This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryStructured tool results and Smithery listing improvements were added.
Full changelog
[3.2.0] - 2026-06-16
Structured tool output and Smithery listing improvements. No breaking changes —
tool names and the human-readable text responses are unchanged; structured output
is purely additive.
Added
- Structured tool results — every read/default tool now declares an
outputSchemaand returnsstructuredContentalongside the existing text, so
MCP clients can type-check responses. The prosecontent[0].textis byte-for-byte
unchanged for back-compat. - Smithery listing — homepage ownership verification (a
smithery-verification
meta tag in the docs site, sincegithub.iocannot host DNS TXT records) and a
backlink to the Smithery server page from the README badges and homepage footer.
Changed
.mcpbrelease pipeline — the bundle manifest now embeds the live tool
schemas (name/description/inputSchema/outputSchema), captured from the running
server and packaged via a plain zip (mcpb packstrips these keys). This is the
metadata Smithery's capability score reads. The bundle still ships its production
node_modulesso it runs standalone.
Fixed
get-relationship— theaccountIdsrejection-guard parameter now carries a
description, completing parameter-description coverage across all tools.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About cameronrye/activitypub-mcp
A comprehensive MCP server that enables LLMs to explore and interact with the Fediverse through ActivityPub protocol. Features WebFinger discovery, timeline fetching, instance exploration, and cross-platform support for Mastodon, Pleroma, Misskey, and other ActivityPub servers.
Related context
Related tools
Earlier breaking changes
- v2.1.0 `activitypub://instance-info/{domain}` `software` field now an object instead of a string.
- v2.1.0 Removed `activitypub://post-thread/{postUrl}` URI form; use `{domain}/{statusId}` instead.
- v2.0.0 'get-relationship' no longer accepts legacy `accountIds` array; requires single `acct` string.
- v2.0.0 `MCP_HTTP_CORS_ORIGINS` no longer defaults to '*'; must be set explicitly.
- v2.0.0 `scheduledId` renamed to `scheduledPostId` in scheduling tools.
Beta — feedback welcome: [email protected]