Release notes from pi-mcp-adapter
Articles about Release notes from pi-mcp-adapter
Release v5.2.0 · nicobailon/pi-mcp-adapter
This release closes a security hole in the MCP SDK and makes tool calls land on the first try more often. A malicious or compromised MCP server could previously trick the adapter into sending your saved sign-in tokens to an authorization server it chose; the updated SDK binds saved credentials to the server that issued them, and npm audit no longer flags the adapter. When the model lists a server's tools, it now sees each tool's parameter names, so it stops guessing argument names and wasting a turn on the error.
Release v5.1.0 · nicobailon/pi-mcp-adapter
pi-mcp-adapter 5.1.0 works with Pi 1.0.0 and adds a few things people asked for. You can add web search from /mcp-adapter setup without signing up for anything, and you can stop a server's MCP App UIs from opening while still using its tools. Other Pi extensions can now build on MCP features beyond tool calls, such as the draft MCP Events extension, using the servers and sign-ins you already set up. It also fixes pi -p hanging after a reply with some HTTP servers, and a crash in apps that import the adapter directly.
Release v5.0.0 · nicobailon/pi-mcp-adapter
pi-mcp-adapter 5.0.0 makes the adapter the one place Pi runs MCP. Servers you added with pi mcp add, servers other extensions register, sign-ins from Pi's built-in MCP, and tokens from Pi's /login all work here now. It also runs far fewer servers: each one is discovered at startup and then stopped until you use it, so a big server list no longer means a big pile of running processes. Servers you rarely use stay searchable, long tools that report progress no longer time out, and a stray Enter can no longer approve a project server.
Release v4.0.0 · nicobailon/pi-mcp-adapter
pi-mcp-adapter 4.0.0 makes Figma work with Pi and gives /mcp-adapter setup a steadier, easier layout. Figma's remote server doesn't accept Pi yet, so setup now offers the Figma desktop app's local server instead and tells you how to switch it on. Other extensions can now call your MCP tools directly, going through the same approval rules as the model. mcpScript is now opt-in, and when you turn it on it picks the right tool more reliably and remembers what each tool returns between sessions.
Release v3.3.0 · nicobailon/pi-mcp-adapter
This release gives you more control over which MCP tools can run without asking. You can now see whether a server says a tool only reads data or may delete it, and a new approveTools: "destructive" setting asks before any tool that might change something, without listing tool names. Tool calls no longer time out while you are still filling in a server's input form. The model also gets a better sense of what tools return, and prompt slash commands suggest argument names as you type.
Release v3.2.0 · nicobailon/pi-mcp-adapter
pi-mcp-adapter 3.2.0 makes the adapter usable inside apps that embed Pi and fixes several problems people ran into day to day. Apps can now run the adapter on MCP connections they manage themselves, and they keep control of approvals and results. OAuth sign-in works with servers that refuse localhost callbacks. Direct tools stay put when another Pi session updates the shared cache, and mcpScript now works in Bun-compiled builds of Pi.
Release v3.1.0 · nicobailon/pi-mcp-adapter
This release is mostly about project MCP servers being less annoying and less fragile. If you work across git worktrees, approving a project's servers once now covers all of them, so a fresh worktree stops asking again. The approval prompt also no longer vanishes after /reload or when another extension takes over the editor, a bug that could leave MCP stuck and slow every prompt by up to 30 seconds.
Release v3.0.0 · nicobailon/pi-mcp-adapter
pi-mcp-adapter 3.0.0 gets the adapter ready for Pi's upcoming built-in MCP support and closes two security gaps. The adapter now keeps its settings in its own mcp-adapter.json file and uses the /mcp-adapter command, so it can run next to Pi's built-in MCP without starting the same servers twice. Opening a repository no longer starts that repository's MCP servers on its own: you trust the project and approve each server first. mcpScript code now runs in a separate sandbox that scripts cannot escape.
Release v2.38.0 · nicobailon/pi-mcp-adapter
pi-mcp-adapter 2.38.0 makes lazy and runtime-registered MCP tools more dependable. Search-mode tools can promote themselves to full direct tools after a successful call, while keep-alive servers registered later now work even when Pi starts with no enabled servers. Compact mcpScript results are easier to understand, and configuration compatibility is broader across stdio paths, OpenCode v2, and Rust MCP schemas. OAuth and MCP UI behavior are also less fragile.
Release v2.37.0 · nicobailon/pi-mcp-adapter
pi-mcp-adapter 2.37.0 gives you more control over where Jev sends semantic-search requests and what agents are allowed to do. Jev now works with other System One providers besides TypeSafe: set SYSTEMONE_ENDPOINT and store a key for that provider. New settings let you block agents from installing MCP servers and hide resource tools across every server at once. Pi can also start without connecting to MCP servers even when cached tool metadata is missing, and a couple of token and search-mode bugs are fixed.
Release v2.36.0 · nicobailon/pi-mcp-adapter
Pi can now configure TypeSafe semantic search directly with /mcp jev setup, including choosing which MCP servers may share tool metadata. Once a valid TypeSafe key is available, semantic search works across enabled MCP tools by default and gives clearer reasons when no tool matches. Windows users get reliable regex safety checks through both native and Java backends, and contributors can run npm test again on hardened Node versions. Large tool catalogs also show one clean interactive advisory instead of duplicated console warnings.
Release v2.35.0 · nicobailon/pi-mcp-adapter
pi-mcp-adapter 2.35.0 makes it easier to find the right MCP tool from a natural-language request. Jev-powered semantic search is opt-in and can also evaluate intermediate results in MCP scripts, with explicit controls over which server data may be shared. Long-running MCP Tasks now work end to end, and day-to-day configuration, approvals, authentication, and tool discovery are more reliable.
Release v2.34.0 · nicobailon/pi-mcp-adapter
Pi MCP Adapter 2.34.0 starts faster while keeping cached tools, prompts, and commands ready to use. It connects to more OAuth servers and adds a secure credential option for Windows OpenSSH and other headless sessions. Shared configuration, Agent Plugin servers, MCP Apps, private HTTPS connections, and frequently changing tool catalogs are more reliable. Existing configurations continue to work, and the new credential and ancestor-discovery options are opt-in.