Skip to content

This release adds 1 notable feature for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-tools apple-silicon applescript automation browser-automation
+14 more
claude claude-code cursor devtools llm-tools macos mcp mcp-server model-context-protocol safari safari-mcp web-automation webkit windsurf

Summary

AI summary

Added opt‑in shared HTTP transport for Safari MCP to reduce memory usage

Full changelog

Added

  • Shared HTTP transport (opt-in SAFARI_MCP_HTTP) — run a single Safari MCP daemon that many Claude Code sessions share over StreamableHTTP, instead of a process per session (~17→1 in heavy use; lower memory and startup cost). The default transport stays stdio, so existing npm users see zero behavior change — fully opt-in. Enable with SAFARI_MCP_HTTP=1 (optional SAFARI_MCP_HTTP_PORT). Design notes in docs/http-transport-design.md.

Changed

  • safari_doctor now reports the macOS version and flags macOS 26+ (Tahoe), where CGEvent.postToPid native clicks/keys can silently no-op even with Accessibility granted (#29). Bug reports now carry the single most relevant diagnostic fact; affected users are steered toward safari_evaluate / extension-based clicks for trust-gated forms.

Internal

  • Extracted the tab-ownership state machine into ownership-state.js with behavioral tests asserting cross-client isolation and TTL expiry (#39).

96 tools total. macOS only. npx safari-mcp

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track achiya-automation/safari-mcp

Get notified when new releases ship.

Sign up free

About achiya-automation/safari-mcp

Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.

All releases →

Related context

Earlier breaking changes

  • v2.10.5 npm audit gate now fails build on high or critical advisories.

Beta — feedback welcome: [email protected]