v2.5.0-phoenix-mcp-487787a

What's Changed

• chore(deps): bump cryptography from 46.0.7 to 48.0.1 by @dependabot[bot] in #154
• chore(deps): bump starlette from 0.52.1 to 1.3.1 by @dependabot[bot] in #153
• fix: correct OAuth redirect allowlist by @akhil-vamshi-konam in #164
• feat: replace work item relations with dedicated dependency and custom relation tools by @akhil-vamshi-konam in #148
• chore: add ChatGPT OAuth connector redirect URIs to OAuth allowlist by @akhil-vamshi-konam in #165
• perf: use lite endpoints for project/cycle/module lists to fix large-workspace timeouts by @akhil-vamshi-konam in #162
• feat: load extra OAuth redirect URIs from env by @akhil-vamshi-konam in #166

Full Changelog: v0.2.9...v2.5.0-phoenix-mcp-487787a

v0.2.10

Features

Roles

• Added workspace/project role tools:

  • list_roles — list role definitions; filter by namespace (workspace or project), cursor-paginated

  • retrieve_role — fetch a single role definition by id

Initiatives

• Added initiative project management tools:

  • list_initiative_projects — list projects linked to an initiative

  • manage_initiative_projects — add or remove project links for an initiative

Work Item Relations

• work_item_relation_definitions (CRUD for workspace relation definitions)

• work_item_dependencies (manage the six built-in dependency types)

• work_item_custom_relations (manage definition-based custom relations)

Improvements

Workspace & Project Members

• get_workspace_members and get_project_members now use lightweight, cursor-paginated endpoints, improving performance and avoiding timeouts in large workspaces.

• Added member filters: first_name, last_name, email, display_name, role_slug, is_active, and is_bot.

• Member results now include role, role_slug, is_active, and is_bot.

Projects, Cycles & Modules

• list_projects, list_cycles, and list_modules now use lightweight, cursor-paginated endpoints, improving performance and avoiding timeouts in large workspaces.

OAuth Authentication

• Redirect URI allowlist is now configurable at runtime via the
  PLANE_OAUTH_ALLOWED_REDIRECT_URIS environment variable appended to the built-in defaults.

Logging

• Added workspace_slug and tool names to logs.

• Added LOG_USER_INFO (default: false) to optionally include user display names while keeping PII logging disabled by default.

Fixes

OAuth Authentication

• Fixed OAuth redirect URI validation for supported MCP clients.

• Updated the OAuth redirect allowlist for Chatgpt connectors, Cursor, VS Code, and Antigravity, resolving authentication failures caused by redirect URI mismatches.

Full Changelog: v0.2.9...v0.2.10

v2.5.0-phoenix-845a621

What's Changed

• refactor: replace dedicated epic tools with work-item-type-based approach and add server instructions by @akhil-vamshi-konam in #149
• feat: add work item attachment tools by @akhil-vamshi-konam in #147
• chore: consolidate add/remove and archive/unarchive tool pairs by @akhil-vamshi-konam in #150

Full Changelog: v2.5.0-phoenix-3d54d1a...v2.5.0-phoenix-845a621

v0.2.9

🚀 Features

Work Item Attachments

• Added attachment management tools:

  • list_work_item_attachments

  • upload_work_item_attachment_from_url with built-in SSRF protection

  • get_work_item_attachment_download_url

  • delete_work_item_attachment

  • read_work_item_attachment to read supported image and text attachments directly within MCP

Epics & Initiatives

• Updated Epic management to use regular work items with the Epic type

• Added resolve_work_item_type to automatically resolve or create work item types

• Added import_work_item_types_to_project for bulk type imports

• Added Initiative fallback guidance when the workspace feature is disabled

• Improved MCP instructions around Epic workflows

Projects

• Added project visibility management (public/private)

• Added project archive and unarchive support

• Added estimate scheme management, including:

  • Create, update, and delete estimate schemes

  • Create, update, and delete estimate point values

Work Items

• Added workspace-wide analytics with count_work_items

• Added PQL-based work item listing

• Added PQL filtering, sparse field selection, and per_page/cursor pagination to list_work_items

• Added custom property value management

• Added estimate assignment support

• Added archived work item management

• Added intake (triage) workflows to accept, decline, snooze, mark duplicates, or reset intake items

Pages

• Added workspace and project page listing

• Added page linking support for work items

Authentication & OAuth

• Added OAuth support for the Claude.ai web client

✨ Improvements

Tool Consolidation

• Reduced LLM ambiguity by consolidating multiple add/remove and archive/unarchive operations into unified tools.

Entity Management Consistency

• Updated cycle, module, and milestone tools to consistently use work_item_ids instead of issue_ids when managing associated work items.

Performance Optimizations

• Optimized custom property discovery using faster workspace-level lookups.

• Added user_id to request logs for improved traceability.

Documentation Improvements

• Clarified list_work_items field documentation by documenting description_html and noting that omitted or misnamed sparse fields return null instead of appearing as missing values.

🏗 Infrastructure

Deployment Improvements

• Added support for configurable MCP subpath deployments using MCP_PATH_PREFIX.

• Added AWS Secrets Manager support for Redis authentication in self-hosted deployments.

Dependency Updates

• Upgraded FastMCP to v3.2.0.

• Updated py-key-value.

• Added compatibility constraints for fakeredis.

🐛 Fixes

Authentication Security

• Fixed API key validation in PlaneHeaderAuthProvider.

• API keys are now validated against the Plane API instead of accepting any non-empty value.

• Improved validation requirements for authentication headers.

Work Item Descriptions

• Fixed create_work_item and update_work_item so plain-text descriptions are now correctly persisted by wrapping description_stripped into description_html instead of silently dropping the content.

Dependency Compatibility

• Pinned fakeredis < 2.35.0 to prevent pydocket startup failures caused by upstream breaking changes.

OAuth

• Disabled CIMD by default.

• Improved internal/external URL resolution handling across deployment configurations.

v2.5.0-phoenix-3d54d1a

What's Changed

• feat: include authenticated user-id on every JSON log line by @pratapalakshmi in #142
• chore: optimize work item property discovery and scope resolution by @akhil-vamshi-konam in #144
• chore: add count_work_items tool and bump SDK by @akhil-vamshi-konam in #146
• chore: add configurable CIMD support for Plane OAuth provider by @akhil-vamshi-konam in #143
• fix: drop display_name from logs to avoid logging PII by @pratapalakshmi in #145

Full Changelog: v2.5.0-phoenix-4fac0be...v2.5.0-phoenix-3d54d1a

v2.5.0-phoenix-838c572

What's Changed

• chore: bump plane sdk version to 0.2.10 by @Saurabhkmr98 in #111
• docs: fix PAT endpoint URL, add version requirements and tool inventory by @anmolsinghbhatia in #116
• [SILO-1196] fix: add work items to plane entity tools by @Saurabhkmr98 in #109
• chore: update fastmcp and py-key-value version by @Saurabhkmr98 in #115
• chore: update mcp version to 0.2.9 by @Saurabhkmr98 in #121
• [SILO-1181] feat: support configurable subpath prefix for MCP server by @Prashant-Surya in #106
• feat: add archive, page, estimate, and intake triage tools by @akhil-vamshi-konam in #127
• feat: PQL filtering, workspace-scoped types by @akhil-vamshi-konam in #133
• chore(deps): consolidate Dependabot security bumps by @sriramveeraghanta in #135
• chore: add support to fetch redis creds from aws secret by @pratapalakshmi in #132
• refactor: move pql_reference into tools by @akhil-vamshi-konam in #138

New Contributors

• @anmolsinghbhatia made their first contribution in #116
• @akhil-vamshi-konam made their first contribution in #127
• @pratapalakshmi made their first contribution in #132

Full Changelog: v2.5.0-phoenix-24565ab...v2.5.0-phoenix-838c572

v2.5.0-phoenix-4fac0be

What's Changed

• chore: bump plane sdk version to 0.2.10 by @Saurabhkmr98 in #111
• docs: fix PAT endpoint URL, add version requirements and tool inventory by @anmolsinghbhatia in #116
• [SILO-1196] fix: add work items to plane entity tools by @Saurabhkmr98 in #109
• chore: update fastmcp and py-key-value version by @Saurabhkmr98 in #115
• chore: update mcp version to 0.2.9 by @Saurabhkmr98 in #121
• [SILO-1181] feat: support configurable subpath prefix for MCP server by @Prashant-Surya in #106
• feat: add archive, page, estimate, and intake triage tools by @akhil-vamshi-konam in #127
• feat: PQL filtering, workspace-scoped types by @akhil-vamshi-konam in #133
• chore(deps): consolidate Dependabot security bumps by @sriramveeraghanta in #135
• chore: add support to fetch redis creds from aws secret by @pratapalakshmi in #132
• refactor: move pql_reference into tools by @akhil-vamshi-konam in #138

New Contributors

• @anmolsinghbhatia made their first contribution in #116
• @akhil-vamshi-konam made their first contribution in #127
• @pratapalakshmi made their first contribution in #132

Full Changelog: v2.5.0-phoenix-24565ab...v2.5.0-phoenix-4fac0be

v2.5.0-phoenix-b5ad5360

What's Changed

• fix: validate API key in PlaneHeaderAuthProvider and pin fakeredis<2.35.0 by @Prashant-Surya in #105

Full Changelog: v2.5.0-phoenix-a508900...v2.5.0-phoenix-b5ad5360

v2.5.0-phoenix-24565ab

What's Changed

• fix: validate API key in PlaneHeaderAuthProvider and pin fakeredis<2.35.0 by @Prashant-Surya in #105

Full Changelog: v2.5.0-phoenix-a508900...v2.5.0-phoenix-24565ab

v2.5.0-phoenix-a508900

What's Changed

• chore: upgrade dependencies and replace black with ruff formatter by @sriramveeraghanta in #92

Full Changelog: v0.2.8...v2.5.0-phoenix-a508900