Skip to content

v1.1.13

Choose a tag to compare

@tumf tumf released this 14 Oct 03:17
· 40 commits to main since this release

Fixed

  • Report non-zero exits from single commands as MCP errors, preserving exit status and stdout/stderr in the client response (#61).
  • Keep failed-command output out of server logs and add a regression test for this boundary.

Operator guidance

  • Clarify that command-name allowlisting is trusted execution, not a complete sandbox. Allowed programs run with the server process's OS authority; untrusted inputs require external OS/container isolation.
  • Emit one startup warning on stderr without changing MCP stdout framing.

Commands such as grep (no match, exit 1) and diff (differences, exit 1) now also produce isError: true. Successful command output is unchanged. Pipeline failure handling is unchanged.

Thanks to @PseudoSky for #61 and its regression tests.

Install: uv tool install mcp-shell-server==1.1.13
Upgrade: uv tool upgrade mcp-shell-server

Local verification: 369 tests, formatter/linter/type checks, package build, strict distribution metadata checks, and a fresh-wheel MCP stdio smoke test. OpenSpec validation passed all eight specs with one pre-existing long-requirement warning.