laoc
released this
2026-10-03 05:59:26 +00:00
| 0 commits to main since this release
Added
- MCP Registry manifest (
server.json): publishes nope-mcp to the
official MCP Registry as
org.edufeed/nope-mcp, pointing at the https://mcp.edufeed.org/mcp
remote. Its version always matches package.json.
- Per-connection default relays via the connector URL: the HTTP transport
reads a ?relays= parameter off the initialize request, e.g.
https://mcp.amb.edufeed.org/mcp?relays=sodix. The named relays become that
session's default set; the rest of the deployment's relays stay selectable
per call. Connector UIs typically offer only a name and a URL field, so the
URL is the only place a connection can express which corpus it wants.
Relays answer to their full URL, their hostname, or the first label of their
hostname; a name the deployment does not serve fails initialize with HTTP
400 rather than silently falling back to the server default. Arbitrary URLs
are refused — the endpoint never opens sockets to caller-chosen hosts.
- SODIX relay (
wss://sodix.edufeed.org) documented as an
AMB_EXTRA_RELAYS member alongside the OERSI aggregation relay.
list_relays reports defaultRelaysSource (server-config or
connector-url), so a model can tell a deliberately narrowed session from
the deployment's standard corpus.- Per-tool-call logging: every tool call emits one JSON line on stderr
(ts, tool, ms, ok, session, summarized args, error on
failure). LOG_LEVEL controls it: info (default) logs every call,
warn/error only failures, silent nothing. stdout stays reserved for
the stdio transport.
Typed error payloads ({"error":"relay_unreachable",…} returned as text) are logged as ok:false with the code.
- MCP served at
/ as well as /mcp (same session map, both paths accept
POST/GET/DELETE): a plain browser GET / — no Mcp-Session-Id header, no
Accept: text/event-stream — returns a small JSON info document (name,
version, mcp, docs, transport) instead of the usual "unknown
session" 404; GET /mcp is unchanged and always behaves as an MCP session
request.
- Host- and path-aware OAuth protected-resource metadata (RFC 9728): the
PRM is built per request from the forwarded scheme + host (trust proxy
is now on, since Traefik terminates TLS) and served at both
/.well-known/oauth-protected-resource (resource: https://<host>/)
and the new /.well-known/oauth-protected-resource/mcp (resource: https://<host>/mcp); a 401's WWW-Authenticate points at whichever PRM
matches the request path (/mcp and /mcp/ alike). A host outside
HTTP_ALLOWED_HOSTS (when configured) falls back to OAUTH_RESOURCE_URL.
Behaviour change for existing connector owners: the root PRM's
resource value changed from https://<host>/mcp to https://<host>/;
a connector that cached the old root PRM document needs to re-fetch it.
Connectors addressing /mcp directly are unaffected — that path now has
its own PRM at /.well-known/oauth-protected-resource/mcp.
OAUTH_AUDIENCE is now a comma-separated list (default
nope-mcp,amb-mcp); a token whose aud contains any of them validates,
so tokens Keycloak still issues with aud: amb-mcp keep working under the
new name.- MCP tool annotations (
readOnlyHint, destructiveHint, etc.) on every
registered tool, so clients that surface them (e.g. consent prompts)
classify each call correctly; signer_status is annotated as the pure
read it is, not as a mutator.
- English opening paragraph in the server
instructions:
buildServerInstructions({ openLicensesOnly }) now leads with a
config-aware paragraph describing nope-mcp for any MCP client — not only
edufeed's German teacher base, since this server is listed in public MCP
directories — before the existing German routing guidance; it never claims
the open-license policy is active when OPEN_LICENSES_ONLY=false.
Deploy notes
- Production's
HTTP_ALLOWED_HOSTS must include mcp.edufeed.org — the
SDK's DNS-rebinding protection rejects any request whose Host is outside
this list once the list is set.
Changed
- Open-licensed results only:
search_resources, search_content and
search_passages return learning resources (kind 30142) only under CC0,
the Public Domain Mark, CC BY or CC BY-SA — the allowlist amb-indexer uses
for fulltext. NC/ND, all-rights-reserved and unlicensed resources are left
out; articles, wikis, publications, projects, measures and calendar events
carry no license and stay unfiltered. Searches with free text over-fetch and filter
client-side, because any relay field filter would disable amb-relay's
passage rerank; only a search_resources call without free text (pure
metadata filters or a browse) adds license.id filters for every stored
open spelling to the relay query. get_resource still resolves any resource
and reports openLicense. OPEN_LICENSES_ONLY=false restores unfiltered
results.
- Renamed to
nope-mcp (formerly amb-mcp). The package name, MCP
server name, HTTP WWW-Authenticate realm, and docs now say nope-mcp.
amb-mcp remains a documented alias and a valid OAuth audience; existing
deployments and URLs (https://mcp.amb.edufeed.org/mcp) keep working
unchanged.
search_passages ranking: requests vector weight alpha: 0.7 from the
indexer instead of its keyword-leaning default 0.3, over-fetches
min(limit × 3, 100) chunks, keeps at most two passages per document and
drops hits below 10 % of the top score before truncating to limit. A
Christmas escape game no longer tops a peace-education question on the
strength of the words "GRUNDSCHULE" and "Kinder", and one document no
longer fills three of ten slots.search_passages guidance: the tool description and the server
instructions now tell the model to phrase question as a topical statement
naming subject and target group rather than the user's literal sentence,
and to say so instead of guessing when a passage carries only a snippet.
The reason given is flag-aware: with OPEN_LICENSES_ONLY on, a text-less
learning-resource passage simply has no fulltext yet, since license-gated
hits are already dropped before the model sees them; with it off, the
license-gated possibility is still named.
Downloads