This release includes 3 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Affected surfaces
ReleasePort's take
Light signalThe public search surface now includes only 12 verified providers, and extraction is limited to 8. The native Perplexity and Kilo Perplexity answer endpoints have been removed from provider schemas.
Why it matters: Affects applications using the search and extraction APIs; integration must be updated before next deployment as only 12 search providers and 8 extraction providers remain supported.
Summary
AI summaryUpdates Highlights, Verification, and Breaking changes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Public search surface reduced to 12 verified source-result providers; extraction limited to 8 providers. Public search surface reduced to 12 verified source-result providers; extraction limited to 8 providers. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Breaking | High |
Native Perplexity and Kilo Perplexity answer endpoints removed from public provider schemas. Native Perplexity and Kilo Perplexity answer endpoints removed from public provider schemas. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Medium |
MCP initialize handshake now advertises package version 1.0.0. MCP initialize handshake now advertises package version 1.0.0. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Research subprocesses receive a fixed grace window beyond their inner budget; outer timeouts become sanitized, retryable `wsp.subprocess.timeout` responses. Research subprocesses receive a fixed grace window beyond their inner budget; outer timeouts become sanitized, retryable `wsp.subprocess.timeout` responses. Source: llm_adapter@2026-07-14 Confidence: high |
— |
Full changelog
web-search-plus-mcp v1.0.0
The standalone MCP server now tracks the portable, source-only Web Search Plus 3.0.2 engine contract while keeping the stable web_search and web_extract tool surface.
Highlights
- Canonical v3 request/response contracts with additive evidence, provider-attempt, routing, cache-origin, and policy receipts.
- Truthful bounded multi-provider Research Mode with aggregate
provider: researchcompatibility output. - Deterministic bounded extraction, immutable page-on-demand full-text references, and cache miss-to-hit body/provenance preservation.
- Marker-owned v3 cache/state and guarded migration primitives.
- MCP initialize handshake now advertises package version
1.0.0. - Research subprocesses receive a fixed grace window beyond their inner budget; outer timeouts become sanitized, retryable
wsp.subprocess.timeoutresponses.
Breaking changes
- The public search surface is now 12 verified source-result providers; extraction remains 8 providers.
- Native Perplexity and Kilo Perplexity answer endpoints are removed from public provider schemas because they do not expose a verified source-only mode. Direct low-level calls fail closed before provider dispatch.
- Closed response-schema consumers must allow the additive v3 evidence and provenance fields.
See MIGRATION_1_0.md for upgrade and rollback guidance.
Verification
- 183 tests passed on Python 3.10, 3.11, and 3.12.
- Ruff, compileall, schema/Glama drift checks, wheel, sdist, and
twine checkpassed. - Fresh installed-wheel MCP stdio handshake and canonical subprocess smoke passed.
- Wheel SHA-256:
1d78bde3c87be81f7a359d22faaf2f1ff0c1bce46d28d5c097458c83f2f3c905.
Attribution
Portable Web Search Plus 3.0.2 repairs are synced from hermes-web-search-plus #104 and #105 by @robbyczgw-cla.
Breaking Changes
- Public search surface limited to 12 verified source-result providers; extraction remains 8 providers.
- Native Perplexity and Kilo Perplexity answer endpoints removed from public provider schemas; direct low-level calls fail closed before dispatch.
- Closed response-schema consumers must allow additive v3 evidence, provenance, cache-origin, and policy receipt fields.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About robbyczgw-cla/web-search-plus-mcp
Multi-provider web search with intelligent auto-routing (Serper, Tavily, Exa)
Related context
Related tools
Beta — feedback welcome: [email protected]