# Sweet MCP Server

> **Moved:** This repo is deprecated. The MCP server now lives in [toni-witt/sweet-backend](https://github.com/toni-witt/sweet-backend) under `mcp/`. Use that repository for development and deployment.

Stateless HTTP MCP service for Claude and other MCP clients.

## Stack

- `@modelcontextprotocol/server` + streamable HTTP transport
- Forwards bearer tokens to Sweet backend runtime routes

## Local setup

```bash
cp .env.example .env
npm install
npm run dev
```

MCP endpoint: `http://localhost:3002/mcp`

Requires the Sweet backend running on `http://localhost:3001`.

## Tools

| Tool | Description |
| --- | --- |
| `sweet_get_platform_overview` | Sweet platform purpose, MCP auth modes, portal workflow, and tool catalog |
| `sweet_get_workspace_profile` | Signed-in user, firm workspace, MCP status, and QuickBooks connections |
| `quickbooks_list_connected_companies` | Connected QuickBooks companies with realmId and labels |
| `quickbooks_list_entity_catalog` | Full QuickBooks entity catalog, capability groups, and usage notes |
| `quickbooks_get_entity_field_schema` | Detailed field schema for one QuickBooks entity |
| `quickbooks_get_reports_reference` | Financial report names and parameter guidance |
| `quickbooks_get_attachments_reference` | Attachable actions, upload rules, and examples |

## OAuth for Claude web

Claude web connectors require OAuth 2.1 with PKCE. Sweet exposes:

| Endpoint | Purpose |
| --- | --- |
| `GET /.well-known/oauth-protected-resource` | Resource metadata (RFC 9728) |
| `GET /.well-known/oauth-authorization-server` | Authorization server metadata |
| `POST /oauth/register` | Dynamic client registration |
| `GET /oauth/authorize` | User sign-in + consent |
| `POST /oauth/token` | Authorization code exchange |

Set `MCP_SERVER_PUBLIC_URL` in the backend `.env` to your public HTTPS MCP URL (for example your ngrok URL ending in `/mcp`) before connecting Claude web.

Install tokens (`sweet_mcp_…`) still work for Claude Desktop and Cursor.