drupal-mcp-connector 2.14.0 → 2.14.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -0
- package/README.md +4 -4
- package/package.json +3 -3
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [2.14.1] - 2026-09-09
|
|
11
|
+
|
|
12
|
+
### Changed
|
|
13
|
+
- README, CONTRIBUTING, and the package.json author URL now link
|
|
14
|
+
Jeremy Michael Cerda to the drupal.org profile
|
|
15
|
+
(`https://www.drupal.org/u/jmcerda`).
|
|
16
|
+
- README and docs now report 120 tools and 125 prompts (one per tool
|
|
17
|
+
plus 5 workflow prompts), matching the shipped surface. The tools
|
|
18
|
+
reference documents `drupal_create_redirect`,
|
|
19
|
+
`drupal_update_redirect`, and `drupal_update_menu_link`.
|
|
20
|
+
|
|
10
21
|
## [2.14.0] - 2026-09-06
|
|
11
22
|
|
|
12
23
|
### Added
|
|
@@ -1470,6 +1481,7 @@ The connector is now **dual-protocol**: every tool runs against an abstract back
|
|
|
1470
1481
|
- User tools gained explicit PII-access assertions.
|
|
1471
1482
|
- Whole tree lint-clean (`npm run lint`) with object-injection sinks rewritten to safe lookups.
|
|
1472
1483
|
|
|
1484
|
+
[2.14.1]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.14.1
|
|
1473
1485
|
[2.14.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.14.0
|
|
1474
1486
|
[2.13.1]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.13.1
|
|
1475
1487
|
[2.13.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.13.0
|
package/README.md
CHANGED
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
[](https://drupal.org)
|
|
8
8
|
[](https://modelcontextprotocol.io)
|
|
9
9
|
|
|
10
|
-
Built by **Jeremy Michael Cerda** (opensource@wilkesliberty.com). Maintained by [Wilkes & Liberty, LLC](https://github.com/Wilkes-Liberty).
|
|
10
|
+
Built by **[Jeremy Michael Cerda](https://www.drupal.org/u/jmcerda)** (opensource@wilkesliberty.com). Maintained by [Wilkes & Liberty, LLC](https://github.com/Wilkes-Liberty).
|
|
11
11
|
|
|
12
12
|
**If the client only shows `drupal_list_sites` and `drupal_governance_status`**, the secret env vars named in `config.json` are unset. Upgrade to the current release (2.6.1 first fixed this), or stay on 2.6.0 and launch via `bin/drupal-mcp-launch.sh` with a `config/secrets.map` (`ENV_VAR=keychain-item`). Then restart the MCP server. See [#199](https://github.com/Wilkes-Liberty/drupal-mcp-connector/issues/199).
|
|
13
13
|
|
|
@@ -63,7 +63,7 @@ See **[docs/architecture.md](docs/architecture.md)** for the backend abstraction
|
|
|
63
63
|
|
|
64
64
|
## Features
|
|
65
65
|
|
|
66
|
-
###
|
|
66
|
+
### 120 Tools Across 26 Modules
|
|
67
67
|
|
|
68
68
|
| Module | Tools |
|
|
69
69
|
|--------|-------|
|
|
@@ -301,7 +301,7 @@ an operator channel: keep the agent's credentials off it, and pin
|
|
|
301
301
|
| [OAuth client_credentials](docs/oauth-client-credentials.md) | Production OAuth deploy: scope→role mapping, JSON:API writes, config persistence, secret handling, troubleshooting |
|
|
302
302
|
| [Architecture](docs/architecture.md) | Backend abstraction, canonical model, and how to extend it |
|
|
303
303
|
| [GraphQL Setup](docs/graphql-local-setup.md) | GraphQL Compose backend + local TLS notes |
|
|
304
|
-
| [Tools Reference](docs/tools-reference.md) | Full reference for all
|
|
304
|
+
| [Tools Reference](docs/tools-reference.md) | Full reference for all 120 tools |
|
|
305
305
|
| [Security Guide](docs/security.md) | Presets, entity access control, field redaction |
|
|
306
306
|
| [Security Hardening](docs/security-hardening.md) | Optional transport, identity, and secrets controls |
|
|
307
307
|
| [Verification](docs/verification.md) | Prove a secure install: static + live checks, negative probes, evidence artefact, managed residuals |
|
|
@@ -324,4 +324,4 @@ Found a vulnerability? See [SECURITY.md](SECURITY.md). Please do not open a publ
|
|
|
324
324
|
|
|
325
325
|
## License
|
|
326
326
|
|
|
327
|
-
[MIT](LICENSE) © 2026 Jeremy Michael Cerda and [Wilkes & Liberty, LLC](https://github.com/Wilkes-Liberty)
|
|
327
|
+
[MIT](LICENSE) © 2026 [Jeremy Michael Cerda](https://www.drupal.org/u/jmcerda) and [Wilkes & Liberty, LLC](https://github.com/Wilkes-Liberty)
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "drupal-mcp-connector",
|
|
3
|
-
"version": "2.14.
|
|
3
|
+
"version": "2.14.1",
|
|
4
4
|
"description": "A secure, multi-site Model Context Protocol (MCP) connector for Drupal — dual-protocol JSON:API and GraphQL.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "src/index.js",
|
|
@@ -42,7 +42,7 @@
|
|
|
42
42
|
"url": "https://github.com/Wilkes-Liberty/drupal-mcp-connector/issues"
|
|
43
43
|
},
|
|
44
44
|
"license": "MIT",
|
|
45
|
-
"author": "Jeremy Michael Cerda <opensource@wilkesliberty.com> (https://
|
|
45
|
+
"author": "Jeremy Michael Cerda <opensource@wilkesliberty.com> (https://www.drupal.org/u/jmcerda)",
|
|
46
46
|
"contributors": [
|
|
47
47
|
"Wilkes & Liberty, LLC <opensource@wilkesliberty.com> (https://wilkesliberty.com)"
|
|
48
48
|
],
|
|
@@ -79,7 +79,7 @@
|
|
|
79
79
|
"eslint-plugin-n": "^18.1.0",
|
|
80
80
|
"eslint-plugin-security": "^4.0.0",
|
|
81
81
|
"globals": "^17.6.0",
|
|
82
|
-
"vitest": "^
|
|
82
|
+
"vitest": "^5.0.0"
|
|
83
83
|
},
|
|
84
84
|
"overrides": {
|
|
85
85
|
"@hono/node-server": "^2.0.5",
|