-
SummerCMS v0.6.3: MCP clients ask for every advertised scope, scheduled purge runs in the server
jakub released this
2026-11-06 14:42:23 +00:00 | 5 commits to master since this releaseMCP clients that take their scopes from the 401 challenge now request
the full advertised set instead of read only, and the nightly deferred
purge works when the server's scheduler runs it.Changed
- The MCP endpoint's 401 challenge carries only resource_metadata, no
scope parameter. Spec-following clients then request the
scopes_supported list of the protected resource metadata, so they can
be granted write. Granted scopes and the per-request tool filter are
unchanged.
Fixed
- deferred:purge, migrate, migrate:rollback, migrate:status and
queue:clear use the application's database pool when one is already
open. Run by the in-server scheduler or schedule:run they failed with
"backpack: duplicate provider for *sql.DB"; from the command line they
behave as before.
Downloads
- The MCP endpoint's 401 challenge carries only resource_metadata, no