Skip to content

v0.8.1: mcp-ts-core ^0.12.3, ssrf-guard hardening, cache hints

Latest
Latest

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 25 Aug 05:51
· 1 commit to main since this release
v0.8.1
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
c0acb61
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

mcp-ts-core ^0.12.3, ssrf-guard hardening, cache hints

  • @cyanheads/mcp-ts-core ^0.12.3 (SDK v2): tool inputs are strict at the root, advertised outputSchema declares the error envelope, advertised JSON Schema moves to 2020-12, every HTTP endpoint serves protocol revision 2026-07-28, an unknown/disabled tool rejects with -32602
  • ssrf-guard: IPv4 blocklist gains 6to4-relay, benchmarking, and multicast ranges; IPv6 now classifies by exclusion from the allocated global-unicast block instead of an enumerated list; localhost/cloud-metadata hostnames are rejected before DNS
  • Discovery lists and the devops-status://vendors/{name} resource declare a 1-hour public cache hint
  • devops_watch_stack stack_name is constrained to the ctx.state key charset
  • Bun pinned to 1.4.0 (Dockerfile + --omit=peer), MCP_SESSION_MODE default documented, security-contact and skill/tooling resync
  • deps: @cyanheads/mcp-ts-core ^0.11.0 → ^0.12.3 (+ dev-dep bumps)

CHANGELOG v0.8.1

Assets 3
Loading