Skip to content

mcp-firebird 2.11.0

Choose a tag to compare

View all tags
@PuroDelphi PuroDelphi released this 29 Sep 13:39
· 32 commits to main since this release
v2.11.0
bf1b3bf

MCP Firebird 2.11.0

This stable release promotes all changes from 2.11.0-alpha.1 through alpha.4 since 2.10.0. The reporter confirmed that the original query in #36 now works correctly.

Highlights

  • Inline security configuration through FIREBIRD_SECURITY_JSON, including SQL options at the root or inside security (#34).
  • Actual enforcement of explicitly configured table/operation permissions, catalog controls, row filtering, alias-aware masking, resource limits, auditing and OAuth2/role policies.
  • Compatibility preserved through opt-in controls: no new implicit row/size/deadline/rate/count limits or catalog/routine restrictions without a configured policy. Existing raw-write, CORS and driver-selection behavior is retained.
  • Fix the false qualified-relation error in EXTRACT(MONTH FROM T.CREATED_AT) and related SUBSTRING/TRIM expressions, without bypassing security checks (#36).
  • Handle object-shaped stored-procedure results correctly before BLOB resolution and output controls.
  • Fix HTTP shutdown recursion, request identity isolation and authenticated HTTP/SSE session ownership.
  • Update English/Spanish guides and migration examples; exclude temporary cache/test files from npm packaging.
  • Refresh compatible locked transitive dependencies: fast-uri 3.1.8, ip-address 10.7.2 and undici 6.29.0. Firebird driver versions are unchanged.

Upgrade

npm install -g mcp-firebird@latest

For an npx-based MCP launcher, use mcp-firebird@2.11.0 for a pinned version, or mcp-firebird@latest. Retain your connection/transport settings and restart the MCP process.

Important migration notes

Advanced controls are opt-in, but existing policies that explicitly contain previously dormant settings now enforce them. Review those policies before upgrading. Invalid/missing selected policy files stop initialization instead of silently falling back. Scoped policies reject SQL they cannot safely inspect; masking still restricts expression projections and row-filtered tables are read-only. Incompatible old audit tables need a new configured table name; no destructive migration is performed.

ALLOW_RAW_SQL=true does not override explicit denials. maxQueryCpuTime is a wall-clock deadline, not server CPU accounting or guaranteed cancellation. Firebird database privileges remain essential.

Validation

  • 173 automated tests, TypeScript build and compiled CLI/MCP smoke checks passed.
  • Real Firebird 2.5.9 disposable-database integration passed, including #36, related functions, default compatibility, filters, masking, catalog controls, DDL and file/database auditing.
  • Production dependency audit: zero known vulnerabilities in the tested dependency tree.

Full changelog · English security guide · Guía en español

Assets 2
Loading