Skip to content

v1.3.1

Choose a tag to compare

View all tags
@payware payware released this 17 Sep 18:36
v1.3.1
05d693b

HTTP proxy hardening

If you run the HTTP proxy (npm run proxy), upgrade.

  • The proxy now binds to 127.0.0.1 by default. Binding to another interface is an explicit opt-in through PAYWARE_MCP_PROXY_HOST, and it logs a warning.
  • Browser requests are accepted only from an allow-list of origins, widened through PAYWARE_MCP_PROXY_ORIGINS.
  • The stdio transport, which MCP clients such as Claude Code use by default, opens no port and is unaffected.

Listed in the MCP Registry

The server is published to the official MCP Registry as io.github.payware/mcp-server, with the environment variables it reads described in server.json. Every release now updates the listing automatically after the npm publish.

Other

  • MIT LICENSE file added; the license was already declared in package.json.
  • npm keywords describe payware as an account-to-account payments network rather than a payment gateway.
Assets 2
Loading