Release Notes (v1.2.0 -> v1.2.5) / 更新说明(v1.2.0 -> v1.2.5)
Highlights / 重点更新
- Added generic web fetch tool:
fetchWebContent
新增通用网页抓取工具:fetchWebContent - Added engine-name normalization (e.g.
Bing,DuckDuckGo,linux.do)
新增搜索引擎名称标准化(如Bing、DuckDuckGo、linux.do) - Hardened web-fetch security (SSRF guard + response size limits)
强化网页抓取安全(SSRF 防护 + 响应体大小限制) - Fixed Vercel/Serverless runtime error:
MCP error -32603: keyValidator._parse is not a function
修复 Vercel/Serverless 运行时错误:MCP error -32603: keyValidator._parse is not a function
Added / 新增
-
New tool:
fetchWebContentfor public HTTP(S) URLs, including Markdown and HTML extraction
新增fetchWebContent工具,支持公开 HTTP(S) 链接抓取,含 Markdown/HTML 内容提取 -
Configurable MCP tool names via env vars:
新增工具名环境变量配置:MCP_TOOL_SEARCH_NAMEMCP_TOOL_FETCH_LINUXDO_NAMEMCP_TOOL_FETCH_CSDN_NAMEMCP_TOOL_FETCH_GITHUB_NAMEMCP_TOOL_FETCH_JUEJIN_NAMEMCP_TOOL_FETCH_WEB_NAME
-
New test coverage:
新增测试覆盖:test:web-contenttest:web-content:livetest:engine-normalizationtest:url-safety
Changed / 变更
-
search.enginesinput is now normalized before enum validation
search.engines参数在枚举校验前先做标准化处理 -
Logging output moved to
stderrfor better MCP/stdio compatibility
日志输出统一到stderr,提升 MCP/stdio 兼容性
Fixed / 修复
-
Fixed Brave parser compatibility with updated page structure
修复 Brave 页面结构变更导致的解析问题 -
Improved LinuxDo search fallback behavior
优化 LinuxDo 搜索回退逻辑 -
Fixed schema parsing/runtime compatibility issue in serverless deployments
修复 Serverless 部署下的 schema 解析兼容性问题 -
Resolved dependency mismatch causing:
解决依赖不一致导致的报错:MCP error -32603: keyValidator._parse is not a function
Security / 安全
-
SSRF protections for
fetchWebContent:
fetchWebContent增加 SSRF 防护:- block localhost/private/link-local targets
拦截 localhost / 私网 / 链路本地地址 - re-validate redirect final URL
对重定向后的最终 URL 再次校验
- block localhost/private/link-local targets
-
Response/body size limits added before full processing
在完整处理前增加响应体大小限制,降低内存风险
Compatibility / 兼容性
-
No breaking changes
无破坏性变更 -
Existing canonical engine values keep working as-is
现有标准引擎参数保持兼容(如bing、duckduckgo)
What's Changed
- feat: Configurable tool names by @lightdot in #24
- chore: replace
console.logwithconsole.errorfix #23 by @Aas-ee in #25 - fix(brave,linuxdo): update selectors for SvelteKit SSR & add Brave fallback by @Zacklinkk in #39
- chore(package): Update package name and add zod dependency by @Aas-ee in #40
- fix(docs): fix readme by @Aas-ee in #41
- Feature/feature web fetch by @Aas-ee in #42
- feat(web): Enhanced security and reliability of web content acquisition by @Aas-ee in #43
New Contributors
- @lightdot made their first contribution in #24
- @Zacklinkk made their first contribution in #39
Full Changelog: v1.2.0...v1.2.5