Skip to content

Premiere Pro MCP v1.14.3

Choose a tag to compare

View all tags
@leancoderkavy leancoderkavy released this 29 Aug 08:20
v1.14.3
58e4048
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security hotfix

  • Adds optional fail-closed OAuth resource-server validation for explicitly allowlisted trusted operators.
  • Publishes RFC 9728 protected-resource metadata and interoperable OAuth challenges.
  • Validates remote JWKS signatures, exact issuer and canonical audience, token lifetime, subject allowlist, and required scopes.
  • Bounds requests before JWT verification and uses opaque authenticated admission keys.
  • Refuses partial or mixed OAuth/shared-token configuration and removes admission counters from public health output.

Boundary

OAuth does not provide public desktop pairing or per-user Premiere routing. The hosted endpoint remains operator-managed until a separate outbound desktop relay and durable device authorization exist.

Verification

Protected CI passed on macOS and Windows with Node 20, 22, and 24, connector packaging, and CodeQL. Local release verification passed 1,834 tests, package isolation, tag/manifest consistency, and a zero-vulnerability npm audit.

Assets 5
Loading