@parall/daemon 1.53.0 → 1.54.0

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.53.0",
-  "built_at": "2026-08-05T09:24:55.164Z",
+  "version": "1.54.0",
+  "built_at": "2026-08-06T10:25:37.612Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,29 +16,29 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "4d5b8c1f431963dac5ab39cbca769e63db91d0e0c15a118b9c8aa9fba0a19ecf",
-      "size": 2916134
+      "sha256": "1fdbc5185fc1237a1037d9a1e95134a29313cdadc5b8fd2b52045a93caebe265",
+      "size": 2917480
     },
     "parall-channel-exec.js": {
       "sha256": "7c2a6e12483a45e9eb4a42cd7d4cdd3c4fa21dd09ac1347d9a3e177b4ddee930",
       "size": 7220
     },
     "parall-claude-agent.js": {
-      "sha256": "03212787f04c48979089dcc72db0f34bcfe517e36a0d0702fe17e216cf46f69b",
-      "size": 2791626
+      "sha256": "3872308f00bc9e0e57f00f65b528d5259736aa84af3ee1281c60be413b65d6f8",
+      "size": 2795199
     },
     "parall-codex-agent.js": {
-      "sha256": "d76c1a2329560bb3c7b8badfe20fff84464e844469b2514dcaee1b0595968ba7",
-      "size": 2822330
+      "sha256": "0c8d5d7d02a67183f9ec63ddb7b68ea77c807411e0b421394f71ee02cf90d218",
+      "size": 2825903
     },
     "parall-daemon.js": {
-      "sha256": "a30282759eea26d092cbfd62f47bc6a8096db5ec054872dfe444c1bac56b49e0",
-      "size": 2978202
+      "sha256": "e160bf95877db7628e7fc78d2c0e263f3221a7d7f51a53f1c5dd008e4920b382",
+      "size": 2979620
     },
     "parall-openclaw-agent.js": {
       "sha256": "856a1c3a9ae0ffef8efe2481fa1171dbeb1d67cccb88616aa9bf16da96a69355",
       "size": 9923
     }
   },
-  "signature": "w30RAe4Nw8xT06MeL6hZBorrsxsoaZt0snApyNs8ICBk2XB/7cWyZKUZ+G1XC81r3fHkztJNIC4Qc0wBFJeMBQ=="
+  "signature": "HsmD3HAuYZGhuFBt8M3hzMsL62hbiAN8oJ4+JX7uUm+/H4IbQJwF20/56hjuC5LIHlD8jVF80c+5fYqhjWm/Dg=="
 }

package/bundle/parall-browser-pod.js

@@ -63904,10 +63904,17 @@ var ENDPOINTS = {
   // Per-org agent exec access for one clip (default all agents; PUT human-only)
   ORG_CLIP_EXEC_ACCESS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clips/${clipId}/exec-access`,
   // MCP clip server config (cap:clip-mcp; publisher-org only — cross-org gets
-  // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included)
+  // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included). The
+  // singular family addresses the org's DEFAULT connection (pre-165
+  // back-compat shim); the plural family is the multi-connection surface —
+  // one config row (credential slot) per connection, addressed by config id.
   ORG_CLIP_MCP_CONFIG: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config`,
   ORG_CLIP_MCP_TOOLS_REFRESH: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/tools/refresh`,
-  ORG_CLIP_MCP_OAUTH_DISCONNECT: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/oauth/disconnect`
+  ORG_CLIP_MCP_OAUTH_DISCONNECT: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/oauth/disconnect`,
+  ORG_CLIP_MCP_CONFIGS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs`,
+  ORG_CLIP_MCP_CONFIG_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}`,
+  ORG_CLIP_MCP_TOOLS_REFRESH_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/tools/refresh`,
+  ORG_CLIP_MCP_OAUTH_DISCONNECT_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/oauth/disconnect`
 };
 
 // ts/sdk/dist/client.js
@@ -66114,6 +66121,17 @@ var ParallClient = class _ParallClient {
   async deleteClipMCPConfig(orgId, clipId, expectedVersion) {
     return this.request("DELETE", ENDPOINTS.ORG_CLIP_MCP_CONFIG(orgId, clipId), void 0, void 0, false, { headers: { "If-Match": `"${expectedVersion}"` } });
   }
+  /**
+   * List the org's MCP connections for a clip, default first — one row per
+   * connection (credential slot), WITHOUT the tools snapshot (`tool_count`
+   * summarizes it; the per-config GET carries the full snapshot). Same
+   * family-wide fence as the singular GET: publisher-org members only —
+   * cross-org installs get `403 MCP_CROSS_ORG_DISABLED`, and with
+   * `cap:clip-mcp` off the route is not registered at all.
+   */
+  async listClipMCPConnections(orgId, clipId) {
+    return this.request("GET", ENDPOINTS.ORG_CLIP_MCP_CONFIGS(orgId, clipId));
+  }
   /**
    * Re-run tools/list and replace the cached snapshot (org-admin only).
    * Deliberately does NOT advance the CAS version, so an in-flight edit in

package/bundle/parall-claude-agent.js

@@ -51700,10 +51700,17 @@ var ENDPOINTS = {
   // Per-org agent exec access for one clip (default all agents; PUT human-only)
   ORG_CLIP_EXEC_ACCESS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clips/${clipId}/exec-access`,
   // MCP clip server config (cap:clip-mcp; publisher-org only — cross-org gets
-  // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included)
+  // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included). The
+  // singular family addresses the org's DEFAULT connection (pre-165
+  // back-compat shim); the plural family is the multi-connection surface —
+  // one config row (credential slot) per connection, addressed by config id.
   ORG_CLIP_MCP_CONFIG: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config`,
   ORG_CLIP_MCP_TOOLS_REFRESH: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/tools/refresh`,
-  ORG_CLIP_MCP_OAUTH_DISCONNECT: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/oauth/disconnect`
+  ORG_CLIP_MCP_OAUTH_DISCONNECT: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/oauth/disconnect`,
+  ORG_CLIP_MCP_CONFIGS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs`,
+  ORG_CLIP_MCP_CONFIG_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}`,
+  ORG_CLIP_MCP_TOOLS_REFRESH_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/tools/refresh`,
+  ORG_CLIP_MCP_OAUTH_DISCONNECT_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/oauth/disconnect`
 };
 var WS_EVENTS = {
   // Client -> Server
@@ -53996,6 +54003,17 @@ var ParallClient = class _ParallClient {
   async deleteClipMCPConfig(orgId, clipId, expectedVersion) {
     return this.request("DELETE", ENDPOINTS.ORG_CLIP_MCP_CONFIG(orgId, clipId), void 0, void 0, false, { headers: { "If-Match": `"${expectedVersion}"` } });
   }
+  /**
+   * List the org's MCP connections for a clip, default first — one row per
+   * connection (credential slot), WITHOUT the tools snapshot (`tool_count`
+   * summarizes it; the per-config GET carries the full snapshot). Same
+   * family-wide fence as the singular GET: publisher-org members only —
+   * cross-org installs get `403 MCP_CROSS_ORG_DISABLED`, and with
+   * `cap:clip-mcp` off the route is not registered at all.
+   */
+  async listClipMCPConnections(orgId, clipId) {
+    return this.request("GET", ENDPOINTS.ORG_CLIP_MCP_CONFIGS(orgId, clipId));
+  }
   /**
    * Re-run tools/list and replace the cached snapshot (org-admin only).
    * Deliberately does NOT advance the CAS version, so an in-flight edit in
@@ -60492,16 +60510,23 @@ guessing which signed-in account you are about to act through.
 \`\`\`bash
 parall clip exec <clip> <command> [args] --connection <ccn_|alias>  # the normal form
 parall clip exec browser-tools screenshot '{"url":"\u2026"}' --connection cloud-main
+parall clip exec browser-tools scrape --args-file - --connection cloud-main <<'EOF'
+{"url":"https://example.com","fields":["title","price"]}
+EOF
 \`\`\`
 
 Build \`args\` as JSON per the command's params from \`clip info\` (or the
 tool's \`inputSchema\` from \`clip tools\` for MCP clips \u2014 tool names are NOT
 frozen in the manifest, so never guess a tool name or its argument shape).
+Quote-heavy or large JSON goes through \`--args-file <path>\` (\`-\` = stdin
+via a quoted heredoc, as above; strict JSON, mutually exclusive with the
+\`[args]\` positional) \u2014 the shell mangles inline quotes long before the CLI
+sees them, exactly the trap \`messages send --text-file\` exists for.
 Results are JSON on stdout; failures print a typed error.
 
-**Name the target explicitly.** A cloud profile has NO implicit route;
-omitting the target entirely is a desktop-only legacy form that reaches just
-YOUR OWN online desktop device \u2014 never a shared cloud profile.
+**Name the target explicitly \u2014 every exec.** \`clip exec\` refuses to run
+without \`--connection\` or \`--edge\`; there is no implicit route to any
+profile, and the legacy no-flag desktop fallback is gone from the CLI.
 
 - A cloud (hosted) profile is reachable ONLY via \`--connection\` \u2014 the clip
   connection its maintainer bound. That binding IS your authorization;
@@ -60519,21 +60544,39 @@ YOUR OWN online desktop device \u2014 never a shared cloud profile.
 ## MCP clips (remote tool servers)
 
 A connection with target \`mcp\` routes to a remote MCP server; the command
-is an MCP tool name and the args are that tool's JSON arguments. Read each
-tool's \`inputSchema\` from \`clip tools\` first, then exec against the
-explicit target \u2014 the same form as any other clip:
+is an MCP tool name and the args are that tool's JSON arguments. **An MCP
+clip can hold SEVERAL connections \u2014 one per account of the same service**
+(e.g. two Google Drive accounts), exactly like the browser arm's multiple
+profiles. The flow is: discover the connections, pick by alias, exec with the
+explicit target:
 
 \`\`\`bash
+parall clip connections <clip>            # per-connection auth status, alias, is_default
+parall clip tools <clip> --connection <ccn_|alias>   # tools are PER CONNECTION
 parall clip exec <clip> <tool> [json-args] --connection <ccn_|alias>
 \`\`\`
 
+- \`clip connections\` marks MCP rows with their auth mode, \`credential_set\`
+  / \`oauth_status\` and \`tool_count\` \u2014 a \`needs_reauth\` or credential-less
+  row will refuse exec until an org admin fixes it in the Clip Console.
+- \`--connection\` is REQUIRED to exec an MCP connection, exactly like a cloud
+  profile \u2014 the only other target form, \`--edge\`, is a desktop device and
+  never routes to MCP. The alias tells you WHICH account you act as \u2014
+  always name it.
+  (\`is_default\` marks the org's primary connection in listings and the
+  Console, not an implicit exec route.)
+- \`clip tools\` without \`--connection\` reads the default connection's
+  snapshot; with several connections and no default it asks you to name one.
 - No cold start: MCP clips never return \`EDGE_ACTIVATING\`.
 - \`MCP_TOOL_FAILED\` = the tool RAN and reported failure; a sanitized summary
   of its output rides in the error details. Read it and decide \u2014 do not
   blind-retry.
 - \`MCP_CONCURRENCY_LIMIT\` = not started; back off briefly, then retry.
-- \`MCP_CONFIG_MISSING\` / \`MCP_DISABLED\` = the clip isn't configured, or MCP
-  is off for this deployment \u2014 ask an org admin; retrying won't help.
+- \`MCP_CONFIG_MISSING\` / \`MCP_DISABLED\` = that connection isn't configured,
+  or MCP is off for this deployment \u2014 ask an org admin; retrying won't help.
+- \`MCP_OAUTH_REAUTH_REQUIRED\` = that connection's authorization expired or
+  was disconnected \u2014 ask an org admin to re-authorize it in the Clip Console
+  (name the connection's alias); retrying won't help.
 - \`OUTCOME_UNKNOWN\` follows the rule below: dispatched and MAY HAVE
   EXECUTED \u2014 never auto-retry.
 
@@ -60805,8 +60848,15 @@ and the folder is just a manifest:
   republishing.
 - Entering the credential / completing OAuth is a HUMAN step in the Clip
   Console (the config-write endpoints are session-only \u2014 an API key cannot
-  call them). Once configured, discover the live tool schemas with
-  \`parall clip tools <clip>\` and exec like any other clip.
+  call them). An org can add SEVERAL connections to one MCP clip \u2014 one
+  credential slot per account of the same service \u2014 all sharing the declared
+  \`server_url\`/\`auth\`. Once configured, discover the live tool schemas with
+  \`parall clip tools <clip> [--connection <ref>]\` and exec like any other
+  clip (\`--connection\` picks the account).
+- Do NOT declare anything about OAuth client registration in the manifest \u2014
+  there is no such field. Whether the provider needs a manually registered
+  OAuth app (Google-style) is probed by the server at connect time; the
+  Console walks the admin through it when required.
 - Publish is the same command: \`parall clip publish ./my-clip/\`.
 
 ## Cloud (hosted) vs desktop (BYOC) Edge

package/bundle/parall-codex-agent.js

@@ -51700,10 +51700,17 @@ var ENDPOINTS = {
   // Per-org agent exec access for one clip (default all agents; PUT human-only)
   ORG_CLIP_EXEC_ACCESS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clips/${clipId}/exec-access`,
   // MCP clip server config (cap:clip-mcp; publisher-org only — cross-org gets
-  // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included)
+  // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included). The
+  // singular family addresses the org's DEFAULT connection (pre-165
+  // back-compat shim); the plural family is the multi-connection surface —
+  // one config row (credential slot) per connection, addressed by config id.
   ORG_CLIP_MCP_CONFIG: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config`,
   ORG_CLIP_MCP_TOOLS_REFRESH: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/tools/refresh`,
-  ORG_CLIP_MCP_OAUTH_DISCONNECT: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/oauth/disconnect`
+  ORG_CLIP_MCP_OAUTH_DISCONNECT: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/oauth/disconnect`,
+  ORG_CLIP_MCP_CONFIGS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs`,
+  ORG_CLIP_MCP_CONFIG_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}`,
+  ORG_CLIP_MCP_TOOLS_REFRESH_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/tools/refresh`,
+  ORG_CLIP_MCP_OAUTH_DISCONNECT_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/oauth/disconnect`
 };
 var WS_EVENTS = {
   // Client -> Server
@@ -53996,6 +54003,17 @@ var ParallClient = class _ParallClient {
   async deleteClipMCPConfig(orgId, clipId, expectedVersion) {
     return this.request("DELETE", ENDPOINTS.ORG_CLIP_MCP_CONFIG(orgId, clipId), void 0, void 0, false, { headers: { "If-Match": `"${expectedVersion}"` } });
   }
+  /**
+   * List the org's MCP connections for a clip, default first — one row per
+   * connection (credential slot), WITHOUT the tools snapshot (`tool_count`
+   * summarizes it; the per-config GET carries the full snapshot). Same
+   * family-wide fence as the singular GET: publisher-org members only —
+   * cross-org installs get `403 MCP_CROSS_ORG_DISABLED`, and with
+   * `cap:clip-mcp` off the route is not registered at all.
+   */
+  async listClipMCPConnections(orgId, clipId) {
+    return this.request("GET", ENDPOINTS.ORG_CLIP_MCP_CONFIGS(orgId, clipId));
+  }
   /**
    * Re-run tools/list and replace the cached snapshot (org-admin only).
    * Deliberately does NOT advance the CAS version, so an in-flight edit in
@@ -60492,16 +60510,23 @@ guessing which signed-in account you are about to act through.
 \`\`\`bash
 parall clip exec <clip> <command> [args] --connection <ccn_|alias>  # the normal form
 parall clip exec browser-tools screenshot '{"url":"\u2026"}' --connection cloud-main
+parall clip exec browser-tools scrape --args-file - --connection cloud-main <<'EOF'
+{"url":"https://example.com","fields":["title","price"]}
+EOF
 \`\`\`
 
 Build \`args\` as JSON per the command's params from \`clip info\` (or the
 tool's \`inputSchema\` from \`clip tools\` for MCP clips \u2014 tool names are NOT
 frozen in the manifest, so never guess a tool name or its argument shape).
+Quote-heavy or large JSON goes through \`--args-file <path>\` (\`-\` = stdin
+via a quoted heredoc, as above; strict JSON, mutually exclusive with the
+\`[args]\` positional) \u2014 the shell mangles inline quotes long before the CLI
+sees them, exactly the trap \`messages send --text-file\` exists for.
 Results are JSON on stdout; failures print a typed error.
 
-**Name the target explicitly.** A cloud profile has NO implicit route;
-omitting the target entirely is a desktop-only legacy form that reaches just
-YOUR OWN online desktop device \u2014 never a shared cloud profile.
+**Name the target explicitly \u2014 every exec.** \`clip exec\` refuses to run
+without \`--connection\` or \`--edge\`; there is no implicit route to any
+profile, and the legacy no-flag desktop fallback is gone from the CLI.
 
 - A cloud (hosted) profile is reachable ONLY via \`--connection\` \u2014 the clip
   connection its maintainer bound. That binding IS your authorization;
@@ -60519,21 +60544,39 @@ YOUR OWN online desktop device \u2014 never a shared cloud profile.
 ## MCP clips (remote tool servers)
 
 A connection with target \`mcp\` routes to a remote MCP server; the command
-is an MCP tool name and the args are that tool's JSON arguments. Read each
-tool's \`inputSchema\` from \`clip tools\` first, then exec against the
-explicit target \u2014 the same form as any other clip:
+is an MCP tool name and the args are that tool's JSON arguments. **An MCP
+clip can hold SEVERAL connections \u2014 one per account of the same service**
+(e.g. two Google Drive accounts), exactly like the browser arm's multiple
+profiles. The flow is: discover the connections, pick by alias, exec with the
+explicit target:
 
 \`\`\`bash
+parall clip connections <clip>            # per-connection auth status, alias, is_default
+parall clip tools <clip> --connection <ccn_|alias>   # tools are PER CONNECTION
 parall clip exec <clip> <tool> [json-args] --connection <ccn_|alias>
 \`\`\`
 
+- \`clip connections\` marks MCP rows with their auth mode, \`credential_set\`
+  / \`oauth_status\` and \`tool_count\` \u2014 a \`needs_reauth\` or credential-less
+  row will refuse exec until an org admin fixes it in the Clip Console.
+- \`--connection\` is REQUIRED to exec an MCP connection, exactly like a cloud
+  profile \u2014 the only other target form, \`--edge\`, is a desktop device and
+  never routes to MCP. The alias tells you WHICH account you act as \u2014
+  always name it.
+  (\`is_default\` marks the org's primary connection in listings and the
+  Console, not an implicit exec route.)
+- \`clip tools\` without \`--connection\` reads the default connection's
+  snapshot; with several connections and no default it asks you to name one.
 - No cold start: MCP clips never return \`EDGE_ACTIVATING\`.
 - \`MCP_TOOL_FAILED\` = the tool RAN and reported failure; a sanitized summary
   of its output rides in the error details. Read it and decide \u2014 do not
   blind-retry.
 - \`MCP_CONCURRENCY_LIMIT\` = not started; back off briefly, then retry.
-- \`MCP_CONFIG_MISSING\` / \`MCP_DISABLED\` = the clip isn't configured, or MCP
-  is off for this deployment \u2014 ask an org admin; retrying won't help.
+- \`MCP_CONFIG_MISSING\` / \`MCP_DISABLED\` = that connection isn't configured,
+  or MCP is off for this deployment \u2014 ask an org admin; retrying won't help.
+- \`MCP_OAUTH_REAUTH_REQUIRED\` = that connection's authorization expired or
+  was disconnected \u2014 ask an org admin to re-authorize it in the Clip Console
+  (name the connection's alias); retrying won't help.
 - \`OUTCOME_UNKNOWN\` follows the rule below: dispatched and MAY HAVE
   EXECUTED \u2014 never auto-retry.
 
@@ -60805,8 +60848,15 @@ and the folder is just a manifest:
   republishing.
 - Entering the credential / completing OAuth is a HUMAN step in the Clip
   Console (the config-write endpoints are session-only \u2014 an API key cannot
-  call them). Once configured, discover the live tool schemas with
-  \`parall clip tools <clip>\` and exec like any other clip.
+  call them). An org can add SEVERAL connections to one MCP clip \u2014 one
+  credential slot per account of the same service \u2014 all sharing the declared
+  \`server_url\`/\`auth\`. Once configured, discover the live tool schemas with
+  \`parall clip tools <clip> [--connection <ref>]\` and exec like any other
+  clip (\`--connection\` picks the account).
+- Do NOT declare anything about OAuth client registration in the manifest \u2014
+  there is no such field. Whether the provider needs a manually registered
+  OAuth app (Google-style) is probed by the server at connect time; the
+  Console walks the admin through it when required.
 - Publish is the same command: \`parall clip publish ./my-clip/\`.
 
 ## Cloud (hosted) vs desktop (BYOC) Edge

package/bundle/parall-daemon.js

@@ -542,10 +542,17 @@ var init_constants = __esm({
       // Per-org agent exec access for one clip (default all agents; PUT human-only)
       ORG_CLIP_EXEC_ACCESS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clips/${clipId}/exec-access`,
       // MCP clip server config (cap:clip-mcp; publisher-org only — cross-org gets
-      // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included)
+      // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included). The
+      // singular family addresses the org's DEFAULT connection (pre-165
+      // back-compat shim); the plural family is the multi-connection surface —
+      // one config row (credential slot) per connection, addressed by config id.
       ORG_CLIP_MCP_CONFIG: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config`,
       ORG_CLIP_MCP_TOOLS_REFRESH: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/tools/refresh`,
-      ORG_CLIP_MCP_OAUTH_DISCONNECT: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/oauth/disconnect`
+      ORG_CLIP_MCP_OAUTH_DISCONNECT: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-config/oauth/disconnect`,
+      ORG_CLIP_MCP_CONFIGS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs`,
+      ORG_CLIP_MCP_CONFIG_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}`,
+      ORG_CLIP_MCP_TOOLS_REFRESH_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/tools/refresh`,
+      ORG_CLIP_MCP_OAUTH_DISCONNECT_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/oauth/disconnect`
     };
     WS_EVENTS = {
       // Client -> Server
@@ -2883,6 +2890,17 @@ var init_client = __esm({
       async deleteClipMCPConfig(orgId, clipId, expectedVersion) {
         return this.request("DELETE", ENDPOINTS.ORG_CLIP_MCP_CONFIG(orgId, clipId), void 0, void 0, false, { headers: { "If-Match": `"${expectedVersion}"` } });
       }
+      /**
+       * List the org's MCP connections for a clip, default first — one row per
+       * connection (credential slot), WITHOUT the tools snapshot (`tool_count`
+       * summarizes it; the per-config GET carries the full snapshot). Same
+       * family-wide fence as the singular GET: publisher-org members only —
+       * cross-org installs get `403 MCP_CROSS_ORG_DISABLED`, and with
+       * `cap:clip-mcp` off the route is not registered at all.
+       */
+      async listClipMCPConnections(orgId, clipId) {
+        return this.request("GET", ENDPOINTS.ORG_CLIP_MCP_CONFIGS(orgId, clipId));
+      }
       /**
        * Re-run tools/list and replace the cached snapshot (org-admin only).
        * Deliberately does NOT advance the CAS version, so an in-flight edit in

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/daemon",
-  "version": "1.53.0",
+  "version": "1.54.0",
   "description": "Parall local agent runtime — daemon supervisor + bridge runtimes, bundled as standalone JS files",
   "license": "MIT",
   "repository": {
@@ -33,11 +33,11 @@
     "@aws-sdk/client-s3": "3.984.0",
     "@pinixai/bb-browser-pro": "0.15.0",
     "ws": "^8.18.0",
-    "@parall/agent-core": "1.53.0",
-    "@parall/claude-agent": "1.53.0",
-    "@parall/codex-agent": "1.53.0",
-    "@parall/openclaw-agent": "1.53.0",
-    "@parall/sdk": "1.53.0"
+    "@parall/agent-core": "1.54.0",
+    "@parall/codex-agent": "1.54.0",
+    "@parall/openclaw-agent": "1.54.0",
+    "@parall/sdk": "1.54.0",
+    "@parall/claude-agent": "1.54.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",