v2.4.0
[2.4.0] — 2026-07-20
Added
- Opt-in update check (off by default). A new
TESLAFI_CHECK_UPDATES
environment variable (truthy only fortrue/1/yes, case-insensitive —
the same rule asTESLAFI_ENABLE_COMMANDS) enables a lightweight check for a
newer GitHub release. When on, the server makes a single unauthenticated
GETtoapi.github.com/repos/Zenotech-bv/teslafi-mcp/releases/latest,
compares the release tag to the running version using a numeric
major.minor.patchcomparison (so10.0.0 > 9.9.9; a leadingvand any
pre-release suffix are ignored), and — only when the release is strictly newer
— appends a single one-line notice to data-tool markdown output, at most once
per session. The notice never appears inresponse_format: "json"output, so
JSON stays pure and parseable. enable_update_checkextension config.manifest.jsongains a plain
booleanuser_config.enable_update_check(title "Check for updates", default
false), wired intoserver.mcp_config.envasTESLAFI_CHECK_UPDATES.- Single
VERSIONsource of truth. The running version is now a single
exported constant consumed by both theMcpServerconstructor and the update
comparison, kept in lockstep withpackage.jsonandmanifest.jsonby a test.
Security / privacy
- The update check is a standalone request that never touches the TeslaFi
request pipeline: it sends no TeslaFi token, noAuthorization
header, and no TeslaFi data, and reuses the samemaxRedirects: 0/
proxy: falsehardening. It is fire-and-forget (every failure — network
error, timeout, 404 for a private repo, 403 rate limit, malformed JSON — is
swallowed), in-memory only (zero disk writes), and off by default: when
disabled, no GitHub request is ever made and the only network destination
remainswww.teslafi.com. A private repository returns 404 unauthenticated,
so the notice only appears once the repository is public.
Not breaking: no tool parameters changed and all existing behavior is preserved.
Install: download the attached teslafi-mcp.mcpb and double-click to install into Claude Desktop, or see the README for manual setup.
SHA-1 of the bundle: fc08991c9dc455a823179966a14deac119448d45