This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+5 more
Affected surfaces
ReleasePort's take
Light signalv0.2.0 raises the minimum MCP dependency to version 1.19.0 and adds folder management tools, a new file‑download utility, metadata enhancements, and stricter API response validation.
Why it matters: Projects must upgrade their MCP dependency to ≥1.19.0 before using this release; failure triggers incompatibility errors.
Summary
AI summaryMinimum MCP dependency raised to version 1.19.0.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds folder management tools: create, rename, delete folders and add documents to folders. Adds folder management tools: create, rename, delete folders and add documents to folders. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Medium |
Adds `mendeley_get_file_content` tool to download document PDFs as MCP resources (max 10 MB). Adds `mendeley_get_file_content` tool to download document PDFs as MCP resources (max 10 MB). Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Low |
Adds title and description metadata to all tools and a Tool Reference section in the README. Adds title and description metadata to all tools and a Tool Reference section in the README. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Dependency | Medium |
Raises minimum `mcp` dependency to version 1.19.0. Raises minimum `mcp` dependency to version 1.19.0. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Shape-validates Mendeley API responses before use and validates token responses during authentication. Shape-validates Mendeley API responses before use and validates token responses during authentication. Source: llm_adapter@2026-06-13 Confidence: high |
— |
Full changelog
Added
- Folder management tools:
mendeley_create_folder(with nesting and group support),mendeley_rename_folder,mendeley_delete_folder, andmendeley_add_document_to_folder— adapted from #2 by @im-alexandre, who is credited as co-author on the feature commit mendeley_get_file_content— download a document's attached PDF as an embedded MCP resource, capped at 10 MB (override withMENDELEY_MCP_MAX_FILE_BYTES)- Title and description metadata on all tools, plus a Tool Reference section in the README
- Server and client test suites
Changed
- Mendeley API responses are shape-validated before use; token responses validated during auth
- Minimum
mcpdependency raised to 1.19.0 — earlier SDK versions mangle aCallToolResultreturned from a tool over the wire
Install: pip install mendeley-mcp==0.2.0
Full changelog: https://github.com/pallaprolus/mendeley-mcp/blob/main/CHANGELOG.md
Breaking Changes
- Minimum `mcp` dependency raised to version 1.19.0; earlier SDK versions cause malformed `CallToolResult` responses.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About pallaprolus/mendeley-mcp
MCP server for Mendeley reference manager. Search your library, browse folders, get document metadata, search the global catalog, and add papers to your collection.
Related context
Beta — feedback welcome: [email protected]