Install

Works with Drupal: ^10.3 || ^11

Using Composer to manage Drupal site dependencies

Alternative installation files

Download tar.gz 303.27 KB
MD5: 3faeea3a09890f8d694725c7b58c2857
SHA-1: 9e1a7d5384ae143d13fc8842a6e742e2906898b4
SHA-256: a0f2a7e21d129f9f531e311a77cced66ab968328001de6842e48522224b665cb
Download zip 647.11 KB
MD5: f3df2a4b0d77bc71f21597747e076204
SHA-1: e721e1edb8c39f667d3ef599dab4f53b99624b50
SHA-256: e919bfd408d2204be8b549d5f6f0bcf8cc41649565486c02ab802e84627cc764
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Release notes

- Add optional Origin/Host allowlist for remote HTTP (allowed_origins) as DNS-rebinding defense-in-depth.
- Expand HTTP E2E to verify Origin allowlist and Origin-vs-Host precedence.
- Add a JS MCP SDK STDIO smoke test in CI to catch strict-client/schema regressions early.

Created by: mowens
Created on: 4 Jan 2026 at 07:26 UTC
Last updated: 4 Jan 2026 at 07:26 UTC
Git tag 1.0.0-alpha17
New features

Other releases