doobidoo/mcp-memory-service v10.26.2 on GitHub

What's Changed

[#576] OAuth token exchange fails with 500 for public PKCE clients (authorization.py): claude.ai and other MCP clients that use OAuth 2.1 public-client PKCE flow (no client_secret) received a 500 Internal Server Error during token exchange. The endpoint now detects public clients — requests supplying a code_verifier but no client_secret — and skips secret authentication, using the PKCE verifier as identity proof per OAuth 2.1 §2.1. Confidential clients (with client_secret) are unaffected. Closes #576.
Missing /.well-known/oauth-protected-resource endpoint (discovery.py): The endpoint required by RFC 9728 and the MCP OAuth spec was returning 404, breaking OAuth discovery for compliant MCP clients. Added OAuthProtectedResourceMetadata Pydantic model and corresponding route, which advertises the resource identifier and authorization server URLs with token_endpoint_auth_methods_supported: ["none"].
Opaque OAuth error logging: Added exc_info=True to exception handlers in the token and authorization endpoints so that full tracebacks are recorded in logs instead of generic error messages, making future debugging significantly easier.

Automated CHANGELOG housekeeping workflow (.github/workflows/changelog-housekeeping.yml): Monthly GitHub Actions workflow (runs on the 1st of each month, also triggerable via workflow_dispatch) that automatically archives CHANGELOG entries older than the 8 most recent versions into docs/archive/CHANGELOG-HISTORIC.md. Validates that no version entries are lost during archival.
Changelog housekeeping script (scripts/maintenance/changelog_housekeeping.py): Backing Python script with --dry-run support and README "Previous Releases" trimming (max 7 entries). SHA-pinned third-party Actions for security.

No breaking changes. Standard upgrade:

pip install --upgrade mcp-memory-service
# or
uvx mcp-memory-service@latest

If you use claude.ai's MCP integration panel and encountered OAuth 500 errors, this release resolves the issue. No configuration changes needed.