Skip to content

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 20d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

anthropic claude go mcp mcp-server mediawiki
+4 more
model-context-protocol starred wiki wikipedia

Affected surfaces

deps

ReleasePort's take

Light signal
editorial:auto 13d

Breaking: v1.31.0 requires rationale parameter on seven destructive MCP tools. Calls without rationale will fail immediately.

Why it matters: Wiki delete/modify operations require new rationale context. Update all automation and integration code; test in dev before production upgrade.

Summary

AI summary

Rationale is now a required parameter on seven destructive MCP tools.

Changes in this release

Security Medium

golang.org/x/text bumped for security fix

golang.org/x/text bumped for security fix

Source: llm_adapter@2026-05-21

Confidence: high

Breaking Medium

rationale parameter now required on 7 destructive MCP tools

rationale parameter now required on 7 destructive MCP tools

Source: llm_adapter@2026-05-21

Confidence: low

Feature Medium

wiki stale-pages CLI command lists pages not edited in N days

wiki stale-pages CLI command lists pages not edited in N days

Source: llm_adapter@2026-05-21

Confidence: high

Feature Medium

wiki similar CLI command finds pages with overlapping content

wiki similar CLI command finds pages with overlapping content

Source: llm_adapter@2026-05-21

Confidence: high

Feature Medium

wiki CLI returns typed exit codes for error categorization

wiki CLI returns typed exit codes for error categorization

Source: llm_adapter@2026-05-21

Confidence: low

Feature Medium

Claude Code plugin scaffold with wiki-publish skill added

Claude Code plugin scaffold with wiki-publish skill added

Source: llm_adapter@2026-05-21

Confidence: low

Feature Medium

`wiki` CLI returns typed exit codes for usage, not found, API errors, auth, rate limit, and config errors.

`wiki` CLI returns typed exit codes for usage, not found, API errors, auth, rate limit, and config errors.

Source: granite4.1:30b@2026-05-22-audit

Confidence: low

Dependency Medium

github.com/modelcontextprotocol/go-sdk bumped to 1.6.0

github.com/modelcontextprotocol/go-sdk bumped to 1.6.0

Source: llm_adapter@2026-05-21

Confidence: low

Dependency Medium

github.com/olgasafonova/mcp-servercard-go bumped to v0.3.0

github.com/olgasafonova/mcp-servercard-go bumped to v0.3.0

Source: llm_adapter@2026-05-21

Confidence: low

Refactor Medium

tools/handlers.go refactored to name→closure map pattern

tools/handlers.go refactored to name→closure map pattern

Source: llm_adapter@2026-05-21

Confidence: low

Refactor Medium

wiki/ package reorganized into modular files

wiki/ package reorganized into modular files

Source: llm_adapter@2026-05-21

Confidence: low

Full changelog

Added

  • wiki stale-pages CLI command. Lists pages not edited in N days (default 90) with --days, --category, --namespace, --limit filters. Wraps the existing mediawiki_get_stale_pages MCP tool so the CLI surface matches MCP coverage.
  • wiki similar <page> CLI command. Finds pages whose content overlaps with a source page; includes a similarity score, common terms, and existing-link indicators. Flags: --limit, --category, --min-score. Wraps the existing mediawiki_find_similar_pages MCP tool.
  • wiki CLI now returns typed exit codes so shell scripts can branch on failure category: 2 usage error, 3 not found (HTTP 404), 5 wiki API error (other 4xx/5xx), 6 auth error (HTTP 401/403), 7 rate limit (HTTP 429), 10 config error. Adapted from the cli-printing-press canonical map; 4 remains reserved for wiki lint findings (existing public API), so auth errors use 6 instead of 4. Plain errors still exit 1. wiki.APIError from the wiki client is auto-classified by status; commands can also return usageErr/notFoundErr/authErr/apiErr/rateLimitErr/configErr directly. Cobra flag-parse errors (unknown flag, missing required arg) auto-wrap to exit 2.
  • Claude Code plugin scaffold. New .claude-plugin/ directory with marketplace.json, plugin.json, and a first skill wiki-publish that shells out to the wiki publish CLI. Install via /plugin marketplace add olgasafonova/mediawiki-mcp-server. Design rationale and the full surface map are in MULTI-SURFACE-DISTRIBUTION.md: the Go module is the shared knowledge layer; MCP server, wiki CLI, and this plugin are surfaces over it.

Changed

  • Breaking (write tools only): rationale is now a required parameter on 7 destructive MCP toolsmediawiki_edit_page, mediawiki_find_replace, mediawiki_apply_formatting, mediawiki_bulk_replace, mediawiki_upload_file, mediawiki_move_page, mediawiki_manage_categories. The agent must supply a one-sentence "why" with each write call; the value is logged to the tool audit trail and the mcp.tool.rationale OTel span attribute. Rationale is optional (recorded when supplied, ignored when omitted) on the 35 read-only tools. Pattern source: Teddy Riker, "Designing for Agents" (Ramp). Read-only integrations require no changes; write integrations must add the rationale field.
  • tools/handlers.go dispatcher refactored from a 41-case method switch + 41-case type switch to a name→closure map; the non-generic dispatcher method is gone, closures call the generic register[Args, Result] helper directly via type inference. logExecution split into appendArgAttrs + appendResultAttrs. Code Health 7.64 → 9.53 (Yellow → Green). No public API change.
  • wiki/ package reorganized: monolithic read path consolidated into wiki/read.go; helpers extracted across links.go, quality.go, search.go, write.go to lift per-file Code Health scores. No public API change.

Dependencies

  • Bumped golang.org/x/text (security fix)
  • Bumped github.com/modelcontextprotocol/go-sdk
  • Bumped github.com/olgasafonova/mcp-servercard-go to v0.3.0

What's Changed

  • deps: bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0 in the go-dependencies group by @dependabot[bot] in https://github.com/olgasafonova/mediawiki-mcp-server/pull/49
  • deps: bump golang.org/x/text from 0.36.0 to 0.37.0 in the go-dependencies group by @dependabot[bot] in https://github.com/olgasafonova/mediawiki-mcp-server/pull/51

Full Changelog: https://github.com/olgasafonova/mediawiki-mcp-server/compare/v1.30.0...v1.31.0

Breaking Changes

  • Rationale becomes a required parameter on the following write-only MCP tools: mediawiki_edit_page, mediawiki_find_replace, mediawiki_apply_formatting, mediawiki_bulk_replace, mediawiki_upload_file, mediawiki_move_page, mediawiki_manage_categories.

Security Fixes

  • dep: golang.org/x/text bumped from 0.36.0 to 0.37.0 (includes security fix)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track olgasafonova/mediawiki-mcp-server

Get notified when new releases ship.

Sign up free

About olgasafonova/mediawiki-mcp-server

Connect to any MediaWiki wiki (Wikipedia, Fandom, corporate wikis). 33+ tools for search, read, edit, link analysis, revision history, and Markdown conversion. Supports stdio and HTTP transport.

All releases →

Beta — feedback welcome: [email protected]