Version 2.7.0 Release Notes

Released: January 26, 2025

Overview

Version 2.7.0 introduces the Smart Server Wizard, a comprehensive multi-step guide for creating and configuring MCP servers, along with OAuth integration for streamable HTTP servers and a new trending servers discovery feature.

Key Features

Smart Server Wizard

Multi-step guided server creation with registry submission

OAuth Integration

Streamable HTTP OAuth support for secure authentication

Trending Servers

Activity-based trending algorithm for discovery

GitHub Verification

Automatic ownership verification for claimed servers

Smart Server Wizard

Multi-Step Configuration

The new wizard guides users through server setup:

Server Type Selection

Choose between registry servers, custom servers, or GitHub imports

Basic Configuration

Set server name, description, and transport type

Environment Variables

Automatic detection and configuration of required variables

Discovery Testing

Real-time validation of server connectivity

Registry Submission

Optional submission to the MCP Registry

GitHub Ownership Verification

Automatically verify ownership of GitHub-based servers:

// Verification process
User claims server from GitHub repo
System checks GitHub API for ownership
Verified badge applied to server
Enhanced trust in registry

Environment Variable Detection

The wizard automatically detects required environment variables:

{
  "env": {
    "OPENAI_API_KEY": {
      "required": true,
      "description": "OpenAI API key for AI features"
    },
    "DATABASE_URL": {
      "required": false,
      "description": "PostgreSQL connection string"
    }
  }
}

OAuth Integration

Streamable HTTP OAuth

Support for OAuth authentication in MCP servers:

// OAuth configuration
{
  "transport": {
    "type": "streamable",
    "oauth": {
      "provider": "github",
      "clientId": "your-client-id",
      "scopes": ["repo", "user"],
      "redirectUri": "https://plugged.in/oauth/callback"
    }
  }
}

Session Management

OAuth sessions are securely managed with automatic cleanup.

Features:

PostgreSQL session storage
In-memory caching for performance
Automatic token refresh
Session expiry handling
Secure token storage

Supported Providers

GitHub
Google
Linear
Custom

{
  "provider": "github",
  "scopes": ["repo", "user", "gist"]
}

{
  "provider": "google",
  "scopes": ["drive.readonly", "sheets"]
}

{
  "provider": "linear",
  "scopes": ["read", "write"]
}

{
  "provider": "custom",
  "authorizationUrl": "https://example.com/oauth/authorize",
  "tokenUrl": "https://example.com/oauth/token"
}

Activity-Based Algorithm

Servers trend based on real-time activity:

// Trending score calculation
score = (installs * 0.4) +
        (views * 0.2) +
        (shares * 0.3) +
        (recency * 0.1)

Metrics Tracking

Installation count
View count
Share count
Recent activity
User engagement

Discovery Interface

The trending section shows:

Top 10 trending servers
Activity sparklines
Installation badges
Quick install buttons

Registry Integration

Enhanced Submission Process

Validation

Automatic validation of server configuration

Token Authentication

Secure submission with registry tokens

Progress Tracking

Real-time submission status updates

Error Handling

Detailed error messages with fixes

Registry Schema Support

Support for new registry schema format:

{
  "name": "my-server",
  "description": "Server description",
  "author": "username",
  "transport": {
    "type": "streamable",
    "baseUrl": "https://api.example.com"
  },
  "tools": ["tool1", "tool2"],
  "resources": ["resource1"],
  "prompts": ["prompt1"]
}

Security Enhancements

Input Validation

Comprehensive Zod schemas for all inputs:

const serverSchema = z.object({
  name: z.string().min(3).max(50),
  description: z.string().max(500),
  transport: z.union([
    streamableSchema,
    stdioSchema,
    sseSchema
  ]),
  env: z.record(z.string(), envVarSchema).optional()
});

XSS Prevention

Removed all instances of dangerouslySetInnerHTML:

// Before (vulnerable)
<div dangerouslySetInnerHTML={{ __html: content }} />

// After (secure)
<div>{DOMPurify.sanitize(content)}</div>

OAuth Security

State parameter validation
PKCE flow support
Token encryption at rest
Automatic token cleanup
Session hijacking prevention

UI/UX Improvements

Wizard Interface

Step Indicators

Clear progress through wizard steps

Validation Feedback

Real-time validation with helpful messages

Auto-save

Progress saved automatically

Help Tooltips

Contextual help for each field

Connection Handling

Improved StreamingCliToast:

Better error messages
Retry logic
Connection state indicators
Timeout handling

Performance Improvements

Query Optimization

-- New indexes for trending calculation
CREATE INDEX idx_server_metrics_created ON server_metrics(created_at DESC);
CREATE INDEX idx_server_activity ON servers(install_count, view_count);

-- Optimized trending query
SELECT s.*,
  (install_count * 0.4 + view_count * 0.2 + share_count * 0.3) as score
FROM servers s
WHERE created_at > NOW() - INTERVAL '7 days'
ORDER BY score DESC
LIMIT 10;

Bundle Size Reduction

Removed unused dependencies
Code splitting for wizard components
Lazy loading for OAuth providers

Migration Guide

Database Updates

# Run migrations for new tables
pnpm db:migrate

# New tables added:
# - oauth_sessions
# - server_metrics
# - github_verifications

API Changes

OAuth endpoints added:

// Initiate OAuth flow
GET /api/oauth/authorize?provider=github

// OAuth callback
GET /api/oauth/callback?code=xxx&state=yyy

// Token refresh
POST /api/oauth/refresh

Environment Variables

New optional variables:

# OAuth providers
GITHUB_CLIENT_ID=your-client-id
GITHUB_CLIENT_SECRET=your-client-secret

# Registry
REGISTRY_API_URL=https://registry.plugged.in
REGISTRY_API_TOKEN=your-token

Bug Fixes

Fixed OAuth state management race conditions
Resolved registry submission timeout issues
Fixed server claiming for community servers
Corrected environment variable validation
Fixed LLM provider mapping in playground
Resolved console.log removal syntax errors
Fixed transport configuration handling

Known Issues

OAuth redirect may fail with strict browser settings
Large environment variable sets may cause UI lag
Registry submission may timeout for complex servers

Future Enhancements

Planned for v2.8.0:

Advanced OAuth scopes management
Batch server imports
Server templates
Enhanced metrics dashboard
API rate limiting per OAuth app

Breaking Changes

SSE transport is now deprecated. Migrate to Streamable HTTP.

SSE Deprecation: SSE servers show migration warnings
Registry Format: New schema format required
OAuth Required: Some servers now require OAuth

Support

For help with this release:

Documentation: docs.plugged.in
Wizard Guide: Server Creation Guide
GitHub Issues: Report issues

​Version 2.7.0 Release Notes

​Overview

​Key Features

Smart Server Wizard

OAuth Integration

Trending Servers

GitHub Verification

​Smart Server Wizard

​Multi-Step Configuration

​GitHub Ownership Verification

​Environment Variable Detection

​OAuth Integration

​Streamable HTTP OAuth

​Session Management

​Supported Providers

​Trending Servers

​Activity-Based Algorithm

​Metrics Tracking

​Discovery Interface

​Registry Integration

​Enhanced Submission Process

​Registry Schema Support

​Security Enhancements

​Input Validation

​XSS Prevention

​OAuth Security

​UI/UX Improvements

​Wizard Interface

Step Indicators

Validation Feedback

Auto-save

Help Tooltips

​Connection Handling

​Performance Improvements

​Query Optimization

​Bundle Size Reduction

​Migration Guide

​Database Updates

​API Changes

​Environment Variables

​Bug Fixes

​Known Issues

​Future Enhancements

​Breaking Changes

​Support

Version 2.7.0 Release Notes

Overview

Key Features

Smart Server Wizard

Multi-Step Configuration

GitHub Ownership Verification

Environment Variable Detection

OAuth Integration

Streamable HTTP OAuth

Session Management

Supported Providers

Trending Servers

Activity-Based Algorithm

Metrics Tracking

Discovery Interface

Registry Integration

Enhanced Submission Process

Registry Schema Support

Security Enhancements

Input Validation

XSS Prevention

OAuth Security

UI/UX Improvements

Wizard Interface

Connection Handling

Performance Improvements

Query Optimization

Bundle Size Reduction

Migration Guide

Database Updates

API Changes

Environment Variables

Bug Fixes

Known Issues

Future Enhancements

Breaking Changes

Support