# FirstCall API Lookup

A read-only MCP server generated from a verified FirstCall recipe. It exposes one tool, `github_user_lookup`, which looks up public user records by username using the GitHub public API.

This repository is built from [FirstCall](https://github.com/rad1092/firstcall-local-api-workbench), a local-first verified API recipe workbench for turning request sources into redacted agent-ready API tool packages.

## Capabilities

- Generated TypeScript MCP server artifact from FirstCall.
- `inputSchema`, `outputSchema`, `structuredContent`, and MCP tool annotations.
- Environment-variable-only secret handling. This server does not require secrets.
- Read-only public API call to `https://api.github.com/users/${username}`.

## Tool

- Tool name: `github_user_lookup`
- Method: `GET`
- URL template: `https://api.github.com/users/${username}`
- Required input: `username`
- Required secrets: none

## Run Locally

```bash
npm install
npm run build
npm start
```

## MCP Client Config

For clients that can run a GitHub-hosted npm package through `npx`:

```json
{
  "mcpServers": {
    "firstcall-api-lookup": {
      "command": "npx",
      "args": ["-y", "github:rad1092/firstcall-api-lookup-mcp"]
    }
  }
}
```

For a local checkout:

```json
{
  "mcpServers": {
    "firstcall-api-lookup": {
      "command": "node",
      "args": ["/absolute/path/to/firstcall-api-lookup-mcp/dist/server.js"]
    }
  }
}
```

Build the local checkout before using the second config:

```bash
npm install
npm run build
```

## Docker

```bash
docker build -t firstcall-api-lookup-mcp .
docker run --rm -i firstcall-api-lookup-mcp
```

## Generated By FirstCall

This server is generated from a verified FirstCall recipe. The generated MCP server is an artifact, not the source of truth for FirstCall package import. FirstCall keeps verification, packaging, validation, inspection, and local re-verification as explicit steps.

## Safety Notes

- No real tokens or secrets are committed here.
- This server does not require environment variables.
- Response previews are redacted by the generated server for common secret-looking keys.
- The tool is read-only and carries MCP annotations as advisory hints.
- Policy and local verification remain FirstCall's guardrails; MCP annotations are not security controls.