v3.4.1 — OAuth sign-in for MCP clients

EMCP Tools 3.4.1 — OAuth sign-in for MCP clients

Added

• OAuth sign-in for AI clients (free). Claude and other MCP clients can connect through a standard OAuth 2.1 flow — approve access from your WordPress login instead of copying an Application Password. Self-contained authorization server (discovery metadata, Dynamic Client Registration, PKCE-S256, admin-only consent, 1h access + rotating 30-day refresh tokens); the token acts as the authorizing admin, and Application Passwords keep working alongside it. HTTPS-gated, on by default when available.
• Connection tab: authentication-method chooser (OAuth vs Application password) with per-client setup, a Connected apps list with one-click Revoke, and a Claude.ai client.

Fixed

• OAuth discovery 404 (real-client blocker) — the resource-scoped well-known path (RFC 9728) is now served.
• get-page-snapshot ignored atomic (v4) widgets (#91).
• Atomic styles writes were persisted but never applied (#92).
• Compact tool mode surfaced 6 tools instead of 3.
• Subdirectory installs unreachable via the Node proxy (#93) — the proxy now honors the site base path (root installs unchanged); proxy bumped to 1.9.1. Thanks @carstenbaumhoegger.

Changed

• Codex connection renamed to "ChatGPT App" with a corrected in-app OAuth flow (Add server → Streamable HTTP → Save → Authenticate → Approve).

---

Free install/update: download emcp-tools-3.4.1.zip below. See the changelog.