v2.10.73 — MCP registry overhaul
cubecloud-agent-desktop v2.10.73 — release notes
Source: V2.10.72 on origin/main of
JZKK720/cubecloud-agentic-os
Supersedes: v2.10.72 (commit on origin/main)
Internal version: 2.10.73 (in agent-desktop/package.json)
What this release changes
V2.10.72 → V2.10.73 is an MCP registry overhaul: the bundled MCP
server catalog is restructured around the local-first, no-API-key
principle that defines the product.
MCP registry changes
-
Firecrawl replaces Tavily — Tavily MCP entry removed; Firecrawl
added as the primary web-scraping MCP. Firecrawl supports a keyless
free tier (scrape + search, rate-limited per IP) and self-hosted
mode (all endpoints, no key, viaFIRECRAWL_API_URL). The
FIRECRAWL_API_KEYsettings field already existed; a new
FIRECRAWL_API_URLfield is added for self-hosted instances. -
SkillSpector added — Security scanner for AI agent skills (68
vulnerability patterns across 17 categories). Exposes ascan_skill
MCP tool that returns a risk score (0-100) and safe-to-install
verdict. Static analysis runs by default (no API key needed); the
optional LLM semantic pass is opt-in viaSKILLSPECTOR_PROVIDER. -
OpenKnowledge added — Markdown knowledge base with backlinks,
link graph, and collaborative editing. Exposes write, search, wiki,
research, discover, and links tools. Auto-starts a per-project
collaboration server on demand. No API key needed. -
Qdrant defaults to local Docker — Default URL changed from
https://qdrant.example/mcptohttp://127.0.0.1:6333/mcp.
QDRANT_API_KEYremoved from required env keys. Hint documents
thedocker run -p 6333:6333 qdrant/qdrantpath (no key needed).
Settings + env changes
TAVILY_API_KEYsettings field removed;FIRECRAWL_API_URLaddedSKILLSPECTOR_PROVIDERandSKILLSPECTOR_MODELadded to the Hermes
env-var allowlist (KNOWN_API_KEYSinhermes.ts)FIRECRAWL_API_URLadded to the Hermes env-var allowlistTAVILY_API_KEYremoved from the Hermes env-var allowlist
i18n changes
- All 8 locales (en, zh-CN, zh-TW, ja, es, pt-BR, pt-PT, id) updated:
tavilyApiKey/tavilyHintstrings removedfirecrawlHintupdated to mention keyless tierfirecrawlApiUrl/firecrawlUrlHintstrings added
Documentation changes
agent-desktop/README.mdInstall section rewritten with:- Prerequisites section (per connection mode)
- Optional components table (Docker, IronClaw, OpenClaw, CodeGraph,
EverOS, Headroom, Ollama, LM Studio) - MCP servers table (Firecrawl, SkillSpector, OpenKnowledge, Qdrant,
Agent Reach, GitHub, Playwright, Headroom)
scripts/v2.10-readme.cjsandscripts/v2.10-readme-2.cjsupdated
to remove Tavily from the tool integrations list
What was NOT changed
- The Hermes runtime's own web-tool backend list still includes Tavily
(it's a runtime-level feature, not the desktop's MCP registry) - The Hermes agent SKILL.md still lists Tavily as a backend (accurate
description of Hermes's capabilities, not our MCP registry) - No pre-install gate for SkillSpector yet (follow-up: call
skillspector scanbeforeinstallSkill()inskills.ts) - No backlink port from OpenKnowledge yet (follow-up: cherry-pick
backlink-index.tspatterns intowiki.ts) - No agency-agents Hermes plugin shipped (user-side install via
./scripts/convert.sh --tool hermes && ./scripts/install.sh --tool hermes)
Files changed
| File | Change |
|---|---|
agent-desktop/src/renderer/src/screens/Mcp/registry.ts |
Tavily → Firecrawl; SkillSpector + OpenKnowledge added; Qdrant local-first |
agent-desktop/src/renderer/src/constants.ts |
TAVILY_API_KEY removed; FIRECRAWL_API_URL added |
agent-desktop/src/main/hermes.ts |
TAVILY_API_KEY → FIRECRAWL_API_URL; SKILLSPECTOR_PROVIDER + SKILLSPECTOR_MODEL added |
agent-desktop/src/shared/i18n/locales/*/constants.ts |
8 locales: Tavily strings removed, Firecrawl strings updated + URL field added |
agent-desktop/README.md |
Install section rewritten with prerequisites + optional components + MCP servers table |
agent-desktop/package.json |
Version bumped 2.10.72 → 2.10.73 |
scripts/v2.10-readme.cjs |
Tavily removed from tool integrations list |
scripts/v2.10-readme-2.cjs |
Tavily removed from tool integrations list |