QVeris MCP Server v0.13.0

Install

npx -y @qverisai/mcp@0.13.0

Highlights

Changed

• Paid call / execute_tool requests are now strict single-submit: the MCP client does not retry 429/503, follow HTTP redirects, or remove a rejected projection field and resubmit. Read tools retain bounded retry behavior. ([#273])

Security

• Constrained the Model Context Protocol SDK to its Node.js 18-compatible 1.29.x line and added a fixed fast-uri dependency floor to exclude the published URI host-confusion vulnerability.

See README for configuration.

What's Changed

• docs: align clients with coordinated release by @linfangw in #262
• build: coordinate client package releases by @linfangw in #263
• benchmark: harden discover-to-call v2 and publish corrected baseline by @linfangw in #264
• docs: sync API docs from website by @linfangw in #265
• chore(deps-dev): bump prettier from 3.9.5 to 3.9.6 in /packages/cli in the minor-and-patch group by @dependabot[bot] in #266
• chore(deps-dev): bump the minor-and-patch group in /packages/mcp with 2 updates by @dependabot[bot] in #267
• chore(deps-dev): bump the minor-and-patch group in /packages/openclaw-qveris-plugin with 2 updates by @dependabot[bot] in #268
• chore(deps-dev): bump the minor-and-patch group in /packages/js-sdk with 3 updates by @dependabot[bot] in #270
• chore(deps): bump actions/setup-python from 6 to 7 in the actions group by @dependabot[bot] in #269
• build: automate protected release benchmark cadence by @linfangw in #271
• fix: make paid calls single-submit and credential-safe by @linfangw in #275
• fix: harden paid-call redirect and error boundaries by @linfangw in #276
• chore: prepare coordinated client releases by @linfangw in #277

Full Changelog: cli-v0.9.0...mcp-v0.13.0