mcp-core.php
8 months ago
mcp-rest.php
1 year ago
mcp.conf
1 year ago
mcp.js
8 months ago
mcp.md
8 months ago
mcp.php
8 months ago
oauth.php
9 months ago
realtime.php
1 year ago
mcp-rest.php
238 lines
| 1 | <?php |
| 2 | |
| 3 | class Meow_MWAI_Labs_MCP_Rest { |
| 4 | private $cache_key = 'mwai_mcp_tools_cache'; |
| 5 | private $allowed = [ 'posts', 'pages', 'media' ]; |
| 6 | |
| 7 | public function __construct() { |
| 8 | add_action( 'rest_api_init', [ $this, 'rest_api_init' ] ); |
| 9 | } |
| 10 | |
| 11 | public function rest_api_init() { |
| 12 | add_filter( 'mwai_mcp_tools', [ $this, 'register_rest_tools' ] ); |
| 13 | add_filter( 'mwai_mcp_callback', [ $this, 'handle_call' ], 10, 4 ); |
| 14 | } |
| 15 | |
| 16 | public function register_rest_tools( $prevTools ) { |
| 17 | $cached = get_transient( $this->cache_key ); |
| 18 | |
| 19 | if ( !$cached ) { |
| 20 | $tools = []; |
| 21 | $server = rest_get_server(); |
| 22 | $routes = $server->get_routes(); |
| 23 | |
| 24 | foreach ( $this->allowed as $resource ) { |
| 25 | $base = "/wp/v2/{$resource}"; |
| 26 | $item = "{$base}/(?P<id>[\d]+)"; |
| 27 | |
| 28 | if ( isset( $routes[ $base ] ) ) { |
| 29 | foreach ( $routes[ $base ] as $endpoint ) { |
| 30 | if ( !empty( $endpoint['methods']['GET'] ) ) { |
| 31 | $tools[ "list_{$resource}" ] = [ |
| 32 | 'name' => "list_{$resource}", |
| 33 | 'description' => "List {$resource}", |
| 34 | 'category' => 'Dynamic REST', |
| 35 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 36 | 'outputSchema' => $this->build_output_schema(), |
| 37 | ]; |
| 38 | break; |
| 39 | } |
| 40 | } |
| 41 | } |
| 42 | |
| 43 | if ( isset( $routes[ $item ] ) ) { |
| 44 | foreach ( $routes[ $item ] as $endpoint ) { |
| 45 | if ( !empty( $endpoint['methods']['GET'] ) ) { |
| 46 | $tools[ "get_{$resource}" ] = [ |
| 47 | 'name' => "get_{$resource}", |
| 48 | 'description' => "Get single {$resource} by ID", |
| 49 | 'category' => 'Dynamic REST', |
| 50 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 51 | 'outputSchema' => $this->build_output_schema(), |
| 52 | ]; |
| 53 | break; |
| 54 | } |
| 55 | } |
| 56 | } |
| 57 | |
| 58 | if ( isset( $routes[ $base ] ) ) { |
| 59 | foreach ( $routes[ $base ] as $endpoint ) { |
| 60 | if ( !empty( $endpoint['methods']['POST'] ) ) { |
| 61 | $tools[ "create_{$resource}" ] = [ |
| 62 | 'name' => "create_{$resource}", |
| 63 | 'description' => "Create {$resource}", |
| 64 | 'category' => 'Dynamic REST', |
| 65 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 66 | 'outputSchema' => $this->build_output_schema(), |
| 67 | ]; |
| 68 | break; |
| 69 | } |
| 70 | } |
| 71 | } |
| 72 | |
| 73 | if ( isset( $routes[ $item ] ) ) { |
| 74 | foreach ( $routes[ $item ] as $endpoint ) { |
| 75 | $methods = array_keys( $endpoint['methods'] ); |
| 76 | if ( array_intersect( [ 'POST', 'PUT', 'PATCH' ], $methods ) ) { |
| 77 | $tools[ "update_{$resource}" ] = [ |
| 78 | 'name' => "update_{$resource}", |
| 79 | 'description' => "Update {$resource}", |
| 80 | 'category' => 'Dynamic REST', |
| 81 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 82 | 'outputSchema' => $this->build_output_schema(), |
| 83 | ]; |
| 84 | break; |
| 85 | } |
| 86 | } |
| 87 | } |
| 88 | |
| 89 | if ( isset( $routes[ $item ] ) ) { |
| 90 | foreach ( $routes[ $item ] as $endpoint ) { |
| 91 | if ( !empty( $endpoint['methods']['DELETE'] ) ) { |
| 92 | $tools[ "delete_{$resource}" ] = [ |
| 93 | 'name' => "delete_{$resource}", |
| 94 | 'description' => "Delete {$resource}", |
| 95 | 'category' => 'Dynamic REST', |
| 96 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 97 | 'outputSchema' => $this->build_output_schema(), |
| 98 | ]; |
| 99 | break; |
| 100 | } |
| 101 | } |
| 102 | } |
| 103 | } |
| 104 | |
| 105 | set_transient( $this->cache_key, $tools, DAY_IN_SECONDS ); |
| 106 | $cached = $tools; |
| 107 | } |
| 108 | |
| 109 | return array_merge( array_values( $cached ), $prevTools ); |
| 110 | } |
| 111 | |
| 112 | private function build_schema_from_args( $args ) { |
| 113 | $schema = [ |
| 114 | 'type' => 'object', |
| 115 | 'properties' => [], |
| 116 | 'required' => [], |
| 117 | ]; |
| 118 | |
| 119 | foreach ( $args as $name => $def ) { |
| 120 | $schema['properties'][ $name ] = [ |
| 121 | 'type' => $def['type'] ?? 'string', |
| 122 | 'description' => $def['description'] ?? '', |
| 123 | ]; |
| 124 | |
| 125 | if ( !empty( $def['required'] ) ) { |
| 126 | $schema['required'][] = $name; |
| 127 | } |
| 128 | } |
| 129 | |
| 130 | return $schema; |
| 131 | } |
| 132 | |
| 133 | private function build_output_schema() { |
| 134 | return [ |
| 135 | 'type' => 'object', |
| 136 | 'properties' => [ |
| 137 | 'content' => [ |
| 138 | 'type' => 'array', |
| 139 | 'items' => [ |
| 140 | 'type' => 'object', |
| 141 | 'properties' => [ |
| 142 | 'type' => [ |
| 143 | 'type' => 'string', |
| 144 | 'description' => 'Block type, e.g. text or image', |
| 145 | ], |
| 146 | 'text' => [ |
| 147 | 'type' => 'string', |
| 148 | 'description' => 'Human-readable content', |
| 149 | ], |
| 150 | ], |
| 151 | 'required' => [ 'type', 'text' ], |
| 152 | ], |
| 153 | ], |
| 154 | ], |
| 155 | 'required' => [ 'content' ], |
| 156 | ]; |
| 157 | } |
| 158 | |
| 159 | public function handle_call( $existing, $tool, $args, $id ) { |
| 160 | if ( !empty( $existing ) ) { |
| 161 | return $existing; |
| 162 | } |
| 163 | |
| 164 | $tools = get_transient( $this->cache_key ); |
| 165 | if ( !isset( $tools[ $tool ] ) ) { |
| 166 | return $existing; |
| 167 | } |
| 168 | |
| 169 | // Security check is already done in the MCP auth layer |
| 170 | // If we reach here, the user is authorized to use MCP |
| 171 | |
| 172 | list( $action, $resource ) = explode( '_', $tool, 2 ); |
| 173 | $path = "/wp/v2/{$resource}"; |
| 174 | $method = 'GET'; |
| 175 | |
| 176 | if ( in_array( $action, [ 'get', 'update', 'delete' ], true ) ) { |
| 177 | if ( empty( $args['id'] ) ) { |
| 178 | return [ |
| 179 | 'jsonrpc' => '2.0', |
| 180 | 'id' => $id, |
| 181 | 'error' => [ |
| 182 | 'code' => -32602, |
| 183 | 'message' => 'Missing parameter: id', |
| 184 | ], |
| 185 | ]; |
| 186 | } |
| 187 | $path .= '/' . intval( $args['id'] ); |
| 188 | } |
| 189 | |
| 190 | switch ( $action ) { |
| 191 | case 'create': |
| 192 | case 'update': |
| 193 | $method = 'POST'; |
| 194 | break; |
| 195 | case 'delete': |
| 196 | $method = 'DELETE'; |
| 197 | break; |
| 198 | default: |
| 199 | $method = 'GET'; |
| 200 | break; |
| 201 | } |
| 202 | |
| 203 | $request = new WP_REST_Request( $method, $path ); |
| 204 | |
| 205 | if ( $method === 'GET' ) { |
| 206 | foreach ( $args as $key => $value ) { |
| 207 | $request->set_param( $key, $value ); |
| 208 | } |
| 209 | } |
| 210 | else { |
| 211 | $request->set_body_params( $args ); |
| 212 | } |
| 213 | |
| 214 | $response = rest_do_request( $request ); |
| 215 | |
| 216 | if ( is_wp_error( $response ) || $response->get_status() >= 400 ) { |
| 217 | $error_obj = is_wp_error( $response ) ? $response : $response->as_error(); |
| 218 | |
| 219 | // Return error in old format for backward compatibility |
| 220 | // The execute_tool method will detect this and not re-wrap it |
| 221 | return [ |
| 222 | 'jsonrpc' => '2.0', |
| 223 | 'id' => $id, |
| 224 | 'error' => [ |
| 225 | 'code' => (int) ( $error_obj->get_error_code() ?: $response->get_status() ), |
| 226 | 'message' => $error_obj->get_error_message(), |
| 227 | 'data' => $error_obj->get_error_data() ?: null, |
| 228 | ], |
| 229 | ]; |
| 230 | } |
| 231 | |
| 232 | $data = $response->get_data(); |
| 233 | |
| 234 | // Return just the data - execute_tool will wrap it properly |
| 235 | return $data; |
| 236 | } |
| 237 | } |
| 238 |