.value.get("environments")
+    if not isinstance(items, list):
+        return None
+    return [
+        {
+            key: item[key]
+            for key in ("$id", "name")
+            if isinstance(item.get(key), str) and item[key]
+        }
+        for item in items
+        if isinstance(item, dict) and isinstance(item.get("$id"), str)
+    ]
+
+
 def _accessible_resource_ids(client: Client, resource: str) -> list[dict[str, Any]]:
     """Fallback discovery via the OAuth2 accessible-resources endpoints
     (``/oauth2/<project>/organizations`` / ``/oauth2/<project>/projects``).

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/src/mcp_server_appwrite/data/docs_index.npz

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
-name: mcp_server_appwrite-2.2.3/src/mcp_server_appwrite/data/docs_index.npz
+name: mcp_server_appwrite-2.3.0/src/mcp_server_appwrite/data/docs_index.npz
 size: 35737872 bytes
 sha256: 53ab05a0732fc87657755ce579c09867da3b176244ce599ad1fdaecdcd112ac7

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/src/mcp_server_appwrite/error_classification.py

@@ -40,6 +40,13 @@ class WriteConfirmationRequired(RuntimeError):
     """A mutating hidden tool was called without explicit confirmation."""
 
 
+class WriteReasonRequired(WriteConfirmationRequired):
+    """A mutating hidden tool was called without a usable ``reason``.
+
+    Like a missing ``confirm_write``, this is the model leaving out something a
+    write must carry, so it is classified and monitored the same way."""
+
+
 class WrongCallTool(ValueError):
     """A hidden tool was called through the public tool for the other
     classification: a mutation through the read-only call tool, or a read

{mcp_server_appwrite-2.2.3 → mcp_server_appwrite-2.3.0}/src/mcp_server_appwrite/error_monitoring.py

@@ -133,6 +133,7 @@ def capture_appwrite_exception(
     classification: str,
     project_id: str | None = None,
     organization_id: str | None = None,
+    environment_id: str | None = None,
 ) -> bool:
     """Capture publishable Appwrite API failures.
 
@@ -147,6 +148,7 @@ def capture_appwrite_exception(
         "appwrite.error_type": getattr(exc, "type", None),
         "appwrite.project_id": project_id,
         "appwrite.organization_id": organization_id,
+        "appwrite.environment_id": environment_id,
     }
     return capture_exception(
         exc,
@@ -160,6 +162,7 @@ def capture_appwrite_exception(
                 "error_type": getattr(exc, "type", None),
                 "project_id": project_id,
                 "organization_id": organization_id,
+                "environment_id": environment_id,
             },
         },
         transaction=f"appwrite.{service or 'unknown'}.{action or 'unknown'}",