2UjUX dZddlmZddlZddlZddlZddlmZddlZddl m Z ddl m Z ddl mZddlZddlZddlZddlZddlZddlZddlZej,j/dd Zd eZer1ej4ej7j9dd nd Ze d d d e ddZej?dGdZ ej?dHdZ!ej?dIdZ"ej?dHdZ#ej?dGdZ$ej?dJdZ%ej?dGdZ&ej?dKdZ'ej?dLdZ(ej?dMdZ)ej?dNdZ*ej?dOdPdZ+ej?dOdQdZ,ej?dOdRdZ-ej?dOdSd Z.ej?dTdUd!Z/ej?dVd"Z0ej?dOdSd#Z1ej?dTdUd$Z2ej?dWd%Z3ej?dXdYd&Z4ej? dZ d[d'Z5ej?d\d(Z6ej? d]d)Z7ej?dId*Z8ej?dKd+Z9ej?dGd,Z:ej?dKd-Z;ej?dGd.Zej? db dcd1Z?ej? dZ ddd2Z@ej? de dfd3ZAej?dgd4ZBej? dh did5ZCej? dj dkd6ZDej? dl dmd7ZEej? dZ dnd8ZFej?dgd9ZGej?dgd:ZHej? do dpd;ZIej?dOdqd<ZJej?drd=ZKej?dTdsd>ZLej? dl dtd?ZMej? du dvd@ZNejZPejZQedAZRdwdBZSdxdCZTGdDdEZUdxdFZVy)yuShared jarvis-tools MCP endpoint (streamable-HTTP) for Railway. Mirrors the memory service's proven pattern so the SAME claude.ai custom connector setup works. Two doors, one handler, auth enforced BEFORE the MCP handler runs: • POST /mcp — Authorization: Bearer $JARVIS_TOOLS_KEY (Claude Code --header) • POST /mcp/ — token = first 32 hex of sha256(JARVIS_TOOLS_KEY) (path-secret door for claude.ai custom connectors, whose UI can't send custom headers; OAuth is overkill here). If JARVIS_TOOLS_KEY is empty, BOTH doors are open. Tools = the shared Google Drive folder (list/read/write/delete). Smartlead and the Ultron DB can be added here later as more @mcp.tool()s on the same connector. ) annotationsN)asynccontextmanager)FastMCP)TransportSecuritySettings)RouteJARVIS_TOOLS_KEYzBearer z jarvis-toolsTF)enable_dns_rebinding_protectionuAhmed's shared Jarvis storage — one Google Drive folder ('Jarvis Drive') any Claude on any device can read and write. drive_list to see what's there, drive_read to read a file (e.g. an Apollo CSV), drive_write to save one, drive_delete to remove one. It ONLY sees this one shared folder, never Ahmed's personal Drive. The asana_* tools are Ahmed's project management — everything he could do in the Asana web app: list/create/update/archive projects, invite people to them (asana_project_members) and post status updates; read a task in full (asana_task), list, create, update, move between projects/columns, complete, delete (recoverable 30 days) and break tasks into subtasks; set assignees, followers and tags; post and READ comment threads; and search. asana_api is the escape hatch for anything else in Asana's REST API. Prefer archiving a project over deleting it — archive is reversible.)stateless_http json_responsetransport_security instructionscxKtjjtjd{S7w)z1List the files in the shared Jarvis Drive folder.N)anyio to_threadrun_syncdrive list_files"jarvis-tools-service/mcp_server.py drive_listrC)))%*:*:; ;; ; 1:8:cdKtjjfdd{S7w)zFRead a text/csv/json file from the shared folder. `file` = name or id.c.tjSN)r read_filefilesrzdrive_read..Ls%//$2GrNrrrr s`r drive_readr$Is%))*GH HH H &0.0chKtjjfdd{S7w)zHCreate or overwrite a text file in the shared folder from given content.c0tjSr)r write_filecontentnamesrr"zdrive_write..Rs%2B2B42QrNr#r+r*s``r drive_writer-Os%))*QR RR R '202cdKtjjfdd{S7w)zBRemove (trash) a file from the shared folder. `file` = name or id.c.tjSr)r delete_filer srr"zdrive_delete..X%2C2CD2IrNr#r s`r drive_deleter3Us%))*IJ JJ Jr%cxKtjjtjd{S7w)z=List Ahmed's Smartlead cold-email campaigns and their status.N)rrr smartlead campaignsrrrsmartlead_campaignsr7\s))))*=*=> >> >rcdKtjjfdd{S7w)zMAnalytics for one campaign (sent/open/reply/bounce). `campaign` = id or name.c.tjSr)r5campaign_statscampaignsrr"z*smartlead_campaign_stats..es)2J2J82TrNr#r;s`rsmartlead_campaign_statsr=bs%))*TU UU Ur%cxKtjjtjd{S7w)zCList sender inboxes and their warmup reputation / daily send limit.N)rrrr5sendersrrrsmartlead_sendersr@hs))))*;*;< << .qs)2K2KD2QrNr#rDs`rsmartlead_create_campaignrEns%))*QR RR Rr%chKtjjfdd{S7w)zSet a campaign's email sequence. sequence_json = JSON array of steps {seq_number, seq_delay_details:{delay_in_days}, subject, email_body}.c0tjSr)r5 set_sequencer< sequence_jsonsrr"z(smartlead_set_sequence..ys &&x?rNr#rIs``rsmartlead_set_sequencerKts1))?A AA Ar.chKtjjfdd{S7w)z|Add leads to a campaign. leads_json = JSON array of {email, first_name, last_name, company_name, ...}. Max 100 per call.c0tjSr)r5 add_leadsr< leads_jsonsrr"z%smartlead_add_leads..s ##Hj9rNr#rOs``rsmartlead_add_leadsrQ|s-))9; ;; ;r.chKtjjfdd{S7w)zEStart / pause / stop a campaign. action = 'start' | 'pause' | 'stop'.c0tjSr)r5campaign_control)actionr<srr"z,smartlead_campaign_control..s **8V >> >r.clKtjjfdd{S7w)uEscape hatch — call ANY Smartlead REST endpoint. method=GET/POST/DELETE, path after /api/v1 (api_key added for you), body_json = JSON body for writes.c2tjSr)r5raw) body_jsonmethodpathsrr"zsmartlead_api..s fdI6rNr#)r[r\rZs```r smartlead_apir]s-))68 88 8 (424chKtjjfdd{S7w)uRun SQL against the Ultron master DB (18k+ leads + CRM: clients, contacts, users…). SELECT to read/aggregate, INSERT/UPDATE to write. Irreversible statements (drop/truncate, WHERE-less delete/update) need confirm='yes'.c0tjSr) ultron_dbquery)confirmsqlsrr"zultron_query..s)//#w2OrNr#)rdrcs``r ultron_queryres% ))*OP PP Pr.cdKtjjfdd{S7w)uxInspect the DB: no table → all tables with row counts; with a table → its columns. Use before composing a query.c.tjSr)raschematablesrr"zultron_schema..s)2B2B52IrNr#ris`r ultron_schemark%))*IJ JJ Jr%cpKtjjfdd{S7w)zSend an email from Ahmed's business mailbox (ahmad@revalstudio.com). `to` and `cc` are comma-separated; cc optional. Namecheap takes ~15-30s to deliver.c4tjSr)emailboxsendbodyccsubjecttosrr"zemail_send..s b'44rNr#rurtrrrss````r email_sendrws-))46 66 6 )646chKtjjfdd{S7w)zSearch the business inbox by phrase (sender+subject; empty = latest). Returns a list with a UID per message for email_read.c0tjSr)rosearchlimitrbsrr"zemail_search..s(//%2OrNr#rbr}s``r email_searchrs%))*OP PP Pr.cdKtjjfdd{S7w)z.s(--2DrNr#rs`r email_readr%))*DE EE Er%cpKtjjfdd{S7w)zHSend an email from Ahmed's WORK Gmail (alrugaib). to/cc comma-separated.c4tjSr) gworkspace gmail_sendrqsrr"zgmail_send..s %%b'4 >> >rxchKtjjfdd{S7w)zuSearch the WORK Gmail inbox (Gmail query syntax; empty = latest). Returns a message id per result for gmail_read.c0tjSr)r gmail_searchr|srr"zgmail_search..s ''u5rNr#r~s``rrrs-))57 77 7r.cdKtjjfdd{S7w)z7Read the full body of one WORK Gmail message by its id.c.tjSr)r gmail_read message_idsrr"zgmail_read..s*2G2G 2SrNr#rs`rrrs%))*ST TT Tr%cdKtjjfdd{S7w)zBList Ahmed's WORK calendar events for the next N days (default 7).c.tjSr)r calendar_listdayssrr"zcalendar_list..s*2J2J42PrNr#rs`rrrs%))*PQ QQ Qr%cxKtjjfdd{S7w)zCreate a WORK calendar event. start/end = ISO datetime with timezone (2026-07-15T14:00:00+03:00). attendees = comma-separated emails (invited). add_meet='yes' attaches a Google Meet link.c8tjSr)rcalendar_create_event)add_meet attendees descriptionendstarttitlesrr"z'calendar_create_event..s 00 5#y+xArNr#)rrrrrrs``````rrrs:)) A AB BB B +:8:chKtjjfdd{S7w)zORead a range from a Google Sheet (work account). a1_range e.g. 'Sheet1!A1:D20'.c0tjSr)r sheets_read)a1_rangespreadsheet_idsrr"zsheets_read..s &&~x@rNr#)rrs``rrrs1))@B BB Br.clKtjjfdd{S7w)zoWrite to a Google Sheet range (work account). values_json = JSON array of rows, e.g. [["a","b"],["c","d"]].c2tjSr)r sheets_write)rr values_jsonsrr"zsheets_write..s ''+NrNr#)rrrs```rrrs1 ))NP PP Pr^chKtjjfdd{S7w)zSave a text file to the shared writable storage (syncs across all devices). `name` = file name/path (e.g. 'crm/riyadh.csv'), `content` = the full text. This is where Jarvis/AIs put files for each other (drive_* is read-only).c0tjSr)storagewriter)srr"zstorage_write..s'--g2NrNr#r,s``r storage_writers% ))*NO OO Or.cdKtjjfdd{S7w)z?Read a file back from the shared writable storage by name/path.c.tjSr)rrrDsrr"zstorage_read..s',,t2DrNr#rDs`r storage_readrrr%cxKtjjtjd{S7w)z.List the files in the shared writable storage.N)rrrrrrrr storage_listrs)))'*<*<= == =rcdKtjjfdd{S7w)z. s'..2FrNr#rDs`rstorage_deleters%))*FG GG Gr%cxKtjjtjd{S7w)zAList Ahmed's Asana workspaces and which one the tools default to.N)rrrasana workspacesrrrasana_workspacesrrrchKtjjfdd{S7w)zList Asana projects; `query` filters by name, archived=True lists archived ones. Use it to find the right project before asking for its tasks.c0tjSr)rprojects)archivedrbsrr"z asana_projects..s%..2QrNr#)rbrs``rasana_projectsrs%))*QR RR Rr.ctKtjjfdd{S7w)zCreate an Asana project. `team` is required only if the workspace is an ORGANIZATION (the tool says so, and names the teams, if it is). `privacy` = public_to_workspace | private_to_team | private.c6tjSr)rproject_create)due_onr+notesprivacyteamsrr"z&asana_project_create..#s$$T4HrNr#)r+rrrrs`````rasana_project_creaters1 ))HJ JJ J *868cxKtjjfdd{S7w)uChange a project (`project` = name or id): rename, notes, due_on, owner, or archive=True to ARCHIVE it (reversible, keeps everything — this is how you retire a project; deleting one is not offered here because it can't be undone, use asana_api if you truly mean DELETE).c8tjSr)rproject_update)archiverr+rownerprojectsrr"z&asana_project_update../s$$WdE65'RrNr#)rr+rrrrs``````rasana_project_updater&s4))RRT TT TrcpKtjjfdd{S7w)aZWho's on a project, and invite/remove them. `add`/`remove` = comma-separated emails, names or ids ('me' works). `access_level` = admin|editor|commenter|viewer. No add/remove = list them. This shares a project with someone already in the workspace; inviting a NEW person to Asana itself is asana_api POST /workspaces/{gid}/addUser.c4tjSr)rproject_members) access_leveladdrremovesrr"z'asana_project_members..;s%%gsFLIrNr#)rrrrs````rasana_project_membersr2s1))IK KK KrxcpKtjjfdd{S7w)zdPost a project status update. status_type = on_track | at_risk | off_track | on_hold | complete.c4tjSr)rproject_status)r status_typetextrsrr"z&asana_project_status..Es$$WdKGrNr#)rrrrs````rasana_project_statusr>s1 ))GI II IrxcdKtjjfdd{S7w)zFULL detail of ONE task (`task` = name or id): notes, assignee, due date, project, section, tags, followers, subtasks and the latest comments.c.tjSr)rtaskrsrr"zasana_task..Ls%**T2BrNr#rs`r asana_taskrHs%))*BC CC Cr%ctKtjjfdd{S7w)zList Asana tasks. `project` (name or id) = that project's; add `section` for one board column; empty project with mine=True = 'what's on my plate'. Open tasks only unless completed=True.c6tjSr)rtasks) completedr}minersectionsrr"zasana_tasks..Vs GT7IuErNr#)rrrrr}s`````r asana_tasksrOs1 ))EG GG Grc |Ktjjfdd{S7w)zCreate an Asana task. `project` = project name or id (optional), `section` = a board column in it, `parent` = another task to make this a SUBTASK of, `due_on` = YYYY-MM-DD, `assignee` = 'me' or a user id/email/name.c :tjSr)r task_create)assigneerr+rparentrrsrr"z#asana_task_create..as!!$w&")63rNr#)r+rrrrrrs```````rasana_task_createrYs4)) 3 34 44 4 ,<:<c |Ktjjfdd{S7w)zChange a task (`task` = name or id): rename, edit notes, set due_on (YYYY-MM-DD), reassign, or set complete true/false. `start_on` needs a due date too AND a paid Asana plan (it 402s on a free workspace).c :tjSr)r task_update)rcompleterr+rstart_onrsrr"z#asana_task_update..ns!!$eVXx"*,rNr#)rr+rrrrrs```````rasana_task_updateres4)) , ,- -- -rcpKtjjfdd{S7w)zMove a task to another `project` and/or `section`. A REAL move: it is removed from the project it was in (Asana's addProject alone would leave it in both). `section` alone moves it between columns of its current project.c4tjSr)r task_move)r remove_fromrrsrr"z!asana_task_move..ysgw DrNr#)rrrrs````rasana_task_moverrs1 ))DF FF FrxcdKtjjfdd{S7w)z1Mark an Asana task done. `task` = its name or id.c.tjSr)r task_completersrr"z%asana_task_complete..s%2E2Ed2KrNr#rs`rasana_task_completer|s%))*KL LL Lr%cdKtjjfdd{S7w)uDelete an Asana task. It goes to Deleted Items and is recoverable for 30 days. Only when he means DELETE — 'it's done' is asana_task_complete.c.tjSr)r task_deletersrr"z#asana_task_delete..r2rNr#rs`rasana_task_deleterrlr%cxKtjjfdd{S7w)zWho/what is on a task: set the assignee, add/remove followers (comma-separated names, emails or 'me'), add/remove tags (a new tag is created if needed). With no changes it just reports.c8tjSr)r task_people) add_followersadd_tagrremove_followers remove_tagrsrr"z#asana_task_people..s!!$-AQ"):7rNr#)rrrr r r s``````rasana_task_peopler s4)) 7 78 88 8rchKtjjfdd{S7w)zNList a task's subtasks, or create them: `add` = comma-separated subtask names.c0tjSr)rsubtasks)rrsrr"z asana_subtasks..s%..s2KrNr#)rrs``rasana_subtasksr%))*KL LL Lr.chKtjjfdd{S7w)uOPost a comment on an Asana task (`task` = name or id) — e.g. a status update.c0tjSr)rcommentrrsrr"zasana_comment..s%--d2KrNr#rs``r asana_commentrrr.chKtjjfdd{S7w)zhREAD a task's comment thread (system events skipped). `limit` = how many of the latest (default 10).c0tjSr)rcomments)r}rsrr"z asana_comments..s%..u2MrNr#)rr}s``rasana_commentsrs%))*MN NN Nr.cxKtjjfdd{S7w)uBFind tasks by phrase, with optional filters (project, assignee='me' or a name, due_before/due_after as YYYY-MM-DD, completed). Uses Asana's premium search when the plan has it, else name-matching typeahead. The search index lags up to a minute — for a task just created, use asana_task / asana_tasks instead.c8tjSr)rr{)rr due_after due_beforerrbsrr"zasana_search..s UGXz9&(rNr#)rbrrrrrs``````r asana_searchrs4)) ( () )) )rcpKtjjfdd{S7w)uEscape hatch — call ANY Asana REST endpoint (base https://app.asana.com/api/1.0) for what the curated asana_* tools don't cover: sections, tags, teams, attachments, dependencies, templates, goals, portfolios, custom fields, webhooks, batch, inviting a NEW person to the workspace, deleting a project. method = GET/POST/PUT/DELETE. path = everything after /api/1.0, e.g. '/projects/12345/sections'. ENVELOPE: do NOT wrap body_json in {"data": ...} — that's added for you. Just pass the inner object: {"name": "Q3 launch", "workspace": "12345"}. The response is unwrapped from `data` for you too. OPT_FIELDS (important): Asana returns ONLY gid/resource_type/name by default. To get real fields, pass them in params_json: params_json = {"opt_fields": "name,due_on,completed,assignee.name", "limit": 50} Dot-notation reaches into related objects (assignee.name, projects.name). Returns raw JSON.c4tjSr)rrY)rZr[ params_jsonr\srr"zasana_api..s &$ ;?rNr#)r[r\rZr"s````r asana_apir#s1())?A AA ArxcKtj4d{ddddd{y77#1d{7swYyxYww)zIEnter from the FastAPI lifespan so the session manager's task group runs.N)session_managerrunrrrlifespanr's3""$$ %$$$$$$s<A6A: A8AAA A A AcFtsy|tj|tS|j dgDcic]2\}}|j j |j 4}}}tj|j ddtScc}}w)NTheaders authorizationr )API_KEYhmaccompare_digest PATH_TOKENgetdecodelower_BEARER)scopetokenkvr)s r _authorizedr7s  ""5*55 99Y35341axxz!188:-3 5   w{{?B? II5s7BcdK|dddgdd{|dddd{y77w)Nzhttp.response.starti)s content-typesapplication/json)typestatusr)zhttp.response.bodys{"error":"unauthorized"})r9rrr)rps r_rejectr;sK -BCE FFF ,6QR SSSFSs0,0.00ceZdZdZddZdZy)_DoorzHASGI gate in front of the shared MCP handler. mode: 'header' or 'token'.c||_yr)mode)selfr?s r__init__z_Door.__init__s  rc2K|ddk7rt|d{y|jdk(r!|jdijdnd}t||st|d{ytj |||d{y7w7'7 w)Nr9httpr4 path_params)r;r?r/r7r%handle_request)r@r3receiverpr4s r__call__z_Door.__call__s =F "$-   II(="-11':.2 5%($-   ,,UGTBBB Bs4BBAB+B,B B BBBN)r?str)__name__ __module__ __qualname____doc__rArGrrrr=r=sR Crr=c|jjjtdt d|jjjtdt dy)z=Attach both MCP doors to an existing FastAPI / Starlette app.z/mcpheaderz /mcp/{token}r4N)routerroutesappendrr=)apps rmountrSsHJJU65?;<JJU>5>BCr)returnrH)r!rHrTrH)r+rHr*rHrTrH)r<rHrTrH)r+rHrTrH)r<rHrJrHrTrH)r<rHrPrHrTrH)r<rHrUrHrTrH)r )r[rHr\rHrZrHrTrH)rdrHrcrHrTrH)rjrHrTrH) rurHrtrHrrrHrsrHrTrH) )rbrHr}intrTrH)rrHrTrH)rrHrTrH))rrVrTrH)r r r )rrHrrHrrHrrHrrHrrHrTrH)rrHrrHrTrH)rrHrrHrrHrTrH)r F)rbrHrboolrTrH)r r r r ) r+rHrrHrrHrrHrrHrTrH)r r r r N)rrHr+rHrrHrrHrrHr bool | NonerTrH) rrHrrHrrHrrHrTrH)on_trackr ) rrHrrHrrHrrHrTrH)rrHrTrH)r Tr F2) rrHrrXrrHrrXr}rVrTrH)r r mer r r )r+rHrrHrrHrrHrrHrrHrrHrTrH)r r r r r N)rrHr+rHrrHrrHrrHrrHrrYrTrH) rrHrrHrrHrrHrTrH)r r r r r )rrHrrHrrHr rHr rHr rHrTrH)rrHrrHrTrH)rrHrrHrTrH)rrHr}rVrTrH)rbrHrrHrrHrrHrrHrrYrTrH)r r ) r[rHr\rHrZrHr"rHrTrH)r4z str | NonerTrX)rTNone)WrL __future__rhashlibr,os contextlibrrmcp.server.fastmcprmcp.server.transport_securityrstarlette.routingrrrrorr5rraenvironr/r+r2sha256encode hexdigestr.mcptoolrr$r-r3r7r=r@rErKrQrVr]rerkrwrrrrrrrrrrrrrrrrrrrrrrrrrrr rrrrr#streamable_http_app_r%r'r7r;r=rSrrrrms # * &C#  **..+R 0 G9 CJ^W^^GNN, - 7 7 9#2 >r  1(-/ Q2< < I I S S K K ? ? V V = = S S A A; ;> > 8 8Q QK K6 6Q Q F F > > 7 7U U R R HJ02B+.BBEB*-B7:B BB B P$'P,/P PP PF F > > H H< < S S GI@BJ'*J:=JGJJ JJL>@6:T'*T8;T(3T?BT TKM46K.1K;>K K2<,.I,/I&)I36I ID D KM<>G!%G69GCFG GGI@B=?4&)4:=4%(47:4DG4 4DF>@,.48 -$' -8; -&) -'2 ->A -  -GI-/F'*F47F FM M K K 79MOAC8+.8GJ8%(8;>8HK8 8M M M M O O KM>@04 )#& )8; )"- )9< )  )=?')A!$A.1A A.%% JT CC$Dr