v1.1.0 — Safety Annotations, OAuth 2.0+PKCE, Anthropic Directory
What's New
Safety & Compliance
- 31 tools fully annotated with
readOnlyHint,destructiveHint,idempotentHint,openWorldHint - Response size guard — 80,000 character limit (~20K tokens) per response
- HEAD request handling — graceful 200 response (required by Anthropic)
OAuth 2.0 + PKCE (Remote MCP)
- Full OAuth 2.0 Authorization Code + PKCE (S256) flow
- Firebase Auth login (Google, GitHub, Microsoft providers)
- Dynamic client registration at
/register - OAuth discovery at
/.well-known/oauth-authorization-server - Backward compatible — existing
fri_*API keys continue to work
Infrastructure
- Favicon serving at
/favicon.icoand/favicon.svgfor brand consistency - Cloudflare Workers + Durable Objects (McpAgent) architecture
- KV-backed token storage with configurable TTL
Distribution
- Published on npm as
@frihet/mcp-server@1.1.0 - MCP Registry, mcp.so, Glama.ai, awesome-mcp-servers
- Submitted to Anthropic Claude Directory (pending review)
Full Changelog: v1.0.0...v1.1.0