This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+3 more
Affected surfaces
Summary
AI summaryAdded rate limiting, input validation with execution timeouts, and security scanning to harden the learning server.
Full changelog
v0.9.0 - Production-Ready Learning Server
From educational toy to production-hardened teaching tool. This release adds security middleware, comprehensive testing infrastructure, and the kind of guardrails you'd want in a real deployment.
Security & Hardening
Rate Limiting:
- Added middleware limiting requests to 100/minute per client
- Prevents resource exhaustion in shared learning environments
Input Validation:
- Comprehensive size limits on all expression inputs
- Execution timeouts to prevent infinite loops
- Pydantic BaseSettings with Field constraints replacing manual validation
Security Scanning:
- Gitleaks integration in CI pipeline
- Automated secret detection on every commit
CI/CD Infrastructure
Modern Workflow:
- Parallel job execution with ruff-action
- Python version matrix testing (3.11, 3.13)
- HTTP integration tests for release validation
- Merge queue support for safer collaboration
Dependency Management:
- Migrated from Dependabot to Renovate
- More granular update control
Code Quality
Improvements:
- FastMCP structured logging middleware
- Centralized constants (eliminated DRY violations)
- Removed unused Pydantic result models
- Cleaner separation of concerns
Documentation
Overhaul:
- Simplified README with updated branding
- Refactored CONTRIBUTING.md for clarity
- New MAINTAINER_GUIDE.md for project stewards
- SECURITY.md policy
- GitHub issue/PR templates
Testing
- ✅ All tests passing (67/67)
- ✅ Ruff: All checks passed
- ✅ Coverage: 83%
- ✅ HTTP integration tests validated
Installation
Standard:
uvx math-mcp-learning-server
With plotting:
uvx math-mcp-learning-server
Cloud MCP endpoint:
claude mcp add math-cloud https://math-mcp-learning.fastmcp.app/mcp
Links
- PyPI: https://pypi.org/project/math-mcp-learning-server/
- Cloud: https://math-mcp-learning.fastmcp.app/mcp
- Repository: https://github.com/clouatre-labs/math-mcp-learning-server
Full Changelog: https://github.com/clouatre-labs/math-mcp-learning-server/compare/v0.8.2...v0.9.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About clouatre-labs/math-mcp-learning-server
Educational MCP server for math operations, statistics, visualization, and persistent workspaces. Built with FastMCP 2.0.
Related context
Beta — feedback welcome: [email protected]