Agent Control Plane (MCP)

This site exposes a Model Context Protocol server so your local agent (OpenCode, OpenHands, Claude Desktop, Cursor, Cline, etc.) can read traffic, orders, users, vendors, integration status, and run admin actions.

Endpoint

POST https://www.apex-tat-va.store/api/mcp
Authorization: Bearer <MCP_SECRET>
Content-Type: application/json

Available Tools

• ping — health check
• list_routes — all pages on the site
• get_traffic_stats — pageviews by path (last N days)
• list_orders — recent orders
• revenue_summary — order revenue + MRR
• list_users — recent user profiles
• grant_admin — give admin role to a user
• list_vendors — bazaar vendors
• integration_status — which API keys are configured
• sql_select — read-only single-table query

OpenCode / Cline / Cursor config

{
  "mcp": {
    "apex-tatva": {
      "type": "remote",
      "url": "https://www.apex-tat-va.store/api/mcp",
      "headers": { "Authorization": "Bearer YOUR_MCP_SECRET" }
    }
  }
}

Claude Desktop config

{
  "mcpServers": {
    "apex-tatva": {
      "url": "https://www.apex-tat-va.store/api/mcp",
      "headers": { "Authorization": "Bearer YOUR_MCP_SECRET" }
    }
  }
}

Quick test (curl)

curl -X POST https://www.apex-tat-va.store/api/mcp \
  -H "Authorization: Bearer $MCP_SECRET" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Get your MCP_SECRET

The secret is stored server-side as MCP_SECRET. Open the backend panel → Secrets to reveal/rotate it. Treat it like a master key: anyone with this token can call every tool above.

Adding more capability

Tools live in src/lib/mcp/tools/index.ts. Add a new defineTool and export it from allTools — the endpoint picks it up automatically. Future tools planned: GitHub PR creation, affiliate-key upload, customer-inquiry triage, Stripe refunds, content publishing.