rootly-mcp-server 2.2.12__tar.gz → 2.2.14__tar.gz

{rootly_mcp_server-2.2.12 → rootly_mcp_server-2.2.14}/.github/dependabot.yml

@@ -4,6 +4,8 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 3
     groups:
       actions:
         patterns:
@@ -14,6 +16,9 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
+    cooldown:
+      default-days: 3
+      semver-major-days: 7
     groups:
       minor-and-patch:
         applies-to: version-updates
@@ -25,3 +30,6 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 3
+      semver-major-days: 7

{rootly_mcp_server-2.2.12 → rootly_mcp_server-2.2.14}/.github/workflows/ci.yml

@@ -77,7 +77,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: matrix.python-version == '3.12'
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v5
         with:
           file: ./coverage.xml
           flags: unittests

{rootly_mcp_server-2.2.12 → rootly_mcp_server-2.2.14}/CHANGELOG.md

@@ -7,9 +7,173 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-### Added
-- Gemini CLI extension support via `gemini-extension.json` manifest
-- Gemini CLI installation instructions in README
+## [2.2.14] - Released 2026-04-02
+
+### Highlights
+- Refreshed FastMCP and related runtime dependencies to address newly disclosed security advisories
+
+### Fixes
+- Updated Code Mode imports and test fixtures for FastMCP 3.2.0 compatibility
+
+### Docs / Dependencies
+- Added a Dependabot cooldown for package ecosystem updates
+- Upgraded `fastmcp[code-mode]` to `3.2.0`
+- Upgraded transitive `cryptography` to `46.0.6`
+- Upgraded transitive `Pygments` to `2.20.0`
+
+## [2.2.13] - Released 2026-03-26
+
+### Highlights
+- Improved hosted auth validation and Code Mode `execute` error handling
+- Patched vulnerable `authlib` and `requests` dependencies
+
+### Fixes
+- Validate hosted `Authorization` headers earlier and log auth header state to make malformed token issues easier to diagnose
+- Hardened Code Mode `execute` by normalizing common client-prefixed tool names and returning clearer parser, import, and runtime errors
+
+### Docs / Dependencies
+- Simplified the README quick start and added clearer hosted remote configuration examples for HTTP streamable, SSE, and Code Mode
+- Upgraded `fastmcp[code-mode]` to `3.1.1` and refreshed CI dependencies
+
+## [2.2.12] - Released 2026-03-18
+
+### Highlights
+- Reduced oversized shift and collection payloads and added pagination to `list_shifts`
+
+### Features
+- Added MCP-level pagination to `list_shifts`, including pagination metadata and validation for invalid page numbers
+
+### Fixes
+- Trimmed `get_shift_incidents` results to avoid oversized responses
+- Preserved incidents that started before a shift but were resolved during it
+
+### Docs / Dependencies
+- Slimmed heavy collection payloads for generated tools such as `listUsers`, `listServices`, and `listShifts`
+- Clarified Code Mode tool discovery and pagination guidance for paginated calls
+- Added and simplified Claude Code setup examples in the documentation
+
+## [2.2.11] - Released 2026-03-16
+
+### Highlights
+- Added incident update and readback support for PIR workflows
+
+### Features
+- Added `updateIncident` for scoped incident updates in the PIR lifecycle
+- Added `getIncident` and incident readback support for PIR verification
+
+### Fixes
+- Updated `search_incidents` to include retrospective progress status in readback results
+- Made Code Mode `execute` compatible with older Monty runtimes
+- Patched vulnerable `black` and `PyJWT` dependencies
+- Fixed CI usage of `actions/upload-artifact`
+
+### Docs / Dependencies
+- Scoped GitHub Actions workflow permissions more tightly
+
+## [2.2.10] - Released 2026-03-12
+
+### Highlights
+- Rolled out hosted dual transport, Code Mode, and richer observability support
+
+### Features
+- Added a hosted Code Mode endpoint and enabled Code Mode by default in hosted dual-mode deployments
+- Added streamable HTTP and SSE dual-transport support in a single hosted process
+- Added screenshot coverage, escalation APIs, and tighter allowlist path matching
+- Added structured tool-usage telemetry for Datadog, including transport-aware metrics and hashed identity context
+- Added Gemini CLI extension support and editor-specific setup documentation
+- Added branch-based staging deployment pipeline support
+
+### Fixes
+- Restored legacy server parity while preserving compatibility with FastMCP 3.x `list_tools()` and `send()` behavior
+- Forwarded auth tokens correctly in hosted SSE and streamable HTTP paths
+- Reduced hosted auth noise, improved graceful shutdown behavior, and preserved error context across multi-call tools
+- Fixed non-string incident severity handling in `shift_incidents`
+
+### Docs / Dependencies
+- Reorganized Quick Start documentation by editor and added Rootly CLI guidance
+- Refreshed vulnerable runtime dependencies and normalized log severity handling
+
+## [2.2.9] - Released 2026-02-24
+
+### Fixes
+- Added an auth header event hook for hosted mode so downstream API requests consistently carry the caller's bearer token
+
+## [2.2.8] - Released 2026-02-24
+
+### Features
+- Added filter parameters to `listAlerts`
+- Added transport and hosting mode to the Rootly `User-Agent`
+
+### Docs / Dependencies
+- Hardened the Dockerfile and added `.dockerignore`
+
+## [2.2.6] - Released 2026-02-19
+
+### Highlights
+- Added alert lookup by short ID and reduced alert payload size
+
+### Features
+- Added `get_alert_by_short_id` so alerts can be fetched by short ID or full alert URL
+
+### Fixes
+- Included alert `url` and `created_at` in alert field selection
+- Removed the `timeout` parameter from `FastMCP.from_openapi()` for FastMCP 3.0 compatibility
+
+### Docs / Dependencies
+- Reduced alert API response payload size significantly and added User-Agent tracking
+
+## [2.2.4] - Released 2026-02-18
+
+### Features
+- Added MCP registry metadata
+
+### Fixes
+- Enforced JSON:API headers through an `httpx` event hook to resolve hosted `415` errors more reliably
+
+## [2.2.3] - Released 2026-02-05
+
+### Features
+- Added debug logging for HTTP requests and headers
+
+## [2.2.2] - Released 2026-02-05
+
+### Fixes
+- Removed existing content-type headers case-insensitively before setting JSON:API headers
+
+## [2.2.1] - Released 2026-02-05
+
+### Fixes
+- Always set JSON:API headers regardless of request kwargs to prevent hosted `415` failures
+
+## [2.2.0] - Released 2026-02-05
+
+### Highlights
+- Renamed On-Call Health terminology from `burnout` to `health risk`
+
+## [2.1.4] - Released 2026-02-05
+
+### Fixes
+- Resolved hosted MCP `415 Unsupported Media Type` errors
+
+## [2.1.3] - Released 2026-02-05
+
+### Highlights
+- Added the first On-Call Health integration
+
+### Features
+- Added the On-Call Health integration for burnout-risk detection
+- Added unit tests for the On-Call Health integration
+
+### Fixes
+- Added proper type hints to `och_client.py`
+
+### Docs / Dependencies
+- Streamlined the README and moved development setup details into `CONTRIBUTING.md`
+
+## [2.1.2] - Released 2026-02-05
+
+### Features
+- Added on-call AI workflow tools
 
 ## [2.1.1] - 2026-02-04
 

{rootly_mcp_server-2.2.12 → rootly_mcp_server-2.2.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: rootly-mcp-server
-Version: 2.2.12
+Version: 2.2.14
 Summary: Secure Model Context Protocol server for Rootly APIs with AI SRE capabilities, comprehensive error handling, and input validation
 Project-URL: Homepage, https://github.com/Rootly-AI-Labs/Rootly-MCP-server
 Project-URL: Issues, https://github.com/Rootly-AI-Labs/Rootly-MCP-server/issues
@@ -21,12 +21,15 @@ Classifier: Topic :: Software Development :: Build Tools
 Classifier: Topic :: System :: Monitoring
 Classifier: Topic :: System :: Systems Administration
 Requires-Python: >=3.12
+Requires-Dist: authlib>=1.6.9
 Requires-Dist: brotli>=1.2.0
-Requires-Dist: fastmcp[code-mode]==3.1.0
+Requires-Dist: cryptography>=46.0.6
+Requires-Dist: fastmcp[code-mode]==3.2.0
 Requires-Dist: httpx==0.28.1
 Requires-Dist: numpy>=1.24.0
 Requires-Dist: pydantic==2.12.5
-Requires-Dist: requests==2.32.5
+Requires-Dist: pygments>=2.20.0
+Requires-Dist: requests==2.33.0
 Requires-Dist: scikit-learn>=1.3.0
 Provides-Extra: dev
 Requires-Dist: bandit>=1.7.0; extra == 'dev'
@@ -45,17 +48,75 @@ Description-Content-Type: text/markdown
 [![Python Version](https://img.shields.io/pypi/pyversions/rootly-mcp-server.svg)](https://pypi.org/project/rootly-mcp-server/)
 [![Install MCP Server](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/install-mcp?name=rootly&config=eyJ1cmwiOiJodHRwczovL21jcC5yb290bHkuY29tL3NzZSIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciA8WU9VUl9ST09UTFlfQVBJX1RPS0VOPiJ9fQ==)
 
-An MCP server for the [Rootly API](https://docs.rootly.com/api-reference/overview) that integrates seamlessly with MCP-compatible editors like Cursor, Windsurf, and Claude. Resolve production incidents in under a minute without leaving your IDE.
+An MCP server for the [Rootly API](https://docs.rootly.com/api-reference/overview) for Cursor, Windsurf, Claude, and other MCP clients.
 
 ![Demo GIF](https://raw.githubusercontent.com/Rootly-AI-Labs/Rootly-MCP-server/refs/heads/main/rootly-mcp-server-demo.gif)
 
 ## Quick Start
 
-The fastest way to get started is to connect to our hosted MCP server — no installation required.
+Use the hosted MCP server. No local installation required.
 
-### Claude Code
+### Hosted Transport Options
 
-**Hosted Server (Recommended)**
+- **Streamable HTTP (recommended):** `https://mcp.rootly.com/mcp`
+- **SSE (fallback):** `https://mcp.rootly.com/sse`
+- **Code Mode:** `https://mcp.rootly.com/mcp-codemode`
+
+### General Remote Setup
+
+Default remote config (HTTP streamable):
+
+```json
+{
+  "mcpServers": {
+    "rootly": {
+      "url": "https://mcp.rootly.com/mcp",
+      "headers": {
+        "Authorization": "Bearer YOUR_ROOTLY_API_TOKEN"
+      }
+    }
+  }
+}
+```
+
+SSE fallback:
+
+```json
+{
+  "mcpServers": {
+    "rootly": {
+      "url": "https://mcp.rootly.com/sse",
+      "headers": {
+        "Authorization": "Bearer YOUR_ROOTLY_API_TOKEN"
+      }
+    }
+  }
+}
+```
+
+Code Mode:
+
+```json
+{
+  "mcpServers": {
+    "rootly": {
+      "url": "https://mcp.rootly.com/mcp-codemode",
+      "headers": {
+        "Authorization": "Bearer YOUR_ROOTLY_API_TOKEN"
+      }
+    }
+  }
+}
+```
+
+### Agent Setup
+
+<details>
+<summary><strong>Claude Code</strong></summary>
+
+<br>
+
+**Streamable HTTP**
 
 ```bash
 claude mcp add --transport http rootly https://mcp.rootly.com/mcp \
@@ -78,7 +139,7 @@ claude mcp add --transport sse rootly-sse https://mcp.rootly.com/sse \
 
 **Manual Configuration**
 
-Alternatively, create `.mcp.json` in your project root:
+Create `.mcp.json` in your project root:
 
 ```json
 {
@@ -94,9 +155,14 @@ Alternatively, create `.mcp.json` in your project root:
 }
 ```
 
-Then restart Claude Code so it reloads the updated configuration.
+Restart Claude Code after updating the config.
+
+</details>
 
-### Gemini CLI
+<details>
+<summary><strong>Gemini CLI</strong></summary>
+
+<br>
 
 Install the extension:
 
@@ -120,7 +186,12 @@ Or configure manually in `~/.gemini/settings.json`:
 }
 ```
 
-### Cursor
+</details>
+
+<details>
+<summary><strong>Cursor</strong></summary>
+
+<br>
 
 Add to `.cursor/mcp.json` or `~/.cursor/mcp.json`:
 
@@ -137,7 +208,12 @@ Add to `.cursor/mcp.json` or `~/.cursor/mcp.json`:
 }
 ```
 
-### Windsurf
+</details>
+
+<details>
+<summary><strong>Windsurf</strong></summary>
+
+<br>
 
 Add to `~/.codeium/windsurf/mcp_config.json`:
 
@@ -154,7 +230,12 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
 }
 ```
 
-### Codex
+</details>
+
+<details>
+<summary><strong>Codex</strong></summary>
+
+<br>
 
 Add to `~/.codex/config.toml`:
 
@@ -164,7 +245,12 @@ url = "https://mcp.rootly.com/mcp"
 bearer_token_env_var = "ROOTLY_API_TOKEN"
 ```
 
-### Claude Desktop
+</details>
+
+<details>
+<summary><strong>Claude Desktop</strong></summary>
+
+<br>
 
 Add to `claude_desktop_config.json`:
 
@@ -185,9 +271,11 @@ Add to `claude_desktop_config.json`:
 }
 ```
 
+</details>
+
 ## Rootly CLI
 
-We also offer a standalone CLI for managing incidents, alerts, services, on-call schedules, and more directly from your terminal.
+Standalone CLI for incidents, alerts, services, and on-call operations.
 
 Install via Homebrew:
 
@@ -205,7 +293,7 @@ For more details, see the [Rootly CLI repository](https://github.com/rootlyhq/ro
 
 ## Alternative Installation (Local)
 
-If you prefer to run the MCP server locally, configure your editor with one of the options below. The package will be automatically downloaded and installed when you first open your editor.
+Run the MCP server locally if you do not want to use the hosted service.
 
 ### Prerequisites
 
@@ -214,17 +302,17 @@ If you prefer to run the MCP server locally, configure your editor with one of t
   ```bash
   curl -LsSf https://astral.sh/uv/install.sh | sh
   ```
-- [Rootly API token](https://docs.rootly.com/api-reference/overview#how-to-generate-an-api-key%3F) with appropriate permissions (see below)
+- [Rootly API token](https://docs.rootly.com/api-reference/overview#how-to-generate-an-api-key%3F)
 
-### API Token Permissions
+### API Token Types
 
-The MCP server requires a Rootly API token. Choose the appropriate token type based on your needs:
+Choose the token type based on the access you need:
 
-- **Global API Key** (Recommended): Full access to all entities across your Rootly instance. Required for organization-wide visibility across teams, schedules, and incidents.
-- **Team API Key**: Team Admin permissions with full read/edit access to entities owned by that team. Suitable for team-specific workflows.
-- **Personal API Key**: Inherits the permissions of the user who created it. Works for individual use cases but may have limited visibility.
+- **Global API Key**: Full access across the Rootly instance. Best for organization-wide visibility.
+- **Team API Key**: Access limited to entities owned by that team.
+- **Personal API Key**: Access matches the user who created it.
 
-For full functionality of tools like `get_oncall_handoff_summary`, `get_oncall_shift_metrics`, and organization-wide incident search, a **Global API Key** is recommended.
+A **Global API Key** is recommended for tools like `get_oncall_handoff_summary`, `get_oncall_shift_metrics`, and org-wide incident search.
 
 ### With uv
 
@@ -254,7 +342,7 @@ Choose one transport per server process:
 
 - **Streamable HTTP** endpoint path: `/mcp`
 - **SSE** endpoint path: `/sse`
-- **Code Mode (experimental)** endpoint path: `/mcp-codemode` in hosted dual-transport mode. Set `ROOTLY_CODE_MODE_ENABLED=false` to disable it or `ROOTLY_CODE_MODE_PATH` to customize the path.
+- **Code Mode (experimental)** endpoint path: `/mcp-codemode` in hosted dual-transport mode
 
 Example Docker run (Streamable HTTP):
 
@@ -317,7 +405,7 @@ docker run -p 8000:8000 \
 
 ## Supported Tools
 
-The default server configuration currently exposes **101 tools** (including custom agentic tools and OpenAPI-generated tools).
+The default server configuration exposes **101 tools**.
 
 ### Custom Agentic Tools
 
@@ -433,7 +521,7 @@ Delete operations are intentionally scoped to screenshot coverage paths:
 
 ## On-Call Health Integration
 
-Rootly MCP integrates with [On-Call Health](https://oncallhealth.ai) to detect workload health risk in scheduled responders.
+Integrates with [On-Call Health](https://oncallhealth.ai) to detect workload health risk in scheduled responders.
 
 ### Setup
 
@@ -467,11 +555,11 @@ Returns at-risk users who are scheduled, recommended safe replacements, and acti
 
 ## Example Skills
 
-Want to get started quickly? We provide pre-built Claude Code skills that showcase the full power of the Rootly MCP server:
+Pre-built Claude Code skills:
 
 ### 🚨 [Rootly Incident Responder](examples/skills/rootly-incident-responder.md)
 
-An AI-powered incident response specialist that:
+This skill:
 - Analyzes production incidents with full context
 - Finds similar historical incidents using ML-based similarity matching
 - Suggests solutions based on past successful resolutions
@@ -490,7 +578,7 @@ cp examples/skills/rootly-incident-responder.md .claude/skills/
 # @rootly-incident-responder analyze incident #12345
 ```
 
-This skill demonstrates a complete incident response workflow using Rootly's intelligent tools combined with GitHub integration for code correlation.
+It demonstrates a full incident response workflow using Rootly tools and GitHub context.
 
 ### On-Call Shift Metrics