Added
- MCP endpoint now reaches the whole API — the built-in
/mcpModel Context Protocol endpoint gains a generic OpenAPI bridge:list_api_operationsandget_api_operationdiscover every documented REST operation, andcall_api_operationinvokes any of them. AI agents such as Claude Desktop can now drive the full planner (not just tasks, shopping, and calendar), while every call still runs with the API token's own permissions (admin-only routes require an admin token). The optionalMCP_INTERNAL_BASE_URLenv var overrides the internal loopback base URL for non-standard bind addresses. - Broader OpenAPI coverage — the OpenAPI spec (
/openapi.json,/docs) now documents previously-missing routes (Housekeeping, Modules, Budget loans & statistics, CalDAV, ICS export feed, OIDC login, document preview/folders, and the/mcpendpoint) and corrects several method/auth mismatches.
Changed
- Wider MCP token auth — the
/mcpendpoint now also accepts the plainAPI-Keyheader alongsideX-API-KeyandAuthorization: Bearerfor broader MCP-client compatibility. - Safe binary passthrough — the MCP bridge inlines binary responses (e.g. document or backup downloads) as base64 up to 5 MiB; larger downloads are rejected so they keep using the dedicated streaming route instead of buffering the whole file in memory.