Repository navigation

chore(deps): update mcp requirement from <2,>=1.0 to >=1.0,<3 - #39

Closed

dependabot[bot] wants to merge 194 commits into

mainfrom

dependabot/pip/mcp-gte-1.0-and-lt-3

Closed

chore(deps): update mcp requirement from <2,>=1.0 to >=1.0,<3#39
dependabot[bot] wants to merge 194 commits into
mainfrom
dependabot/pip/mcp-gte-1.0-and-lt-3

Commits on Apr 16, 2026
- Initial implementation of TarkaMCP - Proxmox infrastructure MCP server
  
  Showdown76py
  and
  claude
  committed
  1b62370
- Add integration test suite and server-side installation README
  
  Showdown76py
  and
  claude
  committed
  4fcc0eb
- Fix missing French accents in README.md
  
  Showdown76py
  and
  claude
  committed
  f9d8acc
- Polish README with badges, features section, and usage examples
  
  Showdown76py
  and
  claude
  committed
  499457c
- Add multi-platform support: Streamable HTTP transport, auth, deploy
  
  Showdown76py
  and
  claude
  committed
  d031539
- Make bearer token auth optional for Claude web compatibility
  
  Showdown76py
  and
  claude
  committed
  aebbb59
- Replace bearer token auth with URL-based secret
  
  Showdown76py
  and
  claude
  committed
  c7b6659
- Replace URL secret with proper OAuth 2.1 client credentials
  
  Showdown76py
  and
  claude
  committed
  65db6e9
- Remove local/stdio mode, make HTTP-only with OAuth
  
  Showdown76py
  and
  claude
  committed
  ed061cf
- Fix Proxmox API usage bugs and systemd unit
  claude
  committed
  f099fad
- Review round 2: robustness, auth hardening, cluster dedup, README
  claude
  committed
  044d33f
- Merge pull request #1 from Showdown76py/claude/review-proxmox-api-Xu7Lj
  Showdown76py
  authored
  90aaf10
- Use Python venv for install and update systemd unit
  
  Showdown76py
  and
  claude
  committed
  0b3b008
- Make install.sh robust when python3-venv is missing
  
  Showdown76py
  and
  claude
  committed
  b8ee184
- Add OAuth 2.1 authorization_code + PKCE flow for browser clients
  
  Showdown76py
  and
  claude
  committed
  d4aeae8
- Forward MCP app lifespan to Starlette root
  
  Showdown76py
  and
  claude
  committed
  43ba161
- Configure MCP DNS-rebinding allowlist via env vars
  
  Showdown76py
  and
  claude
  committed
  6d536c1
- Document TARKAMCP_ALLOWED_HOSTS and auth error troubleshooting
  
  Showdown76py
  and
  claude
  committed
  cc724c9
- Fix iLO client falling back to hponcfg local mode
  
  Showdown76py
  and
  claude
  committed
  eb2c448
- Enforce TOTP 2FA for every OAuth client
  
  Showdown76py
  and
  claude
  committed
  690312a
- Serve OAuth protected-resource metadata (RFC 9728)
  
  Showdown76py
  and
  claude
  committed
  e059e96
- Add security_end_session tool to revoke the caller's bearer token
  
  Showdown76py
  and
  claude
  committed
  f767f6b
- Add 30s grace period before revoked tokens actually expire
  
  Showdown76py
  and
  claude
  committed
  82c2c5c
- Shorten revocation grace period from 30s to 8s
  
  Showdown76py
  and
  claude
  committed
  191838d
- Advertise ExampleCore logo as the MCP server icon
  
  Showdown76py
  and
  claude
  committed
  4d60321
- Add dashboard design spec for login + Gemini chat panels
  
  Showdown76py
  and
  claude
  committed
  efd8f78
- Add dashboard stage 1: auth, sessions, login UI
  
  Showdown76py
  and
  claude
  committed
  74a55a3
- Add dashboard stages 2 & 3: Gemini chat with MCP tools
  
  Showdown76py
  and
  claude
  committed
  18020f2
- Use correct Gemini 3 preview model IDs
  
  Showdown76py
  and
  claude
  committed
  02960f7
- Fix Gemini PERMISSION_DENIED by switching to local MCP session
  
  Showdown76py
  and
  claude
  committed
  08cfde6
- Unwrap TaskGroup ExceptionGroups + restore remote MCP mode
  
  Showdown76py
  and
  claude
  committed
  9a26108
- Classify 403 as model-access error with a clear remediation
  
  Showdown76py
  and
  claude
  committed
  f114f8d
- Auto-retry transient Gemini 5xx + classify 500 INTERNAL
  
  Showdown76py
  and
  claude
  committed
  69c6ad0
- Fix deterministic 500 INTERNAL on gemini-2.5-pro via manual MCP tool loop
  
  Showdown76py
  and
  claude
  committed
  83b741b
- Disable remote MCP mode, route 500 cascade to a clear error
  
  Showdown76py
  and
  claude
  committed
  e28a02e
Commits on Apr 17, 2026
- Detect bearer wiped by service restart + fix MCP auth header plumbing
  
  Showdown76py
  and
  claude
  committed
  73f91f3
- Break the refresh<->chat redirect loop after a service restart
  
  Showdown76py
  and
  claude
  committed
  d7c3700
- Extend chat markdown: headings, lists, blockquote, hr
  
  Showdown76py
  and
  claude
  committed
  8f7afe0
- Always require manual approval before running SSH exec from the chat
  
  Showdown76py
  and
  claude
  committed
  4dea78e
- Add dashboard "Tokens API" page for external MCP clients
  
  Showdown76py
  and
  claude
  committed
  8d9cedd
- Promote Tokens API to a prominent sidebar CTA
  
  Showdown76py
  and
  claude
  committed
  777d766
- README: document Tokens API, SSH confirmation, MCP local-only mode
  
  Showdown76py
  and
  claude
  committed
  1f76a7d
- Add per-client usage limits to the dashboard chat panel
  
  Showdown76py
  and
  claude
  committed
  ca75516
- Turn usage footer into a clickable Claude-style modal
  
  Showdown76py
  and
  claude
  committed
  dc518ba
- Split dashboard docs out + run tokens page without a Gemini key
  
  Showdown76py
  and
  claude
  committed
  0a7962b
- Merge pull request #2 from Showdown76py/docs/dashboard-split-and-token-only-mode
  Showdown76py
  authored
  467047b
- Merge remote-tracking branch 'origin/main' into feat/usage-modal
  Showdown76py
  committed
  a9b5179
- Merge pull request #3 from Showdown76py/feat/usage-modal
  Showdown76py
  authored
  5c517de
- Require manual approval for proxmox_exec_* + trim README into docs/
  
  Showdown76py
  and
  claude
  committed
  96ef3a9
- Rebrand TarkaMCP to BeaconMCP with modular N-node / N-BMC support
  
  Showdown76py
  and
  claude
  committed
  c7c0edf
- Quote Proxmox token_id in beaconmcp.yaml.example
  
  Showdown76py
  and
  claude
  committed
  272555c
- Add 'Generating…' indicator to the dashboard chat stream
  
  Showdown76py
  and
  claude
  committed
  f1360bf
- Strip :port from Proxmox node host before SSH/BMC tunneling
  
  Showdown76py
  and
  claude
  committed
  3dd384e
- Rename indicator 'Generating…' to 'Thinking…' and slow animations
  
  Showdown76py
  and
  claude
  committed
  d7ab887
- Recommend deploying BeaconMCP on the primary Proxmox node
  
  Showdown76py
  and
  claude
  committed
  d22b094
- Merge pull request #4 from Showdown76py/rebranding/beaconmcp
  Showdown76py
  authored
  527f33c
- Switch to Apache 2.0 + Commons Clause
  
  Showdown76py
  and
  claude
  committed
  1abb61c
- Modify LICENSE for software name and copyright
  Showdown76py
  authored
  a54701a
- Render GFM tables in the dashboard chat
  
  Showdown76py
  and
  claude
  committed
  cd9ac47
- Split Connecting clients docs per provider and remove TOTP-generation guidance
  
  Showdown76py
  and
  claude
  committed
  27f4c85
- Document the TOTP automation escape hatch with prominent warnings
  
  Showdown76py
  and
  claude
  committed
  d6bd01c
- Support OAuth Dynamic Client Registration via slug-gated bootstrap URLs
  
  Showdown76py
  and
  claude
  committed
  b7ffa19
- Link to ChatGPT connectors from the tokens page
  
  Showdown76py
  and
  claude
  committed
  6b08895
- Promote the ChatGPT connectors link to a proper CTA section
  
  Showdown76py
  and
  claude
  committed
  8a44ef9
- Reorganise /app/tokens around auth methods and platforms
  
  Showdown76py
  and
  claude
  committed
  a190b51
- Polish /app/tokens with nested tabs, hero endpoint, and logo pills
  
  Showdown76py
  and
  claude
  committed
  72a390d
- Group client variants under parent platforms; add Mistral/OpenCode/VS Code/Cursor
  
  Showdown76py
  and
  claude
  committed
  9fe380b
- Correct MCP config schemas after verifying against each vendor's docs
  
  Showdown76py
  and
  claude
  committed
  4256aff
- Tighten /app/tokens and split client docs into docs/clients.md
  
  Showdown76py
  and
  claude
  committed
  24f7e39
- Add Perplexity as an OAuth + DCR platform
  
  Showdown76py
  and
  claude
  committed
  e0e8755
- Mistral Le Chat: correct menu path, prefer OAuth DCR, document CORS allowlist
  
  Showdown76py
  and
  claude
  committed
  fa92205
- Mistral Le Chat: pure OAuth 2.1 on /mcp; expandable CORS note; flag Vibe as unverified
  
  Showdown76py
  and
  claude
  committed
  498e94e
- Refine client coverage: add Codex, drop Perplexity, promote OAuth DCR everywhere
  
  Showdown76py
  and
  claude
  committed
  021edd3
- Validate redirect_uris against a trusted-origin allowlist on both DCR and authorize
  
  Showdown76py
  and
  claude
  committed
  74c7e0d
- Update token-page tests to match the redesigned counter + banner strings
  
  Showdown76py
  and
  claude
  committed
  9566182
- Collapse method-tag badges to OAuth 2.1 / Bearer (drop DCR distinction)
  
  Showdown76py
  and
  claude
  committed
  5b755ee
- docs: link clients.md from README dashboard section
  Showdown76py
  committed
  6820bd0
- Restore the OAuth 2.1 / OAuth + DCR / Bearer three-way split
  
  Showdown76py
  and
  claude
  committed
  56370d0
- fix: update RFC 9728 metadata to include /mcp path in resource
  Showdown76py
  committed
  20e25eb
- Token-optimize MCP tool responses + fix list_nodes for standalone hosts
  
  Showdown76py
  and
  claude
  committed
  c5c25b8
- Make Proxmox / SSH / BMC capabilities independent + SSH multi-host
  
  Showdown76py
  and
  claude
  committed
  d9a728a
- Forward MCP instructions as Gemini system_instruction in dashboard chat
  
  Showdown76py
  and
  claude
  committed
  e6791ea
- Merge pull request #5 from Showdown76py/feature/independent-capabilities
  Showdown76py
  authored
  e470628
- Redesign dashboard UI (chat, auth, tokens)
  
  Showdown76py
  and
  claude
  committed
  f3e47cf
- Merge pull request #6 from Showdown76py/web/redesign
  Showdown76py
  authored
  904cad2
- Add aggregator tools, unify exec tools, add fields= trim
  Ailcope
  committed
  c93f25b
- dashboard: interleave assistant text between tool calls
  Showdown76py
  committed
  4fb14bd
- dashboard: fix invalid function_call part replay
  Showdown76py
  committed
  cae6ab2
- dashboard: separate tool-round text and raise loop limit
  Showdown76py
  committed
  7dfb869
- dashboard: interleave streaming text and tool cards
  Showdown76py
  committed
  8a8757c
- Bring OAuth 2FA page + 'Thinking…' shimmer up to the new design
  
  Showdown76py
  and
  claude
  committed
  957f321
- SSH: restore pre-2.0 homelab ergonomics with inherit_proxmox_nodes
  
  Showdown76py
  and
  claude
  committed
  f499921
- Docker image + LAN-IP convention for host: fields
  
  Showdown76py
  and
  claude
  committed
  c538edf
- Add `beaconmcp init` — interactive TUI config wizard
  
  Showdown76py
  and
  claude
  committed
  1d31fec
Commits on Apr 18, 2026
- beaconmcp init: refuse to overwrite existing config; fix NameError without textual
  Showdown76py
  committed
  26edad4
- wizard: load existing beaconmcp.yaml so `init` doubles as an editor
  Showdown76py
  committed
  f244969
- wizard: cover server port/session_key/dyn-reg, dashboard, proxmox verify_ssl
  Showdown76py
  committed
  d2d728b
- Fix formatting in architecture section of README
  Showdown76py
  authored
  d5a0aad
- config: clearer error when a referenced env var is set but empty
  Showdown76py
  committed
  b6b9a8d
- wizard: give allowed_hosts/allowed_origins a bounded height
  Showdown76py
  committed
  ec49b62
- docs: align README / docs / tests with unified ssh_run & proxmox_run
  Ailcope
  committed
  a6e01d7
- docs/runtime: replace remaining *_exec_command references
  Ailcope
  committed
  ff44378
- batch A: mechanical fixes, logging, fields=, parallel aggregators
  
  Ailcope
  and
  claude
  committed
  757ad1b
- batch C: structured audit log + Prometheus /metrics endpoint
  
  Ailcope
  and
  claude
  committed
  031f71d
- Update src/beaconmcp/proxmox/aggregators.py
  
  Ailcope
  and
  Copilot
  authored
  2d82425
- docs: clarify proxmox_run LXC behavior
  Showdown76py
  committed
  2571b80
- Merge pull request #9 from Ailcope/fix/confirmation-unified-run-names
  Ailcope
  authored
  0b95e35
Commits on Apr 19, 2026
- Merge branch 'beacon-main-latest' into pr-10-conflict-fix
  
  Showdown76py
  authored and
  Ailcope
  committed
  9730b3f
- Merge pull request #10 from Ailcope/feat/batch-a-mechanical-fixes
  Ailcope
  authored
  54b693c
- batch B: SSH known_hosts + per-IP rate-limit on auth endpoints
  Ailcope
  committed
  0f20fd7
- Apply suggestion from @Copilot
  
  authored and
  Ailcope
  committed
  f64bb35
- Harden auth rate-limit IP trust and add Cloudflare proxy macro
  Showdown76py
  committed
  8e59965
- chore: generalize AI assistant terminology across docs and config
  Ailcope
  committed
  64d8876
- Update init wizard with trusted_proxies support
  Showdown76py
  committed
  f5f351b
- Merge pull request #11 from Ailcope/feat/batch-b-security
  Ailcope
  authored
  d6ab775
- feat: Operator UX and Safety enhancements
  Ailcope
  committed
  565e2d9
- Fix Starlette middleware duplication in HTTP app setup
  Showdown76py
  committed
  4db68d5
- Merge origin/main into feat/batch-c-observability and resolve conflicts
  Showdown76py
  committed
  18bc5f7
- Merge pull request #12 from Ailcope/feat/batch-c-observability
  Ailcope
  authored
  ac78d47
- feat: Add Proxmox VM snapshot tools
  Ailcope
  committed
  aa92530
- fix: address operator UX regressions and safety concerns
  Ailcope
  committed
  65bcd0f
- fix: address PR feedback on snapshot tools
  Ailcope
  committed
  c92efe6
- docs: add updating instructions to README
  Ailcope
  committed
  81aad53
- feat: add QEMU guest agent file operations and Proxmox vzdump backup tools
  Ailcope
  committed
  8b9e134
- feat(epic-hardware-redfish): Implement Universal Redfish REST backend
  Ailcope
  committed
  9e3669a
- feat(epic-dashboard-overhaul): Add Status Overview and Usage/Cost Tracking UI
  Ailcope
  committed
  f3b7dcc
- Merge branch 'feat/epic-hardware-redfish' into chore/misc
  Ailcope
  committed
  fe3ac20
- Merge branch 'feat/epic-dashboard-overhaul' into chore/misc
  Ailcope
  committed
  a6ee98f
- fix(proxmox): fix backup create format, restore parse logic, and read/write file size limits
  Ailcope
  committed
  78b9da1
- fix(bmc): fix BMCDevice imports, add verify_tls toggle, and pin httpx dependency
  Ailcope
  committed
  e6ed8cd
- refactor(dashboard): Replace fake data with neutral Coming Soon placeholders
  Ailcope
  committed
  fc1a354
- Merge branch 'feat/epic-hardware-redfish' into chore/misc
  Ailcope
  committed
  396daac
- Merge branch 'feat/epic-dashboard-overhaul' into chore/misc
  Ailcope
  committed
  55a72a3
- Merge pull request #13 from Ailcope/feat/operator-ux
  Ailcope
  authored
  9605067
- Merge pull request #14 from Ailcope/feat/vm-snapshots
  Ailcope
  authored
  0a6fee8
- Merge pull request #18 from Ailcope/feat/epic-dashboard-overhaul
  Ailcope
  authored
  3ab4766
- fix(proxmox): harden proxmox_write_file with size limits and normalized errors
  Ailcope
  committed
  cd90306
- fix(bmc): discover Redfish LogServices dynamically instead of hardcoding Log1
  Ailcope
  committed
  c910abe
- Merge branch 'feat/epic-hardware-redfish' into chore/misc
  Ailcope
  committed
  342433c
- Merge upstream main and resolve conflicts
  Ailcope
  committed
  a08fc2d
- Merge upstream main and resolve conflicts
  Ailcope
  committed
  6708390
- Merge upstream main and resolve conflicts
  Ailcope
  committed
  158c3b5
- Merge branch 'feat/epic-guest-data' into chore/misc
  Ailcope
  committed
  cbad750
- Merge branch 'feat/epic-hardware-redfish' into chore/misc
  Ailcope
  committed
  2dc4634
- Merge pull request #16 from Ailcope/feat/epic-guest-data
  Ailcope
  authored
  bbd3cfd
- Merge pull request #17 from Ailcope/feat/epic-hardware-redfish
  Ailcope
  authored
  61d349a
- Merge pull request #19 from Ailcope/chore/misc
  Ailcope
  authored
  0ff2f3a
- Fix doctor config parsing and repair Proxmox VM tools file
  Showdown76py
  committed
  2a63521
Commits on Apr 20, 2026
- Refactor redirect URI validation to unify CORS and OAuth checks under server.allowed_origins; update documentation and tests accordingly
  
  Showdown76py
  and
  Copilot
  committed
  ac1f66b
- feat(proxmox): large-file upload/download for VMs and CTs
  Showdown76py
  committed
  195893b
Commits on Apr 25, 2026
- fix: checksum false-positive, add overwrite guard and delete tool
  
  Ailcope
  authored and
  claude
  committed
  c1f6d3f
- fix(transfers): surface unverified-checksum warning, atomic download
  claude
  committed
  9215f3b
- Merge pull request #20 from Showdown76py/feat/large-file-transfers
  Showdown76py
  authored
  1277827
Commits on Jun 10, 2026
Commits on Jun 11, 2026
- fix(security): owner-only tokens.db, harden audit redaction
  
  Showdown76py
  and
  claude
  committed
  643beab
- feat(config): YAML keys for tokens_db/audit_log, wizard host-key support
  
  Showdown76py
  and
  claude
  committed
  ca2ff95
- fix(proxmox): anchor PBS type heuristic on the VMID segment
  
  Showdown76py
  and
  claude
  committed
  c1f356d
- feat(auth): configurable named-token TTL (default 30 days)
  Ailcope
  committed
  0594f68
- fix(auth): named_token_ttl=0 means no expiry instead of silently 30 d
  
  Showdown76py
  and
  claude
  committed
  60e5315
- Merge pull request #22 from Ailcope/fix/review-patches
  Showdown76py
  authored
  599eab2
Commits on Jun 22, 2026
Commits on Jun 23, 2026
- docs(cloudflare): explain OWASP managed-rule 403s on infra commands
  Ailcope
  committed
  77d6917
Commits on Jul 24, 2026
Commits on Jul 25, 2026
Commits on Jul 29, 2026
Commits on Aug 1, 2026
- chore(deps): update mcp requirement from <2,>=1.0 to >=1.0,<3
  dependabot[bot]
  authored
  1788839

Commits

Commits on Apr 16, 2026

Commits on Apr 17, 2026

Commits on Apr 18, 2026

Commits on Apr 19, 2026