[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_108":109,"_110":111},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","cameronpak","name","oauth-demos","path","main.tsx","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":36,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/cameronpak/oauth-demos/code/main.tsx","extension","id","2a6f7b46-6cee-4b04-bbb4-b593421b6ea7","fileId","01a064df-2166-778e-a16b-559cf07fe805","parentId","branchId","38034510-8a8c-4372-9138-784d07f506c4","branchVersion",1,"latest",true,"createdAt",["D",1788398739318],"version",0,"fileType","http","content","/** @jsxImportSource https://esm.sh/hono/jsx */\nimport { Hono } from \"https://esm.sh/hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { OpenAI } from \"https://esm.town/v/std/openai/main.ts\";\nimport { directoryEntries } from \"./directory-data.ts\";\nimport { registryScanMeta } from \"./registry-scan-data.ts\";\nimport { featuredHosts } from \"./featured-apps.ts\";\nimport { codeTourPage } from \"./code-tour.tsx\";\n\nconst app = new Hono();\nlet cachedTokenKey: CryptoKey | null = null;\n\nasync function tokenKey() {\n if (cachedTokenKey) return cachedTokenKey;\n const blobKey = \"mcp-token-encryption-key:v1\";\n let material = await blob.getJSON(blobKey) as string | null;\n if (!material) {\n material = btoa(String.fromCharCode(...crypto.getRandomValues(new Uint8Array(32))));\n await blob.setJSON(blobKey, material);\n }\n const hash = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(material));\n cachedTokenKey = await crypto.subtle.importKey(\"raw\", hash, {name:\"AES-GCM\"}, false, [\"encrypt\",\"decrypt\"]);\n return cachedTokenKey;\n}\n\nasync function encryptToken(data:string) {\n const iv=crypto.getRandomValues(new Uint8Array(12));\n const encrypted=await crypto.subtle.encrypt({name:\"AES-GCM\",iv},await tokenKey(),new TextEncoder().encode(data));\n const bytes=new Uint8Array(12+encrypted.byteLength);\n bytes.set(iv); bytes.set(new Uint8Array(encrypted),12);\n return b64url(bytes);\n}\n\nasync function decryptToken(data:string) {\n try {\n const raw=data.replaceAll(\"-\",\"+\").replaceAll(\"_\",\"/\");\n const bytes=Uint8Array.from(atob(raw),(c)=>c.charCodeAt(0));\n const decrypted=await crypto.subtle.decrypt({name:\"AES-GCM\",iv:bytes.slice(0,12)},await tokenKey(),bytes.slice(12));\n return new TextDecoder().decode(decrypted);\n } catch { throw new Error(\"This connection uses an expired encryption key. Please reconnect it.\"); }\n}\nconst enc = new TextEncoder();\nconst b64url = (b: Uint8Array) => btoa(String.fromCharCode(...b)).replaceAll(\"+\",\"-\").replaceAll(\"/\",\"_\").replaceAll(\"=\",\"\");\nconst sha256 = async (s: string) => b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(s))));\nconst esc = (s: unknown) => String(s ?? \"\").replaceAll(\"&\",\"&\").replaceAll(\"<\",\"<\").replaceAll(\">\",\">\").replaceAll('\"',\""\");\nconst cookie = (req: Request, name: string) => (req.headers.get(\"cookie\") || \"\").split(\";\").map(x=>x.trim()).find(x=>x.startsWith(name+\"=\"))?.slice(name.length+1);\n\ntype Provider = {\n name:string; key:string; endpoint:string; auth:string; token:string; register:string;\n scope:string; cimd:boolean; authMethod:\"none\"|\"client_secret_post\";\n};\n\nconst providers: Provider[] = [\n {name:\"Val Town\",key:\"valtown\",endpoint:\"https://api.val.town/v3/mcp\",auth:\"https://www.val.town/oauth/auth\",token:\"https://www.val.town/oauth/token\",register:\"https://www.val.town/oauth/reg\",scope:\"openid offline_access profile user_r project_rw\",cimd:false,authMethod:\"none\"},\n {name:\"Notion\",key:\"notion\",endpoint:\"https://mcp.notion.com/mcp\",auth:\"https://mcp.notion.com/authorize\",token:\"https://mcp.notion.com/token\",register:\"https://mcp.notion.com/register\",scope:\"\",cimd:true,authMethod:\"none\"},\n {name:\"Linear\",key:\"linear\",endpoint:\"https://mcp.linear.app/mcp\",auth:\"https://mcp.linear.app/authorize\",token:\"https://mcp.linear.app/token\",register:\"https://mcp.linear.app/register\",scope:\"read openid email\",cimd:true,authMethod:\"none\"},\n {name:\"Sentry\",key:\"sentry\",endpoint:\"https://mcp.sentry.dev/mcp\",auth:\"https://mcp.sentry.dev/oauth/authorize\",token:\"https://mcp.sentry.dev/oauth/token\",register:\"https://mcp.sentry.dev/oauth/register\",scope:\"org:read\",cimd:false,authMethod:\"none\"},\n {name:\"Stripe\",key:\"stripe\",endpoint:\"https://mcp.stripe.com\",auth:\"https://access.stripe.com/mcp/oauth2/authorize\",token:\"https://access.stripe.com/mcp/oauth2/token\",register:\"https://access.stripe.com/mcp/oauth2/register\",scope:\"mcp\",cimd:false,authMethod:\"none\"},\n];\nconst byKey=new Map(providers.map(p=>[p.key,p]));\nconst slug=(name:string)=>name.toLowerCase().replace(/[^a-z0-9]+/g,\"-\").replace(/^-|-$/g,\"\");\nconst providerCache=new Map();\n\nasync function resolveProvider(key:string){\n const configured=byKey.get(key);\n if(configured)return configured;\n if(providerCache.has(key))return providerCache.get(key);\n const entry=directoryEntries.find(x=>slug(x.service)===key);\n const metadataUrl=[entry?.cimdUrl,entry?.dcrUrl].find(x=>x?.includes(\"/.well-known/\"));\n if(!entry?.mcpUrl||!metadataUrl)return undefined;\n const res=await fetch(metadataUrl);\n if(!res.ok)return undefined;\n const metadata=await res.json();\n if(!metadata.authorization_endpoint||!metadata.token_endpoint)return undefined;\n const provider:Provider={\n name:entry.service,key,endpoint:entry.mcpUrl,\n auth:metadata.authorization_endpoint,token:metadata.token_endpoint,\n register:metadata.registration_endpoint||\"\",scope:\"\",cimd:entry.cimd===\"yes\",authMethod:\"none\",\n };\n providerCache.set(key,provider);\n return provider;\n}\n\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS mcp_flows (\n state TEXT PRIMARY KEY, provider TEXT NOT NULL, client_id TEXT NOT NULL,\n client_secret TEXT, verifier TEXT NOT NULL, redirect_uri TEXT NOT NULL, created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS mcp_connections (\n sid TEXT NOT NULL, provider TEXT NOT NULL, tools TEXT NOT NULL,\n access_token TEXT, connected_at INTEGER NOT NULL, PRIMARY KEY(sid, provider)\n )`);\n try { await sqlite.execute(\"ALTER TABLE mcp_connections ADD COLUMN access_token TEXT\"); } catch {}\n}\n\nasync function parseMcp(res: Response) {\n const text = await res.text();\n if (!res.ok) throw new Error(`MCP returned ${res.status}: ${text.slice(0,160)}`);\n if ((res.headers.get(\"content-type\") || \"\").includes(\"text/event-stream\")) {\n const lines = text.split(\"\\n\").filter(x=>x.startsWith(\"data:\"));\n for (const line of lines) {\n try { return JSON.parse(line.slice(5).trim()); } catch {}\n }\n }\n return JSON.parse(text);\n}\n\nasync function mcpCall(provider: Provider, token: string, method: string, params: any, session?: string) {\n const headers: Record = {\n authorization: \"Bearer \" + token,\n \"content-type\": \"application/json\",\n accept: \"application/json, text/event-stream\",\n };\n if (session) headers[\"mcp-session-id\"] = session;\n const res = await fetch(provider.endpoint, {\n method:\"POST\", headers,\n body:JSON.stringify({jsonrpc:\"2.0\", id:crypto.randomUUID(), method, params}),\n });\n return { data: await parseMcp(res), session: res.headers.get(\"mcp-session-id\") || session };\n}\n\nasync function mcpToolList(provider: Provider, token: string) {\n const initialized = await mcpCall(provider, token, \"initialize\", {\n protocolVersion:\"2025-11-25\",\n capabilities:{},\n clientInfo:{name:\"Connect to all the apps with OAuth DCR + CIMD\",version:\"1.0.0\"},\n });\n try {\n await fetch(provider.endpoint, {\n method:\"POST\",\n headers:{\n authorization:\"Bearer \"+token, \"content-type\":\"application/json\",\n accept:\"application/json, text/event-stream\",\n ...(initialized.session ? {\"mcp-session-id\":initialized.session}:{}),\n },\n body:JSON.stringify({jsonrpc:\"2.0\",method:\"notifications/initialized\"}),\n });\n } catch {}\n const listed = await mcpCall(provider, token, \"tools/list\", {}, initialized.session || undefined);\n return { tools: listed.data?.result?.tools || [], session: listed.session || initialized.session };\n}\n\nasync function authenticatedTools(provider: Provider, token: string) {\n const { tools } = await mcpToolList(provider, token);\n return tools.map((t:any)=>({name:t.name,description:t.description || \"\"}));\n}\n\nasync function mcpToolCall(provider: Provider, token: string, name: string, args: any) {\n const initialized = await mcpCall(provider, token, \"initialize\", {\n protocolVersion:\"2025-11-25\", capabilities:{}, clientInfo:{name:\"Connect to all the apps with OAuth DCR + CIMD\",version:\"1.0.0\"},\n });\n try { await fetch(provider.endpoint,{method:\"POST\",headers:{authorization:\"Bearer \"+token,\"content-type\":\"application/json\",accept:\"application/json, text/event-stream\",...(initialized.session?{\"mcp-session-id\":initialized.session}:{})},body:JSON.stringify({jsonrpc:\"2.0\",method:\"notifications/initialized\"})}); } catch {}\n const called=await mcpCall(provider,token,\"tools/call\",{name,arguments:args},initialized.session||undefined);\n return called.data?.result;\n}\n\nfunction page(connections:any[],error:string|undefined,mode:\"home\"|\"all\"){\n const connected=new Map(connections.map((x:any)=>[x.provider,x]));\n const isRunnable=(entry:(typeof directoryEntries)[number])=>{\n const key=entry.service===\"Val Town\"?\"valtown\":slug(entry.service);\n const configured=byKey.has(key);\n const discoverable=Boolean(entry.mcpUrl&&[entry.cimdUrl,entry.dcrUrl].some(x=>x?.includes(\"/.well-known/\")));\n return (configured||discoverable)&&(entry.dcr===\"yes\"||entry.cimd===\"yes\");\n };\n const runnable=directoryEntries.filter(isRunnable);\n // Section 1: well-known apps in the hand-ordered sequence from featured-apps.ts (keyed by MCP host).\n // Section 2: everything else, alphabetically.\n const hostOf=(entry:(typeof directoryEntries)[number])=>{try{return new URL(entry.mcpUrl!).hostname}catch{return \"\"}};\n const byHost=new Map();\n for(const entry of runnable) if(!byHost.has(hostOf(entry))) byHost.set(hostOf(entry),entry);\n const featured=featuredHosts.map(h=>byHost.get(h)).filter((e):e is (typeof directoryEntries)[number]=>Boolean(e));\n const featuredSet=new Set(featured);\n const longTail=runnable.filter(e=>!featuredSet.has(e)).sort((a,b)=>a.service.localeCompare(b.service,\"en\",{sensitivity:\"base\"}));\n const entries=[...featured,...longTail];\n // Corporate favicon host for each known brand. Marketing favicons live on the corporate domain,\n // not on the mcp./api. subdomains, so map the display name to the brand's site to get a real icon.\n const logoDomains:Record={\n \"Airtable\":\"airtable.com\",\"Algolia\":\"algolia.com\",\"Amplitude\":\"amplitude.com\",\"Atlassian\":\"atlassian.com\",\n \"Brandfetch\":\"brandfetch.com\",\"Calendly\":\"calendly.com\",\"Canva\":\"canva.com\",\"CircleCI\":\"circleci.com\",\n \"Cloudflare\":\"cloudflare.com\",\"Cloudinary\":\"cloudinary.com\",\"Cypress\":\"cypress.io\",\"Exa\":\"exa.ai\",\n \"GitLab\":\"gitlab.com\",\"Grafana\":\"grafana.com\",\"Honeycomb\":\"honeycomb.io\",\"Hugging Face\":\"huggingface.co\",\n \"IFTTT\":\"ifttt.com\",\"Intercom\":\"intercom.com\",\"Jotform\":\"jotform.com\",\"LambdaTest\":\"lambdatest.com\",\n \"Linear\":\"linear.app\",\"Make\":\"make.com\",\"Mapbox\":\"mapbox.com\",\"Miro\":\"miro.com\",\"Monday.com\":\"monday.com\",\n \"Mux\":\"mux.com\",\"New Relic\":\"newrelic.com\",\"Notion\":\"notion.so\",\"PayPal\":\"paypal.com\",\n \"PlanetScale\":\"planetscale.com\",\"PostHog\":\"posthog.com\",\"Postman\":\"postman.com\",\"Prisma\":\"prisma.io\",\n \"Railway\":\"railway.com\",\"Replit\":\"replit.com\",\"Sanity\":\"sanity.io\",\"Sentry\":\"sentry.io\",\n \"Sequentum\":\"sequentum.com\",\"Stripe\":\"stripe.com\",\"Supabase\":\"supabase.com\",\"SureSMS\":\"suresms.com\",\n \"Todoist\":\"todoist.com\",\"Val Town\":\"val.town\",\"Vercel\":\"vercel.com\",\"Webflow\":\"webflow.com\",\n \"Wix\":\"wix.com\",\"WordPress.com\":\"wordpress.com\",\"Zapier\":\"zapier.com\",\"monday.com\":\"monday.com\",\n };\n const status=(value:string,url:string|null)=>{\n const label=value===\"yes\"?\"Yes\":value===\"no\"?\"No\":value===\"restricted\"?\"Restricted\":value===\"n/a\"?\"N/A\":\"Unknown\";\n const badge=`${label}`;\n return url&&/^https?:\\/\\//.test(url)?`${badge}`:badge;\n };\n const rowFor=(entry:(typeof directoryEntries)[number])=>{\n const key=entry.service===\"Val Town\"?\"valtown\":slug(entry.service),isConnected=connected.has(key);\n const configured=byKey.has(key);\n const discoverable=Boolean(entry.mcpUrl&&[entry.cimdUrl,entry.dcrUrl].some(x=>x?.includes(\"/.well-known/\")));\n const dcr=entry.dcr===\"yes\"&&(configured||discoverable);\n const cimd=entry.cimd===\"yes\"&&(configured||discoverable);\n const protocolCell=(mode:\"dcr\"|\"cimd\",runnable:boolean,value:string,url:string|null)=>{\n if(!runnable)return status(value,url);\n const label=isConnected?\"Reconnect\":\"Connect\";\n const evidence=url&&/^https?:\\/\\//.test(url)?``:\"\";\n return `${label}${evidence}`;\n };\n // Favicons live on the marketing domain, not on mcp./api. subdomains, so strip to the registrable domain.\n const rootDomain=(h:string)=>{const p=h.split(\".\");return p.length>2&&/^(co|com|org|net|ac|gov)$/.test(p[p.length-2])&&p[p.length-1].length===2?p.slice(-3).join(\".\"):p.slice(-2).join(\".\")};\n const logo=\"https://www.google.com/s2/favicons?sz=64&domain=\"+encodeURIComponent(logoDomains[entry.service]||rootDomain(hostOf(entry)));\n return `\n $\"\"$ ${esc(entry.service)}\n ${protocolCell(\"dcr\",dcr,entry.dcr,entry.dcrUrl)}\n ${protocolCell(\"cimd\",cimd,entry.cimd,entry.cimdUrl)}\n `;\n };\n const featuredRows=featured.map(rowFor).join(\"\");\n const tailRows=longTail.map(rowFor).join(\"\");\n const allEntries=[...featured,...longTail].sort((a,b)=>a.service.localeCompare(b.service,\"en\",{sensitivity:\"base\"}));\n const allRows=allEntries.map(rowFor).join(\"\");\n const publicCount=entries.length;\n const curatedCount=entries.filter(e=>e.source!==\"MCP Registry scan\").length;\n const scanCount=publicCount-curatedCount;\n const hasConnections=connections.length>0;\n return `\nConnect to all the apps with OAuth DCR + CIMD

Connect to all the apps with OAuth DCR + CIMD

One client, many services. Connect with Dynamic Client Registration or Client ID Metadata Documents, then ask one question across everything you authorized.

\n${error?`

${esc(error)}

`:\"\"}\n

Chat with your connections

${hasConnections?\"Ask about the services you connected below.\":\"Connect at least one app below to enable chat.\"}

${hasConnections?\"Ask me for the three most recent items from each connected service.\":\"Your connected apps will appear here.\"}

\n${mode===\"home\"\n ?`

Featured apps

${featured.length} well-known services found by scanning every remote server in the MCP registry on ${esc(registryScanMeta.scannedAt)}. Browse the full A–Z list — ${publicCount.toLocaleString()} services total.

${featuredRows}

App	DCR	CIMD

`\n :`

All ${publicCount.toLocaleString()} apps, A–Z

Every service found by scanning the MCP registry on ${esc(registryScanMeta.scannedAt)} (${registryScanMeta.hostsWithDcr.toLocaleString()} hosts advertise DCR, ${registryScanMeta.hostsWithCimd.toLocaleString()} advertise CIMD). View featured.

${allRows}

App	DCR	CIMD

`}\n

Featured Full list (${publicCount.toLocaleString()} apps)Code tour View source

\n\n

`;\n}\n\napp.get(\"/directory\",c=>c.redirect(\"/#directory\"));\napp.get(\"/code-tour\",c=>c.html(codeTourPage()));\n\napp.get(\"/\", async c => {\n await init();\n const sid=cookie(c.req.raw,\"mcp_demo_sid\");\n let connections:any[]=[];\n if(sid) connections=(await sqlite.execute({sql:\"SELECT provider,tools,connected_at FROM mcp_connections WHERE sid=? AND access_token IS NOT NULL\",args:[sid]})).rows as any[];\n return c.html(page(connections,c.req.query(\"error\"),\"home\"));\n});\n\napp.get(\"/apps\", async c => {\n await init();\n const sid=cookie(c.req.raw,\"mcp_demo_sid\");\n let connections:any[]=[];\n if(sid) connections=(await sqlite.execute({sql:\"SELECT provider,tools,connected_at FROM mcp_connections WHERE sid=? AND access_token IS NOT NULL\",args:[sid]})).rows as any[];\n return c.html(page(connections,undefined,\"all\"));\n});\n\napp.get(\"/oauth/client-metadata.json\",c=>{\n const origin=new URL(c.req.url).origin;\n return c.json({\n client_id:origin+\"/oauth/client-metadata.json\",\n client_name:\"Connect to all the apps with OAuth DCR + CIMD\",\n client_uri:origin,\n redirect_uris:[origin+\"/oauth/callback\"],\n grant_types:[\"authorization_code\",\"refresh_token\"],\n response_types:[\"code\"],\n token_endpoint_auth_method:\"none\",\n });\n});\n\napp.get(\"/oauth/:provider/:mode/start\",async c=>{\n await init();\n const p=await resolveProvider(c.req.param(\"provider\"));\n const mode=c.req.param(\"mode\");\n if(!p||![\"dcr\",\"cimd\"].includes(mode))return c.notFound();\n if(mode===\"cimd\"&&!p.cimd)return c.redirect(\"/?error=\"+encodeURIComponent(p.name+\" does not advertise CIMD.\"));\n try{\n const origin=new URL(c.req.url).origin;\n const redirectUri=origin+\"/oauth/callback\";\n const verifier=b64url(crypto.getRandomValues(new Uint8Array(48)));\n const challenge=await sha256(verifier);\n const state=crypto.randomUUID();\n let client:any={client_id:origin+\"/oauth/client-metadata.json\"};\n if(mode===\"dcr\"){\n const registration={\n client_name:\"Connect to all the apps with OAuth DCR + CIMD\",client_uri:origin,redirect_uris:[redirectUri],\n grant_types:[\"authorization_code\",\"refresh_token\"],response_types:[\"code\"],token_endpoint_auth_method:p.authMethod,\n };\n const rr=await fetch(p.register,{method:\"POST\",headers:{\"content-type\":\"application/json\",\"accept\":\"application/json\"},body:JSON.stringify(registration)});\n const raw=await rr.text();\n if(!rr.ok)throw new Error(`${p.name} registration failed (${rr.status}): ${raw.slice(0,160)}`);\n client=JSON.parse(raw);\n }\n await sqlite.execute({sql:\"INSERT INTO mcp_flows(state,provider,client_id,client_secret,verifier,redirect_uri,created_at) VALUES(?,?,?,?,?,?,?)\",args:[state,p.key,client.client_id,client.client_secret||null,verifier,redirectUri,Date.now()]});\n const q:Record={response_type:\"code\",client_id:client.client_id,redirect_uri:redirectUri,state,code_challenge:challenge,code_challenge_method:\"S256\"};\n q.resource=p.endpoint;\n if(p.scope)q.scope=p.scope;\n return c.redirect(p.auth+\"?\"+new URLSearchParams(q));\n }catch(e){return c.redirect(\"/?error=\"+encodeURIComponent(e instanceof Error?e.message:String(e)))}\n});\n\napp.get(\"/mcp/:provider/start\",c=>c.redirect(\"/oauth/\"+c.req.param(\"provider\")+\"/dcr/start\"));\n\napp.get(\"/oauth/callback\",async c=>{\n await init();\n const state=c.req.query(\"state\")||\"\",code=c.req.query(\"code\")||\"\";\n const flow:any=(await sqlite.execute({sql:\"SELECT * FROM mcp_flows WHERE state=?\",args:[state]})).rows[0];\n if(!flow||!code)return c.redirect(\"/?error=\"+encodeURIComponent(\"OAuth response could not be verified.\"));\n const p=await resolveProvider(flow.provider);\n if(!p)return c.redirect(\"/?error=\"+encodeURIComponent(\"Unknown provider.\"));\n try{\n const form:Record={grant_type:\"authorization_code\",code,client_id:flow.client_id,redirect_uri:flow.redirect_uri,code_verifier:flow.verifier};\n form.resource=p.endpoint;\n if(flow.client_secret)form.client_secret=flow.client_secret;\n const tr=await fetch(p.token,{method:\"POST\",headers:{\"content-type\":\"application/x-www-form-urlencoded\",\"accept\":\"application/json\"},body:new URLSearchParams(form)});\n const raw=await tr.text();\n if(!tr.ok)throw new Error(`${p.name} token exchange failed (${tr.status}): ${raw.slice(0,160)}`);\n const token=JSON.parse(raw);\n const summary=await authenticatedTools(p,token.access_token);\n const encryptedToken=await encryptToken(token.access_token);\n let sid=cookie(c.req.raw,\"mcp_demo_sid\")||crypto.randomUUID();\n await sqlite.batch([\n {sql:\"INSERT OR REPLACE INTO mcp_connections(sid,provider,tools,access_token,connected_at) VALUES(?,?,?,?,?)\",args:[sid,p.key,JSON.stringify(summary),encryptedToken,Date.now()]},\n {sql:\"DELETE FROM mcp_flows WHERE state=?\",args:[state]},\n {sql:\"DELETE FROM mcp_flows WHERE created_at < ?\",args:[Date.now()-3600000]},\n ]);\n return new Response(null,{status:302,headers:{location:\"/\",\"set-cookie\":`mcp_demo_sid=${sid}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=86400`}});\n }catch(e){return c.redirect(\"/?error=\"+encodeURIComponent(e instanceof Error?e.message:String(e)))}\n});\n\napp.get(\"/mcp/callback\",c=>c.redirect(\"/oauth/callback?\"+new URL(c.req.url).searchParams));\n\napp.post(\"/chat\", async c => {\n await init();\n const sid=cookie(c.req.raw,\"mcp_demo_sid\");\n if(!sid) return c.json({error:\"Connect at least one service first.\"},401);\n const body=await c.req.json();\n const message=String(body.message||\"\").trim();\n if(!message) return c.json({error:\"Enter a question.\"},400);\n const toolCalls:any[]=[];\n try{\n const rows:any[]=(await sqlite.execute({sql:\"SELECT provider,access_token FROM mcp_connections WHERE sid=? AND access_token IS NOT NULL\",args:[sid]})).rows as any[];\n if(!rows.length) return c.json({error:\"Reconnect a service to enable chat.\"},400);\n const registry=new MapPromise}>();\n const aiTools:any[]=[];\n for(const row of rows){\n const provider=await resolveProvider(row.provider);\n if(!provider)continue;\n const token=await decryptToken(row.access_token);\n const {tools}=await mcpToolList(provider,token);\n for(const tool of tools){\n let fn=(provider.key+\"__\"+tool.name).replace(/[^a-zA-Z0-9_-]/g,\"_\").slice(0,64);\n let n=2;while(registry.has(fn))fn=(fn.slice(0,60)+\"_\"+n++).slice(0,64);\n registry.set(fn,{provider,token,tool});\n aiTools.push({type:\"function\",function:{name:fn,description:`[${provider.name}] ${tool.description||tool.name}`.slice(0,1000),parameters:tool.inputSchema||{type:\"object\",properties:{}}}});\n }\n }\n const openai=new OpenAI();\n const connectedNames=rows.map((r:any)=>byKey.get(r.provider)?.name||directoryEntries.find(x=>slug(x.service)===r.provider)?.service).filter(Boolean);\n const proofMode=/each connected service|each of my connected services|most recent items|proves? the connection/i.test(message);\n if(proofMode){\n const proofRequests:Record={\n valtown:\"Use the authenticated Val Town MCP tools to find the three most recently updated projects.\",\n notion:\"Find the three most recently edited Notion pages or documents. Prefer an API/tool result explicitly sorted by last edited time.\",\n linear:\"Find the three most recently updated Linear issues.\",\n sentry:\"Find the three most recent Sentry issues or errors.\",\n stripe:\"Find the three most recent Stripe payments; if payments are unavailable, use the three most recent customers.\",\n };\n const proofLabels:Record={\n valtown:\"Your three most recently updated Val Town projects are:\",\n notion:\"Your three most recently edited Notion docs are:\",\n linear:\"Your three most recently updated Linear issues are:\",\n sentry:\"Your three most recent Sentry issues or errors are:\",\n stripe:\"Your three most recent Stripe payments are:\",\n };\n const proofs:string[]=[];\n for(const row of rows){\n const provider=await resolveProvider(row.provider);\n if(!provider) continue;\n const prefix=provider.key+\"__\";\n const toolsForProvider=aiTools.filter((t:any)=>t.function.name.startsWith(prefix));\n if(!toolsForProvider.length){proofs.push(\"### \"+provider.name+\"\\nConnected, but no tools were advertised.\");continue;}\n const proofMessages:any[]=[\n {role:\"system\",content:`You are proving that an OAuth connection to ${provider.name} works. You MUST call at least one provided tool and use its returned data. ${proofRequests[provider.key]||`Find the three most recently updated items in ${provider.name}.`} You MUST return exactly three real items when the tool provides them. Include each item’s title or identifying name and its updated/created date when available. Link every item title to its service-provided URL using Markdown. Never invent or guess a URL; if the tool returns no URL, leave that title unlinked and state that no URL was provided. If the tools cannot determine recency or return fewer than three items, say that plainly; never substitute an arbitrary result or invent data. Format the result as a short numbered Markdown list only. Do not mention any other service.`},\n {role:\"user\",content:proofRequests[provider.key]||\"Fetch the three most recently updated items.\"},\n ];\n let proof=\"\";\n for(let round=0;round<5;round++){\n const completion:any=await openai.chat.completions.create({model:\"gpt-5.4-nano\",messages:proofMessages,tools:toolsForProvider,tool_choice:round===0?\"required\":\"auto\",max_completion_tokens:500});\n const reply=completion.choices?.[0]?.message;\n if(!reply) break;\n proofMessages.push(reply);\n if(!reply.tool_calls?.length){proof=reply.content||\"\";break;}\n for(const call of reply.tool_calls){\n const item=registry.get(call.function.name);\n if(!item) continue;\n let args={}; try{args=JSON.parse(call.function.arguments||\"{}\")}catch{}\n try{\n const result=item.call?await item.call():await mcpToolCall(item.provider,item.token,item.tool.name,args);\n const response=JSON.stringify(result,null,2).slice(0,30000);\n toolCalls.push({service:item.provider.name,name:item.tool.name,args,response});\n proofMessages.push({role:\"tool\",tool_call_id:call.id,content:response});\n }catch(e){\n const error=e instanceof Error?e.message:String(e);\n toolCalls.push({service:item.provider.name,name:item.tool.name,args,error});\n proofMessages.push({role:\"tool\",tool_call_id:call.id,content:\"Tool error: \"+error});\n }\n }\n }\n proofs.push(\"### \"+provider.name+\"\\n\"+(proofLabels[provider.key]||\"Your three most recent items are:\")+\"\\n\"+(proof||\"Connected, but I could not retrieve three recent items.\"));\n }\n return c.json({answer:proofs.join(\"\\n\\n\"),toolCalls});\n }\n const messages:any[]=[\n {role:\"system\",content:`The user has connected exactly these services: ${connectedNames.join(\", \")}. No other service is connected, even if its name appears inside a document or search result. For requests about each connected service, you MUST call at least one tool belonging to every service in this list and return three concise, concrete recent items per service, such as document titles, issues, customers, errors, or payments. Link every item title to the URL returned by that service using Markdown; never fabricate a URL. Never present a mention of another product inside one service as data fetched from that product. Label every item with the connected service that actually supplied it. Format the answer as concise Markdown. If a tool cannot produce a proof item, say so explicitly.`},\n {role:\"user\",content:message},\n ];\n for(let round=0;round<4;round++){\n const completion:any=await openai.chat.completions.create({model:\"gpt-5.4-nano\",messages,tools:aiTools,tool_choice:\"auto\",max_completion_tokens:1200});\n const reply=completion.choices?.[0]?.message;\n if(!reply) throw new Error(\"The model returned no response.\");\n messages.push(reply);\n if(!reply.tool_calls?.length) return c.json({answer:reply.content||\"Done.\",toolCalls});\n for(const call of reply.tool_calls){\n const item=registry.get(call.function.name);\n if(!item){messages.push({role:\"tool\",tool_call_id:call.id,content:\"Tool unavailable\"});continue;}\n let args={}; try{args=JSON.parse(call.function.arguments||\"{}\")}catch{}\n try{\n const result=item.call?await item.call():await mcpToolCall(item.provider,item.token,item.tool.name,args);\n const response=JSON.stringify(result,null,2).slice(0,30000);\n toolCalls.push({service:item.provider.name,name:item.tool.name,args,response});\n messages.push({role:\"tool\",tool_call_id:call.id,content:response});\n }catch(e){\n const error=e instanceof Error?e.message:String(e);\n toolCalls.push({service:item.provider.name,name:item.tool.name,args,error});\n messages.push({role:\"tool\",tool_call_id:call.id,content:\"Tool error: \"+error});\n }\n }\n }\n return c.json({answer:\"I reached the tool-call limit. Try a narrower question.\",toolCalls});\n }catch(e){\n console.error(e);\n return c.json({error:e instanceof Error?e.message:String(e)},500);\n }\n});\n\nexport default app.fetch;\n","deleted",false,"label",[14],"ce099925-b2c9-4773-a9de-caf4d6fb55bf",["D",1788398739318],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Connect to all the apps with OAuth DCR + CIMD","imageUrl","userId","35ef5666-3780-42d5-ade0-86fe3fdb6bb1","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","47e0b4b2-7d41-46e6-8dce-0ae3d76e1a8f","tursoName","ce099925b2c94773a9decaf4d6fb55bf","tursoHostname","ce099925b2c94773a9decaf4d6fb55bf-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789530642963],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_107":103},"org",{"_9":10,"_100":101,"_102":103,"_55":56,"_104":105,"_106":42},"branch",{"_35":30,"_11":87,"_22":28,"_88":45,"_89":90,"_91":92,"_93":50,"_94":95,"_96":97,"_98":12,"_99":10},"isOwned","main","projectId","forkedBranchId","335dc83e-9b3b-4975-8589-410ed38c6433","forkedBranchVersion",178,"forkedProjectPrivacy","forkedProjectId","7825587f-b4d7-43b6-a446-ce740ea520e5","forkedProjectOrgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","projectName","userHandle","displayName","Cam","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/7fcc9ac1-f8fb-41e2-0168-af29ef7c6400/square512?exp=1789549199&sig=9a551d326149fb6e37f736149608677672435b12eacb8d438dd38383d97135a3","tier","pro","canRestrictVals","profileImageUrl","ctx",{"_80":-5,"_141":142,"_143":144,"_145":146,"_147":42,"_148":42,"_149":42,"_150":32,"_151":-5,"_152":-7,"_153":-7,"_154":36,"_155":42,"_156":42,"_157":-5,"_158":42,"_159":42,"_160":42,"_161":-5},"ENV",{"_112":113,"_114":115,"_116":87,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138,"_139":140},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]