3 Commits

Author	SHA1	Message	Date
airano	85379ec36c	fix(security): validate Bearer token value in MCP endpoints, not just presence ... Previously any Bearer token (even invalid) passed the HTTP middleware and got a session with access to tools/list and resources/list. Now the OAuthRequiredMiddleware validates tokens against master key, API keys, and OAuth JWT before allowing initialize. Also fixes: - WordPress Advanced env prefix: WORDPRESS_ → WORDPRESS_ADVANCED_ in docs - Bump version to 3.0.1 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-18 16:24:04 +03:30
airano	aa8afce707	fix: correct tool count (596), default English dashboard, clean up stale references ... - Tool count corrected: 589→596 (was missing 4 OAuth + 4 system config tools) - System tools: 17→24 (accurate count of @mcp.tool() functions) - Dashboard defaults to English; Farsi only via ?lang=fa query param - Updated across all files: README, CLAUDE.md, CONTRIBUTING, DOCKER_README, getting-started, CHANGELOG, endpoints config - Removed remaining Phase references from server.py startup log - Tests: 289 passing Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-18 03:14:28 +03:30
airano	3a3f04aca8	docs(onboarding): improve new user experience + fix OpenPanel tools ... - Add DOCKER_README.md for Docker Hub overview page - Fix docker-compose.yaml port mapping for local users ("8000:8000") - Add "Verify It Works" section with dashboard URL to README - Restructure env.example with clear REQUIRED section - Add post-Docker verification checklist to getting-started.md - Fix 4 OpenPanel tools: parameter ordering (non-default before default) - Rebrand all "Coolify Projects" to "MCP Hub" in server and Dockerfile - Make MCP namespace prefix stripping generic Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-18 02:22:48 +03:30