Fix authentication issues and prepare for deployment

- Remove hardcoded API keys from scripts
- Fix environment variable handling in shell scripts
- Redirect error messages to stderr to avoid breaking MCP protocol
- Update CLAUDE.md with correct environment variable names
- Add DEPLOYMENT.md with deployment instructions
- Move test files to tests/ directory
- Add CODE_OF_CONDUCT.md
- Remove unused example.go file

The MCP server now properly handles missing API keys without breaking
the JSON protocol, and all authentication is done through environment
variables.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: 2 people

.claude/settings.local.json

@@ -41,7 +41,16 @@
       "Bash(./start-mcp-server.sh:*)",
       "Bash(git push:*)",
       "Bash(./test_api.sh:*)",
-      "Bash(git add:*)"
+      "Bash(git add:*)",
+      "Bash(cp:*)",
+      "Bash(brew install:*)",
+      "Bash(bfg:*)",
+      "Bash(git gc:*)",
+      "Bash(mkdir:*)",
+      "Bash(golangci-lint run:*)",
+      "Bash(golangci-lint:*)",
+      "Bash(pkill:*)",
+      "Bash(/Users/tomwentworth/incidentio-mcp-golang/test_auth.sh)"
     ],
     "deny": []
   },

.golangci.yml

@@ -27,5 +27,5 @@
 - `/internal/server/` - MCP server logic
 
 # Environment Variables
-- INCIDENTIO_API_KEY - Required for API authentication
-- INCIDENTIO_ENDPOINT - Optional, defaults to https://api.incident.io
+- INCIDENT_IO_API_KEY - Required for API authentication
+- INCIDENT_IO_BASE_URL - Optional, defaults to https://api.incident.io/v2

CLAUDE.md

@@ -0,0 +1,56 @@
+# Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior:
+
+* The use of sexualized language or imagery, and sexual attention or advances
+* Trolling, insulting or derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information without explicit permission
+* Other conduct which could reasonably be considered inappropriate
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leaders responsible for enforcement at the project
+maintainer's email address. All complaints will be reviewed and investigated
+promptly and fairly.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage],
+version 2.1, available at
+[https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].
+
+[homepage]: https://www.contributor-covenant.org
+[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html

CODE_OF_CONDUCT.md

@@ -0,0 +1,78 @@
+# Deployment Guide
+
+## Prerequisites
+
+1. Go 1.21 or higher installed
+2. Valid incident.io API key from https://app.incident.io/settings/api-keys
+3. Claude Desktop installed
+
+## Quick Start
+
+### 1. Clone and Build
+
+```bash
+git clone https://github.com/tomwentworth/incidentio-mcp-golang.git
+cd incidentio-mcp-golang
+go build -o bin/mcp-server ./cmd/mcp-server
+```
+
+### 2. Configure Claude Desktop
+
+Add to your Claude Desktop configuration (`~/Library/Application Support/Claude/claude_desktop_config.json` on macOS):
+
+```json
+{
+  "mcpServers": {
+    "incidentio-golang": {
+      "command": "/path/to/incidentio-mcp-golang/start-mcp-server.sh",
+      "env": {
+        "INCIDENT_IO_API_KEY": "your_api_key_here"
+      }
+    }
+  }
+}
+```
+
+### 3. Restart Claude Desktop
+
+The MCP server will now be available in Claude with access to incident.io tools.
+
+## Environment Variables
+
+- `INCIDENT_IO_API_KEY` (required) - Your incident.io API key
+- `INCIDENT_IO_BASE_URL` (optional) - Custom API endpoint (defaults to https://api.incident.io/v2)
+
+## Available Tools
+
+Once deployed, Claude will have access to:
+
+- `list_incidents` - List and filter incidents
+- `get_incident` - Get incident details
+- `create_incident` - Create new incidents
+- `update_incident` - Update incident properties
+- `close_incident` - Close an incident
+- `list_alerts` - List alerts
+- `list_severities` - List severity levels
+- `list_incident_statuses` - List incident statuses
+- `assign_incident_role` - Assign roles to users
+- And more...
+
+## Troubleshooting
+
+1. **Server disconnects immediately**
+   - Check that your API key is valid
+   - Ensure the binary has execute permissions: `chmod +x bin/mcp-server`
+
+2. **No tools available**
+   - Verify the INCIDENT_IO_API_KEY environment variable is set
+   - Check Claude Desktop logs for errors
+
+3. **Authentication errors**
+   - Generate a new API key from incident.io settings
+   - Update the key in your Claude Desktop configuration
+
+## Security Notes
+
+- Never commit your API key to version control
+- The `.env` file is gitignored for local development
+- API keys should be stored securely in production environments

DEPLOYMENT.md

@@ -9,4 +9,4 @@ echo "INCIDENT_IO_API_KEY: ${INCIDENT_IO_API_KEY:+SET}" >&2
 echo "Go version:" >&2
 go version >&2
 echo "Starting MCP server..." >&2
-exec /Users/tomwentworth/incidentio-mcp-golang/bin/mcp-debug 2>>/tmp/mcp-debug.log
+exec "$(dirname "$0")/bin/mcp-debug" 2>>/tmp/mcp-debug.log

check-env.sh

@@ -5,6 +5,7 @@ import (
 	"encoding/json"
 	"fmt"
 	"io"
+	"log"
 	"os"
 	"os/signal"
 	"syscall"
@@ -41,9 +42,8 @@ func (s *MCPServer) registerTools() {
 	// Try to initialize incident.io client
 	client, err := incidentio.NewClient()
 	if err != nil {
-		// If client initialization fails, register only example tool
-		exampleTool := &tools.ExampleTool{}
-		s.tools[exampleTool.Name()] = exampleTool
+		// If client initialization fails, no tools are registered
+		// Don't log to avoid breaking MCP protocol
 		return
 	}
 
@@ -101,7 +101,9 @@ func (s *MCPServer) start(ctx context.Context) {
 							Message: "Parse error",
 						},
 					}
-					encoder.Encode(errorResp)
+					if err := encoder.Encode(errorResp); err != nil {
+						log.Printf("Failed to encode parse error response: %v", err)
+					}
 				}
 				continue
 			}
@@ -117,7 +119,9 @@ func (s *MCPServer) start(ctx context.Context) {
 							Message: "Invalid Request: missing or invalid jsonrpc field",
 						},
 					}
-					encoder.Encode(errorResp)
+					if err := encoder.Encode(errorResp); err != nil {
+						log.Printf("Failed to encode invalid request response: %v", err)
+					}
 				}
 				continue
 			}
@@ -133,7 +137,9 @@ func (s *MCPServer) start(ctx context.Context) {
 
 			response := s.handleMessage(&msg)
 			if response != nil {
-				encoder.Encode(response)
+				if err := encoder.Encode(response); err != nil {
+					log.Printf("Failed to encode response: %v", err)
+				}
 			}
 		}
 	}

cmd/mcp-server/main.go

@@ -92,7 +92,7 @@ func (c *Client) doRequest(method, path string, params url.Values, body interfac
 	if err != nil {
 		return nil, fmt.Errorf("request failed: %w", err)
 	}
-	defer resp.Body.Close()
+	defer func() { _ = resp.Body.Close() }()
 
 	respBody, err := io.ReadAll(resp.Body)
 	if err != nil {

internal/incidentio/client.go

@@ -47,21 +47,20 @@ func (s *Server) Start(ctx context.Context) error {
 			}
 
 			if response != nil {
-				encoder.Encode(response)
+				if err := encoder.Encode(response); err != nil {
+					// Log encoding errors but continue processing
+					fmt.Fprintf(os.Stderr, "Failed to encode response: %v\n", err)
+				}
 			}
 		}
 	}
 }
 
 func (s *Server) registerTools() {
-	// Always register example tool
-	exampleTool := &tools.ExampleTool{}
-	s.tools[exampleTool.Name()] = exampleTool
-
 	// Initialize incident.io client
 	client, err := incidentio.NewClient()
 	if err != nil {
-		// If client initialization fails, we still have the example tool
+		// If client initialization fails, no tools are registered
 		return
 	}