v1.0.2 — 9 Bug Fixes, Security Hardening
What's Changed
🔴 Critical Fixes
- HTTP transport now shares rate limiter and cache across requests — previously each request created a new server instance, defeating rate limiting and caching
search_peoplefilters (connectionOf,network) now work — parameters were accepted but silently ignored- OAuth documentation corrected — all 36 tools use Voyager API (cookie auth); OAuth marked experimental
🟡 Security & Moderate Fixes
- CORS origin configurable via
CORS_ORIGINenv var (was hardcoded to*) - HTTP body size limit — 1MB max with 413 response (was unbounded)
- Version consistency — reads from package.json at runtime
🟢 Minor Fixes
whoamicategory counts corrected- Removed dead
visibilityMapcode - Updated User-Agent from Chrome 120 → 131
📦 Infrastructure
- 49 tests (up from 42), all passing
- Fixed deprecated npm flags in Dockerfile
- Added HEALTHCHECK to Dockerfile
- Corrected all supporting docs
Install
npx -y linkedin-mcp-toolsFull Changelog: v1.0.1...v1.0.2