This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryFixed silent extension crashes on Claude Desktop by routing launch through a shell script and declared macOS-only compatibility.
Full changelog
Fixed
- Extension now installs on current Claude Desktop (#249, upstream mcpb#229): Claude Desktop 1.2581+ runs Node MCPB extensions inside an Electron UtilityProcess that enforces macOS hardened-runtime library validation, which rejects ad-hoc-signed npm prebuilds (our
classic-levelbinding). The process died indlopenbefore any of our code ran, leaving users with a silent "Server disconnected" status. Routes the launch throughdist/launcher.sh— an absolute path rather than the literal string"node"— so Claude Desktop's router falls through to plainchild_processspawn where native deps load normally. The launcher triescommand -v nodefirst, then falls back through~/.volta/bin,/opt/homebrew/bin,/usr/local/bin,/usr/bin(GUI-launched macOS processes don't inherit shell PATH).
Changed
- Extension declared macOS-only (
compatibility.platforms: ["darwin"]): Copilot Money itself only ships for macOS, so the MCP server now tells Claude Desktop / the MCPB catalog to block install on Windows and Linux rather than letting users install something that would have nothing to read.
Breaking Changes
- Extension now declared macOS‑only (`compatibility.platforms: ["darwin"]`), blocking installation on Windows and Linux.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About ignaciohermosillacornejo/copilot-money-mcp
Read and manage Copilot Money personal finance data — 30 tools for transactions, budgets, accounts, recurring charges, investments, and goals. Reads are 100% local from the Firestore cache; opt-in writes (`--write`) go directly to Copilot's GraphQL API.
Related context
Beta — feedback welcome: [email protected]