Windows MCP

v0.8.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 16d MCP Security & Auth

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai desktop mcp tools windows windows-automation

Affected surfaces

auth

Summary

AI summary

Updates deps, feat, and screenshot across a mixed release.

Type	Severity	Summary	CVE
Feature
Feature	Medium	add --stateless-http flag for streamable-http transport add --stateless-http flag for streamable-http transport Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Medium	add IAccessible2 / MSAA fallback for Firefox DOM extraction add IAccessible2 / MSAA fallback for Firefox DOM extraction Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Medium	briefly highlight captured area with orange-red flash in screenshot feature briefly highlight captured area with orange-red flash in screenshot feature Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Dependency
Dependency	Medium	bump posthog from 7.14.1 to 7.14.2 in the all-dependencies group bump posthog from 7.14.1 to 7.14.2 in the all-dependencies group Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Dependency	Medium	bump the all-dependencies group with 2 updates bump the all-dependencies group with 2 updates Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Dependency	Medium	bump the all-dependencies group with 2 updates again bump the all-dependencies group with 2 updates again Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Bugfix	Medium	read PostHog write key from env var instead of hardcoding read PostHog write key from env var instead of hardcoding Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—

Full changelog

chore(deps): bump posthog from 7.14.1 to 7.14.2 in the all-dependencies group by @dependabot[bot] in https://github.com/CursorTouch/Windows-MCP/pull/240
feat: add --stateless-http flag for streamable-http transport by @iillyyaa1997 in https://github.com/CursorTouch/Windows-MCP/pull/242
chore(deps): bump the all-dependencies group with 2 updates by @dependabot[bot] in https://github.com/CursorTouch/Windows-MCP/pull/241
feat(screenshot): briefly highlight captured area with orange-red flash by @exalsch in https://github.com/CursorTouch/Windows-MCP/pull/232
fix: read PostHog write key from env var instead of hardcoding by @mvanhorn in https://github.com/CursorTouch/Windows-MCP/pull/244
chore(deps): bump the all-dependencies group with 2 updates by @dependabot[bot] in https://github.com/CursorTouch/Windows-MCP/pull/243
feat: add IAccessible2 / MSAA fallback for Firefox DOM extraction by @sergeikabuldzhanov in https://github.com/CursorTouch/Windows-MCP/pull/245

@iillyyaa1997 made their first contribution in https://github.com/CursorTouch/Windows-MCP/pull/242
@exalsch made their first contribution in https://github.com/CursorTouch/Windows-MCP/pull/232
@mvanhorn made their first contribution in https://github.com/CursorTouch/Windows-MCP/pull/244
@sergeikabuldzhanov made their first contribution in https://github.com/CursorTouch/Windows-MCP/pull/245

Full Changelog: https://github.com/CursorTouch/Windows-MCP/compare/v0.7.5...v0.8.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Windows MCP

Get notified when new releases ship.

About Windows MCP