Skip to content

📦 v1.2.5

Latest

Choose a tag to compare

@Aas-ee Aas-ee released this 08 Mar 08:47

Release Notes (v1.2.0 -> v1.2.5) / 更新说明(v1.2.0 -> v1.2.5)

Highlights / 重点更新

  • Added generic web fetch tool: fetchWebContent
    新增通用网页抓取工具:fetchWebContent
  • Added engine-name normalization (e.g. Bing, DuckDuckGo, linux.do)
    新增搜索引擎名称标准化(如 BingDuckDuckGolinux.do
  • Hardened web-fetch security (SSRF guard + response size limits)
    强化网页抓取安全(SSRF 防护 + 响应体大小限制)
  • Fixed Vercel/Serverless runtime error: MCP error -32603: keyValidator._parse is not a function
    修复 Vercel/Serverless 运行时错误:MCP error -32603: keyValidator._parse is not a function

Added / 新增

  • New tool: fetchWebContent for public HTTP(S) URLs, including Markdown and HTML extraction
    新增 fetchWebContent 工具,支持公开 HTTP(S) 链接抓取,含 Markdown/HTML 内容提取

  • Configurable MCP tool names via env vars:
    新增工具名环境变量配置:

    • MCP_TOOL_SEARCH_NAME
    • MCP_TOOL_FETCH_LINUXDO_NAME
    • MCP_TOOL_FETCH_CSDN_NAME
    • MCP_TOOL_FETCH_GITHUB_NAME
    • MCP_TOOL_FETCH_JUEJIN_NAME
    • MCP_TOOL_FETCH_WEB_NAME
  • New test coverage:
    新增测试覆盖:

    • test:web-content
    • test:web-content:live
    • test:engine-normalization
    • test:url-safety

Changed / 变更

  • search.engines input is now normalized before enum validation
    search.engines 参数在枚举校验前先做标准化处理

  • Logging output moved to stderr for better MCP/stdio compatibility
    日志输出统一到 stderr,提升 MCP/stdio 兼容性


Fixed / 修复

  • Fixed Brave parser compatibility with updated page structure
    修复 Brave 页面结构变更导致的解析问题

  • Improved LinuxDo search fallback behavior
    优化 LinuxDo 搜索回退逻辑

  • Fixed schema parsing/runtime compatibility issue in serverless deployments
    修复 Serverless 部署下的 schema 解析兼容性问题

  • Resolved dependency mismatch causing:
    解决依赖不一致导致的报错:

    • MCP error -32603: keyValidator._parse is not a function

Security / 安全

  • SSRF protections for fetchWebContent:
    fetchWebContent 增加 SSRF 防护:

    • block localhost/private/link-local targets
      拦截 localhost / 私网 / 链路本地地址
    • re-validate redirect final URL
      对重定向后的最终 URL 再次校验
  • Response/body size limits added before full processing
    在完整处理前增加响应体大小限制,降低内存风险


Compatibility / 兼容性

  • No breaking changes
    无破坏性变更

  • Existing canonical engine values keep working as-is
    现有标准引擎参数保持兼容(如 bingduckduckgo

What's Changed

  • feat: Configurable tool names by @lightdot in #24
  • chore: replace console.log with console.error fix #23 by @Aas-ee in #25
  • fix(brave,linuxdo): update selectors for SvelteKit SSR & add Brave fallback by @Zacklinkk in #39
  • chore(package): Update package name and add zod dependency by @Aas-ee in #40
  • fix(docs): fix readme by @Aas-ee in #41
  • Feature/feature web fetch by @Aas-ee in #42
  • feat(web): Enhanced security and reliability of web content acquisition by @Aas-ee in #43

New Contributors

Full Changelog: v1.2.0...v1.2.5