Skip to content

v4.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Aug 09:11
· 26 commits to main since this release
v4.0.0
12ccb52

mcp-devices 4.0.0

The mcp-devices edition. claude-in-mobile is re-architected into a
microkernel + on-demand plugins and ships under the new canonical name
mcp-devices. It is delivered as two editions of the same tool:

  • mcp-devices — a slim base; you install only the platforms you need.
  • claude-in-mobile — the all-in-one edition; bundles every platform and
    enables them all out of the box (npm i -g claude-in-mobile, unchanged).

Changed

  • Renamed claude-in-mobile → mcp-devices as the canonical name, and split
    the product into a microkernel + on-demand platform plugins. npm i mcp-devices
    now installs only the kernel + built-in tools; each platform is loaded on
    demand from its own package. Both mcp-devices and claude-in-mobile commands
    are available.
  • claude-in-mobile is now the all-in-one edition. It depends on the
    mcp-devices engine plus @mcp-devices/plugin-all and starts with all
    platforms enabled, so existing users get everything in one package with no
    extra setup.

Added

  • On-demand platform packages: @mcp-devices/plugin-android,
    @mcp-devices/plugin-ios, @mcp-devices/plugin-web,
    @mcp-devices/plugin-desktop, @mcp-devices/plugin-aurora, plus the
    @mcp-devices/plugin-all meta-package that pulls in all five.
  • @mcp-devices/plugin-debug — runtime debugger for live debuggable apps
    (Android JDWP + iOS LLDB): breakpoints, stepping, stack/locals, expression
    eval, variable mutation. The first on-demand tool-plugin (12 tools); enable
    with MCP_DEVICES_TOOL_PLUGINS=debug.
  • @mcp-devices/plugin-api — the public plugin contract (Capability enum,
    SourcePlugin / PluginManifest / PluginContext types, EventBus topics),
    versioned independently so plugins can target a stable API.

Security

  • Scoped plugins are published with npm provenance (Sigstore attestation), so the
    on-demand code that runs in the user's MCP runtime is verifiably built from
    this repository.
  • The debug plugin never returns raw memory to the model (secret redaction +
    length caps), gates eval/set_var behind android:debuggable=true, binds
    JDWP to loopback, and re-validates identifiers inside the iOS daemon.
  • Remediated the high-severity npm + cargo advisories inherited by the branch
    (sharp/libvips, ip-address SSRF, quinn-proto, anyhow, crossbeam-epoch).

Install

npm i -g mcp-devices            # modular (add platforms on demand)
npm i -g claude-in-mobile       # all-in-one (every platform bundled)
brew install mcp-devices        # native CLI
Assets 4
Loading