Add standalone topology MCP with skill, scopes UI, and opt-in live sync.

Splits canvas/Fabric tools into netx-topology-mcp, documents install and a companion Cursor skill, lets API keys grant ne:write explicitly, and adds optional topology live sync so operators can watch agent drawing without constant polling.

Co-authored-by: Cursor <cursoragent@cursor.com>

packages/netx-topology-mcp/src/netx_topology_mcp/http_client.py

@@ -0,0 +1,94 @@
+"""HTTP client for netx REST API (topology MCP)."""
+
+from __future__ import annotations
+
+import json
+import os
+from typing import Any
+
+import httpx
+
+
+def api_base_url() -> str:
+    raw = (
+        os.getenv("NETX_API_URL")
+        or os.getenv("OCLAW_NETX_BASE_URL")
+        or "http://127.0.0.1:8890"
+    )
+    return str(raw or "").strip().rstrip("/")
+
+
+def api_headers() -> dict[str, str]:
+    h = {"accept": "application/json"}
+    tok = (os.getenv("NETX_API_TOKEN") or os.getenv("OCLAW_NETX_API_TOKEN") or "").strip()
+    if not tok:
+        candidates = [
+            os.getenv("NETX_MCP_TOKEN_FILE", "").strip(),
+            "data/auth/mcp_token",
+            os.path.join(os.path.dirname(__file__), "..", "..", "..", "data", "auth", "mcp_token"),
+        ]
+        for raw in candidates:
+            if not raw:
+                continue
+            path = os.path.abspath(raw)
+            try:
+                if os.path.isfile(path):
+                    with open(path, encoding="utf-8") as fh:
+                        tok = fh.read().strip()
+                    if tok:
+                        break
+            except Exception:
+                continue
+    if tok:
+        h["authorization"] = f"Bearer {tok}"
+    return h
+
+
+def lang_query_params() -> dict[str, str]:
+    lang = str(os.getenv("NETX_LANG") or "zh").strip().lower()
+    if lang.startswith("en"):
+        return {"lang": "en"}
+    return {}
+
+
+def http_json(
+    method: str,
+    path: str,
+    *,
+    params: dict[str, Any] | None = None,
+    body: dict[str, Any] | None = None,
+    timeout: float = 60.0,
+) -> dict[str, Any]:
+    url = f"{api_base_url()}{path}"
+    merged: dict[str, Any] = dict(lang_query_params())
+    if params:
+        merged.update(params)
+    try:
+        with httpx.Client(timeout=timeout, trust_env=False) as client:
+            resp = client.request(
+                method,
+                url,
+                params=merged or None,
+                json=body,
+                headers=api_headers(),
+            )
+            text = resp.text
+            if not resp.is_success:
+                return {"ok": False, "error": f"netx_http_{resp.status_code}", "detail": text[:800]}
+            data = resp.json() if text else {}
+            return {"ok": True, "data": data if isinstance(data, dict) else {"raw": data}}
+    except Exception as exc:
+        return {"ok": False, "error": "netx_request_failed", "detail": str(exc)[:800]}
+
+
+def mcp_text_result(payload: Any, *, is_error: bool = False) -> dict[str, Any]:
+    out: dict[str, Any] = {"content": [{"type": "text", "text": json.dumps(payload, ensure_ascii=False)}]}
+    if is_error:
+        out["isError"] = True
+    return out
+
+
+def mcp_from_handler_result(result: dict[str, Any]) -> dict[str, Any]:
+    if not result.get("ok"):
+        return mcp_text_result(result, is_error=True)
+    return mcp_text_result(result)