v1.1.27
v1.1.27
ue-mcp login authorizes a machine to publish plugins, so publishing needs no token handling at all.
Server
ue-mcp loginruns the GitHub device flow and mints your own registry publish token, cached at~/.ue-mcp/registry.json(owner-only permissions). Reuses the GitHub authorization already held for feedback authorship when present, so it usually completes without a browser round-trip.--forcere-authorizes and rotates the token.ue-mcp logoutclears the cached token locally. The token stays valid until revoked at the registry's/accountpage.plugin publishresolves its token as--token, then the environment, then the cached login. Existing CI setups usingUE_MCP_PUBLISH_TOKENare unchanged; a logged-in author no longer sets anything.- Re-running login rotates: previously minted CLI tokens are revoked, so a lost machine's token stops working. Tokens minted in the web UI are left alone.