v1.0.1

Highlights

• Add all four standard MCP annotations to every exposed tool with explicit closed-world classification.
• Classify read-only, non-destructive, destructive, idempotent, and non-idempotent operations from stable-tool behavior and the tagged Unraid API v4.37.1 catalog.
• Add explicit strict input schemas for every tool, including no-argument tools.
• Keep API safety gates and confirmations independent from client-facing MCP annotations.
• Add maximum-surface and authenticated HTTP tools/list invariants for annotations and schemas.
• Document intentionally conservative lifecycle, Rclone, executable, provider-defined, and revision-bound classifications in code.

Validation

• 130 tests pass.
• Type checking and production build pass.
• Package dry-run for unraid-mcp@1.0.1 passes.

v1.0.0

Highlights

• First stable release of the security-conscious Unraid MCP server.
• Add opt-in mapped appdata access through named container roots, with bounded directory listing and UTF-8 file reading.
• Add separately gated, overwrite-only mapped-file writes using SHA-256 revisions and confirmations bound to the root, path, and expected content.
• Retain the complete typed Unraid API v4.37.1 catalog: 61 fixed queries covering all 58 query roots, 86 fixed mutations covering all 84 effective mutation fields, and all 17 subscriptions.
• Preserve version-aware stable tools and fixed compatibility fallbacks for older API v4 releases.

Security and operations

• Constrain mapped-file traversal with descriptor-relative access, no-follow opens, root identity and containment checks, hard-link rejection, pseudo-filesystem rejection, bounded reads/listings, and process-wide inode write serialization.
• Keep mapped roots read-only by default; writes require an explicit global gate, writable-root allowlist, existing regular file, current SHA-256, exact confirmation, writable mount, and Unix permissions.
• Publish timestamped application logs to stderr while preserving stdout for MCP JSON-RPC.
• Publish a scanned multi-platform nightly image for every successful push to main, alongside immutable commit tags, SBOM, and provenance attestations.
• Document the official Unraid Connect plugin path for obtaining newer API versions before they are bundled with Unraid OS.

Compatibility

• Accept semantic versions with Unraid build metadata, including 4.37.1+d8801361, while preserving prerelease ordering.
• Support local stdio and authenticated Streamable HTTP transports.
• Support linux/amd64 and linux/arm64 container images.

Validation

• 128 tests pass.
• All 164 fixed GraphQL documents validate against the official Unraid API v4.37.1 schema.
• Frozen install, typecheck, build, package dry-run, dependency audit, workflow lint, container health smoke test, vulnerability scan, and both target architecture builds pass.

v0.2.0

Highlights

• Add version-aware Unraid API discovery and fixed compatibility fallbacks for older API v4 releases.
• Cover all 58 v4.37.1 query roots, all 84 effective mutation fields, and all 17 subscriptions with 164 fixed, typed GraphQL documents.
• Expose subscriptions as bounded one-event tools over authenticated WebSockets.
• Require both mutation gates and exact confirmations for destructive, credential, security, and other sensitive operations.
• Preserve useful bounded GraphQL diagnostics while redacting API keys and sensitive-operation details.

Compatibility fixes

• Split system network, network metrics, temperature metrics, UPS, and disk-sector queries so unsupported or broken optional fields no longer discard valid data.
• Normalize explicitly disabled UPS and VM services without hiding unrelated runtime failures.
• Preserve prefixed VM IDs on API v4.30 and newer.

Validation

• 87 tests pass.
• All 164 fixed documents validate against the official Unraid API v4.37.1 schema.
• Frozen install, typecheck, build, dependency audit, amd64 smoke test/scan, and arm64 build pass.

v0.1.1

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Security notice: The v0.1.0 container runtime includes unnecessary Debian and npm tooling with known vulnerabilities. Use v0.1.1 or newer.

Full Changelog: https://github.com/lemanjo/unraid-mcp/commits/v0.1.0