Skip to content

v0.1.0-beta.1 — initial public beta

Pre-release
Pre-release

Choose a tag to compare

View all tags
@jmpijll jmpijll released this 15 May 21:35
· 10 commits to main since this release
v0.1.0-beta.1
b4c4be8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First public beta of make-code-mode-mcp. This is a Model Context Protocol server for the Make.com Web API v2, built on the Cloudflare Code Mode pattern: two tools (search + execute) over a single make.* sandbox surface, with all ~467 operations reachable through one flat namespace.

What's in this release

Server

  • Two MCP tools (search + execute) on a QuickJS WASM sandbox; credentials never enter the sandbox code.
  • One flat make.* surface — every Make.com Web API v2 operation reachable via make.<tag>.<opId>(args), make.callOperation('opId', args), or make.request({ method, path, … }).
  • Dynamic OpenAPI loading from ${MAKE_BASE_URL}/openapi.json with on-disk hash-keyed cache + bundled fallback.
  • Single-user mode (env: MAKE_API_KEY, MAKE_BASE_URL) and multi-user mode (per-request HTTP headers: X-Make-Api-Key, X-Make-Base-Url) share the same server.
  • Scope-aware 401/403 errors — the model is told which scope its token is missing.
  • Make.com bracketed query encoding (pg: { limit: 25 } → pg[limit]=25).
  • Cloudflare Workers entry (cf-worker/) — scaffold with worker_loaders LOADER binding wired in; HTTP transport adapter is still a 501 stub.

Verification (transcripts in out/verification/, PII-redacted)

  • 85/85 vitest cases (unit + in-process MCP + Streamable HTTP integration).
  • npm run live-test — 3-call read-only smoke against a real Make.com Core-tier tenant.
  • npm run discover — 12-call broader discovery sweep (/users/me, /users/me/current-authorization, /admin/owners probe, /sdk/apps, /audit-logs/*, per-team /scenarios, /connections, /data-stores, /hooks).
  • MCP Inspector CLI — tools/list, search, execute, scope-403 probe, pg[limit] bracket-encoding probe.
  • opencode (DeepSeek v4 Flash) — make_search + make_execute end-to-end.
  • Cloudflare Workers wrangler dev parity smoke (wrangler 4.92).

Repo / CI

  • GitHub Actions CI: typecheck, lint, format:check, test, build on Node 20 + 22, plus wrangler deploy --dry-run smoke.
  • Repository ruleset on main: required PR, required status checks (strict), required linear history, no force-push, no deletion.
  • Dependabot weekly updates for npm + GitHub Actions, grouped patch/minor, squash-only merges, delete-on-merge.
  • Bug-report and verification-request issue templates, PR template with checklist gates, SECURITY.md with private vulnerability reporting.

What's not yet verified

  • Mutating operations against a real tenant (gated on a non-production Make.com account).
  • Audit logs (402 Payment Required — needs Teams/Enterprise plan even with the scope).
  • Admin endpoints from a VPN-allowlisted host (403 VPN access only [IM121] from outside Make's office network).
  • MCP clients beyond MCP Inspector CLI and opencode (Cursor, Claude Desktop, Claude Code, Continue, Cline, Codeium, Aider, Zed, …) — install snippets ship in examples/make-expert-agent/install.md. Open a verification-request issue if you tested one.
  • Other regional zones (eu2, us1, us2, Celonis variants).
  • The Cloudflare Workers transport adapter — node:http → Fetch API bridge.

Quickstart

git clone --branch v0.1.0-beta.1 https://github.com/jmpijll/make-code-mode-mcp.git
cd make-code-mode-mcp
npm install
cp .env.example .env
# Edit .env and set MAKE_API_KEY=<your Make.com Web API token>
npm run build
npm start

Then point your MCP client at node /abs/path/to/make-code-mode-mcp/dist/index.js.

See README.md for the full status table, SKILL.md for the operating manual, and examples/make-expert-agent/ for a ready-to-paste persona + cross-platform install snippets.

Full changelog

See CHANGELOG.md.

Assets 2
Loading