This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+11 more
Summary
AI summarySearch Console site_url is now optional for tenant auto-resolution.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
`site_url` becomes optional in Search Console tool schema, allowing tenant auto-resolution. `site_url` becomes optional in Search Console tool schema, allowing tenant auto-resolution. Source: llm_adapter@2026-07-18 Confidence: low |
— |
Full changelog
Fixed
- Search Console
site_urlis optional at the schema level so tenant
auto-resolution works (#447). Every Search Console tool declaredsite_url
in itsinputSchemarequired, so the MCP server rejected an omitted
site_urlduring schema validation — before the handler ran — making the
documented single-property auto-resolution (for a tenant-scoped multi-account
client) unreachable.site_urlis now an optional property on every tool;
enforcement is unchanged and lives in_resolve_site_url(standalone still
requires it; a multi-account backend binds it to the active client's
allow-listed property — single → auto-resolve, multiple / out-of-scope /
unconfigured → refuse, fail-closed). Cross-tenant isolation is unaffected.
Documentation
- Full documentation refresh against the codebase (#446). Corrected the
MCP tool inventory to 199 across README /docs/mcp-server.md/
docs/architecture.md(added the four previously-undocumented tool
categories and the four missing Google Ads tools, an Analytics Registry
section, and afeedpathfix forsitemaps_submit); refreshed the AGENTS.md
and architecture package/module trees (native skills, analytics dispatcher,
the many unlisted packages) and removed stale references; updated the BYOD
docs (read-only prefixes, shared sanitizer, EU-locale dates, Phase-3 CSVs),
moved GA4 to the officialga4-officialMCP, switched the Meta token-exchange
example to a POST body, and corrected the supported version,mureo configure
command, native tool counts, and skills paths across the guides.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About logly/mureo
Framework for AI agents (Claude Code, Cursor, Codex, Gemini) to operate Google Ads, Meta Ads, and Search Console. Grounded in a local STRATEGY.md — not metric-chasing. Defense-in-depth security, local-first. Apache 2.0.
Related context
Related tools
Beta — feedback welcome: [email protected]