Skip to content

Clank 0.19.0

Choose a tag to compare

View all tags
@nearbycoder nearbycoder released this 11 Aug 03:56
v0.19.0
475b49b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First-class MCP Apps

Clank 0.19.0 lets any typed backend query or mutation render an interactive, sandboxed view inside compatible MCP hosts. Define one immutable ui:// resource, bind it with agent.app, and Clank publishes the negotiated tool metadata and exact text/html;profile=mcp-app resource automatically.

The release includes a zero-dependency iframe client and HTML document builder, stable 2026-01-26 MCP Apps capability negotiation, app-only tool visibility, CSP and browser-permission declarations, deterministic UI contract revisions, a runnable example, and complete human/agent documentation.

Security boundaries remain explicit: views receive no OAuth credentials, all actions still pass through application authorization and MCP scopes, iframe messages are parent-bound and time-limited, and malformed or over-permissive declarations fail while the application boots.

Validation includes 687 tests with 100% line/branch/function coverage, packed-release deployment conformance, CodeQL, the full repository/history security audit, and MCPJam Apps conformance at 7/7 (100/100).

Assets 3
Loading