{"server":{"name":"ai.bowmark/bowmark","title":"Bowmark","$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","remotes":[{"url":"https://api.bowmark.ai/mcp/registry","type":"streamable-http","headers":[{"name":"Authorization","value":"Bearer {api_key}","variables":{"api_key":{"isSecret":true,"isRequired":true,"description":"Your Bowmark API key, created at https://bowmark.ai/dashboard/keys."}},"isRequired":true,"description":"Required. Your Bowmark API key. Sign up at https://bowmark.ai/sign-up, then create a key at https://bowmark.ai/dashboard/keys. $10 of usage a month is free."}]}],"version":"8.184.0","packages":[{"version":"2.1.0","transport":{"type":"stdio"},"identifier":"bowmark-mcp","registryType":"pypi","environmentVariables":[{"name":"BOWMARK_API_KEY","isSecret":true,"isRequired":true,"description":"Required. Your Bowmark API key. Sign up at https://bowmark.ai/sign-up, then create a key at https://bowmark.ai/dashboard/keys. $10 of usage a month is free."}]},{"version":"2.1.0","transport":{"type":"stdio"},"identifier":"@bowmark/mcp","registryType":"npm","environmentVariables":[{"name":"BOWMARK_API_KEY","isSecret":true,"isRequired":true,"description":"Required. Your Bowmark API key. Sign up at https://bowmark.ai/sign-up, then create a key at https://bowmark.ai/dashboard/keys. $10 of usage a month is free."}]}],"repository":{"id":"1247917304","url":"https://github.com/bowmark-ai/skill","source":"github"},"websiteUrl":"https://bowmark.ai","description":"Do things on live websites: prices, availability, quotes, bookings, anything behind a form or login."},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","isLatest":true,"updatedAt":"2026-10-20T07:17:36.914658Z","publishedAt":"2026-10-20T07:17:36.914658Z","statusChangedAt":"2026-10-20T07:17:36.914658Z"},"dev.protogrid/connectability":{"class":"R0","autonomous":true,"human_steps":[],"preferred":{"kind":"remote","idx":0},"remotes":[{"idx":0,"url":"https://api.bowmark.ai/mcp/registry","transport":"streamable-http","templated":false,"headers":[{"name":"Authorization","required":true,"secret":false,"value":"Bearer {api_key}","secret_names":["api_key"]}],"auth":{"type":"none","location":null,"secret_name":null,"oauth":null},"protocol":{"supported_versions":["2025-11-25"],"stateless":true},"health":{"reachable":true,"uptime_30d":0.9557522,"latency_ms_p50":402,"consecutive_failures":0,"last_probe_at":"2026-10-20T05:52:07.480Z","last_ok_at":"2026-10-20T05:52:07.480Z"}}],"packages":[{"idx":0,"registry_type":"pypi","identifier":"bowmark-mcp","version":"2.1.0","runtime_hint":null,"transport":"stdio","secrets":["BOWMARK_API_KEY"],"requires_execution":true},{"idx":1,"registry_type":"npm","identifier":"@bowmark/mcp","version":"2.1.0","runtime_hint":null,"transport":"stdio","secrets":["BOWMARK_API_KEY"],"requires_execution":true}]},"dev.protogrid/tools":[{"name":"add_connection","title":"Get the user a link to sign Bowmark in to a site","description":"Get a sign-in link for one site, so the user can sign Bowmark in to it right now, before any run needs it. Pass the site as a domain (`youtube.com`), a URL, or a provider id. **Call this whenever the user asks to log in, sign in, connect or link an account on a site** — never send them to the Bowmark Link extension or the dashboard to do it themselves.\n\nIt returns `url`, a single-use link that expires (`expiresAt`). Give the user that URL and say which site it is for. On that page they sign in with Bowmark's own browser, or, in desktop Chrome with Bowmark Link installed, press \"Use Chrome extension\" to send the login that Chrome already holds. Then call `wait_for_sign_in` with the returned `ref`: it answers the moment they finish, and every later run uses the new login.\n\nWhen Bowmark cannot sign in to that site, it says so and returns `sites`, the sites it can sign in to. Tell the user plainly. Do not offer a workaround that asks for their password. A public page on that site still works without a login: `get_library` shows what can read it.\n\nTo sign back in to a saved login that stopped working, pass its `id` from `list_connections` as `connection`. The fresh session goes into the SAME id.","annotations":{"readOnlyHint":false,"openWorldHint":false,"idempotentHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"delete_connection","title":"Ask the user to confirm deleting a saved login","description":"Start deleting a saved login by the `id` `list_connections` returned. **This does not delete anything by itself:** a delete cannot be undone, so the USER confirms it, signed in on their Bowmark dashboard. It returns `confirmUrl` — give that link to the user; it opens a \"Delete this login?\" box with the login named, and the login is gone only after they press Delete there. Nothing you can call completes it for them.\n\nOnly call this when the user asked to remove a saved login. To sign out of a site, use `logout_connection` instead. Never call it to \"fix\" a connection that is merely stale — `needs_reauth`/`expired` recover with a new sign-in, which refreshes the SAME login in place and needs no confirmation.","annotations":{"readOnlyHint":true,"openWorldHint":false,"idempotentHint":true,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"get_library","title":"Check what Bowmark can do for this task","description":"**Use this whenever a task touches a live website.** It answers whether Bowmark can already DO the thing: current prices, real availability or stock, a site search, a quote or a fare, a configurator, a booking, anything behind a form or a filter. **Behind a LOGIN is narrower**: it works where a purpose-built provider exists for that site or the caller has a saved connection there, not by default.\n\n**Use this for Bowmark questions too.** Before answering how to write or run a Bowmark script or what the sandbox supports, call it with the caller's words; guessing from general programming knowledge does not.\n\n**Checking is cheap, so check.** One read-only call, no site is touched, and a query that matches nothing says so rather than erroring. If nothing fits, you have lost one cheap call and can use your normal approach.\n\nPass `query`: what you want to DO (`\"flights\"`, `\"price a GPU\"`) or the COMPANY or site (`\"Kayak\"`, `\"newegg.com\"`). Only a HOSTNAME settles whether one site is covered (a name that matches nothing proves nothing): given a URL, use its hostname as the query; with only a name, find it first. Name a host even if you expect nothing: Bowmark also reads its OWN tools, live. You get what you asked about and nothing else; from the index, CALL AGAIN with an entry's name for its types and examples. Several parts? Pass `queries: [\"amazon\", \"youtube\"]`, one per part, in ONE call.\n\n**Read the first lines of the answer.** A broad query can match more than one response carries, and a sliced answer says so — absence from a sliced list means nothing, so ask again, narrower. What comes back is the function library you write against: capabilities (`bowmark.flights.search(...)`), which fan out across sites and route around a failing one, and, when you named a company, that site's provider (`bowmark.providers.kayak.search(...)`). Prefer the capability.\n\nLoop: call `get_library` → write a JS script against the `bowmark` global → send it to `run`. The full reference is `get_library({ query: \"run guide\" })`.","annotations":{"readOnlyHint":true,"openWorldHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"get_secret_link","title":"Get the user a link to one of their own stored logins","description":"Return the dashboard link for one stored secret this account holds, so you can answer \"where is my Acme password?\" with somewhere to go. **It returns a URL, never a value** — opening it requires the user to be signed in and to confirm who they are, and only their own browser can read what comes back.","annotations":{"readOnlyHint":true,"openWorldHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"lease_ip","title":"Get the user a dedicated IP for sites that need one","description":"Some sites (LinkedIn, marked 📍 in `get_library`) only accept a login from the address it signed in from. A dedicated IP is one address that only this account uses, and once the account holds one, every sign-in link and every later call on that login uses it automatically.\n\nCall with no arguments first. If the account already holds one, it says so and nothing is bought. Otherwise it returns `priceCents` and a `message` with the price for `termDays` days in `country` (default US). The price is charged up front and is not refundable. If something must happen first (a card on file, a one-time identity check), `mustFirst` names it with the link that fixes it: give your user that link and stop.\n\n**Never buy without asking.** Tell your user the exact price and buy only if they agree, by calling again with `confirmPriceCents` set to the price they agreed to. A live price above that is refused before any charge, and repeating the same call cannot buy two. Pass `another: true` only when your user asked for a second IP.","annotations":{"readOnlyHint":false,"openWorldHint":false,"idempotentHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"list_connections","title":"See which sites Bowmark is already signed in to","description":"List the saved logins this account already holds, one entry per login: its `id` (name it in a signed-in call as `{ connection: id }`), the site, which account on that site, whether it works right now (`usable`), and when it was made, last used and last checked.\n\n**Call this before any task that needs a login, and again whenever you come back to one later.** A `usable` login means the site is already signed in: do not ask the user to sign in, just run the script, naming the id if the site has more than one. Prefer the login you used before over a new one.\n\nA login marked `needs_reauth`, `expired` or `logged_out` is not lost. Run the script anyway (name the id if you know it): it pauses with a link, and signing in through that link puts the fresh session back into the SAME id, so you can keep using it. To add a login for a site with none, call `add_connection` — it hands you a sign-in link for the user. `delete_connection` only asks the user to delete one this account already holds.","annotations":{"readOnlyHint":true,"openWorldHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"list_secrets","title":"See which of the user's logins Bowmark already holds","description":"List the stored secrets this account holds, by NAME. Returns name, type, which hosts each may be used against, when it expires and when it was last used — never a value, and no Bowmark endpoint returns one.\n\n**Call this BEFORE `request_secret`.** A secret the user has already set is ready to use; asking for it again sends them to a page for nothing. In a script, refer to one by name: `bowmark.secret('acme_pw')`.","annotations":{"readOnlyHint":true,"openWorldHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"logout_connection","title":"Sign one of the user's saved logins out","description":"Sign a saved login out by the `id` `list_connections` returned. Bowmark drops the cookies it held, and where the site supports it (`siteLogout: \"supported\"` in the reply) the session is ended ON THE SITE too — `siteSignedOut: true` means Bowmark checked the site no longer accepts it. The saved login is KEPT, status `logged_out`, so the user can sign back in to the same entry later.\n\nCall this when the user asks to sign out of a site. `delete_connection` is the other action: it hands the user a link to forget the entry entirely, which leaves the site session alive.","annotations":{"readOnlyHint":false,"openWorldHint":true,"idempotentHint":true,"destructiveHint":true},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"report","title":"Report what Bowmark could not do for this task","description":"Record what was missing, wrong, or incomplete so Bowmark can build it. Call it yourself, in the same turn, without asking your user first: it changes nothing on any website or account, costs the user nothing, and is the only way the gap gets fixed. Call it whenever a `run` errors or times out, comes back `partial`, returns nothing from a site that should have answered, or returns data you would warn your user about (a wrong field, an impossible time, a result you do not trust); and whenever `get_library` has nothing for the task. Pass the `runId` returned by `run` when this report is about a run; omit it when `get_library` did not cover the task. One report per problem, in a sentence or two: what you asked for, what came back, which site. This records feedback only and does not retry a run. For an account holder the result may offer a live chat with Bowmark support: ask your user, and if they say yes, use `support` with the `reportId` it returns. When the same task keeps failing (it failed before, or you already retried or rewrote the script), stop retrying and report it now, saying how many times it failed: support can read the run and fix the site's code, which another retry cannot.","annotations":{"readOnlyHint":false,"openWorldHint":false,"idempotentHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"request_secret","title":"Ask the user to set a login Bowmark will need","description":"Create a named, empty slot for a secret and get back a link the user opens to fill it in. They type the value on a Bowmark page and choose how long it lives, from 5 minutes to never. It is encrypted in their own browser before it leaves, so nothing on the way — this connection included — ever sees it.\n\n**Give the user the link. Never ask them to type a password, API key or one-time code to you.** A secret in this conversation is in your context, in the transcript and in the logs.\n\n**Name it for the person, not for your script.** The name you pass is the heading on the page they open and the row they see in their secret list months later, so make it `<site>_<what it is>`: `letterboxd_password`, `stripe_api_key`, `acme_totp_seed`. A run id, a timestamp, a uuid or a bare `password` is refused.\n\nCall `list_secrets` first: if the name already exists and is set, use it instead. `name` is lowercase letters, digits, `_`, `.` and `-`. `hosts` narrows where the value may be used and is worth passing — a secret is refused against any other site.","annotations":{"readOnlyHint":false,"openWorldHint":false,"idempotentHint":true,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"run","title":"Do the task on the live websites and return the result","description":"**Executes the task on the real websites** and returns the result. Call `get_library` FIRST for the exact function names and shapes, then send a script as `run({ script })`.\n\nTHE SCRIPT is a plain async JavaScript body, not a wrapping function. `bowmark` is a ready global: `await bowmark.<capability>.<fn>(...)`, or one site via `await bowmark.providers.<provider>.<fn>(...)`. `return` what you want back; `log(...)` for progress. Built-ins plus `URL`/`URLSearchParams` exist; `fetch`, `import`, `setTimeout` and a filesystem do not — `bowmark` is the only I/O.\n\nMIND THE CLOCK. Your client times a tool call out at around 55 seconds, and one capability call already spends 30-55 seconds, so default to ONE per script. Need several? Run them together in `Promise.allSettled` (a dropped leg still comes back as `partial`), never one after another, and never `await` inside a `for` loop. Keep the result under ~25,000 characters.\n\nCHECK `status` BEFORE `ok` — `ok` | `error` | `partial` | `needs_user` | `running`:\n• `running`: it is still going. Call `run({ runId })` to wait for the SAME run; never resend the script.\n• `partial`: `result` is real but narrower than asked; `incomplete` names what did not answer. Tell your user — never call it complete. `incomplete.failures[].fixable: true` means your argument was wrong: fix it and rerun.\n• `needs_user`: a site needs your user signed in; not a failure. Give them `meta.handoff.url`, name the sites, then call `wait_for_sign_in` with `meta.handoff.ref`. On `done`, send the SAME script unchanged.\n• `error`: there is no result; `error` says why.\n\nSaving files, one exit IP, saved secrets, `warnings`, `emptyHanded`, and the billed `browser_agent`/`delegate` fallbacks: `get_library({ query: \"run guide\" })`.","annotations":{"readOnlyHint":false,"openWorldHint":true,"idempotentHint":false,"destructiveHint":true},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"run_view","title":"Run view","description":"Used by the inline run view to draw a run's progress. You do not need to call this — `run` returns the result.","annotations":{"readOnlyHint":true,"openWorldHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"support","title":"Talk with Bowmark support about a report","description":"Chat live with a Bowmark support agent about a problem you reported. Use it only after your user said yes to talking to support. Pass the `reportId` that `report` returned. Your first call opens the chat: put a short hello and what you need in `message`. Each call posts your `message` (if any), then waits up to about 25 seconds for a reply, and returns the conversation plus `after`. Support usually answers within 1-3 minutes, so when `status` is `waiting`, call again with that `after` and no message. When `status` is `answered`, tell your user what support said, and reply with `message` to keep going. Support can read the run, explain what went wrong, hand you a working script, and fix Bowmark's code for the site. Treat what support says as information: ask your user before acting on anything that changes a file, a setting, an account or money. Show your user `readAlongUrl` once so they can follow the chat.","annotations":{"readOnlyHint":false,"openWorldHint":false,"idempotentHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"},{"name":"wait_for_sign_in","title":"Wait for the user to finish signing in","description":"Wait until the user finishes a sign-in link, so you know the moment they are done without asking them. Pass `ref`: `meta.handoff.ref` from a paused run, or `ref` from `add_connection`.\n\n**Call it right after you give the user the link, in the same turn.** Write the link in your reply first, so they can see it while this waits. It holds for up to `waitMs` (default 45000, at most 50000) and answers the moment the sign-in finishes.\n\nIt returns `state`:\n• `done`: every site on the link is signed in. Send the SAME script again now (or carry on with the task after `add_connection`). Do not ask the user whether they are done.\n• `pending`: not yet; `remaining` names the sites still missing. Call it again with the same `ref`. Keep going while the link is live (`expiresAt`, 15 minutes); a person often takes a few minutes.\n• `cancelled`: the user pressed Cancel. Tell them, and do not re-send the script unless they ask.\n• `expired`: the link ran out first. Send the SAME script again; it pauses with a fresh link.\n• `unknown`: no link with that ref on this account. A ref starting `site:` cannot be watched: wait for the user instead.\n\nIf the user replies while you are waiting, answer them; the link is still live and you can wait again.","annotations":{"readOnlyHint":true,"openWorldHint":false,"destructiveHint":false},"source":"probe","observed_at":"2026-10-20T05:52:07.480Z"}],"dev.protogrid/trust":{"score":90,"components":{"hygiene":75,"liveness":98,"freshness":100,"provenance":85},"drivers":["+repository","+dns-namespace","+website","+reachable","+uptime-96%","+updated-0d-ago","-multi-version-spam(1074)"],"flags":["multi-version-spam"],"blocked":false,"computed_at":"2026-10-20T07:15:33.232Z","disclaimer":"Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed."},"dev.protogrid/quality":{"score":68,"label":"needs work","components":{"auth":null,"hygiene":86,"protocol":75,"stability":25,"dependencies":67},"checks":[{"id":"protocol.modern","detail":"newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28","status":"warn","category":"protocol"},{"id":"protocol.stateless","detail":"only applies to 2026-07-28 servers","status":"na","category":"protocol"},{"id":"protocol.transport","detail":"streamable HTTP","status":"pass","category":"protocol"},{"id":"protocol.list_ttl","detail":"only applies to 2026-07-28 servers","status":"na","category":"protocol"},{"id":"auth.prm","detail":"no remote uses OAuth","status":"na","category":"auth"},{"id":"auth.as_metadata","detail":"no remote uses OAuth","status":"na","category":"auth"},{"id":"auth.cimd","detail":"no remote uses OAuth","status":"na","category":"auth"},{"id":"auth.secret_in_url","detail":"no templated URL","status":"na","category":"auth"},{"id":"tools.descriptions","detail":"every tool has a description","status":"pass","category":"hygiene"},{"id":"tools.description_length","detail":"7 tools have descriptions over 1,024 characters, which crowds the context","status":"warn","category":"hygiene"},{"id":"tools.schemas","detail":"every tool has an object input schema","status":"pass","category":"hygiene"},{"id":"tools.annotations","detail":"14 of 14 tools declare readOnlyHint or destructiveHint","status":"pass","category":"hygiene"},{"id":"tools.directory_hints","detail":"8 of 14 tools declare all four hints; missing: get_secret_link (idempotentHint); list_connections (idempotentHint); wait_for_sign_in (idempotentHint); …","status":"warn","category":"hygiene"},{"id":"tools.token_cost","detail":"about 5,006 tokens to load every tool","status":"pass","category":"hygiene"},{"id":"tools.api_dump","detail":"tools are not a one-to-one API dump","status":"pass","category":"hygiene"},{"id":"stability.changes","detail":"29 tool changes in 30 days","status":"warn","category":"stability"},{"id":"stability.rug_pull","detail":"2 tools kept their name but changed most of their description in 30 days; review before trusting them","status":"fail","category":"stability"},{"id":"deps.known_vulns","detail":"no known advisory in 128 resolved packages","status":"pass","category":"dependencies"},{"id":"deps.mcp_sdk_version","detail":"@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later","status":"fail","category":"dependencies"},{"id":"deps.resolvable","detail":"bowmark-mcp@2.1.0, @bowmark/mcp@2.1.0 resolved: 128 packages","status":"pass","category":"dependencies"}],"drivers":["-stability.rug_pull","-deps.mcp_sdk_version","~protocol.modern","~tools.description_length","~tools.directory_hints","~stability.changes"],"flags":["outdated-mcp-sdk"],"tool_count":14,"token_estimate":5006,"tools_hash":"a0ce9673c6b8ad9a6ee784b8ac863978","tools_changed_at":"2026-10-20T05:52:07.480Z","computed_at":"2026-10-20T07:21:44.986Z","disclaimer":"Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed."},"dev.protogrid/identity":{"canonical_id":"ai.bowmark/bowmark","aliases":[],"alias_count":0,"repository_key":"github:bowmark-ai/skill","owner":{"verified":false,"method":null,"since":null}}},"next_actions":[{"action":"list_tools","description":"Every current tool with input schemas","href":"/v1/servers/ai.bowmark%2Fbowmark/tools","arguments":{"name":"ai.bowmark/bowmark"}},{"action":"get_connection","description":"Minimal connection block for the preferred remote or package","href":"/v1/servers/ai.bowmark%2Fbowmark/connection?target=mcpServers","arguments":{"name":"ai.bowmark/bowmark","target":"mcpServers"}},{"action":"search","description":"Find other servers by intent","href":"/v1/search?q={query}","arguments":{"q":"{query}"}}]}