v2.0.0
v2.0.0 — Storage drivers, OAuth 2.1, audit overhaul, security hardening
Major release: storage driver abstraction, MCP OAuth 2.1 with PKCE, comprehensive audit logging, router-based tool architecture, and security hardening.
Breaking Changes
- Statamic v5 dropped — requires Statamic v6.6+, Laravel 12/13, PHP 8.3+
- Laravel MCP v0.6 — new tool attribute pattern
- Router architecture — 140+ tools consolidated into 11 domain routers
- Tool names changed —
statamic.blueprints.list→statamic-blueprintswithaction: list - Config restructured — re-publish required
Highlights
- Storage drivers: File (YAML/JSONL, default) and Database (Eloquent)
- OAuth 2.1: PKCE S256, Dynamic Client Registration, refresh token rotation, revocation
- 21 scoped API tokens with fine-grained access control
- CP Dashboard: User + Admin pages with token management and audit log
- Security: 8 review rounds, 30+ findings fixed
- Laravel 13 support
- 772 tests, PHPStan Level 8, full CI matrix
Upgrade Guide
See UPGRADE.md for migration steps from v1.x.
Full Changelog
See CHANGELOG.md for complete details.