Skip to content

vinkius-labs/mcp-fusion

v3.12.8 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 2mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

mcp mcp-framework mcp-server model-context-protocol

Affected surfaces

auth rbac

Summary

AI summary

Deploy payload includes read-only flag to determine HTTP method (GET vs POST).

Full changelog

Fixed

@vurb/core — Contract-Driven HTTP Method Classification

  • Deploy payload now includes
    eadOnly flag per tool action
    — The CLI deploy command now reads ction.readOnly from the compiled ActionContract and sends it in the ools[] payload. The API ToolSyncService uses this flag directly (
    eadOnly: true → GET,
    eadOnly: false → POST) instead of inferring HTTP methods from tool name prefixes.

Changed

  • deploy.ts — Sends
    eadOnly from compiled contract per tool.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track vinkius-labs/mcp-fusion

Get notified when new releases ship.

Sign up free

About vinkius-labs/mcp-fusion

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

All releases →

Related context

Earlier breaking changes

  • v4.0.0 All packages now published under the `@mcpfusion` npm scope.
  • v4.0.0 GitHub repository renamed to vinkius-labs/mcpfusion; npm packages under @mcpfusion scope.
  • v4.0.0 All source code, documentation, CLI output, workflows, and npm packages now use the @mcpfusion scope.

Beta — feedback welcome: [email protected]