v0.21.0: Google Workspace, Microsoft 365 files, HubSpot, QuickBooks and Xero, connector-failure alerts

Connectors

13 more adapters in the catalog: 338 in total, up from 325.

• Google Workspace. Calendar, Drive, Sheets, Docs and Tasks, on the same Google OAuth client as Gmail. Each asks only for its own scope and documents a read-only alternative. Deleting, trashing and sharing install switched off (7efeaea, e67ece2).
• Microsoft 365 files. OneDrive, SharePoint (sites, libraries, lists, pages, Microsoft Search) and Excel workbooks, on the same Entra app registration as Outlook (#1016, #1017).
• CRM and finance.
  • HubSpot, monday.com, Kommo and QuickBooks Online (#1016).
  • Xero Accounting, read-only, contributed by @ryanduguid (#943).
  • Base (Baselinker) ships unlisted until it is verified against a live account.
• Fixes.
  • Kaufland request signing works again (56c2b06).
  • SAP Business One gains finance tools (A/P documents, payments, journal entries, chart of accounts, bank statements, reconciliations), reads 100 rows per page and says when the Service Layer user lacks a permission (d24189c).
  • The tool counts of the e-commerce adapters are corrected (6bf99b6).
  • The Mercado Libre setup checks the App ID and Secret Key format (cf0c705).
  • A { "__json": ... } body marker sends a field as the JSON text of its value (#1016).

Connector-failure alerts

• What it does: an organization admin can register a webhook that is called when a connector keeps failing: a number of failures within a time window, then a cooldown, so a long outage sends one alert, not one per call (#976, contributed by @rangarajan19).
• Payload: a JSON event signed with HMAC-SHA256, or a ready-made Slack message.
• API: configured through PUT /api/admin/settings/alert-webhook, with a test endpoint. The settings card in the UI follows in a later release.
• Network rules:
  • On Cloud the URL must use https and cannot reach internal hosts.
  • On a self-hosted instance the operator's SSRF allowlist applies, so an internal chat server can receive alerts.

Setup and OAuth

• Setting up from a chat. When a connector signs in through the user's own app (Etsy, Google, Microsoft, Zoho and others), the AI client gets a link to the page where the app is created and the callback URL as a block to copy. 16 adapters name their create-app page. Bridges that register their own OAuth client, such as Notion and Helium 10, ask for neither (b193a62).
• Scopes added later. An adapter can list the OAuth scopes it used to ask for. A connector installed with one of those sets asks for the current scopes the next time it is authorized. Etsy uses this so connectors installed before its write tools can be granted them (#978).
• Refused code exchange. A refused OAuth code exchange answers with the provider's reason and names the connector whose client ID or secret is wrong, instead of a server error (cf0c705, 2324ded).
• Setup link. The one-time setup link returns to the assistant the user came from: Claude, ChatGPT or Muse (121de2e).

MCP endpoint

• Keys stay on their server. API keys created for an MCP server work only on that server, in both the direct and the fixed tool shapes. In MCP_AUTH_MODE=both, OAuth clients can connect again when no static credential is set (269e0dd).
• Clearer refusals.
  • A token whose user no longer exists gets 401 invalid_token (4ff91b7).
  • An account whose email is not verified is told how to verify it (#978).
  • The reason for every refused request is logged (69a5e07).
• Error hints for the AI client.
  • A missing OAuth scope: the model asks the user to re-authorize instead of retrying.
  • Unknown Odoo fields and models: the model reads the field list first.
  • Etsy inventory updates that drop property_name (#978, 69a5e07).

Editions

• Enterprise instead of Business. SSO and SCIM are part of Enterprise, and the self-hosted 30-day trial and the in-app notices name Enterprise (5a9ea62, 31e345f).
• Existing licences. Business licences and subscriptions keep working.

AnythingMCP Cloud

• Trial follow-up. The first email after a trial ends now goes out a day after expiry (408e451).
• Onboarding emails. The onboarding cron runs one instance at a time across processes (69a5e07).

Dependencies

handlebars 4.7.10, development only (#973).

Self-hosted

• Database: no migration.
• New optional setting: SMTP_REPLY_TO sets a Reply-To on every email sent through the system SMTP (c1141a4).
• Behaviour changes:
  • API keys created for an MCP server now work only on that server.
  • MCP_AUTH_MODE=both accepts OAuth clients.
• Outbound calls: the alert webhook sends nothing until an admin configures one.
• Docker image: helpcodeai/anythingmcp:v0.21.0.