Skip to content

v0.8.0 — Hosted mode: Google sign-in, per-user read-only tokens

Choose a tag to compare

View all tags
@Akxan Akxan released this 11 Sep 17:15
· 3 commits to main since this release
v0.8.0
647ecf1

Added

  • Hosted mode (optional, SEO_MCP_HOSTED_* + SEO_MCP_PUBLIC_URL): a landing page (English/Chinese), Sign in with Google, and a dashboard where each user creates up to 10 personal bearer tokens for /mcp, plus privacy and terms pages. Users grant read-only Search Console and GA4 scopes; refresh tokens are AES-256-GCM encrypted in a node:sqlite database; a seo_… token runs the request inside that user's OAuth grant (AsyncLocalStorage scope around the request) on a read-only server limited to the gsc, ga4, web, geo, analysis toolsets, without the tools that spend paid third-party quotas. The operator's MCP_AUTH_TOKEN is unchanged.
  • ServerOptions.exclude to leave named tools unregistered; formatError hint for revoked/expired Google grants (invalid_grant).
  • Docker: ./data volume at /data for the hosted database.

Changed

  • README architecture diagram, keywords, package.json description/keywords and the repository description now cover the Gmail integration and the image pipeline (the 0.7.0 release had left them out).

Security

Assets 2
Loading