Add manifest.json, tool annotations, and privacy policy for Anthropic Connector listing

[devin-ai-integration]

Summary

Addresses three of four gaps identified for listing the PEX MCP server as an Anthropic Connector in the Claude Connectors Directory:

1. manifest.json (#136503) — New manifest.json at repo root per DXT spec v0.3. Includes author, server config, user_config for PEX_API_URL and PEX_API_TOKEN, license, and privacy_policies.

2. Tool annotations (#136504) — Added title (human-readable) and annotations: { readOnlyHint: true } to all 72 tools across 15 files, per the submission requirements.

3. Privacy Policy (#136505) — Added "Privacy Policy" section to README.md pointing to the existing PEX Privacy Policy. The privacy_policies array is also included in manifest.json.

Gap #4 (OAuth 2.0) requires PEX API-side changes and is not included in this PR.

Review & Testing Checklist for Human

• Verify manifest.json fields match your org details (author name/url, description, version)
• Spot-check a few tool files to confirm title and readOnlyHint annotations look correct
• Verify npm run build passes locally
• Confirm privacy_policies URL in manifest.json is the correct corporate policy link
• Optionally validate packaging with npx @anthropic-ai/dxt pack

Notes

• All 72 tools confirmed annotated (verified via grep count)
• TypeScript build passes with no errors
• Title naming convention: drop pex_ prefix, convert snake_case to Title Case (e.g. pex_get_business_profile → "Get Business Profile")
• Feature: #136502 (Anthropic Marketplace)
  "

Link to Devin session: https://app.devin.ai/sessions/103b3af5bef2488787e9e1a76f100ae4
Requested by: @tybaker

[devin-ai-integration]

Original prompt from tbaker@pexcard.com

These are the reqs to be listed as an Anthropic Connector. Anything beyond OAUTH that we need to meet the needs?

Requirements:
We expect both the Desktop Extension specification and the implementation in Claude for macOS and Windows to evolve over time. At this time, we're primarily considering extensions that:

Publicly available on GitHub
MIT licensed
Built with Node.js
Have a valid manifest.json with the "author" field pointed at your GitHub profile

Does our MCP server in GitHub meet these requirements?

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR that start with 'DevinAI' or '@devin'.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 2 additional findings.