Add Seer permission (#567)

Author: dcramer

packages/mcp-cloudflare/src/server/lib/approval-dialog.ts

@@ -704,7 +704,16 @@ export function renderApprovalDialog(
                 <!-- Optional permissions section -->
                 <div class="optional-permissions">
                   <h4 class="optional-permissions-title">Optional additional access:</h4>
-                  
+
+                  <label class="optional-permission-item">
+                    <input type="checkbox" name="permission" value="seer" checked>
+                    <span class="permission-checkbox"></span>
+                    <div class="optional-permission-content">
+                      <span class="optional-permission-name">Seer</span>
+                      <div class="optional-permission-description">Use Seer to analyze issues and generate fix recommendations (may incur costs)</div>
+                    </div>
+                  </label>
+
                   <label class="optional-permission-item">
                     <input type="checkbox" name="permission" value="issue_triage">
                     <span class="permission-checkbox"></span>
@@ -713,7 +722,7 @@ export function renderApprovalDialog(
                       <div class="optional-permission-description">Update and manage issues - resolve, assign, and analyze problems</div>
                     </div>
                   </label>
-                  
+
                   <label class="optional-permission-item">
                     <input type="checkbox" name="permission" value="project_management">
                     <span class="permission-checkbox"></span>

packages/mcp-cloudflare/src/server/oauth/routes/callback.ts

@@ -20,12 +20,13 @@ interface AuthRequestWithPermissions extends AuthRequest {
  * Convert selected permissions to granted scopes
  * Permissions are additive:
  * - Base (always included): org:read, project:read, team:read, event:read
+ * - Seer adds: seer (virtual scope)
  * - Issue Triage adds: event:write
  * - Project Management adds: project:write, team:write
  * @param permissions Array of permission strings
  */
 function getScopesFromPermissions(permissions?: unknown): Set<Scope> {
-  // Start with base read-only scopes (always granted)
+  // Start with base read-only scopes (always granted via DEFAULT_SCOPES)
   const scopes = new Set<Scope>(DEFAULT_SCOPES);
 
   // Validate permissions is an array of strings
@@ -37,6 +38,10 @@ function getScopesFromPermissions(permissions?: unknown): Set<Scope> {
   );
 
   // Add scopes based on selected permissions
+  if (perms.includes("seer")) {
+    scopes.add("seer");
+  }
+
   if (perms.includes("issue_triage")) {
     scopes.add("event:write");
   }

packages/mcp-server/src/internal/formatting.ts

@@ -1399,7 +1399,7 @@ function formatContexts(contexts: z.infer<typeof EventSchema>["contexts"]) {
 }
 
 /**
- * Formats a brief Seer AI analysis summary for inclusion in issue details.
+ * Formats a brief Seer analysis summary for inclusion in issue details.
  * Shows current status and high-level insights, prompting to use analyze_issue_with_seer for full details.
  *
  * @param autofixState - The autofix state containing Seer analysis data
@@ -1419,7 +1419,7 @@ function formatSeerSummary(
   const { autofix } = autofixState;
   const parts: string[] = [];
 
-  parts.push("## Seer AI Analysis");
+  parts.push("## Seer Analysis");
   parts.push("");
 
   // Show status first

packages/mcp-server/src/permissions.ts

@@ -25,7 +25,8 @@ export type Scope =
   | "event:read" // Read events and issues
   | "event:write" // Update issues (includes read)
   | "event:admin" // Delete issues (includes write and read)
-  | "project:releases"; // Access release endpoints
+  | "project:releases" // Access release endpoints
+  | "seer"; // Virtual scope: Use Seer analysis (not respected by upstream Sentry API)
 
 /**
  * Scope hierarchy - higher scopes include lower ones
@@ -58,6 +59,9 @@ const SCOPE_HIERARCHY: Record<Scope, Set<Scope>> = {
 
   // Special scopes
   "project:releases": new Set(["project:releases"]),
+
+  // Virtual scopes (not respected by upstream Sentry API)
+  seer: new Set(["seer"]),
 };
 
 /**
@@ -113,6 +117,7 @@ export const SCOPE_DESCRIPTIONS: Record<Scope, string> = {
   "event:write": "Update and manage issues",
   "event:admin": "Delete issues",
   "project:releases": "Access release information",
+  seer: "Use Seer for issue analysis (may incur costs)",
 };
 
 /**

packages/mcp-server/src/tools/analyze-issue-with-seer.test.ts

@@ -34,7 +34,7 @@ describe("analyze_issue_with_seer", () => {
       },
     );
 
-    expect(result).toContain("# Seer AI Analysis for Issue CLOUDFLARE-MCP-45");
+    expect(result).toContain("# Seer Analysis for Issue CLOUDFLARE-MCP-45");
     expect(result).toContain("Found existing analysis (Run ID: 13)");
     expect(result).toContain("## Analysis Complete");
     expect(result).toContain("## 1. **Root Cause Analysis**");
@@ -78,7 +78,7 @@ describe("analyze_issue_with_seer", () => {
     const result = await promise;
 
     expect(attempts).toBe(3);
-    expect(result).toContain("# Seer AI Analysis for Issue CLOUDFLARE-MCP-99");
+    expect(result).toContain("# Seer Analysis for Issue CLOUDFLARE-MCP-99");
     expect(result).toContain("Found existing analysis");
   });
 
@@ -122,7 +122,7 @@ describe("analyze_issue_with_seer", () => {
     const result = await promise;
 
     expect(attempts).toBe(2);
-    expect(result).toContain("# Seer AI Analysis for Issue CLOUDFLARE-MCP-500");
+    expect(result).toContain("# Seer Analysis for Issue CLOUDFLARE-MCP-500");
   });
 
   it.skip("handles polling with transient errors", async () => {

packages/mcp-server/src/tools/analyze-issue-with-seer.ts

@@ -25,9 +25,9 @@ import {
 
 export default defineTool({
   name: "analyze_issue_with_seer",
-  requiredScopes: ["event:read"],
+  requiredScopes: ["event:read", "seer"],
   description: [
-    "Use Seer AI to analyze production errors and get detailed root cause analysis with specific code fixes.",
+    "Use Seer to analyze production errors and get detailed root cause analysis with specific code fixes.",
     "",
     "Use this tool when you need:",
     "- Detailed AI-powered root cause analysis",
@@ -90,7 +90,7 @@ export default defineTool({
 
     setTag("organization.slug", orgSlug);
 
-    let output = `# Seer AI Analysis for Issue ${parsedIssueId}\n\n`;
+    let output = `# Seer Analysis for Issue ${parsedIssueId}\n\n`;
 
     // Step 1: Check if analysis already exists
     let autofixState = await retryWithBackoff(

packages/mcp-server/src/tools/get-issue-details.test.ts

@@ -806,7 +806,7 @@ describe("get_issue_details", () => {
       },
     );
 
-    expect(result).toContain("## Seer AI Analysis");
+    expect(result).toContain("## Seer Analysis");
     expect(result).toContain("**Status:** Processing");
     expect(result).toContain("**Root Cause Identified:**");
     expect(result).toContain(
@@ -853,7 +853,7 @@ describe("get_issue_details", () => {
       },
     );
 
-    expect(result).toContain("## Seer AI Analysis");
+    expect(result).toContain("## Seer Analysis");
     expect(result).toContain("**Status:** Analysis failed.");
     expect(result).toContain(
       "For detailed root cause analysis and solutions, call `analyze_issue_with_seer(organizationSlug='sentry-mcp-evals', issueId='CLOUDFLARE-MCP-41')`",
@@ -915,7 +915,7 @@ describe("get_issue_details", () => {
       },
     );
 
-    expect(result).toContain("## Seer AI Analysis");
+    expect(result).toContain("## Seer Analysis");
     expect(result).toContain("**Root Cause Identified:**");
     expect(result).toContain(
       "Partial analysis completed but more context needed.",