v1.0.0

Highlights

• First stable release of the security-conscious Unraid MCP server.
• Add opt-in mapped appdata access through named container roots, with bounded directory listing and UTF-8 file reading.
• Add separately gated, overwrite-only mapped-file writes using SHA-256 revisions and confirmations bound to the root, path, and expected content.
• Retain the complete typed Unraid API v4.37.1 catalog: 61 fixed queries covering all 58 query roots, 86 fixed mutations covering all 84 effective mutation fields, and all 17 subscriptions.
• Preserve version-aware stable tools and fixed compatibility fallbacks for older API v4 releases.

Security and operations

• Constrain mapped-file traversal with descriptor-relative access, no-follow opens, root identity and containment checks, hard-link rejection, pseudo-filesystem rejection, bounded reads/listings, and process-wide inode write serialization.
• Keep mapped roots read-only by default; writes require an explicit global gate, writable-root allowlist, existing regular file, current SHA-256, exact confirmation, writable mount, and Unix permissions.
• Publish timestamped application logs to stderr while preserving stdout for MCP JSON-RPC.
• Publish a scanned multi-platform nightly image for every successful push to main, alongside immutable commit tags, SBOM, and provenance attestations.
• Document the official Unraid Connect plugin path for obtaining newer API versions before they are bundled with Unraid OS.

Compatibility

• Accept semantic versions with Unraid build metadata, including 4.37.1+d8801361, while preserving prerelease ordering.
• Support local stdio and authenticated Streamable HTTP transports.
• Support linux/amd64 and linux/arm64 container images.

Validation

• 128 tests pass.
• All 164 fixed GraphQL documents validate against the official Unraid API v4.37.1 schema.
• Frozen install, typecheck, build, package dry-run, dependency audit, workflow lint, container health smoke test, vulnerability scan, and both target architecture builds pass.