This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryOAuth becomes the default authentication method when no API key is set.
Full changelog
OAuth as default auth
When no API key is set, the npm package now uses OAuth automatically — mcp-remote's built-in OAuth flow opens a browser tab for authorization. No secrets to copy-paste.
API key still works — set SHEETSDATA_API_KEY or pass --api-key to use Bearer auth as before.
Changes
cli.js: SkipsAuthorizationheader when no key is set, lettingmcp-remotehandle OAuthserver.json:SHEETSDATA_API_KEYmarked as optional (isRequired: false)- Directory listings (LobeHub, etc.) can now show a zero-config install
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About octoco-ltd/sheetsdata-mcp
Instant access to electronic component datasheets for AI agents — specs, pinouts, package info, absolute max ratings extracted from manufacturer PDFs on demand.
Related context
Beta — feedback welcome: [email protected]