Skip to content

PaSympa/discord-mcp

v2.0.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai automation claude discord discord-bot mcp
+2 more
model-context-protocol typescript

Affected surfaces

auth rbac breaking_upgrade deps

Summary

AI summary

Updates fix, tools, and deps-dev across a mixed release.

Full changelog

What's Changed

  • feat(tools)!: zod single source of truth + enforced numeric bounds by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/34
  • fix(tools): correct destructiveHint on data-overwriting tools by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/35
  • fix(tools): remove as-any casts (Findings #5, #34) by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/36
  • feat(tools): outputSchema + structuredContent on read tools (Finding #3) by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/37
  • feat: land remaining v2.0 chain — input validation, dispatch, intents, toolsets, mass-op safety by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/50
  • fix: close remaining allow-list bypasses, spec-align protocol errors (audit round 2) by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/51
  • chore(release): sync main and prep v2.0 metadata by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/52
  • fix: doc-audit round — docs aligned with behavior, crosspost + delete-reason bugs by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/53
  • fix: doc-audit round 2 — 20 confirmed findings by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/54
  • fix: audit round 5 — pipeline, robustness, test debt (22 findings) by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/55
  • chore!: drop Node 20 (EOL) — engines >=22 by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/56
  • fix: audit round 6 — CI gap, behavioral tests, supply chain (19 findings) by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/58
  • release: 1.7.3 by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/59
  • docs: complete the OAuth permission list (live-campaign findings) by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/60
  • chore(deps-dev): bump eslint from 10.4.1 to 10.5.0 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/61
  • chore(deps-dev): bump @types/node from 25.9.2 to 25.9.3 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/62
  • chore(deps-dev): bump typescript-eslint from 8.60.1 to 8.61.0 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/63
  • chore(deps-dev): bump prettier from 3.8.3 to 3.8.4 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/64

Full Changelog: https://github.com/PaSympa/discord-mcp/compare/v1.7.3...v2.0.0

Breaking Changes

  • Drop Node 20 (EOL) — engines >=22

Security Fixes

  • Close remaining allow‑list bypasses and align protocol error handling (audit round 2)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track PaSympa/discord-mcp

Get notified when new releases ship.

Sign up free

About PaSympa/discord-mcp

Lightweight multi-guild Discord MCP server with 60+ tools for messages, channels, roles, forums, webhooks, and moderation.

All releases →

Related context

Beta — feedback welcome: [email protected]