colorlink
c63762487c
feat(oauth): add Dynamic Client Registration (RFC 7591) so Claude.ai can connect
...
- /oauth/register creates a public (PKCE) client; client_id uses 'mcpc_' prefix so it is
NOT accepted as a raw bearer by TokenManager::resolve() — only the human-approved JWT works
- registered redirect_uris stored + enforced exactly at /authorize
- registration_endpoint advertised in AS metadata
- fixes Claude.ai reconnect loop (DCR was missing; /oauth/register was 404)
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01Q8t9GEyyLZbUQu26na1JQg
2026-10-16 21:43:32 +00:00
colorlink
5d21dc2ef6
MCP: add clean /mcp streamable-HTTP route (POST JSON-RPC, GET info) so Claude.ai stops classifying the connector as deprecated SSE
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01Q8t9GEyyLZbUQu26na1JQg
2026-10-16 03:34:14 +00:00
colorlink
56d779c70b
fix: add 22 missing tool registrations — woo coupons/variations/attributes, file aliases, send_email, elementor_delete_items
2026-06-02 12:05:55 +00:00
colorlink
6175a836f7
fix: Registry.php syntax error on create_comment (extra bracket); all 131 tools verified working
2026-06-02 11:46:26 +00:00
colorlink
4213b57138
fix: register all missing tools — get_categories, get_tags, get_taxonomies, term_meta, custom_css, theme_mods, get_plugins, get_themes, get_menus, menu CRUD, comments, seo aliases, transient aliases, list_widget_areas; fix sql_query schema
2026-06-02 11:33:58 +00:00
colorlink
157ef518e0
fix: allow initialize + tools/list without auth (MCP spec)
2026-06-02 09:42:50 +00:00
colorlink
4003325420
v2.2.0: includes/MCP/Registry.php
2026-05-29 12:44:12 +00:00
colorlink
ef52b3c3f9
v2.0.0: Registry with Elementor + extended WordPress tools
2026-05-29 10:32:33 +00:00
colorlink
580e2ef193
fix: cast empty properties arrays to stdClass to prevent JSON [] instead of {}
2026-05-14 15:15:36 +00:00
colorlink
67915591ad
patch: audit log wired into tool calls
2026-05-08 22:30:42 +00:00
colorlink
121e1d35f1
note: audit log wired into tool dispatch
2026-05-08 22:19:30 +00:00
colorlink
9ef2066c1e
security: PKCE S256 verification + redirect_uri allowlist + JWT access tokens
2026-05-08 22:08:24 +00:00
colorlink
310183f03b
fix: add POST /sse handler for MCP Streamable HTTP transport (Claude.ai new protocol)
2026-05-08 21:59:11 +00:00
colorlink
068a1d8bf8
fix: accept POST /sse for Claude.ai streamable HTTP transport (2025-03-26 spec)
2026-05-08 21:58:25 +00:00
colorlink
314fac44fe
fix: SSE keep-alive loop 270s + retry hint + disable output buffering properly
2026-05-08 21:51:36 +00:00
colorlink
f5d82ac3dd
fix: output raw HTML from authorize endpoint, bypass REST JSON wrapper
2026-05-08 21:45:30 +00:00
colorlink
3b2bcf0932
feat: full authorization_code OAuth flow with approval UI
2026-05-08 21:40:21 +00:00
colorlink
8a7ee01de6
feat: OAuth 2.0 client_credentials server for Claude.ai connector
2026-05-08 21:35:58 +00:00
colorlink
bf4eda4d5f
feat: full tool registry - 40+ tools across all categories
2026-05-08 03:14:27 +00:00
colorlink
34c4d06024
feat: MCP SSE server + JSON-RPC dispatch
2026-05-08 03:12:57 +00:00