msrbuilds/elementor-mcp v3.14.2

EMCP Tools 3.14.2

on GitHub

EMCP Tools 3.14.2

This patch fixes intermittent MCP connection failures affecting OAuth and Application Password clients, particularly during concurrent startup and on managed hosts or CDNs.

Fixed

• Serialized MCP initialization so concurrent initialize and tools/list requests cannot race while the session is being created.
• Forwarded the negotiated Mcp-Protocol-Version header on subsequent requests.
• Made the configured public Server URL authoritative for MCP host checks, HTTPS availability, OAuth discovery, authorization, and token exchange, including WordPress subdirectory installations.
• Added REST fallbacks and an admin discovery diagnostic for hosts that intercept standard OAuth /.well-known/ routes before WordPress or plugins that return metadata for a different protected resource.
• Advertised EMCP's plugin-specific metadata URL in the authentication challenge and added regression coverage so a competing OAuth plugin cannot reclaim the shared bare route (#130).
• Bound OAuth authorization codes, access tokens, and refresh tokens to the intended MCP resource.
• Made Application Password generation respect WordPress global and per-user availability policies.
• Replaced the shallow Application Password check with a complete initialize -> notifications/initialized -> tools/list MCP handshake.

Dependencies

• WordPress MCP Adapter 0.6.1
• WordPress PHP MCP Schema 0.1.3

Compatibility

• End-to-end verified on WordPress 7.1 and PHP 8.3 with both OAuth and Application Password authentication through tools/list.