{
  "schemaVersion": 2,
  "id": "com.nocobase.crm-mcp",
  "name": "NocoBase CRM MCP",
  "version": "0.4.0",
  "distribution": {
    "repository": "https://git.justconn.top/admin/nocobase-mcp",
    "releaseRef": "must-match-v<version>",
    "guide": "INSTALL.md from the exact Release tag",
    "assets": ["donaldttt-nocobase-crm-mcp-<version>.tgz", "SHA256SUMS"],
    "accessRequirement": "Private Release download requires an authenticated user or Agent with explicit repository access."
  },
  "runtime": {
    "location": "user-device",
    "defaultTransport": "stdio",
    "node": ">=20.11",
    "packageFormat": "bundled-npm-tarball",
    "runtimeNpmDependencies": 0,
    "nocobaseCli": false,
    "python": false
  },
  "nocobase": {
    "apiBaseUrl": "https://justconn.top/api",
    "userConfigurableEndpoint": false,
    "oauthIssuer": "https://justconn.top/api",
    "oauthResource": "https://justconn.top/api/"
  },
  "installation": {
    "requiredTools": ["node", "npm"],
    "sourceCheckout": false,
    "globalPackageInstall": false,
    "persistentArtifacts": [
      "isolated user-data npm prefix",
      "non-secret CRM config",
      "private per-user credential file",
      "MCP client configuration and backup"
    ],
    "defaultBackgroundService": false
  },
  "authentication": {
    "type": "oauth-2.1-device-authorization",
    "discovery": "https://justconn.top/api/.well-known/openid-configuration",
    "scopes": ["api", "offline_access"],
    "dynamicClientRegistration": true,
    "browserSignIn": true,
    "automaticRefresh": true,
    "manualFallback": "user-controlled-hidden-tty-personal-authorize-key",
    "storage": "per-user private local credential file",
    "posixFileMode": "0600",
    "allowPassword": false,
    "allowAgentChatSecret": false,
    "allowCommandLineSecret": false,
    "allowEnvironmentSecret": false
  },
  "entrypoints": {
    "guide": "INSTALL.md",
    "binary": "nocobase-crm-mcp",
    "guidedCommand": "setup",
    "configTemplate": "config.example.json"
  },
  "securityDefaults": {
    "readOnly": true,
    "writes": false,
    "rawData": false,
    "sharedNocobaseCredential": false,
    "networkBind": "none-stdio",
    "remoteHttpRequiresTls": true,
    "crossOriginAuthRedirect": false,
    "browserCredentialRead": false
  }
}