Summary
This release closes a critical security hole: disabling a tool only filtered tools/list, leaving it executable through tools/call — so "read-only" connections to Gmail, Microsoft 365, or Nextcloud could be silently bypassed, including via prompt injection. Disabled tools are now enforced at execution time. Login rate limiting counts only failed attempts and is now tunable, so API consumers and service accounts renewing tokens are no longer locked out by successful logins. Group visibility controls arrive with private, group, and public scopes plus selected-user sharing, enforced across group APIs, MCP/SSE routes, and nested server metadata. Reliability and polish: OAuth clients are cached only after credential persistence succeeds, the Docker quick start is simplified while legacy mounts still work, and console logs render timestamps with the process-local UTC offset.
Features
- feat: add visibility controls for groups by @samanhappy in #1175
Fixes
- fix(security): disabled tools remain executable via tools/call [CRITICAL] by @sragot in #1178
- fix(security): count only failed auth attempts and allow rate limit tuning by @11113127 in #1135
- fix: cache OAuth clients only after credential persistence by @samanhappy in #1169
- fix: simplify Docker quick start while preserving legacy mounts by @samanhappy in #1173
- fix(logging): render console timestamps with the process-local UTC offset by @SAXEM1997 in #1171
摘要
本版本修复了一个严重的安全漏洞：禁用工具此前只会过滤 tools/list，攻击者仍可通过 tools/call 调用它们——针对 Gmail、Microsoft 365 或 Nextcloud 的「只读」连接因此可能被悄然绕过，包括通过提示注入的方式。现在禁用工具会在执行时真正生效。登录限流改为只统计失败的尝试且阈值可调整，API 调用方与服务账号在令牌续期时不再因成功登录而被误锁。新增分组可见性控制，支持 private、group、public 三种范围及按选定用户共享，并在分组 API、MCP/SSE 路由与嵌套服务器元数据中全面执行。可靠性与打磨：OAuth 客户端仅在凭据持久化成功后才进入缓存，Docker 快速上手流程得到简化且保留旧挂载，控制台日志按进程本地时区渲染时间戳。
功能
- 为分组添加可见性控制 by @samanhappy in #1175
修复
- 修复被禁用工具仍可通过 tools/call 执行的问题 [严重] by @sragot in #1178
- 只统计失败的认证尝试并允许调整限流阈值 by @11113127 in #1135
- 仅在凭据持久化成功后缓存 OAuth 客户端 by @samanhappy in #1169
- 简化 Docker 快速上手流程，同时保留旧挂载 by @samanhappy in #1173
- 使用进程本地时区渲染控制台时间戳 by @SAXEM1997 in #1171
New Contributors
- @sragot made their first contribution in #1178
- @SAXEM1997 made their first contribution in #1171
References
- fix(security): disabled tools remain executable via tools/call [CRITICAL] by @sragot in #1178
- feat: add visibility controls for groups by @samanhappy in #1175
- fix: simplify Docker quick start while preserving legacy mounts by @samanhappy in #1173
- docs: sync multilingual READMEs with badges, grouped features and 30s quickstart by @samanhappy in #1172
- fix(logging): render console timestamps with the process-local UTC offset by @SAXEM1997 in #1171
- fix: cache OAuth clients only after credential persistence by @samanhappy in #1169
- fix(security): count only failed auth attempts and allow rate limit tuning by @11113127 in #1135
- Full changelog: v1.0.36...v1.0.37