@syncfusion/aspnetcore-assistant - npm Package Compare versions

Comparing version 0.1.0 to 1.0.0

dist/index.js

@@ -11,3 +11,3 @@ #!/usr/bin/env node
         name: "SyncfusionAspNetCoreAssistant",
-        version: "0.1.0"
+        version: "1.0.0"
     });
@@ -14,0 +14,0 @@ for (const tool of toolRegistry.getAll()) {

dist/utils/helpbot.js

 import axios from 'axios';
-const apiKey = process.env.Syncfusion_API_Key || "";
+import { readFileSync } from 'node:fs';
+let apiKey;
+if (process.env.Syncfusion_API_Key_Path) {
+    apiKey = readFileSync(process.env.Syncfusion_API_Key_Path, 'utf8');
+}
+else {
+    apiKey = process.env.Syncfusion_API_Key || "";
+}
 export async function callSyncfusionHelpbotAPI(query, platform, controls) {
@@ -4,0 +11,0 @@ try {

package.json

 {
   "name": "@syncfusion/aspnetcore-assistant",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "description": "MCP server that provides efficient access to Syncfusion documentation, implementation guidelines, and code generation for ASP.NET CORE",
   "type": "module",
+  "license": "SEE LICENSE IN license",
   "bin": {
@@ -23,10 +24,5 @@ "aspnetcore-assistant": "./dist/index.js"
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.13.2",
-    "axios": "1.12.1"
-  },
-  "scripts": {
-    "build": "tsc",
-    "start": "tsc",
-    "inspector": "npx @modelcontextprotocol/inspector dist/index.js"
+    "@modelcontextprotocol/sdk": "1.23.0",
+    "axios": "1.13.2"
   }
 }

README.md

@@ -48,10 +48,30 @@ # SyncfusionAspNetCoreAssistant MCP Server
 
-You need to add your [Syncfusion API key](https://syncfusion.com/account/api-key) as an env parameter in the configuration file:
+#### API Key Configuration
 
-```json
-"env": {
-  "Syncfusion_API_Key": "YOUR_API_KEY"
-}
-```
+Login to your [Syncfusion account](http://syncfusion.com/account/) and generate an API Key from the [API Key page](https://www.syncfusion.com/account/api-key). Replace `YOUR_API_KEY_FILE_PATH` or `YOUR_API_KEY` in the configuration files with your generated key.
 
+There are two options:
+
+* **Using an API Key File (Recommended)**
+
+  Store your API key in a separate file and reference its path in the `Syncfusion_API_Key_Path` environment parameter. This approach is more secure as you don't expose the key directly in configuration files.
+
+  **Supported file formats:** `.txt` or `.key` file
+
+  ```json
+  "env": {
+    "Syncfusion_API_Key_Path": "YOUR_API_KEY_FILE_PATH" // "D:\\syncfusion-key.txt" (or) "D:\\syncfusion-key.key"
+  }
+  ```
+
+* **Direct API Key**
+
+  Paste your `Syncfusion_API_Key` directly in the configuration file's environment parameter.
+
+  ```json
+  "env": {
+    "Syncfusion_API_Key": "YOUR_API_KEY"
+  }
+  ```
+
 Below are setup instructions for popular MCP clients:
@@ -82,2 +102,4 @@
       "env": {
+        "Syncfusion_API_Key_Path": "YOUR_API_KEY_FILE_PATH",
+        // or
         "Syncfusion_API_Key": "YOUR_API_KEY"
@@ -109,2 +131,4 @@ }
       "env": {
+        "Syncfusion_API_Key_Path": "YOUR_API_KEY_FILE_PATH",
+        // or
         "Syncfusion_API_Key": "YOUR_API_KEY"
@@ -117,3 +141,3 @@ }
 
-* After updating the configuration in settings.json, you'll notice a "Start" option at the top of the config. This allows you to easily start the SyncfusionAspNetCoreAssistant server directly from the settings interface without additional commands.
+* After updating the configuration in mcp.json, you'll notice a "Start" option at the top of the config. This allows you to easily start the SyncfusionAspNetCoreAssistant server directly from the settings interface without additional commands.
 
@@ -139,2 +163,4 @@ * Confirm the server is active by checking for a message like: `SyncfusionAspNetCoreAssistant is running...` in the output.
       "env": {
+       "Syncfusion_API_Key_Path": "YOUR_API_KEY_FILE_PATH",
+        // or
        "Syncfusion_API_Key": "YOUR_API_KEY"
@@ -165,2 +191,4 @@ }
       "env": {
+       "Syncfusion_API_Key_Path": "YOUR_API_KEY_FILE_PATH",
+        // or
        "Syncfusion_API_Key": "YOUR_API_KEY"
@@ -167,0 +195,0 @@ }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

No License Found

License

License information could not be found.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

19280

14.28%

Number of package files

7

16.67%

Lines of code

147

5%

Number of low quality alerts

1

-50%

Number of lines in readme file

260

12.07%

Worsened metrics

License quality

80

-20%

Number of low supply chain risk alerts

5

66.67%

Number of medium supply chain risk alerts

1

Infinity%

Dependency changes

• + Added

  @modelcontextprotocol/sdk@1.23.0
  (transitive)

• + Added

  ajv@8.18.0
  (transitive)

• + Added

  ajv-formats@3.0.1
  (transitive)

• + Added

  axios@1.13.2
  (transitive)

• + Added

  fast-uri@3.1.0
  (transitive)

• + Added

  json-schema-traverse@1.0.0
  (transitive)

• + Added

  require-from-string@2.0.2
  (transitive)

• + Added

  zod@4.3.6
  (transitive)

• - Removed

  @modelcontextprotocol/sdk@1.13.2
  (transitive)

• - Removed

  ajv@6.14.0
  (transitive)

• - Removed

  axios@1.12.1
  (transitive)

• - Removed

  fast-json-stable-stringify@2.1.0
  (transitive)

• - Removed

  json-schema-traverse@0.4.1
  (transitive)

• - Removed

  punycode@2.3.1
  (transitive)

• - Removed

  uri-js@4.4.1
  (transitive)

• - Removed

  zod@3.25.76
  (transitive)

• Updated

  @modelcontextprotocol/sdk@1.23.0

• Updated

  axios@1.13.2