Merge remote-tracking branch 'origin/main' into max/chore-remove-debug-checks

Author: max-stytch

.github/workflows/check.yml

@@ -18,8 +18,11 @@ jobs:
         with:
           node-version: 22
 
+      - name: Run type checking and formatting
+        run: pnpm run check
+
+      - name: Run unit tests
+        run: pnpm run test:unit
+
       - name: Build
         run: pnpm build
-
-      - name: Run checks
-        run: pnpm run check

AGENT.md

@@ -0,0 +1,26 @@
+# AGENT.md - mcp-remote Development Guide
+
+## Commands
+
+- **Build**: `pnpm build` (or `pnpm build:watch` for development)
+- **Type check**: `pnpm check` (runs prettier and tsc)
+- **Lint/Format**: `pnpm lint-fix` (prettier with write)
+- **Test**: `pnpm test:unit` (or `pnpm test:unit:watch` for watch mode)
+- **Run dev**: `npx tsx src/client.ts` or `npx tsx src/proxy.ts`
+
+## Architecture
+
+- **Project Type**: TypeScript ESM library for MCP (Model Context Protocol) remote proxy
+- **Main Binaries**: `mcp-remote` (proxy.ts), `mcp-remote-client` (client.ts)
+- **Core Libraries**: `/src/lib/` contains auth coordination, OAuth client, utils, types
+- **Transport**: Supports both HTTP and SSE transports with OAuth authentication
+- **Config**: Uses `~/.mcp-auth/` directory for credential storage
+
+## Code Style
+
+- **Formatting**: Prettier with 140 char width, single quotes, no semicolons
+- **Types**: Strict TypeScript, ES2022 target with bundler module resolution
+- **Imports**: ES modules, use `.js` extensions for SDK imports
+- **Error Handling**: EventEmitter pattern for auth flow coordination
+- **Naming**: kebab-case for files, camelCase for variables/functions
+- **Comments**: JSDoc for main functions, inline for complex auth flows

README.md

@@ -135,6 +135,35 @@ To bypass authentication, or to emit custom headers on all requests to your remo
       ]
 ```
 
+* To ignore specific tools from the remote server, add the `--ignore-tool` flag. This will filter out tools matching the specified patterns from both `tools/list` responses and block `tools/call` requests. Supports wildcard patterns with `*`.
+
+```json
+      "args": [
+        "mcp-remote",
+        "https://remote.mcp.server/sse",
+        "--ignore-tool",
+        "delete*",
+        "--ignore-tool",
+        "remove*"
+      ]
+```
+
+You can specify multiple `--ignore-tool` flags to ignore different patterns. Examples:
+- `delete*` - ignores all tools starting with "delete" (e.g., `deleteTask`, `deleteUser`)
+- `*account` - ignores all tools ending with "account" (e.g., `getAccount`, `updateAccount`)
+- `exactTool` - ignores only the tool named exactly "exactTool"
+
+* To change the timeout for the OAuth callback (by default `30` seconds), add the `--auth-timeout` flag with a value in seconds. This is useful if the authentication process on the server side takes a long time.
+
+```json
+      "args": [
+        "mcp-remote",
+        "https://remote.mcp.server/sse",
+        "--auth-timeout",
+        "60"
+      ]
+```
+
 ### Transport Strategies
 
 MCP Remote supports different transport strategies when connecting to an MCP server. This allows you to control whether it uses Server-Sent Events (SSE) or HTTP transport, and in what order it tries them.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-remote",
-  "version": "0.1.14",
+  "version": "0.1.24",
   "description": "Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth",
   "keywords": [
     "mcp",
@@ -9,7 +9,7 @@
     "remote",
     "oauth"
   ],
-  "author": "Glen Maddern <glen@cloudflare.com>",
+  "author": "Glen Maddern <glen@glenmaddern.com>",
   "repository": "https://github.com/geelen/mcp-remote",
   "type": "module",
   "files": [
@@ -26,20 +26,24 @@
     "build": "tsup",
     "build:watch": "tsup --watch",
     "check": "prettier --check . && tsc",
-    "lint-fix": "prettier --check . --write"
+    "lint-fix": "prettier --check . --write",
+    "test:unit": "vitest run",
+    "test:unit:watch": "vitest"
   },
   "dependencies": {
     "express": "^4.21.2",
-    "open": "^10.1.0"
+    "open": "^10.1.0",
+    "strict-url-sanitise": "^0.0.1"
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "https://pkg.pr.new/geelen/typescript-sdk/@modelcontextprotocol/sdk@cdf3508",
+    "@modelcontextprotocol/sdk": "^1.17.3",
     "@types/express": "^5.0.0",
     "@types/node": "^22.13.10",
     "prettier": "^3.5.3",
     "tsup": "^8.4.0",
     "tsx": "^4.19.3",
-    "typescript": "^5.8.2"
+    "typescript": "^5.8.2",
+    "vitest": "^3.2.3"
   },
   "tsup": {
     "entry": [
@@ -54,5 +58,12 @@
     "outDir": "dist",
     "external": []
   },
+  "vitest": {
+    "environment": "node",
+    "globals": true,
+    "include": [
+      "src/**/*.test.ts"
+    ]
+  },
   "packageManager": "[email protected]+sha512.6540583f41cc5f628eb3d9773ecee802f4f9ef9923cc45b69890fb47991d4b092964694ec3a4f738a420c918a333062c8b925d312f42e4f0c263eb603551f977"
 }