rootly-mcp-server 2.2.11__tar.gz → 2.2.13__tar.gz

{rootly_mcp_server-2.2.11 → rootly_mcp_server-2.2.13}/.github/workflows/ci.yml

@@ -77,7 +77,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: matrix.python-version == '3.12'
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5
         with:
           file: ./coverage.xml
           flags: unittests

{rootly_mcp_server-2.2.11 → rootly_mcp_server-2.2.13}/CHANGELOG.md

@@ -7,9 +7,143 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.2.13] - 2026-03-26
+
+### Changed
+- Simplified the README quick start and added clearer hosted remote configuration examples for HTTP streamable, SSE, and Code Mode
+- Upgraded `fastmcp[code-mode]` to `3.1.1` and refreshed CI dependencies
+
+### Fixed
+- Validate hosted `Authorization` headers earlier and log auth header state to make malformed token issues easier to diagnose
+- Hardened Code Mode `execute` by normalizing common client-prefixed tool names and returning clearer parser, import, and runtime errors
+
+### Security
+- Patched vulnerable `authlib` and `requests` dependencies
+
+## [2.2.12] - 2026-03-18
+
+### Added
+- Added MCP-level pagination to `list_shifts`, including pagination metadata and validation for invalid page numbers
+
+### Changed
+- Slimmed heavy collection payloads for generated tools such as `listUsers`, `listServices`, and `listShifts`
+- Clarified Code Mode tool discovery and pagination guidance for paginated calls
+- Added and simplified Claude Code setup examples in the documentation
+
+### Fixed
+- Trimmed `get_shift_incidents` results to avoid oversized responses
+- Preserved incidents that started before a shift but were resolved during it
+
+## [2.2.11] - 2026-03-16
+
+### Added
+- Added `updateIncident` for scoped incident updates in the PIR lifecycle
+- Added `getIncident` and incident readback support for PIR verification
+
+### Changed
+- Updated `search_incidents` to include retrospective progress status in readback results
+- Scoped GitHub Actions workflow permissions more tightly
+
+### Fixed
+- Made Code Mode `execute` compatible with older Monty runtimes
+- Patched vulnerable `black` and `PyJWT` dependencies
+- Fixed CI usage of `actions/upload-artifact`
+
+## [2.2.10] - 2026-03-12
+
+### Added
+- Added a hosted Code Mode endpoint and enabled Code Mode by default in hosted dual-mode deployments
+- Added streamable HTTP and SSE dual-transport support in a single hosted process
+- Added screenshot coverage, escalation APIs, and tighter allowlist path matching
+- Added structured tool-usage telemetry for Datadog, including transport-aware metrics and hashed identity context
+- Added Gemini CLI extension support and editor-specific setup documentation
+- Added branch-based staging deployment pipeline support
+
+### Changed
+- Reorganized Quick Start documentation by editor and added Rootly CLI guidance
+- Refreshed vulnerable runtime dependencies and normalized log severity handling
+
+### Fixed
+- Restored legacy server parity while preserving compatibility with FastMCP 3.x `list_tools()` and `send()` behavior
+- Forwarded auth tokens correctly in hosted SSE and streamable HTTP paths
+- Reduced hosted auth noise, improved graceful shutdown behavior, and preserved error context across multi-call tools
+- Fixed non-string incident severity handling in `shift_incidents`
+
+## [2.2.9] - 2026-02-24
+
+### Fixed
+- Added an auth header event hook for hosted mode so downstream API requests consistently carry the caller's bearer token
+
+## [2.2.8] - 2026-02-24
+
+### Added
+- Added filter parameters to `listAlerts`
+- Added transport and hosting mode to the Rootly `User-Agent`
+
+### Security
+- Hardened the Dockerfile and added `.dockerignore`
+
+## [2.2.6] - 2026-02-19
+
+### Added
+- Added `get_alert_by_short_id` so alerts can be fetched by short ID or full alert URL
+
+### Changed
+- Reduced alert API response payload size significantly and added User-Agent tracking
+
+### Fixed
+- Included alert `url` and `created_at` in alert field selection
+- Removed the `timeout` parameter from `FastMCP.from_openapi()` for FastMCP 3.0 compatibility
+
+## [2.2.4] - 2026-02-18
+
+### Added
+- Added MCP registry metadata
+
+### Fixed
+- Enforced JSON:API headers through an `httpx` event hook to resolve hosted `415` errors more reliably
+
+## [2.2.3] - 2026-02-05
+
+### Added
+- Added debug logging for HTTP requests and headers
+
+## [2.2.2] - 2026-02-05
+
+### Fixed
+- Removed existing content-type headers case-insensitively before setting JSON:API headers
+
+## [2.2.1] - 2026-02-05
+
+### Fixed
+- Always set JSON:API headers regardless of request kwargs to prevent hosted `415` failures
+
+## [2.2.0] - 2026-02-05
+
+### Changed
+- Replaced `burnout` terminology with `health risk` across the On-Call Health feature set
+
+## [2.1.4] - 2026-02-05
+
+### Fixed
+- Resolved hosted MCP `415 Unsupported Media Type` errors
+
+## [2.1.3] - 2026-02-05
+
+### Added
+- Added the On-Call Health integration for burnout-risk detection
+- Added unit tests for the On-Call Health integration
+
+### Changed
+- Streamlined the README and moved development setup details into `CONTRIBUTING.md`
+
+### Fixed
+- Added proper type hints to `och_client.py`
+
+## [2.1.2] - 2026-02-05
+
 ### Added
-- Gemini CLI extension support via `gemini-extension.json` manifest
-- Gemini CLI installation instructions in README
+- Added on-call AI workflow tools
 
 ## [2.1.1] - 2026-02-04
 

{rootly_mcp_server-2.2.11 → rootly_mcp_server-2.2.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: rootly-mcp-server
-Version: 2.2.11
+Version: 2.2.13
 Summary: Secure Model Context Protocol server for Rootly APIs with AI SRE capabilities, comprehensive error handling, and input validation
 Project-URL: Homepage, https://github.com/Rootly-AI-Labs/Rootly-MCP-server
 Project-URL: Issues, https://github.com/Rootly-AI-Labs/Rootly-MCP-server/issues
@@ -21,12 +21,13 @@ Classifier: Topic :: Software Development :: Build Tools
 Classifier: Topic :: System :: Monitoring
 Classifier: Topic :: System :: Systems Administration
 Requires-Python: >=3.12
+Requires-Dist: authlib>=1.6.9
 Requires-Dist: brotli>=1.2.0
-Requires-Dist: fastmcp[code-mode]==3.1.0
+Requires-Dist: fastmcp[code-mode]==3.1.1
 Requires-Dist: httpx==0.28.1
 Requires-Dist: numpy>=1.24.0
 Requires-Dist: pydantic==2.12.5
-Requires-Dist: requests==2.32.5
+Requires-Dist: requests==2.33.0
 Requires-Dist: scikit-learn>=1.3.0
 Provides-Extra: dev
 Requires-Dist: bandit>=1.7.0; extra == 'dev'
@@ -45,15 +46,75 @@ Description-Content-Type: text/markdown
 [![Python Version](https://img.shields.io/pypi/pyversions/rootly-mcp-server.svg)](https://pypi.org/project/rootly-mcp-server/)
 [![Install MCP Server](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/install-mcp?name=rootly&config=eyJ1cmwiOiJodHRwczovL21jcC5yb290bHkuY29tL3NzZSIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciA8WU9VUl9ST09UTFlfQVBJX1RPS0VOPiJ9fQ==)
 
-An MCP server for the [Rootly API](https://docs.rootly.com/api-reference/overview) that integrates seamlessly with MCP-compatible editors like Cursor, Windsurf, and Claude. Resolve production incidents in under a minute without leaving your IDE.
+An MCP server for the [Rootly API](https://docs.rootly.com/api-reference/overview) for Cursor, Windsurf, Claude, and other MCP clients.
 
 ![Demo GIF](https://raw.githubusercontent.com/Rootly-AI-Labs/Rootly-MCP-server/refs/heads/main/rootly-mcp-server-demo.gif)
 
 ## Quick Start
 
-The fastest way to get started is to connect to our hosted MCP server — no installation required.
+Use the hosted MCP server. No local installation required.
 
-### Claude Code
+### Hosted Transport Options
+
+- **Streamable HTTP (recommended):** `https://mcp.rootly.com/mcp`
+- **SSE (fallback):** `https://mcp.rootly.com/sse`
+- **Code Mode:** `https://mcp.rootly.com/mcp-codemode`
+
+### General Remote Setup
+
+Default remote config (HTTP streamable):
+
+```json
+{
+  "mcpServers": {
+    "rootly": {
+      "url": "https://mcp.rootly.com/mcp",
+      "headers": {
+        "Authorization": "Bearer YOUR_ROOTLY_API_TOKEN"
+      }
+    }
+  }
+}
+```
+
+SSE fallback:
+
+```json
+{
+  "mcpServers": {
+    "rootly": {
+      "url": "https://mcp.rootly.com/sse",
+      "headers": {
+        "Authorization": "Bearer YOUR_ROOTLY_API_TOKEN"
+      }
+    }
+  }
+}
+```
+
+Code Mode:
+
+```json
+{
+  "mcpServers": {
+    "rootly": {
+      "url": "https://mcp.rootly.com/mcp-codemode",
+      "headers": {
+        "Authorization": "Bearer YOUR_ROOTLY_API_TOKEN"
+      }
+    }
+  }
+}
+```
+
+### Agent Setup
+
+<details>
+<summary><strong>Claude Code</strong></summary>
+
+<br>
+
+**Streamable HTTP**
 
 ```bash
 claude mcp add --transport http rootly https://mcp.rootly.com/mcp \
@@ -74,7 +135,32 @@ claude mcp add --transport sse rootly-sse https://mcp.rootly.com/sse \
   --header "Authorization: Bearer YOUR_ROOTLY_API_TOKEN"
 ```
 
-### Gemini CLI
+**Manual Configuration**
+
+Create `.mcp.json` in your project root:
+
+```json
+{
+  "mcpServers": {
+    "rootly": {
+      "type": "sse",
+      "url": "https://mcp.rootly.com/sse",
+      "headers": {
+        "Authorization": "Bearer YOUR_ROOTLY_API_TOKEN"
+      }
+    }
+  }
+}
+```
+
+Restart Claude Code after updating the config.
+
+</details>
+
+<details>
+<summary><strong>Gemini CLI</strong></summary>
+
+<br>
 
 Install the extension:
 
@@ -98,7 +184,12 @@ Or configure manually in `~/.gemini/settings.json`:
 }
 ```
 
-### Cursor
+</details>
+
+<details>
+<summary><strong>Cursor</strong></summary>
+
+<br>
 
 Add to `.cursor/mcp.json` or `~/.cursor/mcp.json`:
 
@@ -115,7 +206,12 @@ Add to `.cursor/mcp.json` or `~/.cursor/mcp.json`:
 }
 ```
 
-### Windsurf
+</details>
+
+<details>
+<summary><strong>Windsurf</strong></summary>
+
+<br>
 
 Add to `~/.codeium/windsurf/mcp_config.json`:
 
@@ -132,7 +228,12 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
 }
 ```
 
-### Codex
+</details>
+
+<details>
+<summary><strong>Codex</strong></summary>
+
+<br>
 
 Add to `~/.codex/config.toml`:
 
@@ -142,7 +243,12 @@ url = "https://mcp.rootly.com/mcp"
 bearer_token_env_var = "ROOTLY_API_TOKEN"
 ```
 
-### Claude Desktop
+</details>
+
+<details>
+<summary><strong>Claude Desktop</strong></summary>
+
+<br>
 
 Add to `claude_desktop_config.json`:
 
@@ -163,9 +269,11 @@ Add to `claude_desktop_config.json`:
 }
 ```
 
+</details>
+
 ## Rootly CLI
 
-We also offer a standalone CLI for managing incidents, alerts, services, on-call schedules, and more directly from your terminal.
+Standalone CLI for incidents, alerts, services, and on-call operations.
 
 Install via Homebrew:
 
@@ -183,7 +291,7 @@ For more details, see the [Rootly CLI repository](https://github.com/rootlyhq/ro
 
 ## Alternative Installation (Local)
 
-If you prefer to run the MCP server locally, configure your editor with one of the options below. The package will be automatically downloaded and installed when you first open your editor.
+Run the MCP server locally if you do not want to use the hosted service.
 
 ### Prerequisites
 
@@ -192,17 +300,17 @@ If you prefer to run the MCP server locally, configure your editor with one of t
   ```bash
   curl -LsSf https://astral.sh/uv/install.sh | sh
   ```
-- [Rootly API token](https://docs.rootly.com/api-reference/overview#how-to-generate-an-api-key%3F) with appropriate permissions (see below)
+- [Rootly API token](https://docs.rootly.com/api-reference/overview#how-to-generate-an-api-key%3F)
 
-### API Token Permissions
+### API Token Types
 
-The MCP server requires a Rootly API token. Choose the appropriate token type based on your needs:
+Choose the token type based on the access you need:
 
-- **Global API Key** (Recommended): Full access to all entities across your Rootly instance. Required for organization-wide visibility across teams, schedules, and incidents.
-- **Team API Key**: Team Admin permissions with full read/edit access to entities owned by that team. Suitable for team-specific workflows.
-- **Personal API Key**: Inherits the permissions of the user who created it. Works for individual use cases but may have limited visibility.
+- **Global API Key**: Full access across the Rootly instance. Best for organization-wide visibility.
+- **Team API Key**: Access limited to entities owned by that team.
+- **Personal API Key**: Access matches the user who created it.
 
-For full functionality of tools like `get_oncall_handoff_summary`, `get_oncall_shift_metrics`, and organization-wide incident search, a **Global API Key** is recommended.
+A **Global API Key** is recommended for tools like `get_oncall_handoff_summary`, `get_oncall_shift_metrics`, and org-wide incident search.
 
 ### With uv
 
@@ -232,7 +340,7 @@ Choose one transport per server process:
 
 - **Streamable HTTP** endpoint path: `/mcp`
 - **SSE** endpoint path: `/sse`
-- **Code Mode (experimental)** endpoint path: `/mcp-codemode` in hosted dual-transport mode. Set `ROOTLY_CODE_MODE_ENABLED=false` to disable it or `ROOTLY_CODE_MODE_PATH` to customize the path.
+- **Code Mode (experimental)** endpoint path: `/mcp-codemode` in hosted dual-transport mode
 
 Example Docker run (Streamable HTTP):
 
@@ -295,7 +403,7 @@ docker run -p 8000:8000 \
 
 ## Supported Tools
 
-The default server configuration currently exposes **101 tools** (including custom agentic tools and OpenAPI-generated tools).
+The default server configuration exposes **101 tools**.
 
 ### Custom Agentic Tools
 
@@ -411,7 +519,7 @@ Delete operations are intentionally scoped to screenshot coverage paths:
 
 ## On-Call Health Integration
 
-Rootly MCP integrates with [On-Call Health](https://oncallhealth.ai) to detect workload health risk in scheduled responders.
+Integrates with [On-Call Health](https://oncallhealth.ai) to detect workload health risk in scheduled responders.
 
 ### Setup
 
@@ -445,11 +553,11 @@ Returns at-risk users who are scheduled, recommended safe replacements, and acti
 
 ## Example Skills
 
-Want to get started quickly? We provide pre-built Claude Code skills that showcase the full power of the Rootly MCP server:
+Pre-built Claude Code skills:
 
 ### 🚨 [Rootly Incident Responder](examples/skills/rootly-incident-responder.md)
 
-An AI-powered incident response specialist that:
+This skill:
 - Analyzes production incidents with full context
 - Finds similar historical incidents using ML-based similarity matching
 - Suggests solutions based on past successful resolutions
@@ -468,7 +576,7 @@ cp examples/skills/rootly-incident-responder.md .claude/skills/
 # @rootly-incident-responder analyze incident #12345
 ```
 
-This skill demonstrates a complete incident response workflow using Rootly's intelligent tools combined with GitHub integration for code correlation.
+It demonstrates a full incident response workflow using Rootly tools and GitHub context.
 
 ### On-Call Shift Metrics