Repository navigation
Releases: SideShiftApp/sideshift-mcp-server
Releases · SideShiftApp/sideshift-mcp-server
Release list
SideShift MCP v1.2.0
SideShift MCP plugin 1.2.0 documents the unified permission model now live on the hosted MCP server (1.6.0).
- Explain company selection, agency subaccount delegation, and the live team-permission ceiling shared by OAuth and scoped API keys.
- Clarify independent read/write permissions and separate contract-signing, wallet-withdrawal, and scraper access.
- Update setup, reconnect, and troubleshooting guidance for Cursor, ChatGPT, Codex, and Claude, preserving one hosted MCP endpoint.
- Keep marketplace manifests, commands, skills, docs, and version metadata aligned.
Validation: package/manifest checks pass. Live discovery passes four MCP protocol versions, OAuth resource discovery, public client registration, and PKCE S256, with 67 advertised scopes. The hosted server passed all 55 authenticated key/OAuth/MCP/refresh/cleanup rehearsal checks in production.
Full change: #3
SideShift MCP v1.1.0
1.1.0 - 2026-08-21
- Add the OpenAI universal plugin manifest for ChatGPT and Codex.
- Add the Claude Code plugin manifest and remote MCP configuration.
- Keep Cursor, OpenAI, and Claude on the same complete SideShift MCP endpoint.
- Add shared host-neutral setup and UGC/influencer campaign operation guidance.
- Add copy-ready OpenAI, Claude Connector, and Claude plugin submission packets.
- Add cross-marketplace validation for manifests, disclosures, listing limits, and secret-free
packaging.
SideShift Cursor Plugin v1.0.0
The first public release of the official SideShift plugin for Cursor.
Highlights:
- Hosted SideShift MCP connection over HTTPS
- OAuth 2.1 authorization code flow with PKCE
- Tenant and scope verification through whoami
- 267 discoverable SideShift tools
- Safe capability-discovery skill and /sideshift-connect command
- Repository-owned logo, privacy disclosure, security policy, and Apache-2.0 license
Verified end to end in Cursor 3.16.17 against the Dev Testing Don test company using read-only identity and company-status calls.