changelog

Changelog

Notable changes to MCPFlo, release by release. Full history and downloadable builds live on GitHub Releases.

v0.1.0

July 3, 2026diff

Features

  • Add "All" history tab with unified cross-server activity log 29c1a97
  • Add @mcpflo/server-everything test-fixture MCP server 0d89c22
  • Add a Tokens tab — response footprint and definition footprint e506ecf
  • Add an OAuth auth details panel to the server detail view 0ca6754
  • Add context-budget card to the server details view e8c44f0
  • Add context-budget token-estimation utility 208b7d0
  • Add disconnect action to server rows b773408
  • Add expand/collapse all control to sidebar header e7e17cb
  • Add pretty JSON tree view for result panels 78bed3a
  • Add protocol version override for MCP connections 85fa484
  • Add Tools/Resources/Prompts sections to the server details view 2fac48e
  • Cancel an in-flight capability fetch 55077bd
  • Encrypt server credentials at rest with safeStorage 33a2cfb
  • Keep transport secrets in main, operate on servers by id 29946fa
  • Prefill the form when activating a tool/prompt from the "All" tab 2e09e03
  • Replace KEY=VALUE textareas with key/value row editor 270d521
  • Select a server to open its (placeholder) details view 7cdbef2
  • Server details header and action bar 25372d4
  • Tooltip and hover affordance on context-budget bar segments 8668acb
  • Track token issue time so hydration reports honest auth status 8d00fc5

Bug Fixes

  • Allowlist scheme before shell.openExternal 7a578a4
  • Block OAuth over cleartext http to non-loopback hosts c29ab37
  • Block top-level navigation to non-app origins in main window 690ae03
  • Bundle preload deps so sandboxed preload can load them 7b0229a
  • Clear cached capabilities when disconnecting a server f18b579
  • Close spawned MCP server processes on app quit c948799
  • Correct token footprint tokenizer label to o200k_base a48196a
  • Disconnect a server's live process when it's removed 685c916
  • E2E specs broken by the server-row chevron/select split 45a3627
  • Enable Chromium renderer sandbox e7b4f2f
  • Exempt MCP-UI resources from the response size cap 490587e
  • Initialize captured to satisfy TS definite-assignment check 4110e03
  • Prepare server-everything package for npm publish 9253b15
  • Report finishAuth failures instead of leaving the row stuck pending 40b463b
  • Sign out disconnects the server and restore auth status on launch 9198b27
  • Stop misdiagnosing ordinary connect failures as DCR failures 8026ea1
  • Stop selecting a server from forcing a connect attempt 24fc755
  • Suppress stale re-auth browser tab on mid-session token expiry 52ef73e
  • Tooltip colors track the app's actual theme, not OS preference ca33b60
  • Validate OAuth callback state before honoring error/settling the flow f5cebc2
  • Validate server id in IPC handlers before it reaches fs paths 9f8a4ae