@mobilenext/mobile-mcp 0.0.49 → 0.0.50

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -7,24 +7,15 @@ This server allows Agents and LLMs to interact with native iOS/Android applicati
7
7
  <a href="https://github.com/mobile-next/mobile-mcp">
8
8
  <img src="https://img.shields.io/github/stars/mobile-next/mobile-mcp" alt="Mobile Next Stars" />
9
9
  </a>
10
- <a href="https://github.com/mobile-next/mobile-mcp">
11
- <img src="https://img.shields.io/github/contributors/mobile-next/mobile-mcp?color=green" alt="Mobile Next Downloads" />
12
- </a>
13
10
  <a href="https://www.npmjs.com/package/@mobilenext/mobile-mcp">
14
11
  <img src="https://img.shields.io/npm/dm/@mobilenext/mobile-mcp?logo=npm&style=flat&color=red" alt="npm" />
15
12
  </a>
16
13
  <a href="https://github.com/mobile-next/mobile-mcp/releases">
17
14
  <img src="https://img.shields.io/github/release/mobile-next/mobile-mcp" />
18
15
  </a>
19
- <a href="https://github.com/mobile-next/mobile-mcp/blob/main/LICENSE">
20
- <img src="https://img.shields.io/badge/license-Apache 2.0-blue.svg" alt="Mobile MCP is released under the Apache-2.0 License" />
21
- </a>
22
16
  <a href="https://insiders.vscode.dev/redirect?url=vscode%3Amcp%2Finstall%3F%7B%22name%22%3A%22mobile-mcp%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22%40mobilenext%2Fmobile-mcp%40latest%22%5D%7D">
23
17
  <img src="https://img.shields.io/badge/VS_Code-VS_Code?style=flat-square&label=Install%20Server&color=0098FF" alt="Install in VS Code" />
24
18
  </a>
25
- </h4>
26
-
27
- <h4 align="center">
28
19
  <a href="https://github.com/mobile-next/mobile-mcp/wiki">
29
20
  <img src="https://img.shields.io/badge/documentation-wiki-blue" alt="wiki" />
30
21
  </a>
package/lib/server.js CHANGED
@@ -351,6 +351,10 @@ const createMcpServer = () => {
351
351
  device: zod_1.z.string().describe("The device identifier to use. Use mobile_list_available_devices to find which devices are available to you."),
352
352
  url: zod_1.z.string().describe("The URL to open"),
353
353
  }, { destructiveHint: true }, async ({ device, url }) => {
354
+ const allowUnsafeUrls = process.env.MOBILEMCP_ALLOW_UNSAFE_URLS === "1";
355
+ if (!allowUnsafeUrls && !url.startsWith("http://") && !url.startsWith("https://")) {
356
+ throw new robot_1.ActionableError("Only http:// and https:// URLs are allowed. Set MOBILEMCP_ALLOW_UNSAFE_URLS=1 to allow other URL schemes.");
357
+ }
354
358
  const robot = getRobotFromDevice(device);
355
359
  await robot.openUrl(url);
356
360
  return `Opened URL: ${url}`;
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@mobilenext/mobile-mcp",
3
3
  "mcpName": "io.github.mobile-next/mobile-mcp",
4
- "version": "0.0.49",
4
+ "version": "0.0.50",
5
5
  "description": "Mobile MCP",
6
6
  "repository": {
7
7
  "type": "git",