Skip to content

Release history

mobile-mcp releases

Model Context Protocol Server for Mobile Automation and Scraping (iOS, Android, Emulators, Simulators and Real Devices)

Back to tool Latest release

All releases

19 shown

No immediate action
0.0.57 Maintenance

Routine maintenance and dependency updates.

Open
No immediate action
0.0.56 Bug fix

mcp-publisher restored

Open
Upgrade now
0.0.55 Breaking risk
Dependencies

mobilewright SDK + fast-xml-parser bump

Open
0.0.54 Bugfix
Notable features
  • Added 'placeholder' field to view tree response
Full changelog
  • Server: Update mobilecli to 0.3.70
  • iOS: Fixed cases where testmanagerd would get Device Kit stuck in a black screen of death
  • iOS: Added 'placeholder' to view tree response
View release on GitHub
0.0.53 New feature
Notable features
  • Added `mobile_list_crashes` tool to list crash reports on a device
  • Added `mobile_get_crash` tool to retrieve full crash report content
Full changelog
  • Server: Add mobile_list_crashes tool to list crash reports on a device
  • Server: Add mobile_get_crash tool to retrieve full crash report content
  • Server: Upgrade mobilecli from 0.2.0 to 0.3.68
  • iOS: Replaced use of WebdriverAgent with iOS Device Kit (open source, apache license)
  • CI: Restrict contents permission to read
  • CI: Remove Java setup step from build workflow
View release on GitHub
0.0.52 Security relevant
Security fixes
  • Script injection vulnerability fixed by passing github.ref_name through environment variables
View release on GitHub
0.0.51 Breaking risk
⚠ Upgrade required
  • Use --listen flag instead; accepts [host:]port format and defaults to localhost
  • Bearer token authentication available via MOBILEMCP_AUTH environment variable
  • Telemetry can be disabled via MOBILEMCP_DISABLE_TELEMETRY environment variable
Breaking changes
  • --port CLI flag removed
Security fixes
  • dep: path-to-regexp security update
Notable features
  • Optional Bearer token authentication via MOBILEMCP_AUTH environment variable
  • MOBILEMCP_DISABLE_TELEMETRY environment variable to opt out of anonymous telemetry
Full changelog
  • Server: Replace --port with --listen flag accepting [host:]port format, default to localhost (#306)
  • Server: Add optional Bearer token auth via MOBILEMCP_AUTH env variable (#306)
  • Server: Add MOBILEMCP_DISABLE_TELEMETRY env variable to opt out of anonymous telemetry (#305)
  • Server: Security update for path-to-regexp package (#307)
View release on GitHub
0.0.50 Breaking risk
⚠ Upgrade required
  • Set MOBILEMCP_ALLOW_UNSAFE_URLS=1 to allow non-http/https URL schemes
Breaking changes
  • open_url tool now restricts to http/https schemes by default
Security fixes
  • open_url tool restricted to http/https schemes unless MOBILEMCP_ALLOW_UNSAFE_URLS=1 is set
Full changelog
  • Server: Restrict open_url tool to http/https schemes unless MOBILEMCP_ALLOW_UNSAFE_URLS=1 is set (#299) thanks to @manthanghasadiya for reporting this.
View release on GitHub
0.0.49 Security relevant
Security fixes
  • Path traversal vulnerability in save screenshot and record video endpoints
Full changelog
  • Server: Fix path traversal in save screenshot and record video (#296) thanks to @AbhiTheModder for reporting this.
View release on GitHub
0.0.48 Security relevant
Security fixes
  • dep: fast-xml-parser security updates
Full changelog
  • Server: Security updates for fast-xml-parser (#292)
  • Server: Fix handling errors in getDeviceType to prevent empty device list (#286) thanks to @ls-andy
View release on GitHub
0.0.46 New feature
Notable features
  • Screen recording support for iOS (real devices and simulators)
  • Screen recording support for Android (real devices and emulators)
  • Improved tool description for device listing
Full changelog
  • Server: Improved tool description for listing devices, easier on prompting (#282)
  • iOS: Added support for screen recording for both real devices and simulators (#282)
  • Android: Added support for screen recording for both real devices and emulators (#282)
View release on GitHub
0.0.45 Security relevant
Security fixes
  • Updated fast-xml-parser package for security
  • Fixed shell escaping in launchApp
  • Fixed URL escaping in openUrl
Full changelog
  • Server: updated fast-xml-parser package for security (#281)
  • Server: fix noParams issue that started annoying Claude Code recently (#280)
  • Android: fix shell escaping through launchApp (#279) thanks to @yuhanghuang
  • Android: escape url when calling openUrl (#278) thanks to @yuhanghuang
View release on GitHub
0.0.44 Maintenance

* General: Rolling out support for remote devices, allocate Android and iOS devices on Mobile Fleet

View release on GitHub
0.0.43 Security relevant
Security fixes
  • dep: npm packages upgraded for security
Full changelog
  • General: Increase buffers used for screenshots, fixes bugs where screenshot was >4MB (#270)
  • General: Upgraded several npm packages for security (#272)
View release on GitHub
0.0.42 Security relevant
Security fixes
  • Security update for fast-xml-parser package
Full changelog
  • General: upgraded mobilecli to 0.0.54, see changes (ba3ec1b)
  • General: updated fast-xml-parser package for security (#261)
View release on GitHub
0.0.40 Maintenance

* Server: bump @modelcontextprotocol/sdk from 1.24.2 to 1.25.2 for security

View release on GitHub
0.0.39 New feature
Notable features
  • Tool annotations on server for improved LLM tool understanding
  • Duration parameter added to longpress on iOS and Android for custom press durations
Full changelog
  • Server: added tool annotations for improved LLM tool understanding (#246)
  • iOS: added 'duration' parameter to longpress for custom press durations (#247)
  • Android: added 'duration' parameter to longpress for custom press durations (#247)
View release on GitHub

Beta — feedback welcome: [email protected]