- Streamable HTTP transport (MCP_TRANSPORT=http) with mandatory auth: static bearer tokens or OIDC resource-server mode (JWT via JWKS, or RFC 7662 introspection), RFC 9728 protected-resource metadata, and DNS-rebinding protection - secrets loadable from files via *_FILE variants - timeouts on all outbound requests; JORTT_READ_ONLY tool filtering - OpenAPI spec committed and bundled; no implicit network fetches - Nix flake: sandboxed package build + hardened NixOS module taking an EnvironmentFile (agenix-friendly) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
40 lines
861 B
JSON
40 lines
861 B
JSON
{
|
|
"name": "jortt-mcp",
|
|
"version": "0.2.0",
|
|
"description": "Model Context Protocol server for the Jortt accounting API",
|
|
"license": "MIT",
|
|
"type": "module",
|
|
"bin": {
|
|
"jortt-mcp": "dist/index.js"
|
|
},
|
|
"files": [
|
|
"dist",
|
|
"README.md"
|
|
],
|
|
"scripts": {
|
|
"fetch-spec": "node scripts/fetch-spec.mjs",
|
|
"build": "tsc && node -e \"require('fs').copyFileSync('src/openapi.json','dist/openapi.json')\"",
|
|
"start": "node dist/index.js",
|
|
"dev": "tsc --watch",
|
|
"typecheck": "tsc --noEmit"
|
|
},
|
|
"keywords": [
|
|
"mcp",
|
|
"model-context-protocol",
|
|
"jortt",
|
|
"accounting",
|
|
"invoicing",
|
|
"api"
|
|
],
|
|
"engines": {
|
|
"node": ">=18"
|
|
},
|
|
"dependencies": {
|
|
"@modelcontextprotocol/sdk": "^1.29.0",
|
|
"jose": "^6.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^22.10.0",
|
|
"typescript": "^5.7.0"
|
|
}
|
|
}
|