This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
ReleasePort's take
Moderate signalThe release deprecates the HTTP bridges (reaper_web_server.lua and reaper_web_server.py), marking them as no longer maintained.
Why it matters: Deprecation of HTTP bridge APIs means existing integrations relying on these endpoints will stop receiving support; migrate before they are removed.
Summary
AI summaryDeprecated the HTTP bridges which are no longer maintained.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds optional `dev` dependency group and ruff configuration to pyproject.toml. Adds optional `dev` dependency group and ruff configuration to pyproject.toml. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Low |
Adds GitHub Actions CI running ruff and pytest on Python 3.10‑3.13. Adds GitHub Actions CI running ruff and pytest on Python 3.10‑3.13. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Low |
Adds mocked pytest suite in `tests/` to exercise tools without REAPER running. Adds mocked pytest suite in `tests/` to exercise tools without REAPER running. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Deprecation | High |
Deprecates HTTP bridges (reaper_web_server.lua / reaper_web_server.py). Deprecates HTTP bridges (reaper_web_server.lua / reaper_web_server.py). Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Refactor | Low |
Rewrites test_connection.py to use file bridge, removing httpx dependency. Rewrites test_connection.py to use file bridge, removing httpx dependency. Source: llm_adapter@2026-06-11 Confidence: high |
— |
Full changelog
Infrastructure release — no tool contract changes. 135 tools, fully backward compatible.
Added
- Mocked pytest suite (
tests/) that exercises tools without REAPER running. - GitHub Actions CI (ruff + pytest on Python 3.10–3.13).
devoptional-dependency group andruffconfiguration inpyproject.toml.
Changed
- Rewrote
test_connection.pyto test the file bridge (the supported path) instead of the deprecated HTTP server. Now pure standard library — nohttpxneeded to smoke-test. - Documented the file-based Lua bridge as the only supported communication path.
Deprecated
- HTTP bridges (
reaper_web_server.lua/reaper_web_server.py). Kept for existing users but no longer maintained; they will not receive new tools and may be removed in v2.0.
Full changelog: https://github.com/TwelveTake-Studios/reaper-mcp/blob/main/CHANGELOG.md
Breaking Changes
- HTTP bridges (`reaper_web_server.lua` and `reaper_web_server.py`) are deprecated and may be removed in v2.0.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About TwelveTake-Studios/reaper-mcp
MCP server enabling AI assistants to control REAPER DAW for mixing, mastering, MIDI composition, and full music production with 129 tools
Related context
Related tools
Earlier breaking changes
- v1.3.2 `render_project` now requires an explicit `overwrite` parameter to allow file overwriting.
Beta — feedback welcome: [email protected]