python-package.yml

name: Publish to PyPI and MCP Registry

on:
  release:
    types: [published]

jobs:
  publish:
    runs-on: ubuntu-latest
    permissions:
      id-token: write # Required for OIDC authentication
      attestations: write # Required for provenance-based publish flows
      actions: read # Required for workflow metadata access
      contents: read

    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Set up Python
      uses: actions/setup-python@v4
      with:
        python-version: '3.11'

    ### Publish to PyPI
    - name: Install uv
      uses: astral-sh/setup-uv@v3

    - name: Install dependencies
      run: uv sync

    - name: Build package
      run: uv build

    - name: Publish to PyPI
      run: uv publish --token ${{ secrets.PYPI_TOKEN }}

    ### Publish MCP server:

    - name: Install mcp-publisher
      run: |
        curl -L "https://github.com/modelcontextprotocol/registry/releases/latest/download/mcp-publisher_$(uname -s | tr '[:upper:]' '[:lower:]')_$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/').tar.gz" | tar xz mcp-publisher

    - name: Authenticate to MCP Registry
      run: ./mcp-publisher login github-oidc

    # Optional:
    - name: Set version in server.json
      run: |
        VERSION=${GITHUB_REF#refs/tags/v}
        jq --arg v "$VERSION" '.version = $v' server.json > server.tmp && mv server.tmp server.json

    - name: Publish server to MCP Registry
      run: ./mcp-publisher publish