webclaw/crates/webclaw-mcp/src/server.rs
Valerio 499345046c fix: harden LLM providers, UTF-8 handling, and webhook/batch reliability
- webclaw-llm: add explicit request + connect timeouts to the reqwest
  client in every provider (anthropic, openai, ollama) with a shorter
  timeout on the ollama health check, so a stalled provider fails fast.
- webclaw-llm: fix a panic when truncating a provider error body that
  contains multibyte characters near the 500-char cut (char-safe take).
- webclaw-core: snap the endpoint-scan budget cut to a UTF-8 char
  boundary so oversized scripts with non-ASCII content no longer panic.
- webclaw-core: rewrite js_literal_to_json to copy raw bytes instead of
  `byte as char`, preserving multibyte UTF-8 in SvelteKit string values
  rather than producing Latin-1 mojibake.
- webclaw-cli: have fire_webhook return its JoinHandle and await it at
  the crawl/batch/batch-llm call sites, removing the fixed 500ms sleeps.
- webclaw-mcp: drop the up-front DNS pre-validation loop in batch that
  aborted the whole request on one bad URL; the fetch layer already
  applies the same SSRF guard per URL and reports per-URL errors.
- webclaw-fetch: include the port in the warmup homepage URL so hosts
  on a non-default port are warmed correctly.

Adds regression tests for the UTF-8 endpoint-scan and SvelteKit cases.
2026-06-09 21:10:15 +02:00

890 lines
35 KiB
Rust

/// MCP server implementation for webclaw.
/// Exposes web extraction capabilities as tools for AI agents.
///
/// Uses a local-first architecture: fetches pages directly, then falls back
/// to the webclaw cloud API (api.webclaw.io) when bot protection or
/// JS rendering is detected. Set WEBCLAW_API_KEY for automatic fallback.
use std::sync::{Arc, OnceLock};
use std::time::Duration;
use rmcp::handler::server::router::tool::ToolRouter;
use rmcp::handler::server::wrapper::Parameters;
use rmcp::model::{Implementation, ServerCapabilities, ServerInfo};
use rmcp::{ServerHandler, tool, tool_handler, tool_router};
use serde_json::json;
use tracing::{error, info, warn};
use webclaw_fetch::cloud::{self, CloudClient, SmartFetchResult};
use crate::tools::*;
pub struct WebclawMcp {
/// Holds the registered MCP tools. `rmcp >= 1.3` reads this through a
/// derived trait impl (not by name), so rustc's dead-code lint can't
/// see the usage and fires a spurious `field tool_router is never
/// read` on `cargo install`. The field is essential — dropping it
/// would unregister every tool. See issue #30.
#[allow(dead_code)]
tool_router: ToolRouter<Self>,
fetch_client: Arc<webclaw_fetch::FetchClient>,
/// Lazily-initialized Firefox client, reused across all tool calls that
/// request the Firefox profile with no cookies. Building a FetchClient
/// allocates a reqwest pool + TLS state, so tools that repeatedly hit
/// the same profile used to pay that cost per call.
///
/// We don't cache the default Chrome client (already lives at
/// `fetch_client`), we don't cache Random (by design rotates per call),
/// and we don't cache cookie-bearing clients (the cookie header is
/// part of the shape and varies per call). So a single OnceLock for
/// Firefox covers the one real cacheable case without a full LRU.
firefox_client: OnceLock<Arc<webclaw_fetch::FetchClient>>,
llm_chain: Option<webclaw_llm::ProviderChain>,
cloud: Option<CloudClient>,
}
/// Parse a browser string into a BrowserProfile.
fn parse_browser(browser: Option<&str>) -> webclaw_fetch::BrowserProfile {
match browser {
Some("firefox") => webclaw_fetch::BrowserProfile::Firefox,
Some("random") => webclaw_fetch::BrowserProfile::Random,
_ => webclaw_fetch::BrowserProfile::Chrome,
}
}
/// Validate that a URL is public HTTP(S), matching the fetch-layer SSRF guard.
async fn validate_url(url: &str) -> Result<(), String> {
webclaw_fetch::url_security::validate_public_http_url(url)
.await
.map(|_| ())
.map_err(|e| format!("Invalid URL: {e}"))
}
/// Timeout for local fetch calls (prevents hanging on tarpitting servers).
const LOCAL_FETCH_TIMEOUT: Duration = Duration::from_secs(30);
/// Maximum poll iterations for research jobs (~10 minutes at 3s intervals).
const RESEARCH_MAX_POLLS: u32 = 200;
#[tool_router]
impl WebclawMcp {
pub async fn new() -> Self {
let mut config = webclaw_fetch::FetchConfig::default();
// Load proxy config from env vars or local file
if let Ok(proxy) = std::env::var("WEBCLAW_PROXY") {
info!("using single proxy from WEBCLAW_PROXY");
config.proxy = Some(proxy);
}
let proxy_file = std::env::var("WEBCLAW_PROXY_FILE")
.ok()
.unwrap_or_else(|| "proxies.txt".to_string());
if std::path::Path::new(&proxy_file).exists()
&& let Ok(pool) = webclaw_fetch::parse_proxy_file(&proxy_file)
&& !pool.is_empty()
{
info!(count = pool.len(), file = %proxy_file, "loaded proxy pool");
config.proxy_pool = pool;
}
let fetch_client = match webclaw_fetch::FetchClient::new(config) {
Ok(client) => client,
Err(e) => {
error!("failed to build FetchClient: {e}");
std::process::exit(1);
}
};
let chain = webclaw_llm::ProviderChain::default().await;
let llm_chain = if chain.is_empty() {
warn!("no LLM providers available -- extract/summarize tools will fail");
None
} else {
info!(providers = chain.len(), "LLM provider chain ready");
Some(chain)
};
let cloud = CloudClient::from_env();
if cloud.is_some() {
info!("cloud API fallback enabled (WEBCLAW_API_KEY set)");
} else {
warn!(
"WEBCLAW_API_KEY not set -- bot-protected sites will return challenge pages. \
Get a key at https://webclaw.io"
);
}
Self {
tool_router: Self::tool_router(),
fetch_client: Arc::new(fetch_client),
firefox_client: OnceLock::new(),
llm_chain,
cloud,
}
}
/// Return the cached Firefox client, building it on first use. Any
/// subsequent call with the same profile (and no cookies) reuses the
/// pool instead of allocating a fresh reqwest + TLS stack.
fn firefox_or_build(&self) -> Result<Arc<webclaw_fetch::FetchClient>, String> {
if let Some(c) = self.firefox_client.get() {
return Ok(c.clone());
}
let config = webclaw_fetch::FetchConfig {
browser: webclaw_fetch::BrowserProfile::Firefox,
..Default::default()
};
let client = Arc::new(
webclaw_fetch::FetchClient::new(config)
.map_err(|e| format!("Failed to build firefox client: {e}"))?,
);
// If a concurrent call raced us here, OnceLock keeps the first
// winner and drops ours — that's fine, the ref-count just cleans up.
let _ = self.firefox_client.set(client.clone());
Ok(self.firefox_client.get().cloned().unwrap_or(client))
}
/// Helper: smart fetch with LLM format for extract/summarize tools.
async fn smart_fetch_llm(&self, url: &str) -> Result<SmartFetchResult, String> {
cloud::smart_fetch(
&self.fetch_client,
self.cloud.as_ref(),
url,
&[],
&[],
false,
&["llm", "markdown"],
)
.await
}
/// Scrape a single URL and extract its content as markdown, LLM-optimized text, plain text, or full JSON.
/// Automatically falls back to the webclaw cloud API when bot protection or JS rendering is detected.
#[tool]
async fn scrape(&self, Parameters(params): Parameters<ScrapeParams>) -> Result<String, String> {
validate_url(&params.url).await?;
let format = params.format.as_deref().unwrap_or("markdown");
let browser = parse_browser(params.browser.as_deref());
let include = params.include_selectors.unwrap_or_default();
let exclude = params.exclude_selectors.unwrap_or_default();
let main_only = params.only_main_content.unwrap_or(false);
// Build cookie header from params
let cookie_header = params
.cookies
.as_ref()
.filter(|c| !c.is_empty())
.map(|c| c.join("; "));
// Use a custom client if non-default browser or cookies are provided
// Pick the cheapest route to a FetchClient for this request:
// 1. Default Chrome + no cookies → reuse the long-lived self.fetch_client
// 2. Firefox + no cookies → reuse the lazily-cached self.firefox_client
// 3. Anything with cookies, or Random → build ad-hoc
let is_default_browser = matches!(browser, webclaw_fetch::BrowserProfile::Chrome);
let custom_client;
let cached_firefox;
let client: &webclaw_fetch::FetchClient = if cookie_header.is_none() && is_default_browser {
&self.fetch_client
} else if cookie_header.is_none()
&& matches!(browser, webclaw_fetch::BrowserProfile::Firefox)
{
cached_firefox = self.firefox_or_build()?;
// cached_firefox lives to end of function; auto-deref gives
// us &FetchClient here.
&cached_firefox
} else {
let mut headers = std::collections::HashMap::new();
headers.insert("Accept-Language".to_string(), "en-US,en;q=0.9".to_string());
if let Some(ref cookies) = cookie_header {
headers.insert("Cookie".to_string(), cookies.clone());
}
let config = webclaw_fetch::FetchConfig {
browser,
headers,
..Default::default()
};
custom_client = webclaw_fetch::FetchClient::new(config)
.map_err(|e| format!("Failed to build client: {e}"))?;
&custom_client
};
let formats = [format];
let result = cloud::smart_fetch(
client,
self.cloud.as_ref(),
&params.url,
&include,
&exclude,
main_only,
&formats,
)
.await?;
match result {
SmartFetchResult::Local(extraction) => {
let output = match format {
"llm" => webclaw_core::to_llm_text(&extraction, Some(&params.url)),
"text" => extraction.content.plain_text,
"json" => serde_json::to_string_pretty(&extraction).unwrap_or_default(),
_ => extraction.content.markdown,
};
Ok(output)
}
SmartFetchResult::Cloud(resp) => {
// Extract the requested format from the API response
let content = resp
.get(format)
.or_else(|| resp.get("markdown"))
.and_then(|v| v.as_str())
.unwrap_or("");
if content.is_empty() {
// Return full JSON if no content in the expected format
Ok(serde_json::to_string_pretty(&resp).unwrap_or_default())
} else {
Ok(content.to_string())
}
}
}
}
/// Crawl a website starting from a seed URL, following links breadth-first up to a configurable depth and page limit.
#[tool]
async fn crawl(&self, Parameters(params): Parameters<CrawlParams>) -> Result<String, String> {
validate_url(&params.url).await?;
if let Some(max) = params.max_pages
&& max > 500
{
return Err("max_pages cannot exceed 500".into());
}
let format = params.format.as_deref().unwrap_or("markdown");
let config = webclaw_fetch::CrawlConfig {
max_depth: params.depth.unwrap_or(2) as usize,
max_pages: params.max_pages.unwrap_or(50),
concurrency: params.concurrency.unwrap_or(5),
use_sitemap: params.use_sitemap.unwrap_or(false),
..Default::default()
};
let crawler = webclaw_fetch::Crawler::new(&params.url, config)
.map_err(|e| format!("Crawler init failed: {e}"))?;
let result = crawler.crawl(&params.url, None).await;
let mut output = format!(
"Crawled {} pages ({} ok, {} errors) in {:.1}s\n\n",
result.total, result.ok, result.errors, result.elapsed_secs
);
for page in &result.pages {
output.push_str(&format!("--- {} (depth {}) ---\n", page.url, page.depth));
if let Some(ref extraction) = page.extraction {
let content = match format {
"llm" => webclaw_core::to_llm_text(extraction, Some(&page.url)),
"text" => extraction.content.plain_text.clone(),
_ => extraction.content.markdown.clone(),
};
output.push_str(&content);
} else if let Some(ref err) = page.error {
output.push_str(&format!("Error: {err}"));
}
output.push_str("\n\n");
}
Ok(output)
}
/// Discover URLs from a website's sitemaps (robots.txt + sitemap.xml).
#[tool]
async fn map(&self, Parameters(params): Parameters<MapParams>) -> Result<String, String> {
validate_url(&params.url).await?;
let entries = webclaw_fetch::sitemap::discover(&self.fetch_client, &params.url)
.await
.map_err(|e| format!("Sitemap discovery failed: {e}"))?;
let urls: Vec<&str> = entries.iter().map(|e| e.url.as_str()).collect();
Ok(format!(
"Discovered {} URLs:\n\n{}",
urls.len(),
urls.join("\n")
))
}
/// Extract content from multiple URLs concurrently.
#[tool]
async fn batch(&self, Parameters(params): Parameters<BatchParams>) -> Result<String, String> {
if params.urls.is_empty() {
return Err("urls must not be empty".into());
}
if params.urls.len() > 100 {
return Err("batch is limited to 100 URLs per request".into());
}
// No up-front DNS pre-validation: it aborted the whole batch on a
// single unresolvable URL. The fetch layer applies the same SSRF
// guard (validate_public_http_url) per URL, so bad entries surface
// as individual per-URL errors below instead of failing the batch.
let format = params.format.as_deref().unwrap_or("markdown");
let concurrency = params.concurrency.unwrap_or(5);
let url_refs: Vec<&str> = params.urls.iter().map(String::as_str).collect();
let results = self
.fetch_client
.fetch_and_extract_batch(&url_refs, concurrency)
.await;
let mut output = format!("Extracted {} URLs:\n\n", results.len());
for r in &results {
output.push_str(&format!("--- {} ---\n", r.url));
match &r.result {
Ok(extraction) => {
let content = match format {
"llm" => webclaw_core::to_llm_text(extraction, Some(&r.url)),
"text" => extraction.content.plain_text.clone(),
_ => extraction.content.markdown.clone(),
};
output.push_str(&content);
}
Err(e) => {
output.push_str(&format!("Error: {e}"));
}
}
output.push_str("\n\n");
}
Ok(output)
}
/// Extract structured data from a web page using an LLM. Provide either a JSON schema or a natural language prompt.
/// Falls back to the webclaw cloud API when no local LLM is available or bot protection is detected.
#[tool]
async fn extract(
&self,
Parameters(params): Parameters<ExtractParams>,
) -> Result<String, String> {
validate_url(&params.url).await?;
if params.schema.is_none() && params.prompt.is_none() {
return Err("Either 'schema' or 'prompt' is required for extraction.".into());
}
// No local LLM — fall back to cloud API directly
if self.llm_chain.is_none() {
let cloud = self.cloud.as_ref().ok_or(
"No LLM providers available. Set OPENAI_API_KEY, ANTHROPIC_API_KEY, or WEBCLAW_API_KEY for cloud fallback.",
)?;
let mut body = json!({"url": params.url});
if let Some(ref schema) = params.schema {
body["schema"] = json!(schema);
}
if let Some(ref prompt) = params.prompt {
body["prompt"] = json!(prompt);
}
let resp = cloud.post("extract", body).await?;
return Ok(serde_json::to_string_pretty(&resp).unwrap_or_default());
}
let chain = self.llm_chain.as_ref().unwrap();
let llm_content = match self.smart_fetch_llm(&params.url).await? {
SmartFetchResult::Local(extraction) => {
webclaw_core::to_llm_text(&extraction, Some(&params.url))
}
SmartFetchResult::Cloud(resp) => resp
.get("llm")
.or_else(|| resp.get("markdown"))
.and_then(|v| v.as_str())
.unwrap_or("")
.to_string(),
};
let data = if let Some(ref schema) = params.schema {
webclaw_llm::extract::extract_json(&llm_content, schema, chain, None)
.await
.map_err(|e| format!("LLM extraction failed: {e}"))?
} else {
let prompt = params.prompt.as_deref().unwrap();
webclaw_llm::extract::extract_with_prompt(&llm_content, prompt, chain, None)
.await
.map_err(|e| format!("LLM extraction failed: {e}"))?
};
Ok(serde_json::to_string_pretty(&data).unwrap_or_default())
}
/// Summarize the content of a web page using an LLM.
/// Falls back to the webclaw cloud API when no local LLM is available or bot protection is detected.
#[tool]
async fn summarize(
&self,
Parameters(params): Parameters<SummarizeParams>,
) -> Result<String, String> {
validate_url(&params.url).await?;
// No local LLM — fall back to cloud API directly
if self.llm_chain.is_none() {
let cloud = self.cloud.as_ref().ok_or(
"No LLM providers available. Set OPENAI_API_KEY, ANTHROPIC_API_KEY, or WEBCLAW_API_KEY for cloud fallback.",
)?;
let mut body = json!({"url": params.url});
if let Some(sentences) = params.max_sentences {
body["max_sentences"] = json!(sentences);
}
let resp = cloud.post("summarize", body).await?;
let summary = resp.get("summary").and_then(|v| v.as_str()).unwrap_or("");
if summary.is_empty() {
return Ok(serde_json::to_string_pretty(&resp).unwrap_or_default());
}
return Ok(summary.to_string());
}
let chain = self.llm_chain.as_ref().unwrap();
let llm_content = match self.smart_fetch_llm(&params.url).await? {
SmartFetchResult::Local(extraction) => {
webclaw_core::to_llm_text(&extraction, Some(&params.url))
}
SmartFetchResult::Cloud(resp) => resp
.get("llm")
.or_else(|| resp.get("markdown"))
.and_then(|v| v.as_str())
.unwrap_or("")
.to_string(),
};
webclaw_llm::summarize::summarize(&llm_content, params.max_sentences, chain, None)
.await
.map_err(|e| format!("Summarization failed: {e}"))
}
/// Compare the current content of a URL against a previous extraction snapshot, showing what changed.
/// Automatically falls back to the webclaw cloud API when bot protection is detected.
#[tool]
async fn diff(&self, Parameters(params): Parameters<DiffParams>) -> Result<String, String> {
validate_url(&params.url).await?;
let previous: webclaw_core::ExtractionResult =
serde_json::from_str(&params.previous_snapshot)
.map_err(|e| format!("Failed to parse previous_snapshot JSON: {e}"))?;
let result = cloud::smart_fetch(
&self.fetch_client,
self.cloud.as_ref(),
&params.url,
&[],
&[],
false,
&["markdown"],
)
.await?;
match result {
SmartFetchResult::Local(current) => {
let content_diff = webclaw_core::diff::diff(&previous, &current);
Ok(serde_json::to_string_pretty(&content_diff).unwrap_or_default())
}
SmartFetchResult::Cloud(resp) => {
// Extract markdown from the cloud response and build a minimal
// ExtractionResult so we can compute the diff locally.
let markdown = resp.get("markdown").and_then(|v| v.as_str()).unwrap_or("");
if markdown.is_empty() {
return Err(
"Cloud API fallback returned no markdown content; cannot compute diff."
.into(),
);
}
let current = webclaw_core::ExtractionResult {
content: webclaw_core::Content {
markdown: markdown.to_string(),
plain_text: markdown.to_string(),
links: Vec::new(),
images: Vec::new(),
code_blocks: Vec::new(),
raw_html: None,
},
metadata: webclaw_core::Metadata {
title: None,
description: None,
author: None,
published_date: None,
language: None,
url: Some(params.url.clone()),
site_name: None,
image: None,
favicon: None,
word_count: markdown.split_whitespace().count(),
},
domain_data: None,
structured_data: Vec::new(),
};
let content_diff = webclaw_core::diff::diff(&previous, &current);
Ok(serde_json::to_string_pretty(&content_diff).unwrap_or_default())
}
}
}
/// Extract brand identity (colors, fonts, logo, favicon) from a website's HTML and CSS.
/// Automatically falls back to the webclaw cloud API when bot protection is detected.
#[tool]
async fn brand(&self, Parameters(params): Parameters<BrandParams>) -> Result<String, String> {
validate_url(&params.url).await?;
let fetch_result =
tokio::time::timeout(LOCAL_FETCH_TIMEOUT, self.fetch_client.fetch(&params.url))
.await
.map_err(|_| format!("Fetch timed out after 30s for {}", params.url))?
.map_err(|e| format!("Fetch failed: {e}"))?;
// Check for bot protection before extracting brand
if cloud::is_bot_protected(&fetch_result.html, &fetch_result.headers) {
if let Some(ref c) = self.cloud {
let resp = c
.post("brand", serde_json::json!({"url": params.url}))
.await?;
return Ok(serde_json::to_string_pretty(&resp).unwrap_or_default());
} else {
return Err(format!(
"Bot protection detected on {}. Set WEBCLAW_API_KEY for automatic cloud bypass. \
Get a key at https://webclaw.io",
params.url
));
}
}
let identity =
webclaw_core::brand::extract_brand(&fetch_result.html, Some(&fetch_result.url));
Ok(serde_json::to_string_pretty(&identity).unwrap_or_default())
}
/// Run a deep research investigation on a topic or question. Requires WEBCLAW_API_KEY.
/// Saves full result to ~/.webclaw/research/ and returns the file path + key findings.
/// Checks cache first — same query returns the cached result without spending credits.
#[tool]
async fn research(
&self,
Parameters(params): Parameters<ResearchParams>,
) -> Result<String, String> {
let cloud = self
.cloud
.as_ref()
.ok_or("Research requires WEBCLAW_API_KEY. Get a key at https://webclaw.io")?;
let research_dir = research_dir();
let slug = slugify(&params.query);
// Check cache first
if let Some(cached) = load_cached_research(&research_dir, &slug) {
info!(query = %params.query, "returning cached research");
return Ok(cached);
}
let mut body = json!({ "query": params.query });
if let Some(deep) = params.deep {
body["deep"] = json!(deep);
}
if let Some(ref topic) = params.topic {
body["topic"] = json!(topic);
}
// Start the research job
let start_resp = cloud.post("research", body).await?;
let job_id = start_resp
.get("id")
.and_then(|v| v.as_str())
.ok_or("Research API did not return a job ID")?
.to_string();
info!(job_id = %job_id, "research job started, polling for completion");
// Poll until completed or failed
for poll in 0..RESEARCH_MAX_POLLS {
tokio::time::sleep(Duration::from_secs(3)).await;
let status_resp = cloud.get(&format!("research/{job_id}")).await?;
let status = status_resp
.get("status")
.and_then(|v| v.as_str())
.unwrap_or("unknown");
match status {
"completed" => {
// Save full result to file
let (report_path, json_path) =
save_research(&research_dir, &slug, &status_resp);
// Build compact response: file paths + findings (no full report)
let sources_count = status_resp
.get("sources_count")
.and_then(|v| v.as_i64())
.unwrap_or(0);
let findings_count = status_resp
.get("findings_count")
.and_then(|v| v.as_i64())
.unwrap_or(0);
let mut response = json!({
"status": "completed",
"query": params.query,
"report_file": report_path,
"json_file": json_path,
"sources_count": sources_count,
"findings_count": findings_count,
});
if let Some(findings) = status_resp.get("findings") {
response["findings"] = findings.clone();
}
if let Some(sources) = status_resp.get("sources") {
response["sources"] = sources.clone();
}
return Ok(serde_json::to_string_pretty(&response).unwrap_or_default());
}
"failed" => {
let error = status_resp
.get("error")
.and_then(|v| v.as_str())
.unwrap_or("unknown error");
return Err(format!("Research job failed: {error}"));
}
_ => {
if poll % 20 == 19 {
info!(job_id = %job_id, poll, "research still in progress...");
}
}
}
}
Err(format!(
"Research job {job_id} timed out after ~10 minutes of polling. \
Check status manually via the webclaw API: GET /v1/research/{job_id}"
))
}
/// Search the web for a query and return structured results. Requires WEBCLAW_API_KEY.
#[tool]
async fn search(&self, Parameters(params): Parameters<SearchParams>) -> Result<String, String> {
let cloud = self
.cloud
.as_ref()
.ok_or("Search requires WEBCLAW_API_KEY. Get a key at https://webclaw.io")?;
let mut body = json!({ "query": params.query });
if let Some(num) = params.num_results {
body["num_results"] = json!(num);
}
let resp = cloud.post("search", body).await?;
// Format results for readability
if let Some(results) = resp.get("results").and_then(|v| v.as_array()) {
let mut output = format!("Found {} results:\n\n", results.len());
for (i, result) in results.iter().enumerate() {
let title = result.get("title").and_then(|v| v.as_str()).unwrap_or("");
let url = result.get("url").and_then(|v| v.as_str()).unwrap_or("");
let snippet = result
.get("snippet")
.or_else(|| result.get("description"))
.and_then(|v| v.as_str())
.unwrap_or("");
output.push_str(&format!(
"{}. {}\n {}\n {}\n\n",
i + 1,
title,
url,
snippet
));
}
Ok(output)
} else {
// Fallback: return raw JSON if unexpected shape
Ok(serde_json::to_string_pretty(&resp).unwrap_or_default())
}
}
/// List every vertical extractor the server knows about. Returns a
/// JSON array of `{name, label, description, url_patterns}` entries.
/// Call this to discover what verticals are available before using
/// `vertical_scrape`.
#[tool]
async fn list_extractors(
&self,
Parameters(_params): Parameters<ListExtractorsParams>,
) -> Result<String, String> {
let catalog = webclaw_fetch::extractors::list();
serde_json::to_string_pretty(&catalog)
.map_err(|e| format!("failed to serialise extractor catalog: {e}"))
}
/// Run a vertical extractor by name and return typed JSON specific
/// to the target site (title, price, rating, author, etc.), not
/// generic markdown. Use `list_extractors` to discover available
/// names. Example names: `reddit`, `github_repo`, `trustpilot_reviews`,
/// `youtube_video`, `shopify_product`, `pypi`, `npm`, `arxiv`.
///
/// Antibot-gated verticals (amazon_product, ebay_listing,
/// etsy_listing, trustpilot_reviews) will automatically escalate to
/// the webclaw cloud API when local fetch hits bot protection,
/// provided `WEBCLAW_API_KEY` is set.
#[tool]
async fn vertical_scrape(
&self,
Parameters(params): Parameters<VerticalParams>,
) -> Result<String, String> {
validate_url(&params.url).await?;
// Use the cached Firefox client, not the default Chrome one.
// Reddit's `.json` endpoint rejects the wreq-Chrome TLS
// fingerprint with a 403 even from residential IPs (they
// ship a fingerprint blocklist that includes common
// browser-emulation libraries). The wreq-Firefox fingerprint
// still passes, and Firefox is equally fine for every other
// vertical in the catalog, so it's a strictly-safer default
// for `vertical_scrape` than the generic `scrape` tool's
// Chrome default. Matches the CLI `webclaw vertical`
// subcommand which already uses Firefox.
let client = self.firefox_or_build()?;
let data =
webclaw_fetch::extractors::dispatch_by_name(client.as_ref(), &params.name, &params.url)
.await
.map_err(|e| e.to_string())?;
serde_json::to_string_pretty(&data)
.map_err(|e| format!("failed to serialise extractor output: {e}"))
}
}
#[tool_handler]
impl ServerHandler for WebclawMcp {
fn get_info(&self) -> ServerInfo {
ServerInfo::new(ServerCapabilities::builder().enable_tools().build())
.with_server_info(Implementation::new("webclaw-mcp", env!("CARGO_PKG_VERSION")))
.with_instructions(String::from(
"Webclaw MCP server -- web content extraction for AI agents. \
Tools: scrape, crawl, map, batch, extract, summarize, diff, brand, research, search, \
list_extractors, vertical_scrape.",
))
}
}
// ---------------------------------------------------------------------------
// Research file helpers
// ---------------------------------------------------------------------------
fn research_dir() -> std::path::PathBuf {
let dir = dirs::home_dir()
.unwrap_or_else(|| std::path::PathBuf::from("."))
.join(".webclaw")
.join("research");
std::fs::create_dir_all(&dir).ok();
dir
}
fn slugify(query: &str) -> String {
let s: String = query
.chars()
.map(|c| {
if c.is_alphanumeric() || c == ' ' {
c
} else {
' '
}
})
.collect::<String>()
.split_whitespace()
.collect::<Vec<_>>()
.join("-")
.to_lowercase();
// char-safe truncation: byte slicing panics if char 60 lands
// mid-codepoint (multibyte queries, e.g. CJK / accented input).
s.chars().take(60).collect()
}
/// Check for a cached research result. Returns the compact response if found.
fn load_cached_research(dir: &std::path::Path, slug: &str) -> Option<String> {
let json_path = dir.join(format!("{slug}.json"));
let report_path = dir.join(format!("{slug}.md"));
if !json_path.exists() || !report_path.exists() {
return None;
}
let json_str = std::fs::read_to_string(&json_path).ok()?;
let data: serde_json::Value = serde_json::from_str(&json_str).ok()?;
// Build compact response from cache
let mut response = json!({
"status": "completed",
"cached": true,
"query": data.get("query").cloned().unwrap_or(json!("")),
"report_file": report_path.to_string_lossy(),
"json_file": json_path.to_string_lossy(),
"sources_count": data.get("sources_count").cloned().unwrap_or(json!(0)),
"findings_count": data.get("findings_count").cloned().unwrap_or(json!(0)),
});
if let Some(findings) = data.get("findings") {
response["findings"] = findings.clone();
}
if let Some(sources) = data.get("sources") {
response["sources"] = sources.clone();
}
Some(serde_json::to_string_pretty(&response).unwrap_or_default())
}
/// Save research result to disk. Returns (report_path, json_path) as strings.
fn save_research(dir: &std::path::Path, slug: &str, data: &serde_json::Value) -> (String, String) {
let json_path = dir.join(format!("{slug}.json"));
let report_path = dir.join(format!("{slug}.md"));
// Save full JSON
if let Ok(json_str) = serde_json::to_string_pretty(data) {
std::fs::write(&json_path, json_str).ok();
}
// Save report as markdown
if let Some(report) = data.get("report").and_then(|v| v.as_str()) {
std::fs::write(&report_path, report).ok();
}
(
report_path.to_string_lossy().to_string(),
json_path.to_string_lossy().to_string(),
)
}
#[cfg(test)]
mod tests {
use super::slugify;
#[test]
fn slugify_multibyte_query_does_not_panic() {
// Byte-slicing s[..60] would panic mid-codepoint on multibyte
// alphanumerics; char-safe truncation must not.
let q = "日本語のクエリ".repeat(20); // long, 3-byte chars
let s = slugify(&q);
assert!(
s.chars().count() <= 60,
"slug too long: {}",
s.chars().count()
);
}
#[test]
fn slugify_ascii_unchanged_under_limit() {
assert_eq!(slugify("Hello World Query"), "hello-world-query");
}
#[test]
fn slugify_caps_long_ascii_at_60_chars() {
let s = slugify(&"word ".repeat(40));
assert!(s.len() <= 60);
}
}