msclabs.html-creator-mcp-server 1.0.0__tar.gz

msclabs_html_creator_mcp_server-1.0.0/.gitignore

@@ -0,0 +1,16 @@
+.venv/
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.ruff_cache/
+*.egg-info/
+build/
+dist/
+.aws-sam/
+samconfig.local.toml
+.DS_Store
+.env
+.env.*
+!.env.example
+*.pem
+*.key

msclabs_html_creator_mcp_server-1.0.0/PKG-INFO

@@ -0,0 +1,39 @@
+Metadata-Version: 2.5
+Name: msclabs.html-creator-mcp-server
+Version: 1.0.0
+Summary: Connects an MCP client over stdio to the html-creator assessment site workflow, hosted by the MSC Labs CoE.
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+
+# msclabs.html-creator-mcp-server
+
+Connects an MCP client to the html-creator assessment site workflow, which runs in the MSC Labs CoE account. The workflow, its
+guardrails and its policy live there; this package is only the stdio bridge.
+
+## Configure
+
+```json
+{
+  "mcpServers": {
+    "msclabs.html-creator": {
+      "command": "uvx",
+      "args": ["msclabs.html-creator-mcp-server@latest"]
+    }
+  }
+}
+```
+
+Set `MCP_API_TOKEN` to the key the CoE issued you, and add `MCP_API_TOKEN` to your client's
+approved environment variables. Without a key the registry answers 401 and nothing works.
+
+## What it does not do
+
+It holds no copy of the workflow, caches nothing and decides nothing. Every step, reference and
+policy check is answered by the hosted server at call time, so what you run is always what the
+CoE published.
+
+| Variable | Default | Purpose |
+| --- | --- | --- |
+| `MCP_API_TOKEN` | — | Your API key. Required. |
+| `MSCLABS_MCP_BASE_URL` | the CoE endpoint | Point at a different deployment. |
+| `MSCLABS_MCP_TIMEOUT` | `120` | Seconds to wait for one call. |

msclabs_html_creator_mcp_server-1.0.0/README.md

@@ -0,0 +1,32 @@
+# msclabs.html-creator-mcp-server
+
+Connects an MCP client to the html-creator assessment site workflow, which runs in the MSC Labs CoE account. The workflow, its
+guardrails and its policy live there; this package is only the stdio bridge.
+
+## Configure
+
+```json
+{
+  "mcpServers": {
+    "msclabs.html-creator": {
+      "command": "uvx",
+      "args": ["msclabs.html-creator-mcp-server@latest"]
+    }
+  }
+}
+```
+
+Set `MCP_API_TOKEN` to the key the CoE issued you, and add `MCP_API_TOKEN` to your client's
+approved environment variables. Without a key the registry answers 401 and nothing works.
+
+## What it does not do
+
+It holds no copy of the workflow, caches nothing and decides nothing. Every step, reference and
+policy check is answered by the hosted server at call time, so what you run is always what the
+CoE published.
+
+| Variable | Default | Purpose |
+| --- | --- | --- |
+| `MCP_API_TOKEN` | — | Your API key. Required. |
+| `MSCLABS_MCP_BASE_URL` | the CoE endpoint | Point at a different deployment. |
+| `MSCLABS_MCP_TIMEOUT` | `120` | Seconds to wait for one call. |

msclabs_html_creator_mcp_server-1.0.0/pyproject.toml

@@ -0,0 +1,19 @@
+[project]
+name = "msclabs.html-creator-mcp-server"
+version = "1.0.0"
+description = "Connects an MCP client over stdio to the html-creator assessment site workflow, hosted by the MSC Labs CoE."
+readme = "README.md"
+requires-python = ">=3.10"
+# The standard library only, on purpose: nothing third-party should ever see the API key, and
+# `uvx` start-up stays the download of one small wheel.
+dependencies = []
+
+[project.scripts]
+"msclabs.html-creator-mcp-server" = "msclabs_html_creator_mcp_server.bridge:main"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/msclabs_html_creator_mcp_server"]

msclabs_html_creator_mcp_server-1.0.0/src/msclabs_html_creator_mcp_server/__init__.py

@@ -0,0 +1,3 @@
+"""stdio bridge to msclabs.html-creator, hosted by the MSC Labs CoE."""
+
+__version__ = "1.0.0"

msclabs_html_creator_mcp_server-1.0.0/src/msclabs_html_creator_mcp_server/__main__.py

@@ -0,0 +1,5 @@
+"""`python -m msclabs_html_creator_mcp_server`, for a client that would rather run a module than a script."""
+
+from .bridge import main
+
+raise SystemExit(main())

msclabs_html_creator_mcp_server-1.0.0/src/msclabs_html_creator_mcp_server/bridge.py

@@ -0,0 +1,130 @@
+"""stdio to the hosted registry, and nothing else.
+
+This is the only piece of the registry that runs on a developer's machine, so it is kept as
+close to empty as a working program can be: it reads a JSON-RPC line from stdin, posts it to
+the hosted server with the developer's API key, and writes the reply back to stdout. There is
+no procedure here, no policy, no cached content and no state — those stay server-side, which is
+the whole reason the registry is hosted rather than installed. A developer can read every line
+of this file and find nothing to tune.
+
+It depends on the standard library alone. That keeps `uvx` start-up to the download of one
+small wheel, and keeps the API key out of reach of any third-party package.
+
+Posting a line and reading the reply is enough because the hosted servers run in stateless JSON
+mode: one request, one response, no session to keep alive and no event stream to multiplex.
+"""
+
+from __future__ import annotations
+
+import json
+import os
+import sys
+import urllib.error
+import urllib.request
+
+#: Filled in per distribution by the generator in `build_clients.py`.
+SERVER_ID = "html-creator"
+SERVER_NAME = "msclabs.html-creator"
+BASE_URL = "https://k98rfq7exb.execute-api.ap-southeast-7.amazonaws.com"
+VERSION = "1.0.0"
+
+TOKEN_VARS = ("MCP_API_TOKEN", "MSCLABS_MCP_TOKEN")
+TIMEOUT = float(os.environ.get("MSCLABS_MCP_TIMEOUT", "120"))
+
+
+def _log(message: str) -> None:
+    """Diagnostics go to stderr. stdout carries the protocol and nothing else."""
+    print(f"[{SERVER_NAME}] {message}", file=sys.stderr, flush=True)
+
+
+def _token() -> str:
+    for name in TOKEN_VARS:
+        value = os.environ.get(name, "").strip()
+        if value:
+            return value
+    _log(
+        "No API key. Set MCP_API_TOKEN to the key the CoE issued you, and add MCP_API_TOKEN to "
+        "your client's approved environment variables. Ask the CoE for a key if you have none."
+    )
+    raise SystemExit(2)
+
+
+def _endpoint() -> str:
+    base = os.environ.get("MSCLABS_MCP_BASE_URL", BASE_URL).rstrip("/")
+    return f"{base}/{SERVER_ID}/mcp"
+
+
+def _error(request_id: object, code: int, message: str) -> str:
+    return json.dumps({"jsonrpc": "2.0", "id": request_id, "error": {"code": code, "message": message}})
+
+
+def _forward(url: str, token: str, line: str, request_id: object) -> str | None:
+    """Posts one message upstream and returns the reply to write to stdout, if any."""
+    request = urllib.request.Request(url, data=line.encode(), method="POST")
+    request.add_header("Content-Type", "application/json")
+    request.add_header("Accept", "application/json, text/event-stream")
+    request.add_header("Authorization", f"Bearer {token}")
+    request.add_header("User-Agent", f"{SERVER_NAME}/{VERSION}")
+    try:
+        with urllib.request.urlopen(request, timeout=TIMEOUT) as response:
+            body = response.read().decode(errors="replace")
+    except urllib.error.HTTPError as exc:
+        detail = exc.read().decode(errors="replace")[:400]
+        if exc.code in (401, 403):
+            # The most common failure by far, and the one whose default message sends people
+            # looking in the wrong place: the client reports an OAuth problem when the real
+            # cause is a key that is missing, mistyped or revoked.
+            _log(
+                f"{exc.code} from the registry: the API key was rejected. Check MCP_API_TOKEN is "
+                "the whole key, that your client is allowed to pass it through, and that the key "
+                "has not been revoked."
+            )
+        else:
+            _log(f"{exc.code} from the registry: {detail}")
+        if request_id is None:
+            return None
+        return _error(request_id, -32000, f"registry returned HTTP {exc.code}")
+    except Exception as exc:  # noqa: BLE001 - any transport failure becomes one JSON-RPC error
+        _log(f"could not reach the registry: {exc}")
+        if request_id is None:
+            return None
+        return _error(request_id, -32000, f"could not reach the registry: {exc}")
+
+    if request_id is None:
+        # A notification gets no reply, and writing one would desynchronise the client.
+        return None
+    # Stateless JSON mode answers with a JSON object; an SSE frame is still accepted in case a
+    # future deployment negotiates one.
+    for candidate in body.splitlines():
+        candidate = candidate.removeprefix("data:").strip()
+        if candidate.startswith("{"):
+            return candidate
+    return _error(request_id, -32000, "the registry returned an empty response")
+
+
+def main() -> int:
+    token = _token()
+    url = _endpoint()
+    _log(f"bridging stdio to {url}")
+
+    for line in sys.stdin:
+        line = line.strip()
+        if not line:
+            continue
+        try:
+            message = json.loads(line)
+        except json.JSONDecodeError:
+            sys.stdout.write(_error(None, -32700, "parse error") + "\n")
+            sys.stdout.flush()
+            continue
+
+        request_id = message.get("id") if isinstance(message, dict) else None
+        reply = _forward(url, token, line, request_id)
+        if reply is not None:
+            sys.stdout.write(reply + "\n")
+            sys.stdout.flush()
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())