Skip to content

feat: WebMCP tools via @profullstack/webmcp (bridges /api/mcp, search + form tools) - #93

Merged
ralyodio merged 1 commit into
masterfrom
feat/webmcp
Nov 11, 2026
Merged

ralyodio merged 1 commit into
masterfrom
feat/webmcp

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Adds the @profullstack/webmcp embed so an AI agent in the visitor's browser (WebMCP) can use this site's tools.

Rollout of @profullstack/webmcp 0.1.0 (github.com/profullstack/webmcp).

🤖 Generated with Claude Code

… + form tools)

Adds the @profullstack/webmcp embed so an AI agent in the visitor's browser (WebMCP) can use this site's tools.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio
ralyodio merged commit 8766396 into master Nov 11, 2026
4 checks passed
@ralyodio
ralyodio deleted the feat/webmcp branch November 11, 2026 08:15
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

6 finding(s) in the 7 file(s) this pull request changes.

MEDIUM: 6

Severity Rule Location
MEDIUM js-unescaped-html-sink src/app/layout.tsx:153
MEDIUM js-unescaped-html-sink src/app/podcasts/page.tsx:48
MEDIUM js-unescaped-html-sink src/app/radio/page.tsx:131
MEDIUM sql-template-interpolation src/app/search/page.tsx:18
MEDIUM js-unescaped-html-sink src/app/tv/page.tsx:115
MEDIUM js-open-redirect src/components/SubmitForm.tsx:55
40 pre-existing finding(s) elsewhere in the repository — **HIGH**: 3 | **MEDIUM**: 31 | **LOW**: 6

Not introduced by this pull request.

Severity Rule Location
HIGH secret-database-url .github/workflows/ci.yml:28
HIGH js-ssrf-outbound-request public/sw.js:45
HIGH js-ssrf-outbound-request src/app/api/audio/route.ts:34
MEDIUM sql-template-interpolation scripts/build_live.py:16
MEDIUM sql-template-interpolation scripts/build_live.py:28
MEDIUM sql-string-concatenation scripts/export_indie.py:221
MEDIUM sql-template-interpolation scripts/load_directory.mjs:84
MEDIUM sql-template-interpolation scripts/load_directory.mjs:112
MEDIUM sql-template-interpolation scripts/load_directory.mjs:173
MEDIUM js-unescaped-html-sink src/app/about/page.tsx:101
MEDIUM sql-template-interpolation src/app/category/[category]/page.tsx:62
MEDIUM js-unescaped-html-sink src/app/category/[category]/page.tsx:75
MEDIUM sql-template-interpolation src/app/language/[lang]/page.tsx:64
MEDIUM sql-template-interpolation src/app/language/[lang]/page.tsx:78
MEDIUM js-unescaped-html-sink src/app/language/[lang]/page.tsx:91
MEDIUM sql-template-interpolation src/app/networks/[slug]/page.tsx:47
MEDIUM sql-template-interpolation src/app/networks/[slug]/page.tsx:49
MEDIUM js-unescaped-html-sink src/app/networks/[slug]/page.tsx:62
MEDIUM sql-template-interpolation src/app/networks/page.tsx:23
MEDIUM js-unescaped-html-sink src/app/podcast/[slug]/page.tsx:134

…and 20 more; the full set is in the SARIF artifact.

Snippets are redacted; ThreatCrush never prints matched credential material.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant