v0.21.0

What's new

Added

• ymcp setup in a terminal opens a TUI of your profiles, in the look of ymcp pipeline, showing each one's sign-in, allowed tools, confirmations and clients; enter edits a profile, n adds one and d removes one.
• A profile wizard edits a profile in three steps: its name and connection (signed in as you type), the allowed tools chosen one by one in a tree of groups, and the MCP clients it is registered in.
• Destructive tools (deletes, unlinks, apply_command with a removing command, call_api with DELETE) can ask for your confirmation: called without confirm they change nothing and return a one-time secret, valid for ten minutes, that the model must pass back after asking you.

Changed

• Confirmation of destructive tools is on by default for every profile; turn it off per profile with ymcp setup --confirm, or per server with ymcp serve --confirm or YMCP_CONFIRM, while ymcp call and pipeline agents never ask.

Changelog

Features

• b0a9eae: feat(setup): a TUI for profiles, allowed tools and confirmed destructive operations (#53) (@xlsft)

Install

macOS / Linux:

curl -fsSL https://raw.githubusercontent.com/xlsft/ymcp/main/install.sh | sh

Windows (PowerShell):

irm https://raw.githubusercontent.com/xlsft/ymcp/main/install.ps1 | iex

Homebrew: brew install xlsft/tap/ymcp · Scoop: scoop bucket add xlsft https://github.com/xlsft/scoop-bucket; scoop install ymcp.

Already installed: ymcp update. Docker: docker pull xlsoftware/ymcp:0.21.0.

Verify

checksums.txt is signed with Sigstore by this repository's release workflow:

cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/xlsft/ymcp/\.github/workflows/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt

Each archive has an SPDX SBOM next to it (*.sbom.json).