Lines 2-42javascript
3import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
4import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
5import { z } from 'zod';
6import { searchSkills } from './skill/search.js';
7import { readSkillFile } from './skill/store.js';
8import { replayEndpoint } from './replay/engine.js';
9import { AuthManager, getMachineId } from './auth/manager.js';
10import { deriveSigningKey } from './auth/crypto.js';
11import { requestAuth } from './auth/handoff.js';
12import { CaptureSession } from './capture/session.js';
13import { discover } from './discovery/index.js';
14import { readIndexEntry } from './index/reader.js';
15import { SessionCache } from './orchestration/cache.js';
16import { peek } from './read/peek.js';
17import { read } from './read/index.js';
18import { resolveAndValidateUrl } from './skill/ssrf.js';
19import { createRequire } from 'node:module';
20import { homedir } from 'node:os';
21import { join } from 'node:path';
22const APITAP_DIR = join(homedir(), '.apitap');
23const require = createRequire(import.meta.url);
24const { version: PACKAGE_VERSION } = require('../package.json');
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/mcp.jsView on unpkg · L22 26 * Wrap response data with external content metadata.
27 * MCP clients that respect this can apply security wrappers (e.g., SECURITY NOTICE).
28 * Tier classification is about replay success, not content trustworthiness —
29 * all external API data should be marked as untrusted.
31function wrapExternalContent(data, source) {
35 text: JSON.stringify(data),
37 // MCP extension: mark as external untrusted content