Prepare MCP server for Anthropic Connectors Directory submission

[shivamik]

Summary

This PR brings the @imagekit/api-mcp server into compliance with Anthropic's Connectors Directory requirements so it can be (re)submitted and listed. Changes are limited to the MCP server package plus a routine version bump — no changes to SDK behavior.

References:

• Submission guide — "What to expect in the portal"
• Anthropic Software Directory Policy

Changes and the policy they address

Change	File(s)	Policy / requirement
Added tool annotations to execute (title, readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true) and to search_docs (title, readOnlyHint: true, openWorldHint: true)	src/code-tool.ts, src/docs-search-tool.ts	Submission Req 2 — Tool annotations; Directory Policy §5.E (all tools must declare title and applicable readOnlyHint/destructiveHint). Was a hard blocker previously.
Added a Privacy Policy section covering data collection, authentication, usage/storage, third-party sharing, retention, and contact	README.md	Privacy policy requirements — README section is mandatory; "Missing or incomplete privacy policies result in immediate rejection." Directory Policy §3.A.
Added privacy_policies array, upgraded dxt_version → manifest_version: 0.3, added icon, long_description, and expanded keywords	manifest.json	Submission Req 4 — Privacy Policy (privacy_policies array required, manifest_version 0.2+); listing metadata for Step 4 (Listing).
Added Usage Examples (3+ end-to-end natural-language workflows), Support, and Troubleshooting sections	README.md	Submission Req 5 — Documentation (clear setup + usage); Directory Policy §3.C (troubleshooting) and §3.E (≥3 examples).
Added server.json (MCP Registry): npm package entry + remote streamable-http endpoint https://api-mcp.imagekit.io/mcp	server.json	Directory Policy §5.F — Streamable HTTP transport; supports Step 2 (Connection) and registry discoverability.
Added icon.png (512×512 PNG) and copy step in the bundle build	icon.png, build	Listing icon asset for Step 4 (Listing).
Version bump / changelog	package.json, packages/mcp-server/package.json, src/version.ts, CHANGELOG.md, .release-please-manifest.json	Release tooling — keeps published deps current (§5.G).

Compliance notes (Step 10)

• OAuth 2.0 (Submission Req 3 / §5.D): already satisfied — the hosted endpoint sits behind an OAuth 2.1 + PKCE proxy with dynamic client registration. No code change needed in auth repo
• AI media generation (§4.B): N/A — the execute tool runs the ImageKit SDK, whose methods cover upload / file / folder / asset / account / cache management only. No SDK method generates media from a text prompt, so this does not fall under the unsupported "AI media generation" use case. §4.B
• Allowed link URIs: N/A — the server does not use the ui/open-link capability.

Note: § X.A means section X and point A in this doc https://support.claude.com/en/articles/13145358-anthropic-software-directory-policy

[shivamik]

Hi have read https://claude.com/docs/connectors/building/submission and https://support.claude.com/en/articles/13145358-anthropic-software-directory-policy

Found we issue that were making our server non compliant with anthropic's connector. I have proposed some changes that align our server to their policy.

[shivamik]

Please review icon, contact details, emails and page links.

[shivamik]

Changed this line, even though we are not logging intent anywhere, having this line could raise some eye brows as per 1.D in https://support.claude.com/en/articles/13145358-anthropic-software-directory-policy

[imagekitio]

why is this openWorldHint true, it doesnt call any api?

[shivamik]

oh yes, this should have been

openWorldHint: false