1.0.0

First release.

Added

• Remote MCP server (streamable HTTP at /mcp) for Docmost Community Edition
  0.70.0 or newer.
• Per-member sign-in with the member's own Docmost account; every tool call
  runs as that member with their Docmost rights. Optional ALLOWED_EMAILS
  and ALLOWED_SPACES limits.
• OAuth 2.1 authorization server following the MCP authorization spec:
  dynamic client registration, PKCE (S256), consent page with read,
  write and delete scopes, resource-bound tokens, rotating refresh tokens
  with reuse detection. Personal bearer tokens for scripts. Grants and tokens
  are listed and revoked on the account page.
• Read tools: whoami, list_spaces, list_pages, recent_pages,
  get_page (Markdown), search, list_comments, list_trash,
  list_snapshots. Page content is returned inside an untrusted-content
  envelope.
• Write tools: create_page, update_page (append, prepend, replace),
  rename_page, move_page, add_comment, restore_snapshot; delete-scope
  tools trash_page and restore_page. No permanent delete.
• Encrypted snapshot of a page body before every change, kept for
  SNAPSHOT_RETENTION_DAYS; read-back after every write to catch changes
  Docmost did not apply.
• Per-member rate limit (TOOL_CALLS_PER_MINUTE) and an audit log of tool
  calls without content (AUDIT_RETENTION_DAYS).
• admin command line: list members and grants, revoke grants or members,
  disable members, read the audit log, rotate SECRET_KEY.
• Database schema migrations applied at startup under a lock; an older
  server refuses to start on a schema upgraded by a newer one.
• Container image for linux/amd64 and linux/arm64, compose.yaml with
  Postgres, and a PyPI package.

Image: ghcr.io/bbik52/docmost-mcp-remote:1.0.0