mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-11-11 13:24:55 +01:00
Preserve current CI master fixes in the final Copilot candidate
Refresh only the unqualified profile 36 identity after the required merge. Retain upstream OpenCode dependency resolution and the CI-owned lockfile. Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
DottaandPaperclip committed
commit
9769279bb7
47 files changed
+1771
-238
No files matched your search
@@ -0,0 +1,84 @@
|
||||
{
|
||||
"schemaVersion": 1,
|
||||
"slug": "bitly",
|
||||
"name": "Bitly",
|
||||
"description": "Connect Bitly's provider-hosted MCP server.",
|
||||
"categories": [
|
||||
"analytics"
|
||||
],
|
||||
"featured": false,
|
||||
"branding": {
|
||||
"logoUrl": "/brands/apps/bitly.svg"
|
||||
},
|
||||
"urlPatterns": [
|
||||
"https://api-ssl.bitly.com/*"
|
||||
],
|
||||
"docsUrl": "https://dev.bitly.com/bitly-mcp/overview/quickstart/",
|
||||
"redirectConstraints": "https-or-loopback-http",
|
||||
"methods": [
|
||||
{
|
||||
"key": "mcp-oauth",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "oauth",
|
||||
"ownershipModes": [
|
||||
"dcr"
|
||||
],
|
||||
"whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://api-ssl.bitly.com/v4/mcp",
|
||||
"scopesHint": [
|
||||
"mcp.all"
|
||||
]
|
||||
},
|
||||
"guidanceMd": "Connect Bitly in the browser. Choose only the intended workspace. Review the discovered actions and keep writes and destructive operations disabled until explicitly needed.",
|
||||
"riskTier": "S4",
|
||||
"label": "Sign in with Bitly",
|
||||
"consoleLinks": {
|
||||
"docs": "https://dev.bitly.com/bitly-mcp/using-the-bitly-mcp-server/configuration-details/"
|
||||
},
|
||||
"warnings": [
|
||||
"The mcp.all scope covers Bitly's broad MCP catalog, including link and QR management, analytics, groups, custom domains, and Bitly Sites.",
|
||||
"The catalog includes publishing and deletion operations, including permanent short-link deletion, site deletion, and custom-domain changes. Review the full catalog and keep write and destructive actions Off during read-only qualification."
|
||||
]
|
||||
},
|
||||
{
|
||||
"key": "mcp-api-key",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "api_key",
|
||||
"ownershipModes": [
|
||||
"customer"
|
||||
],
|
||||
"whenToUse": "Use a customer-created Bitly API token when browser sign-in is not suitable.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://api-ssl.bitly.com/v4/mcp"
|
||||
},
|
||||
"guidanceMd": "Generate a Bitly API token under Settings → API. The token may authorize the MCP's full catalog under your Bitly account; Paperclip cannot narrow the token. Review discovered actions and keep writes and destructive operations disabled until explicitly needed.",
|
||||
"riskTier": "S4",
|
||||
"label": "Use an API key",
|
||||
"credentialFields": [
|
||||
{
|
||||
"key": "authorization",
|
||||
"label": "Bitly API key",
|
||||
"type": "password",
|
||||
"required": true,
|
||||
"placeholder": "Paste your Bitly API token",
|
||||
"secret": true,
|
||||
"helperMd": "Bitly's API token may authorize the MCP's broad catalog under your account. Paperclip cannot narrow the token; keep write and destructive actions Off unless you explicitly need them."
|
||||
}
|
||||
],
|
||||
"keyPlacement": {
|
||||
"location": "header",
|
||||
"name": "Authorization",
|
||||
"prefix": "Bearer "
|
||||
},
|
||||
"consoleLinks": {
|
||||
"keys": "https://bitly.com/settings/api",
|
||||
"docs": "https://dev.bitly.com/bitly-mcp/using-the-bitly-mcp-server/configuration-details/"
|
||||
},
|
||||
"warnings": [
|
||||
"This API token is not documented as a restricted MCP token. It may authorize Bitly's broad MCP catalog, including link creation/update/deletion, QR codes, Sites publishing/deletion, and custom-domain operations.",
|
||||
"Review the discovered catalog and keep write and destructive actions Off during read-only qualification."
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,53 @@
|
||||
{
|
||||
"schemaVersion": 1,
|
||||
"slug": "clickup",
|
||||
"name": "ClickUp",
|
||||
"description": "Search ClickUp workspaces and manage tasks, docs, and conversations through the official MCP server.",
|
||||
"categories": [
|
||||
"productivity"
|
||||
],
|
||||
"featured": false,
|
||||
"branding": {
|
||||
"logoUrl": "/brands/apps/clickup.png"
|
||||
},
|
||||
"urlPatterns": [
|
||||
"https://mcp.clickup.com/*"
|
||||
],
|
||||
"docsUrl": "https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server",
|
||||
"redirectConstraints": "https-or-loopback-http",
|
||||
"methods": [
|
||||
{
|
||||
"key": "mcp-oauth",
|
||||
"label": "Sign in with ClickUp",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "oauth",
|
||||
"ownershipModes": [
|
||||
"dcr"
|
||||
],
|
||||
"grantKinds": [
|
||||
"user"
|
||||
],
|
||||
"whenToUse": "Connect the provider-hosted ClickUp MCP server with browser sign-in.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://mcp.clickup.com/mcp",
|
||||
"scopesHint": [
|
||||
"read",
|
||||
"write"
|
||||
]
|
||||
},
|
||||
"guidanceMd": "Choose only the ClickUp workspace needed. Confirm the target list and task before changing content, starting a timer, posting a chat message, or deleting anything.",
|
||||
"warnings": [
|
||||
"ClickUp's MCP may expose task, document, and chat writes, time tracking, and task deletion under the signed-in user's permissions. Review the catalog and keep write and destructive actions disabled until explicitly needed.",
|
||||
"Workspace usage may be subject to plan-based rolling daily MCP limits."
|
||||
],
|
||||
"consoleLinks": {
|
||||
"docs": "https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server"
|
||||
},
|
||||
"riskTier": "S4",
|
||||
"requiredResourceFilters": [
|
||||
"workspace",
|
||||
"list"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,41 @@
|
||||
{
|
||||
"schemaVersion": 1,
|
||||
"slug": "context7",
|
||||
"name": "Context7",
|
||||
"description": "Search public library documentation and retrieve current code examples.",
|
||||
"categories": [
|
||||
"developer"
|
||||
],
|
||||
"featured": false,
|
||||
"branding": {
|
||||
"logoUrl": "/brands/apps/context7.svg",
|
||||
"darkLogoUrl": "/brands/apps/context7-dark.svg"
|
||||
},
|
||||
"urlPatterns": [
|
||||
"https://mcp.context7.com/*"
|
||||
],
|
||||
"docsUrl": "https://context7.com/docs/api-guide",
|
||||
"methods": [
|
||||
{
|
||||
"key": "mcp",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "none",
|
||||
"ownershipModes": [
|
||||
"customer"
|
||||
],
|
||||
"whenToUse": "Use the public hosted MCP server for read-only library documentation lookups.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://mcp.context7.com/mcp"
|
||||
},
|
||||
"guidanceMd": "Connect Context7 to resolve public library IDs and retrieve current documentation. Anonymous access is supported with low rate limits; this method does not configure an API key. Keep queries limited to public documentation questions and do not include credentials, personal data, or proprietary code.",
|
||||
"riskTier": "S1",
|
||||
"consoleLinks": {
|
||||
"docs": "https://context7.com/docs/api-guide"
|
||||
},
|
||||
"warnings": [
|
||||
"Context7 processes the query text. Do not include secrets, personal information, or proprietary code.",
|
||||
"Anonymous requests have low rate limits. Provider documentation says an API key raises limits and supports private repositories; this public method does not configure a key."
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,69 @@
|
||||
{
|
||||
"schemaVersion": 1,
|
||||
"slug": "hugging-face",
|
||||
"name": "Hugging Face",
|
||||
"description": "Connect Hugging Face's provider-hosted MCP server.",
|
||||
"categories": [
|
||||
"ai"
|
||||
],
|
||||
"featured": false,
|
||||
"branding": {
|
||||
"logoUrl": "/brands/apps/hugging-face.svg"
|
||||
},
|
||||
"urlPatterns": [
|
||||
"https://huggingface.co/*"
|
||||
],
|
||||
"docsUrl": "https://huggingface.co/docs/hub/agents-mcp",
|
||||
"redirectConstraints": "https-or-loopback-http",
|
||||
"methods": [
|
||||
{
|
||||
"key": "mcp-oauth",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "oauth",
|
||||
"ownershipModes": [
|
||||
"dcr"
|
||||
],
|
||||
"whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://huggingface.co/mcp?login&gradio=none",
|
||||
"scopesHint": [
|
||||
"read-mcp",
|
||||
"read-repos",
|
||||
"contribute-repos",
|
||||
"jobs"
|
||||
]
|
||||
},
|
||||
"guidanceMd": "Connect Hugging Face in the browser. A Hugging Face account.",
|
||||
"riskTier": "S2",
|
||||
"label": "Sign in with Hugging Face",
|
||||
"consoleLinks": {
|
||||
"docs": "https://huggingface.co/docs/hub/agents-mcp"
|
||||
},
|
||||
"warnings": [
|
||||
"A Hugging Face account."
|
||||
]
|
||||
},
|
||||
{
|
||||
"key": "public-mcp",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "none",
|
||||
"ownershipModes": [
|
||||
"customer"
|
||||
],
|
||||
"whenToUse": "Use the anonymous hosted MCP endpoint for public Hugging Face Hub lookups.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://huggingface.co/mcp"
|
||||
},
|
||||
"guidanceMd": "This anonymous method exposes the public Hugging Face Hub read tools for repository search, public repository details, datasets, and documentation. It does not require an account or API key and is rate-limited. Keep queries to public information; do not include secrets, personal data, private repository names, or proprietary content.",
|
||||
"riskTier": "S1",
|
||||
"label": "Use public Hugging Face Hub",
|
||||
"consoleLinks": {
|
||||
"docs": "https://huggingface.co/docs/hub/agents-mcp"
|
||||
},
|
||||
"warnings": [
|
||||
"Anonymous requests are rate-limited by Hugging Face.",
|
||||
"This method only advertises read tools for the public Hub; do not include secrets, personal data, private repository names, or proprietary content in queries."
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,59 @@
|
||||
{
|
||||
"schemaVersion": 1,
|
||||
"slug": "klaviyo",
|
||||
"name": "Klaviyo",
|
||||
"description": "Review Klaviyo campaign performance and prepare campaign changes for review.",
|
||||
"categories": [
|
||||
"commerce"
|
||||
],
|
||||
"featured": false,
|
||||
"branding": {
|
||||
"logoUrl": "/brands/apps/klaviyo.png"
|
||||
},
|
||||
"urlPatterns": [
|
||||
"https://mcp.klaviyo.com/*"
|
||||
],
|
||||
"docsUrl": "https://developers.klaviyo.com/en/docs/connect_to_the_klaviyo_mcp_server",
|
||||
"redirectConstraints": "https-or-loopback-http",
|
||||
"methods": [
|
||||
{
|
||||
"key": "mcp-oauth",
|
||||
"label": "Sign in with Klaviyo",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "oauth",
|
||||
"oauthClientRegistration": "dcr",
|
||||
"ownershipModes": [
|
||||
"dcr"
|
||||
],
|
||||
"whenToUse": "Connect to the provider-hosted Klaviyo MCP server with browser sign-in.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://mcp.klaviyo.com/mcp?toolsets=campaigns:read,campaigns:write,metrics:read,segments:read"
|
||||
},
|
||||
"guidanceMd": "Review campaign and metric data, then prepare campaign changes for human review. Campaign write access may expose sends and other state changes; never send or schedule a campaign without explicit authorization and an allowed Paperclip action.",
|
||||
"riskTier": "S4",
|
||||
"tenantFields": [
|
||||
{
|
||||
"key": "readOnly",
|
||||
"label": "Read-only mode",
|
||||
"type": "checkbox",
|
||||
"advanced": true,
|
||||
"defaultValue": false,
|
||||
"helperMd": "Turn on to remove Klaviyo MCP tools that can modify account data. This provider-side restriction is separate from Paperclip action permissions.",
|
||||
"transport": {
|
||||
"location": "query",
|
||||
"name": "read-only",
|
||||
"format": "boolean",
|
||||
"omitFalse": true
|
||||
}
|
||||
}
|
||||
],
|
||||
"consoleLinks": {
|
||||
"docs": "https://developers.klaviyo.com/en/docs/connect_to_the_klaviyo_mcp_server"
|
||||
},
|
||||
"warnings": [
|
||||
"Klaviyo's remote MCP requires an Owner, Admin, or Manager account role.",
|
||||
"The campaigns:write toolset may expose campaign sending and other writes. Keep write actions Off until reviewed; the provider's Advanced read-only mode is optional and does not replace Paperclip action permissions."
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,46 @@
|
||||
{
|
||||
"schemaVersion": 1,
|
||||
"slug": "monday",
|
||||
"name": "monday.com",
|
||||
"description": "Read and manage boards and work items in monday.com.",
|
||||
"categories": [
|
||||
"productivity"
|
||||
],
|
||||
"featured": false,
|
||||
"branding": {
|
||||
"logoUrl": "/brands/apps/monday.png",
|
||||
"darkLogoUrl": "/brands/apps/monday-dark.png"
|
||||
},
|
||||
"urlPatterns": [
|
||||
"https://mcp.monday.com/*"
|
||||
],
|
||||
"docsUrl": "https://developer.monday.com/api-reference/docs/integrate-with-monday-mcp",
|
||||
"redirectConstraints": "https-or-loopback-http",
|
||||
"methods": [
|
||||
{
|
||||
"key": "mcp-oauth",
|
||||
"label": "Sign in with monday.com",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "oauth",
|
||||
"ownershipModes": [
|
||||
"dcr"
|
||||
],
|
||||
"whenToUse": "Connect the hosted monday.com MCP server using OAuth and dynamic client registration.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://mcp.monday.com/mcp"
|
||||
},
|
||||
"guidanceMd": "Use the selected monday.com account only. Read the target board and its columns before acting, and verify the exact board and item before any change. Keep write and destructive actions Off unless the user explicitly asks for a specific change. Never send messages, publish, or trigger automations through a board action without separate authorization.",
|
||||
"warnings": [
|
||||
"The hosted MCP server acts as the authorizing monday.com user and inherits that user's monday.com permissions. An account admin may also restrict MCP access to selected workspaces.",
|
||||
"An additional OAuth/DCR connection can require account-admin approval for Paperclip and its exact callback URL before user authorization completes. If approval is pending, reconnect after the account admin approves it.",
|
||||
"monday.com personal API tokens are documented for personal use, prototyping, and testing, and the provider says they are not intended for integrations used by other people. This connector uses the OAuth/DCR route for additional MCP clients; account-level approval may be required.",
|
||||
"The tool catalog includes actions that can send notifications (optionally email), delete or activate automations, publish workflows, and create or run monday.com platform agents; a low-level tool can execute GraphQL mutations. Keep these actions Off unless separately authorized, and never run agents or change automations during qualification.",
|
||||
"MCP calls count toward the account's monday.com API call limits. Keep tests bounded and avoid repeated discovery or broad queries."
|
||||
],
|
||||
"consoleLinks": {
|
||||
"docs": "https://developer.monday.com/api-reference/docs/integrate-with-monday-mcp"
|
||||
},
|
||||
"riskTier": "S4"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,45 @@
|
||||
{
|
||||
"schemaVersion": 1,
|
||||
"slug": "resend",
|
||||
"name": "Resend",
|
||||
"description": "Connect Resend's provider-hosted MCP server.",
|
||||
"categories": [
|
||||
"communication"
|
||||
],
|
||||
"featured": false,
|
||||
"branding": {
|
||||
"logoUrl": "/brands/apps/resend.svg",
|
||||
"darkLogoUrl": "/brands/apps/resend-dark.svg"
|
||||
},
|
||||
"urlPatterns": [
|
||||
"https://mcp.resend.com/*"
|
||||
],
|
||||
"docsUrl": "https://resend.com/changelog/remote-mcp-server",
|
||||
"redirectConstraints": "https-or-loopback-http",
|
||||
"methods": [
|
||||
{
|
||||
"key": "mcp-oauth",
|
||||
"transport": "mcp_remote",
|
||||
"auth": "oauth",
|
||||
"ownershipModes": [
|
||||
"dcr"
|
||||
],
|
||||
"whenToUse": "Use browser sign-in for the provider-hosted MCP server.",
|
||||
"defaults": {
|
||||
"serverUrl": "https://mcp.resend.com/mcp",
|
||||
"scopesHint": [
|
||||
"full_access"
|
||||
]
|
||||
},
|
||||
"guidanceMd": "Sign in to the intended Resend team. The full_access grant covers reading and managing account resources, including sending email and deletion. Review the discovered actions in Paperclip before using them.",
|
||||
"riskTier": "S4",
|
||||
"label": "Sign in with Resend",
|
||||
"consoleLinks": {
|
||||
"docs": "https://resend.com/changelog/remote-mcp-server"
|
||||
},
|
||||
"warnings": [
|
||||
"Resend full_access grants broad account read/write/delete access; Paperclip action policies govern execution separately."
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in new issue
Block a user