OpenFolk 0.2.0

The first feature release after 0.1.2: tighter control over what bots may reach through MCP, one place for accounts in the settings, and fixes from the first users running OpenFolk on their own relays. Installed apps update themselves. Bots no longer get the connectors of your claude.ai account (Gmail, Google Drive and others). If a bot needs them, switch "Connectors" on in the settings of its machine.

Added

• "Always for this bot" on the approval card of an external MCP tool: the tool no longer asks for that bot, on every machine. The bot editor lists these tools; unticking one makes it ask again.
• The desktop apps let you drag the chat list's right edge to change its width (260 to 640 px); the width is kept, a double click restores it.
• docker-compose.coolify.yml runs relay and backend in Coolify from the prebuilt images, without a host port and with a setup code that Coolify generates; docker-compose.server.yml built both images on the server there.

Changed

• One block "Accounts" in the settings for everything that is a sign-in: one list grouped by relay with the accounts of this device (switch, remove) and, for an admin, everyone else on the relay (invitation, admin, delete). One "Add" takes an invitation, a pairing link of another relay, an address or, for an admin, a new person. The settings are now a page of their own, and adding an AI key, a person, a machine or a device opens a small dialog like the bot editor. The blocks "Relays", "All accounts" and "Sign in to another account" are gone; signing out stays under "Devices and security".
• The accounts settings explain themselves: what an invitation link and the admin right do, and the buttons name what they make.
• Muting a bot or group moved from the push settings to its page and the list's menu ("Mute", next to the favorite).
• Moving a bot to a sleeping machine asks before waking it; declined, nothing is woken and the move is not started.
• The desktop apps take their update feed from openfolk.app, straight from GitHub when that does not answer. The first check of a day counts the installation anonymously (daily totals per system and version, no IP, no identifier, public at openfolk.app/update/stats.json); "Count this installation anonymously" in the menu switches it off.

Fixed

• "Add machine" and the second factor in the settings stayed empty once the device had the end-to-end key: the web app dropped the relay's own answers as unencrypted (#17). Found, analysed and covered with a test by @SvenvanB, thank you.
• A bot's row in the chat list no longer grows when it shows open git changes, further conversations, a queue or a mute mark; these marks share one line.

Security

• The connectors of the claude.ai account Claude Code is signed in with (Gmail, Google Drive and others) no longer reach the bots' sessions. They came with the login, so a bot that read a prepared page or file could have been talked into reading mail or a server's variables. "Connectors" in the settings of a machine lets them in again.
• In risky, every call of an external MCP tool asks, also those named get, list, search or read: the name says nothing about what comes back. The MCP resource tools (ListMcpResourcesTool, ReadMcpResourceTool) and allow rules in your Claude Code settings no longer skip the approval.
• docs/running.md explains that a container reaches the host's ports through the Docker gateway, past the hosting provider's firewall.

Get it

Download the desktop app for your system below, or pull the relay image:

docker pull ghcr.io/openfolk/openfolk:0.2.0

Everything about OpenFolk, setups and the first steps: 0.1.0 release notes and the README. The Windows installer is not signed yet; SmartScreen asks on the first start.

Running OpenFolk? Say so in Works for me. Full list of changes: CHANGELOG.md.