Skip to content

1.8.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Nov 14:53
· 22 commits to main since this release
Immutable release. Only release title and notes can be modified.
1.8.1
This tag was signed with the committer’s verified signature.
mattt Mattt
SSH Key Fingerprint: e/W5h7fVORWrofLS7Jnmjmm2onvSm6P5ld+7rkphTLY
Verified
Learn about vigilant mode.
028b8ff
This commit was signed with the committer’s verified signature.
mattt Mattt
SSH Key Fingerprint: e/W5h7fVORWrofLS7Jnmjmm2onvSm6P5ld+7rkphTLY
Verified
Learn about vigilant mode.

Important

This release fixes a security vulnerability in iMCP 1.0.1 through 1.8.0 that let an MCP client use iMCP's tools without your approval (GHSA-pfc6-qp66-c2ff). Please update now: choose "Check for Updates..." in iMCP's menu (in 1.5.0 and later), run brew upgrade --cask imcp, or download iMCP below. Until you can, quit iMCP and turn off "Launch at Login" in its settings.

Security

  • iMCP lists and runs tools for a client only after you approve its connection. Before, a client could call tools/list and tools/call without sending initialize, and the approval prompt never appeared (#325)

Known issue

  • If imcp-server reconnects to iMCP in the middle of a session, tool calls get a "Method not found" error. Restart the iMCP server in your AI app, or quit and reopen the AI app, and approve the connection again if iMCP asks.
Assets 5
Loading