@extension.dev/mcp 10.10.6 → 10.10.7

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "extension-mcp",
       "source": "./",
       "description": "MCP tools for browser extension development: scaffold from 50+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox.",
-      "version": "10.10.6",
+      "version": "10.10.7",
       "category": "development",
       "author": {
         "name": "Cezar Augusto"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "extension-mcp",
   "description": "MCP tools for browser extension development: scaffold from 50+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox. Ships /extension, /extension-add, /extension-debug, and /extension-publish commands.",
-  "version": "10.10.6",
+  "version": "10.10.7",
   "author": {
     "name": "Cezar Augusto",
     "email": "hello@extension.dev",

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 10.10.7
+
+- A share revoke now waits for a person by default, like a real store
+  submission and a promotion to stable: the first `extension_shares`
+  revoke answers `approval-required` with a link, and the same call with
+  the returned `approvalId` runs it once. A revoke cannot be undone, so
+  it is the one outward call that should never run on an agent's word
+  alone. `EXTENSION_DEV_APPROVAL_GATE=0` still turns the gate off.
+- New tool `extension_docs_search`: keyword search over the Extension.js
+  and extension.dev docs, returning up to 8 pages with a title, URL and
+  an excerpt of at most 400 characters. It calls
+  `/api/docs/search` on extension.dev, which ranks with no model call, so
+  it is free, needs no login and is in the `local` group. Its
+  description is kept short on purpose so it costs little context.
+
 ## 10.10.6
 
 - Tools that read a page or an extension (`extension_logs`,

package/README.md

@@ -7,7 +7,7 @@
 
 # @extension.dev/mcp [![Version][npm-version-image]][npm-version-url] [![Downloads][npm-downloads-image]][npm-downloads-url] [![Discord][discord-image]][discord-url]
 
-> Give your AI agent hands for browser extension development. 31 MCP tools that scaffold, run, inspect, debug, and publish cross-browser extensions.
+> Give your AI agent hands for browser extension development. 32 MCP tools that scaffold, run, inspect, debug, and publish cross-browser extensions.
 
 <img alt="Logo" align="right" src="https://media.extension.land/brand/extension-dev/logo-dock.png" width="20.7%" />
 
@@ -151,7 +151,7 @@ Two flags (or environment variables) narrow the server before an agent sees it:
 
 A refused call answers `E_TOOL_DISABLED` with the flag to change.
 
-A real store submission and a promotion to stable also wait for a person by default: the first call answers `approval-required` with a link on extension.dev, a workspace member approves exactly that action, and the same call with the returned `approvalId` runs it once. `EXTENSION_DEV_APPROVAL_GATE=1` extends this to every promotion and share revoke; `EXTENSION_DEV_APPROVAL_GATE=0` turns it off.
+A real store submission, a promotion to stable and a share revoke also wait for a person by default: the first call answers `approval-required` with a link on extension.dev, a workspace member approves exactly that action, and the same call with the returned `approvalId` runs it once. `EXTENSION_DEV_APPROVAL_GATE=1` extends this to every promotion; `EXTENSION_DEV_APPROVAL_GATE=0` turns it off.
 
 Every tool also carries MCP annotations (`readOnlyHint`, `destructiveHint`, `idempotentHint`, `openWorldHint`), so clients can auto-approve reads and ask before the rest.
 
@@ -196,6 +196,7 @@ cp node_modules/@extension.dev/mcp/claude/commands/*.md ~/my-extension/.claude/c
 | ---- | ---- | ----------- |
 | build | `extension_create` | Scaffold from a template |
 | build | `extension_templates` | Browse 50+ templates (`list`) and read one's source (`source`) |
+| build | `extension_docs_search` | Search the Extension.js and extension.dev docs by keyword |
 | build | `extension_add_feature` | Add sidebar/popup/content script |
 | build | `extension_build` | Build for production |
 | run | `extension_dev` | Dev server with HMR |

package/dist/module.js

@@ -75,6 +75,12 @@ __webpack_require__.d(dev_namespaceObject, {
     handler: ()=>dev_handler,
     schema: ()=>dev_schema
 });
+var docs_search_namespaceObject = {};
+__webpack_require__.r(docs_search_namespaceObject);
+__webpack_require__.d(docs_search_namespaceObject, {
+    handler: ()=>docs_search_handler,
+    schema: ()=>docs_search_schema
+});
 var doctor_namespaceObject = {};
 __webpack_require__.r(doctor_namespaceObject);
 __webpack_require__.d(doctor_namespaceObject, {
@@ -236,7 +242,7 @@ __webpack_require__.d(workspace_create_namespaceObject, {
     handler: ()=>workspace_create_handler,
     schema: ()=>workspace_create_schema
 });
-var package_namespaceObject = JSON.parse('{"rE":"10.10.6","El":{"OP":"4.1.31"}}');
+var package_namespaceObject = JSON.parse('{"rE":"10.10.7","El":{"OP":"4.1.31"}}');
 const ENVELOPE_SCHEMA = 1;
 const collectWarnings = (warnings)=>{
     if (!warnings) return [];
@@ -9930,7 +9936,10 @@ async function revokeShare(args) {
         api: args.api
     };
     if (token) {
-        const gate = await evaluateApproval(gateInput);
+        const gate = await evaluateApproval({
+            ...gateInput,
+            enabled: approvalGateEnabled(true)
+        });
         if (gate.blocked) return gate.envelope;
     }
     const result = await revokeArtifact({
@@ -17939,6 +17948,95 @@ async function browsers_handler(args) {
     });
     return detectBrowsers(args.browsers);
 }
+const docs_search_COMMAND = "extension_docs_search";
+const docs_search_schema = {
+    name: docs_search_COMMAND,
+    description: "Find pages in the Extension.js and extension.dev docs by keyword, each with a short excerpt. Use it before answering from memory on anything version-specific: a CLI flag, a manifest field across browsers, a store submission rule. Free and needs no login.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            query: {
+                type: "string",
+                description: "What to look up, in a few words."
+            },
+            limit: {
+                type: "number",
+                minimum: 1,
+                maximum: 8,
+                default: 5,
+                description: "How many pages to return, 1 to 8."
+            },
+            api: API_BASE
+        },
+        required: [
+            "query"
+        ]
+    }
+};
+async function docs_search_handler(args) {
+    const query = String(args.query || "").trim();
+    if (!query) return envelope_envelope({
+        ok: false,
+        command: docs_search_COMMAND,
+        status: "bad-request",
+        error: {
+            code: "E_BAD_REQUEST",
+            message: "query is required."
+        }
+    });
+    const base = mcpOrigins(args.api).www.replace(/\/+$/, "");
+    const limit = Math.min(8, Math.max(1, Math.floor(Number(args.limit) || 5)));
+    const url = `${base}/api/docs/search?q=${encodeURIComponent(query)}&limit=${limit}`;
+    let res;
+    try {
+        res = await fetch(url, {
+            headers: {
+                accept: "application/json"
+            }
+        });
+    } catch (err) {
+        return envelope_envelope({
+            ok: false,
+            command: docs_search_COMMAND,
+            status: "network-failed",
+            error: {
+                code: "E_NETWORK",
+                message: `Could not reach ${base}: ${err instanceof Error ? err.message : String(err)}`
+            }
+        });
+    }
+    let body = {};
+    try {
+        body = await res.json();
+    } catch  {
+        body = {};
+    }
+    if (!res.ok) return envelope_envelope({
+        ok: false,
+        command: docs_search_COMMAND,
+        status: 429 === res.status ? "rate-limited" : "search-failed",
+        error: {
+            code: "E_PLATFORM",
+            message: body.message || `Docs search answered ${res.status}.`
+        },
+        ...429 === res.status ? {
+            hint: `Wait ${body.retryAfterSeconds ?? 60} seconds, or read the docs at https://extension.js.org/docs.`
+        } : {}
+    });
+    const results = Array.isArray(body.results) ? body.results : [];
+    return envelope_envelope({
+        ok: true,
+        command: docs_search_COMMAND,
+        status: results.length ? "found" : "no-match",
+        value: {
+            query,
+            results
+        },
+        ...results.length ? {} : {
+            hint: "No page matched. Try fewer or different words, or browse https://extension.js.org/docs."
+        }
+    });
+}
 function typeOf(value) {
     if (Array.isArray(value)) return "array";
     if (null === value) return "null";
@@ -18195,6 +18293,10 @@ const TOOL_POLICY = {
         group: "local",
         annotations: reads(true)
     },
+    extension_docs_search: {
+        group: "local",
+        annotations: reads(true)
+    },
     extension_add_feature: {
         group: "local",
         annotations: reads()
@@ -18535,7 +18637,8 @@ const tools = [
     project_create_namespaceObject,
     workspace_create_namespaceObject,
     browsers_namespaceObject,
-    doctor_namespaceObject
+    doctor_namespaceObject,
+    docs_search_namespaceObject
 ];
 function toolResultFrame(result, untrusted = false) {
     let refused;

package/dist/src/tools/docs-search.d.ts

@@ -0,0 +1,30 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            query: {
+                type: string;
+                description: string;
+            };
+            limit: {
+                type: string;
+                minimum: number;
+                maximum: number;
+                default: number;
+                description: string;
+            };
+            api: {
+                readonly type: "string";
+                readonly description: "Platform base URL (default EXTENSION_DEV_API_URL, else https://www.extension.dev)";
+            };
+        };
+        required: string[];
+    };
+};
+export declare function handler(args: {
+    query: string;
+    limit?: number;
+    api?: string;
+}): Promise<string>;

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@extension.dev/mcp",
   "type": "module",
-  "version": "10.10.6",
-  "description": "MCP server that lets AI agents (Claude Code, Claude Desktop, Cursor, Copilot, Codex) build, run, inspect, and publish browser extensions. 31 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, Firefox, Safari, and every Chromium- or Gecko-based browser (Brave, Opera, Vivaldi, Yandex, Waterfox, LibreWolf). Powered by extension.dev and Extension.js.",
+  "version": "10.10.7",
+  "description": "MCP server that lets AI agents (Claude Code, Claude Desktop, Cursor, Copilot, Codex) build, run, inspect, and publish browser extensions. 32 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, Firefox, Safari, and every Chromium- or Gecko-based browser (Brave, Opera, Vivaldi, Yandex, Waterfox, LibreWolf). Powered by extension.dev and Extension.js.",
   "mcpName": "io.github.extensiondev/mcp",
   "license": "Apache-2.0",
   "author": {

package/server.json

@@ -1,19 +1,19 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
   "name": "io.github.extensiondev/mcp",
-  "description": "Build, run, inspect, and publish browser extensions from any MCP client. 31 tools, 11 browsers.",
+  "description": "Build, run, inspect, and publish browser extensions from any MCP client. 32 tools, 11 browsers.",
   "repository": {
     "url": "https://github.com/extensiondev/mcp",
     "source": "github"
   },
   "websiteUrl": "https://extension.dev",
-  "version": "10.10.6",
+  "version": "10.10.7",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@extension.dev/mcp",
-      "version": "10.10.6",
+      "version": "10.10.7",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"