Apiosk MCP

@apiosk/mcp 3.0.0 brings the Apiosk Ask workflow to Claude, Codex and other MCP hosts: ask a question, compare matching sources, review inputs and one total, approve that request, and inspect saved results. It uses the existing Gateway for discovery, planning, prices, execution and evidence.

MCP1 card URLs, connection identity, token formats and cached Ask tool signatures remain compatible. Compatibility operations stay private to cards; new model connections continue to see Ask first. Both old and new approval calls share the same durable approval record.

The default is question-scoped source discovery. There is no global “browse the catalog” flow. For example, “What does ASML do?” should first call apiosk_ask with that question and display its matching sources; a model's general knowledge is not an Apiosk result.

This repository is the canonical obcraft/apiosk-mcp implementation. Versioned source and manifests do not establish that this version has been deployed, published or installed in a host.

Ask interactions and embedded components

The server exposes 36 public tools and six private component operations, saved-request resources and an Ask prompt. The actual App Ask React components and design tokens are vendored in src/ask-page/ and compiled into the self-contained embedded resource. The local tester loads that same resource. src/ask-ui/ retains the original MCP transport and compatibility renderers; every operation still uses the durable saved-request and approval journal.

Source discovery uses the App’s filtering, deduplication and provider ordering. Offered endpoint descriptors enrich matching sources without adding unrelated catalog entries. Account display currency comes from Gateway’s read-only /v2/display-context; quoted atomic amounts remain unchanged. Rebuild the embedded bundle with npm run build:ask-page after editing its sources.

Manual source selection prepares each chosen native endpoint with the App’s exact input values. Connected clients use /v2/ask/source/prepare, which requires explicit approval even when the connection has a standing spending rule. The MCP combines those saved quotes into one reviewed maximum; preparation does not purchase data.

MCP Apps and ChatGPT-compatible metadata identify the embedded resources. Model-visible results carry compact source identifiers, status, input needs and the exact approval. Full component data travels separately in _meta.apiosk_card_data, so large source schemas and raw response trees do not flood the model context. Saved evidence remains available through the result and evidence tools.

Hosts that support embedded components can show the interactive cards. Text-only hosts receive structured results and use the public tools. Support and rendering still depend on the host; passing local tests does not establish installed Claude, Codex or ChatGPT acceptance. Read-only HTML exports are separate from interactive cards.

apiosk_ask defaults to mode: "sources". Automatic planning is available with mode: "automatic". Preparation never approves a purchase. Review the returned currency, maximum total, sources, gaps, expiry and approval ID before authorizing execution. The visible choices use the same purchasability filter as the Ask page; discovery metadata and source options are not purchased findings.

Results retain source dates, citations, coverage and gaps, including meaningful 0 and false values. Local filters, sorting, chart/table views, saved pages and exports reuse saved data. Follow-ups use purchased evidence where possible; a need for new data creates a separately reviewed request.

Related MCP server: AI-Agent-Hub

Run from this checkout

Requires Node.js 22.16 or newer and an authorized Apiosk connection. In this workspace the canonical directory is /Users/olivier/Documents/Apiosk/Production/Main/mcp.

cd /Users/olivier/Documents/Apiosk/Production/Main/mcp
npm ci
npm run check
npm test

Use the existing Apiosk credentials in your private environment or local .env; do not put credentials in committed examples. Runtime entry points read environment variables. To load .env explicitly, use Node's --env-file option.

For stdio with a private .env:

node --env-file=.env index.mjs

The hosted server preserves the existing OAuth identity and secret configuration. Starting it requires those settings, including its signing secret; use node --env-file=.env server.mjs when they are in a local file. HTTP clients authenticate each request themselves. A server-wide token is never lent to HTTP callers. /health reports process health, not Gateway or source readiness.

Local tester

The tester runs at http://127.0.0.1:3013 and defaults to an MCP endpoint at http://127.0.0.1:3012/mcp. Start the minimal local MCP transport in one terminal:

node --env-file=.env bin/mcp-2.mjs --http --host 127.0.0.1 --port 3012

Start the tester in another:

npm run dev:chat

To test the canonical hosted server on port 3000 instead:

MCP_DEV_URL=http://127.0.0.1:3000/mcp npm run dev:chat

The tester reads this checkout's .env, .env.v2.local and .env.dev.local, with inherited environment values taking precedence. It reuses an existing MCP_DEV_TOKEN and OPENROUTER_API_KEY. If no local OpenRouter key is set, it reads only the provider key from the sibling gateway/.env (OPENROUTER_API_KEY, then INTENT_API_KEY). It does not inherit Gateway execution flags or change those credentials. MCP_DEV_PORT, MCP_DEV_URL and MCP_DEV_MODEL override the tester defaults. Set MCP_DEV_GATEWAY_URL for a custom Gateway event origin; the embedded card and tester use the same fixed origin policy for live status updates.

Connect the intended account before asking a question. The tester calls apiosk_ask for the first question and renders the same embedded components served to other hosts. An initial discovery stops at the authoritative Ask card without an extra model-written answer. Later model continuations receive a bounded projection of tool results; full card data stays available to the component. Model API usage and approved source purchases are separate operations.

Connect Claude or Codex

Use examples/codex.toml, examples/claude-code.mcp.json or examples/claude-desktop.json, preserving other configured servers. Adjust absolute paths for your installation and keep tokens in private configuration or environment variables. These files are examples, not an installed connection.

The hosted connector address remains https://mcp.apiosk.com/mcp; local source changes do not update that deployment. The Apiosk plugin supplies Ask-first instructions and the hosted connection definition. server.json, manifest.json and dxt.json describe the canonical package; a desktop manifest is not a built or installed bundle.

Configuration and backend boundaries

Gateway scope, budget, workspace and feature restrictions remain authoritative. Organization API keys are not substitutes for agent connection tokens in the raw task/approval protocol. Account-only integrations and native recurring operations may require a valid App session and backend enablement; an app_only or public_api_required response is not bypassed.

Connection tokens use /v2/ask/page, which applies the Ask page's interpreter, validation and source searches. App sessions use the original App routes. Both use the same source filtering, grouping, input values and display currency. Connected discovery preserves the App's matches without the older public API's interpretation repairs or extra source expansion; signed searches remain bound to the account, connection and workspace. Source refresh reuses the saved parse, and automatic planning adopts that displayed search without parsing the question again.

Recurring execution needs its own explicit review of the workflow, schedule, destination and cost limits. apiosk_schedule_handoff supplies instructions for the host scheduler and reports schedule_created: false; it does not create a scheduled job. External app actions likewise require their own reviewed execution.

Saved state, recovery and deployment

The journal stores private conversations, evidence and approval intent with private file permissions, without storing credentials. Conversations are separate from the web app's chat-history table; authorized Gateway tasks can be imported by ID. State scopes include the Gateway and workspace. Raw bearer callers are token-scoped; hosted OAuth sessions retain their verified grant scope across token refresh.

Atomic writes and per-request locks record approval intent before dispatch. An uncertain purchase is not blindly replayed: read saved status and use the returned recovery path. The quoted total is a spending ceiling across providers, not an all-or-nothing transaction. Local disk failures stop money-moving actions.

Hosted operation requires a persistent journal. The Fly configuration preserves the existing app identity and expects an existing mcp_state volume mounted at /data; run one machine until shared state and distributed locking are implemented. Provision and review that volume before deploying. See deployment and release instructions.

Pushing the repository runs checks only. Deployment and publication are separate manual workflows. Tests use controlled fixtures and do not purchase source data; local success is not proof of production retrieval, message delivery, a running schedule or an installed host connection.