v0.1.33
Fixes
- auth: membership-based tenant isolation for
/mcp/:serverId— multi-org users can reach every workspace they belong to; cross-org access stays denied (#311) - auth: resolve OAuth org by id OR email — fixes a production 403 lockout where legitimate owners were denied their own MCP servers after OAuth login (#309)
- dashboard: Claude Desktop connection config now uses
type: "http"(was the invalid"url", which Claude Desktop silently skipped) (#310) - weclapp: fix filter 400s via a general
__rawqueryengine passthrough — weclappproperty-operatorfilters now work (#308)
Connectors
- 8 reverse-engineered read-only connectors live: Playtomic (+ public), OpenTable, Resy, Vinted, Untappd, Idealista, Trenitalia
- Etsy migrated to OAuth2 with automatic refresh-token rotation
Notes
No breaking changes. Tenant isolation remains fail-closed and was verified against production data.