摘要
本版本完善了 OpenAPI 集成并进一步加固了安全边界。OpenAPI 导入现在支持 urlencoded 与 multipart 请求体、按规范序列化数组查询参数、在 URL 替换前对路径参数进行编码，并可从规范的 securitySchemes 或专用的 openapi.specSecurity 凭据预填安全配置。安全方面，共享服务器使用与配置披露相分离，模板导入强制执行特权配置检查，隐藏服务器的工具调用统一返回"不可用"错误。服务器名称现在会对照 MCP 工具名称字符集进行校验，OAuth 新增 RFC 9207 签发者识别与 CIMD 客户端支持，分享候选选择器在大用户集下也更具扩展性。
功能
- 新增 OAuth RFC 9207 签发者识别与 CIMD 客户端支持 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1075
- 导入时显示 OpenAPI 工具列表大小并给出上下文窗口警告 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1092
- 导入时从规范的 securitySchemes 预填 OpenAPI 安全配置 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1093
- 通过 openapi.specSecurity 单独提供规范下载凭据 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1097
- 校验服务器名称是否符合 MCP 工具名称字符集 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1100
- 针对大型用户集优化分享候选选择器 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1107
修复
- 更新 README 以更清晰地说明网站与生产支持 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1071
- 处理终止 stdio 进程树时缺少 ps 命令的情况 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1073
- 将共享服务器使用与配置披露相分离 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1085
- 在前端显示具体的密码规则错误而非通用提示 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1086
- 在 DELETE OpenAPI 工具调用时发送声明的请求体 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1088
- 在 URL 替换前对 OpenAPI 路径参数进行编码 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1089
- 支持 OpenAPI 的 urlencoded 与 multipart 请求体 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1090
- 按规范默认值序列化 OpenAPI 数组查询参数 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1091
- 在模板导入时强制执行特权配置检查 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1096
- 将 OpenAPI 预填与足迹分析内联处理 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1099
- 在外部编辑时重新读取 mcp_settings.json 以匹配服务器定义 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1101
- 隐藏服务器工具调用统一返回"不可用"MCP 错误 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1106
- 直接在 Docker 中启动 node 以避免运行时下载 Corepack by @samanhappy in https://github.com/samanhappy/mcphub/pull/1109