Skip to content

v1.3.0 — Initial public release

Choose a tag to compare

View all tags
@TaherSayed TaherSayed released this 24 May 13:26
· 26 commits to main since this release
v1.3.0
d299e6a

First public release of Commander — Secure MCP Control.

Highlights

  • MCP 2025-06-18 over JSON-RPC 2.0 / Streamable HTTP
  • OAuth 2.1 with PKCE (S256 required), refresh-token rotation, RFC 7009 revocation, RFC 8414 / 9728 discovery, RFC 7591 Dynamic Client Registration (admin opt-in)
  • Personal access tokens (hashed at rest, optional IP allowlist, expiry, per-token rate limit)
  • 25 built-in tools across read / write / admin scopes
  • Audit log of every successful and failed call
  • Brute-force protection with progressive lockout + optional email alerts
  • SSRF guard on media.upload
  • Self-protection: refuses to deactivate itself

Install

Download the commander-secure-mcp-control-1.3.0.zip below and upload via Plugins → Add New → Upload Plugin, or clone the repo into wp-content/plugins/.

Requires WordPress 6.2+ and PHP 8.0+.

Reporting security issues

See SECURITY.md — email security@hbs-it-gmbh.de, not a public issue.

Assets 3
Loading