sirkirby/unifi-mcp worker/v1.7.0 on GitHub

Upgrade notes

CORS allowlist: CORS_ALLOWED_ORIGINS is optional. Left unset, the Worker still allows any origin, exactly as before. Set it to a comma-separated list of origins to restrict which ones are allowed.
rotate-tokens no longer prints new tokens in full, in any mode including --non-interactive. It shows a masked value and saves the full token to ~/.unifi-mcp-worker/config.json (or $UNIFI_MCP_WORKER_CONFIG_DIR/config.json) under the key it names. Scripts that read the token from stdout must read that file instead.

Install or upgrade:

npm install -g unifi-mcp-worker@1.7.0

chore(worker): sync version to 1.6.1 [skip ci] by github-actions[bot] (c2c3ff8)
chore(deps): bump the worker-dependencies group across 1 directory with 2 updates (#854) by dependabot[bot] (15dab93)
chore(deps): bump the worker-dependencies group across 1 directory with 3 updates (#889) by dependabot[bot] (dc9f258)
chore(deps): bump the worker-dependencies group across 1 directory with 2 updates (#928) by dependabot[bot] (4a81042)
chore(worker): override vulnerable undici and fast-uri dev dependencies (#932) by @sirkirby (2c274be)
AC-527: feat(worker): scoped agent tokens and a CORS origin allowlist (#920) by claude-prodromou (3f52d11)

Omitted 60 unrelated monorepo commits from these notes.

Full Changelog: worker/v1.6.1...worker/v1.7.0