v1.0.6
Superseded by v1.0.7. This
release has a Windows-only bug: an unusual save-folder path sent to the new agent API crashes the
request instead of being rejected cleanly. macOS and Linux are unaffected, but everyone should
install 1.0.7 instead — it is this release plus that fix.
What's new
AI agents and scripts can now drive the app. Turn on Agent access in Settings and connect an MCP client — Claude Code, Claude Desktop, or anything that speaks MCP — to search, start and manage downloads, and set up series rules by asking for them in plain language. The same operations are available as a REST API for scripts. Settings stay read-only: nothing an agent does can change your SMTP password or Telegram token.
- Connect an MCP client with one command, shown ready to copy on the Settings page:
claude mcp add --transport http mediadownloader http://localhost:47820/mcp - 14 tools covering search, downloads (start / pause / resume / remove), and series rules. Removing a download keeps its files unless you explicitly ask for them to be erased
- REST lives under
/api, with an OpenAPI description at/openapi/v1.json - The resolved address and token are written to
endpoint.jsonin the app data folder — readable only by you — because the port moves when something else is already using it
Access is closed by default and stays that way unless you open it. Agent access is off until you switch it on. Once on, requests from this computer need no token, and everything else is refused. Access from other devices is a separate switch, requires HTTPS and a bearer token, and is limited to the agent endpoints only — the app's own pages, settings and files stay invisible to anything off-machine. Requests coming from a web page are always rejected, so a site you happen to be visiting can't quietly queue downloads on your machine.
Because an agent decides what to do after reading torrent titles and descriptions written by strangers, three limits apply to it specifically:
- Downloads can only be saved inside your download folder, so a booby-trapped torrent can't write files somewhere sensitive. Change the download folder in Settings if you want them elsewhere
- Searching is rate limited, since every search queries every enabled source and hammering them gets the app blocked. Your own searching in the app is never affected
- Asking an agent to change one setting on a series rule changes only that setting — it can no longer silently reset the season, starting episode, or check interval, or switch a paused rule back on and re-download everything from episode 1
Smaller changes
- On Windows, app data now lives in your user profile (
%LOCALAPPDATA%\MediaDownloader) instead of beside the program. Existing databases and saved passwords are moved across automatically on first run - Searches now report how many results were found in total, so a shortened list can't be mistaken for a source that failed
- Malformed API requests return a clear explanation of what was wrong instead of a raw error page
Downloads
Prefer v1.0.7 — it contains everything below plus the Windows fix.
- macOS (Apple Silicon): MediaDownloader-1.0.6-osx-arm64.zip
- macOS (Intel): MediaDownloader-1.0.6-osx-x64.zip
- Windows (x64): MediaDownloader-1.0.6-win-x64.zip
- Windows (ARM64): MediaDownloader-1.0.6-win-arm64.zip
SHA256SUMS.txt lists the checksum of each zip; the in-app updater verifies it automatically.
macOS: unzip and move MediaDownloader.app to Applications (or anywhere), then open it. If Gatekeeper complains about an unsigned app, right-click → Open.
Windows: unzip anywhere and run MediaDownloader.exe, then open the dashboard URL it prints.
Full Changelog: v1.0.5...v1.0.6