Skip to content

v0.14.8

Choose a tag to compare

View all tags
@TechDufus TechDufus released this 06 Nov 03:59
· 99 commits to main since this release
v0.14.8
This tag was signed with the committer’s verified signature.
TechDufus Matthew DeGarmo
SSH Key Fingerprint: kfWmC1mt2f9FtwtRlPl4nhawEyxgiV82rpTOtA/7cLU
Verified
Learn about vigilant mode.
f71fc7c
This commit was signed with the committer’s verified signature.
TechDufus Matthew DeGarmo
SSH Key Fingerprint: kfWmC1mt2f9FtwtRlPl4nhawEyxgiV82rpTOtA/7cLU
Verified
Learn about vigilant mode.

dash can now be read by AI agents (#38). This release adds a read-only MCP server, context bundles, and "Copy context for AI". It is a patch and MCP is off by default: nothing changes until you set mcp.enabled.

New

  • MCP server at /mcp (Streamable HTTP, protocol versions 2026-07-28 and 2025-11-25), switched on and off live with mcp.enabled or in Settings → MCP.

    • Access: only bearer tokens with audience mcp: personal access tokens, static tokens, or OAuth grants.
    • Tools: dash_overview, dash_search, dash_get, dash_topic, dash_series, dash_logs (needs logs) and dash_context.
    • Resources: every topic you may read, with subscriptions.
    • Prompts: four (triage, investigate, daily digest, explain an alert).
    • Read-only: there are no action tools in this release.

  • Untrusted lab data: every result keeps logs, events, annotations and object names inside one fenced block, after a sentence telling the agent to treat it as data. Results are scrubbed of secrets and capped at 64 KiB.

  • Limits:

    • per token: 120 calls a minute (30 for logs), 8 in flight, 2 listen streams;
    • per user: 16 calls in flight, 4 listen streams;
    • in all: 64 calls in flight, 16 listen streams.

    Listen streams end within 15 s of revocation or MCP turning off. Every call is audited with surface mcp and a hash of its arguments.

  • GET /api/v1/context: a context bundle for any object a plugin can describe, as JSON or Markdown. A pod, workload, VM, host, alert, Flux object or database comes with its status, events, attention items, metric summaries and, with the logs scope, its recent log lines.

  • Copy context for AI: a button on pods, VMs, attention items and alerts puts that Markdown on your clipboard. Where the browser blocks the clipboard, it opens a dialog to copy from.

  • Settings → MCP: the switch, the endpoint (the direct URL when set), and a ready-to-paste claude mcp add command.

  • OAuth: the mcp resource now follows mcp.enabled.

  • Plugins: /api/v1/plugins says which plugins can describe objects (objects).

  • Dependencies: the official MCP Go SDK v1.8.0, plus jsonschema-go, uritemplate and segmentio/encoding. The binary grows by about 2 MB.

Upgrade notes

  • No step needed. With MCP on, dash logs "mcp: serving /mcp" at start.
  • Rolling back to v0.14.7: remove mcp.enabled from the config file first, because the older release refuses the unknown key. A value saved from the settings page or set in the environment only warns. See docs/upgrading.md.
Assets 2
Loading