{
  "mcpServers": {
    "montis-icu": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://montis.icu/mcp",
        "3334",
        "--host",
        "127.0.0.1",
        "--static-oauth-client-info",
        "{\"client_id\":\"intervals-mcp\"}",
        "--auth-timeout",
        "120"
      ]
    }
  }
}

{
  "mcpServers": {
    "montis-icu": {
      "url": "https://montis.icu/mcp",
      "auth": {
        "CLIENT_ID": "intervals-mcp"
      }
    }
  }
}

const http = require("http");
const crypto = require("crypto");
const fs = require("fs");
const path = require("path");
const { exec } = require("child_process");

const SERVER_HASH = "4fc5af4c74b51ffd2695d25415247135";
const CONFIG_DIR = path.join(
  process.env.USERPROFILE || process.env.HOME,
  ".mcp-auth",
  "mcp-remote-0.1.37"
);
const CLIENT_ID = "intervals-mcp";
const REDIRECT_URI = "http://127.0.0.1:3334/oauth/callback";
const PORT = 3334;

function base64url(buf) {
  return buf
    .toString("base64")
    .replace(/\+/g, "-")
    .replace(/\//g, "_")
    .replace(/=+$/, "");
}

const codeVerifier = base64url(crypto.randomBytes(32));
const codeChallenge = base64url(
  crypto.createHash("sha256").update(codeVerifier).digest()
);
const state = crypto.randomUUID();

const authUrl = new URL("https://montis.icu/mcp/oauth/authorize");
authUrl.searchParams.set("response_type", "code");
authUrl.searchParams.set("client_id", CLIENT_ID);
authUrl.searchParams.set("code_challenge", codeChallenge);
authUrl.searchParams.set("code_challenge_method", "S256");
authUrl.searchParams.set("redirect_uri", REDIRECT_URI);
authUrl.searchParams.set("state", state);
authUrl.searchParams.set("scope", "mcp");
authUrl.searchParams.set("resource", "https://montis.icu/mcp");

const server = http.createServer(async (req, res) => {
  const url = new URL(req.url, `http://127.0.0.1:${PORT}`);
  if (url.pathname !== "/oauth/callback") {
    res.writeHead(404);
    res.end("Not found");
    return;
  }

  const code = url.searchParams.get("code");
  if (!code) {
    res.writeHead(400);
    res.end("Missing authorization code");
    return;
  }

  try {
    const params = new URLSearchParams({
      grant_type: "authorization_code",
      code,
      code_verifier: codeVerifier,
      redirect_uri: REDIRECT_URI,
      client_id: CLIENT_ID,
      resource: "https://montis.icu/mcp",
    });

    const tokenRes = await fetch("https://montis.icu/mcp/oauth/token", {
      method: "POST",
      headers: {
        "Content-Type": "application/x-www-form-urlencoded",
        Accept: "application/json",
      },
      body: params,
    });

    const tokens = await tokenRes.json();
    if (!tokenRes.ok) {
      throw new Error(JSON.stringify(tokens));
    }

    fs.mkdirSync(CONFIG_DIR, { recursive: true });
    fs.writeFileSync(
      path.join(CONFIG_DIR, `${SERVER_HASH}_code_verifier.txt`),
      codeVerifier
    );
    fs.writeFileSync(
      path.join(CONFIG_DIR, `${SERVER_HASH}_tokens.json`),
      JSON.stringify(tokens, null, 2)
    );

    res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
    res.end(
      "<h1>Montis authorization successful</h1><p>You can close this tab and return to Cursor.</p>"
    );
    console.log("Tokens saved to", CONFIG_DIR);
    setTimeout(() => process.exit(0), 500);
  } catch (err) {
    console.error("Token exchange failed:", err.message);
    res.writeHead(500);
    res.end("Token exchange failed: " + err.message);
    setTimeout(() => process.exit(1), 500);
  }
});

server.listen(PORT, "127.0.0.1", () => {
  console.log("OAuth callback listening on", REDIRECT_URI);
  console.log("Opening browser...");
  console.log(authUrl.toString());
  exec(`start "" "${authUrl.toString()}"`);
});