0.48.0 — hand your shelf to an assistant
Hand your shelf to an assistant
One feature, but a new surface. FigureCollector now speaks the Model Context Protocol at /mcp, so an AI client can read the catalogue and curate your collection directly — no copy-pasting screenshots into a chat window.
Which series am I closest to finishing? What's slipping, and whose dates should I stop trusting? What should I buy with 200 €, landed cost included?
Getting started
- Mint a key under Réglages → Accès API (鍵), pick a preset, paste the
claude mcp addcommand the dialog hands you. - Works with any MCP client that can send a custom header — Claude Code, Claude Desktop, Cursor, VS Code. claude.ai web connectors require OAuth discovery and won't connect to a static key.
Keys you can reason about
- One per client, named, revocable on its own, optionally expiring.
- Scopes you tick. Read-only is the default — widening a key is a deliberate click, not something you fail to notice.
- The secret is shown once and stored nowhere; the prefix stays visible so you can tell your keys apart.
You can see what it did
Every tool call, resource read and refusal is logged and shown back to you in the same panel: when, which tool, the outcome, which key. Arguments are stored as a digest, never verbatim — they carry prices, private notes and shop names.
Guardrails
- Administration is out of reach, not merely gated. No scope opens instance administration, account and privacy settings, share-link minting or outbound scraping — and that holds for an administrator's own key, which can edit exactly the catalogue entries any other user's could.
- Deletion is not the default answer. It needs its own scope and an explicit confirmation on the call, and the refusal points at archiving, which is reversible.
- Catalogue text is fenced as untrusted. Much of it was scraped or entered by other users; results mark it as data to report on rather than instructions to follow, so a figure description can't quietly redirect an agent.
- Rate-limited per key rather than per IP, so one agent's retry loop can't throttle everyone behind the same NAT.
- An admin can close the endpoint instance-wide, though it ships open. Existing keys survive and resume when it reopens.
Also included
Six ready-made prompts (audit, what to buy, pre-order briefing, insurance prep, year in review, series gaps), and your collection exposed as readable resources an assistant can attach to a conversation.
📘 Documentation
🐳 ghcr.io/dim145/figurecollector-{server,client,docs}:0.48.0
📝 Full changelog: 0.47.0...0.48.0