package registries import ( "context" "encoding/json" "fmt" "net/http" "strings" "time" "github.com/modelcontextprotocol/registry/pkg/model" ) // PyPIPackageResponse represents the structure returned by the PyPI JSON API type PyPIPackageResponse struct { Info struct { Description string `json:"description"` } `json:"info"` } // ValidatePyPI validates that a PyPI package contains the correct MCP server name func ValidatePyPI(ctx context.Context, pkg model.Package, serverName string) error { // Set default registry base URL if empty if pkg.RegistryBaseURL == "" { pkg.RegistryBaseURL = model.RegistryURLPyPI } // Validate that the registry base URL matches PyPI exactly if pkg.RegistryBaseURL != model.RegistryURLPyPI { return fmt.Errorf("registry type and base URL do not match: '%s' is not valid for registry type '%s'. Expected: %s", pkg.RegistryBaseURL, model.RegistryTypePyPI, model.RegistryURLPyPI) } client := &http.Client{Timeout: 10 * time.Second} url := fmt.Sprintf("%s/pypi/%s/json", pkg.RegistryBaseURL, pkg.Identifier) req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil) if err != nil { return fmt.Errorf("failed to create request: %w", err) } req.Header.Set("User-Agent", "MCP-Registry-Validator/1.0") req.Header.Set("Accept", "application/json") resp, err := client.Do(req) if err != nil { return fmt.Errorf("failed to fetch package metadata from PyPI: %w", err) } defer resp.Body.Close() if resp.StatusCode != http.StatusOK { return fmt.Errorf("PyPI package '%s' not found (status: %d)", pkg.Identifier, resp.StatusCode) } var pypiResp PyPIPackageResponse if err := json.NewDecoder(resp.Body).Decode(&pypiResp); err != nil { return fmt.Errorf("failed to parse PyPI package metadata: %w", err) } // Check description (README) content description := pypiResp.Info.Description // Check for mcp-name: format (more specific) mcpNamePattern := "mcp-name: " + serverName if strings.Contains(description, mcpNamePattern) { return nil // Found as mcp-name: format } return fmt.Errorf("PyPI package '%s' ownership validation failed. The server name '%s' must appear as 'mcp-name: %s' in the package README", pkg.Identifier, serverName, serverName) }