v2.36.0 — optional networked transport (safe) + panel management
Optional networked transport — run the MCP server over the network, safely, with control-panel management. Local stdio remains the default and is unchanged.
- Added
--transport stdio|sse|streamable-http(defaultstdio). Networked modes bind to loopback (127.0.0.1) by default and require a bearer token on every request ($DAVINCI_MCP_TOKEN, or generated + logged). A non-loopback bind logs a loud security warning. You can run a local stdio instance and a networked instance against the same Resolve at once. - Added control-panel management (Setup → MCP): a Transport card showing live mode / URL / token / loopback status with loopback-only Start/Stop, backed by
/api/mcp/transport/{start,stop}. - The page-switch lock (v2.34.1) serializes concurrent page switches across the local + networked instances.
Auth + loopback live-validated: 401 without token, auth-passes with token, bound to 127.0.0.1 only.