Opal Emu MCP v1.1.0

Overview

The first GitHub Release of Opal Emu MCP, featuring security hardening, improved reliability, and updated compatibility with Opal Emu.

Highlights

• Bind HTTP and WebSocket services to IPv4 loopback, authenticate the browser bridge, and validate Host, Origin, and bridge responses.
• Safely reject malformed WebSocket upgrades and prevent active connection takeover.
• Strengthen ROM filename, symlink, size, and input validation.
• Limit direct Base64 ROM input to 6 MiB and local ROM reads to 128 MiB.
• Bound concurrent emulator operations and improve timeout and state cleanup.
• Fix same-session ROM replacement readiness, screenshot handling, and pause restoration.
• Expand local ROM discovery to include ZIP, 7z, CHD, CSO, and Jaguar formats, with deterministic filename selection.
• Update dependencies, MCP tool metadata, regression tests, security guidance, and CI.

Compatibility

Core integration was tested against Opal Emu v1.2.3 using a synthetic NES ROM, including small ZIP and 7z archives. Support for every emulator core or disc format has not been verified.

Known limitations

• EmulatorJS assets depend on an external CDN.
• Repeated game replacement can retain browser resources until the page is restarted.
• Archive expansion is not bounded by the compressed ROM input limit.
• Loose multi-file discs, ambiguous system selection, and some analog controls remain unsupported.

See README.md, CHANGELOG.md, and SECURITY.md for further details.