@mastra/mcp-docs-server 1.2.25-alpha.3 → 1.2.25-alpha.6

package/.docs/docs/mastra-platform/studio.md

@@ -56,6 +56,38 @@ A deploy transitions through **queued → uploading → starting → running** o
 
 See the [`mastra deploy` CLI reference](https://mastra.ai/reference/cli/mastra) for the full list of flags and CI/CD usage.
 
+## Authentication
+
+By default, every Studio deploy on Mastra platform is protected by platform auth. Members of your platform organization sign in with their platform account, and no one else can access the deployed Studio. You don't need to configure anything to get this behavior.
+
+Platform auth applies to the Studio UI only. Your server's API routes are governed by your own [`server.auth`](https://mastra.ai/docs/studio/auth) configuration, or remain open if you haven't set one.
+
+### Roles and permissions
+
+Platform auth maps your organization roles to Studio permissions:
+
+| Platform role | Studio permissions |
+| ------------- | ------------------ |
+| `admin`       | Full access (`*`)  |
+| `member`      | Read and execute   |
+| `viewer`      | Read-only          |
+
+To customize this mapping, set `roleMapping` on `studio.rbac` in your Mastra configuration. When present, your mapping replaces the platform defaults. See [Role-based access control](https://mastra.ai/docs/studio/auth) for the permission format.
+
+### Bring your own auth
+
+To use your own auth provider for the deployed Studio instead of platform auth, set an environment variable on the project:
+
+```bash
+MASTRA_PLATFORM_STUDIO_AUTH=disabled
+```
+
+Add it to the env file you deploy with, or store it on the project through the dashboard, then redeploy. With platform auth disabled, the deploy leaves your auth and RBAC configuration untouched. Your own provider drives the Studio login flow, exactly like a self-hosted deploy. `studio.auth` protects the Studio UI, while `server.auth` protects your API routes. Studio requests fall back to `server.auth` when `studio.auth` isn't set.
+
+> **Warning:** Disabling platform auth turns off platform account logins. If you disable it without configuring your own auth provider, the deployed Studio and all API routes are publicly accessible.
+
+If you keep platform auth enabled and also configure your own `studio.auth`, both providers validate tokens, but the login screen only offers the platform sign-in flow. To sign in through your own provider, disable platform auth.
+
 ## Environment files
 
 A local env file is optional. When a `.env` or `.env.*` file is present in the project directory, the deploy bundles its environment variables.

package/.docs/docs/observability/feedback.md

@@ -120,6 +120,18 @@ await observability!.listFeedback({
 })
 ```
 
+## Delete feedback
+
+Use `deleteFeedback()` to hide feedback records from reads by id. This is useful when a comment contains sensitive data. Each request accepts at most 1,000 `feedbackIds`, and deletion is idempotent. The optional `organizationId` field filters by organization, and the optional `resourceId` field filters by resource. You can supply either filter independently or use both together. In Studio, each comment on a trace or span Feedback tab has a delete action.
+
+```typescript
+await observability!.deleteFeedback({
+  feedbackIds: ['feedback-1', 'feedback-2'],
+})
+```
+
+Deleted records also disappear from feedback analytics. ClickHouse uses a lightweight delete to hide rows without guaranteeing immediate physical removal, so open-source deployments must configure an [observability retention period](https://mastra.ai/reference/storage/retention) to physically purge them. ClickHouse doesn't configure a retention TTL for deletion requests in open-source deployments. Delete APIs intentionally leave cursor-only delta rows untouched. These rows contain identifiers rather than feedback payloads and expire within two days.
+
 ## Query feedback analytics
 
 OLAP feedback queries operate on numeric `value` fields. Use them for ratings, thumbs encoded as `1` and `-1`, numeric QA scores, or other numeric feedback types.

package/.docs/docs/studio/auth.md

@@ -8,6 +8,8 @@ When you configure [authentication](https://mastra.ai/docs/auth/overview) on you
 
 Without authentication, Studio and all API routes are publicly accessible.
 
+> **Note:** Studio deployed on Mastra platform works differently. By default, the platform injects its own auth so only your organization members can sign in, and your `server.auth` applies to API routes only. Set `MASTRA_PLATFORM_STUDIO_AUTH=disabled` to opt out. See [Authentication on Mastra platform](https://mastra.ai/docs/mastra-platform/studio).
+
 ## When to use Studio Auth
 
 - Multiple team members need to interact with agents, workflows, and tools through a shared Studio deployment.

package/.docs/models/gateways/netlify.md

@@ -4,7 +4,7 @@
 
 # Netlify
 
-Netlify AI Gateway provides unified access to multiple providers with built-in caching and observability. Access 242 models through Mastra's model router.
+Netlify AI Gateway provides unified access to multiple providers with built-in caching and observability. Access 251 models through Mastra's model router.
 
 Learn more in the [Netlify documentation](https://docs.netlify.com/build/ai-gateway/overview/).
 
@@ -106,6 +106,14 @@ ANTHROPIC_API_KEY=ant-...
 | `openai/gpt-5.6-sol`                                                  |
 | `openai/gpt-5.6-terra`                                                |
 | `openai/gpt-6-astra`                                                  |
+| `openai/gpt-image-1`                                                  |
+| `openai/gpt-image-1.5`                                                |
+| `openai/gpt-image-2`                                                  |
+| `openai/gpt-image-2-2026-04-21`                                       |
+| `openai/gpt-image-2.5-flare`                                          |
+| `openai/gpt-image-2.5-flare-2026-09-08`                               |
+| `openai/gpt-image-2.5-sunburst`                                       |
+| `openai/gpt-image-2.5-sunburst-2026-09-08`                            |
 | `openai/o3`                                                           |
 | `openai/o3-mini`                                                      |
 | `openai/o4-mini`                                                      |
@@ -138,6 +146,7 @@ ANTHROPIC_API_KEY=ant-...
 | `openrouter/deepseek/deepseek-v4-flash-vision-exp`                    |
 | `openrouter/deepseek/deepseek-v4-pro`                                 |
 | `openrouter/deepseek/deepseek-v4-pro-0813`                            |
+| `openrouter/deepseek/deepseek-v4.1-flash`                             |
 | `openrouter/google/gemma-2-27b-it`                                    |
 | `openrouter/google/gemma-3-12b-it`                                    |
 | `openrouter/google/gemma-3-27b-it`                                    |

package/.docs/models/gateways/openrouter.md

@@ -4,7 +4,7 @@
 
 # ![OpenRouter logo](https://models.dev/logos/openrouter.svg)OpenRouter
 
-OpenRouter aggregates models from multiple providers with enhanced features like rate limiting and failover. Access 357 models through Mastra's model router.
+OpenRouter aggregates models from multiple providers with enhanced features like rate limiting and failover. Access 358 models through Mastra's model router.
 
 Learn more in the [OpenRouter documentation](https://openrouter.ai/models).
 
@@ -105,6 +105,7 @@ ANTHROPIC_API_KEY=ant-...
 | `deepseek/deepseek-v4-flash-vision-exp`                    |
 | `deepseek/deepseek-v4-pro`                                 |
 | `deepseek/deepseek-v4-pro-0813`                            |
+| `deepseek/deepseek-v4.1-flash`                             |
 | `dots-studio/dots-3-note-preview:free`                     |
 | `google/gemini-2.5-flash`                                  |
 | `google/gemini-2.5-flash-image`                            |