Skip to content

feat(web): WebMCP tools via @profullstack/webmcp (search API + search form) - #146

Merged
ralyodio merged 1 commit into
mainfrom
feat/webmcp
Nov 11, 2026
Merged

ralyodio merged 1 commit into
mainfrom
feat/webmcp

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Adds the @profullstack/webmcp embed so an AI agent in the visitor's browser (WebMCP) can use this site's tools.

Rollout of @profullstack/webmcp 0.1.0 (github.com/profullstack/webmcp).

🤖 Generated with Claude Code

… form)

Adds the @profullstack/webmcp embed so an AI agent in the visitor's browser (WebMCP) can use this site's tools.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio
ralyodio merged commit 731e082 into main Nov 11, 2026
3 checks passed
@ralyodio
ralyodio deleted the feat/webmcp branch November 11, 2026 08:38
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

1 finding(s) in the 2 file(s) this pull request changes.

MEDIUM: 1

Severity Rule Location
MEDIUM js-unescaped-html-sink apps/web/src/views/Layout.jsx:184
68 pre-existing finding(s) elsewhere in the repository — **HIGH**: 2 | **MEDIUM**: 49 | **LOW**: 17

Not introduced by this pull request.

Severity Rule Location
HIGH secret-database-url .env.example:7
HIGH secret-database-url docker-compose.yml:11
MEDIUM js-unescaped-html-sink apps/web/public/app.js:2037
MEDIUM js-dynamic-code-execution apps/web/public/diag.js:174
MEDIUM js-encoded-payload-execution apps/web/public/vendor-vault.js:1
MEDIUM js-encoded-payload-execution apps/web/public/vendor-webauthn.js:1
MEDIUM js-regex-from-input apps/web/src/app.js:333
MEDIUM sql-template-interpolation apps/web/src/lib/leaderboard.js:81
MEDIUM js-indirect-code-sink packages/auth/src/vault.js:35
MEDIUM js-indirect-code-sink packages/auth/src/vault.js:36
MEDIUM js-indirect-code-sink packages/auth/src/vault.js:39
MEDIUM js-indirect-code-sink packages/auth/src/vault.js:40
MEDIUM js-indirect-code-sink packages/auth/src/vault.js:117
MEDIUM js-indirect-code-sink packages/auth/src/vault.js:123
MEDIUM sql-template-interpolation packages/credits/src/cli.js:91
MEDIUM sql-template-interpolation packages/db/src/migrate.js:42
MEDIUM sql-template-interpolation packages/db/src/queries.js:205
MEDIUM sql-template-interpolation packages/db/src/queries.js:222
MEDIUM sql-template-interpolation packages/db/src/queries.js:227
MEDIUM sql-template-interpolation packages/db/src/queries.js:231

…and 48 more; the full set is in the SARIF artifact.

Snippets are redacted; ThreatCrush never prints matched credential material.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant