Tanish Manku
4f2f082403
A signed-in user names a token, picks 30 or 90 days, and confirms with their password or Google; that sign-in becomes the token's own upstream session and must be the account on the page. The secret is rendered once in the POST response (never a redirect URL); the list shows label, hint, and dates only. Revoke is scoped to the user. Claude-Session: https://claude.ai/code/session_01H3gfN2NCx3hBXSrZXYHUQ3
Artcraft MCP server
Cloudflare Worker at mcp.getartcraft.com. Read CLAUDE.md first — it holds the constraints,
the architecture, and the working method; this file is only how to run things.
Run locally
corepack enable # once; provides the pinned pnpm
pnpm install
cp .dev.vars.example .dev.vars
pnpm --filter @artcraft/mcp-fake-upstream dev # fake API on http://localhost:12345
pnpm dev # MCP server on http://localhost:8787
Local never talks to production: wrangler.toml's top-level block points at the fake, and
src/config.ts refuses to start otherwise.
Check everything
pnpm check # typecheck (regenerates Worker types) · lint · format · test
pnpm test # vitest, inside workerd with the local bindings
Deploy
Deploys run from .github/workflows/mcp.yml on main once the Cloudflare secrets exist
(docs/infra-request.md). Manual deploys, when needed:
pnpm deploy:preview # workers.dev, talks to the deployed fake
pnpm deploy:production # mcp.getartcraft.com, talks to api.storyteller.ai
Smoke against a real deployment
The only thing here that touches a real Artcraft backend. Read-only; uses the demo account.
SMOKE_BASE_URL=https://mcp.getartcraft.com SMOKE_USERNAME=… SMOKE_PASSWORD=… pnpm smoke
Runs after every production deploy and weekly (.github/workflows/mcp-smoke.yml) once the
SMOKE_USERNAME / SMOKE_PASSWORD repo secrets exist. Locally it also works against
wrangler dev + the fake (SMOKE_BASE_URL=http://localhost:8787, localdev1 / localdev1pass).
Layout
See CLAUDE.md → Layout.