Skip to content

feat: WebMCP tools via @profullstack/webmcp - #79

Merged
ralyodio merged 1 commit into
mainfrom
feat/webmcp
Nov 11, 2026
Merged

ralyodio merged 1 commit into
mainfrom
feat/webmcp

Conversation

@ralyodio

Copy link
Copy Markdown
Collaborator

Adds the @profullstack/webmcp embed to app/layout.tsx: site_info, open_page, search_site (/api/v1/products) and the public /api/mcp tools (search_products, get_product, list_categories, get_vocabulary, karma_rules, karma_leaderboard) bridged for in-browser AI agents. Key-only tools (Bearer header, which a browser page cannot send) are excluded. No CSP on this site. No-op where the browser has no WebMCP.

🤖 Generated with Claude Code

Adds @profullstack/webmcp so in-browser AI agents get the site's tools.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

15 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 11 | LOW: 2

Severity Rule Location
HIGH js-ssrf-outbound-request public/sw.js:21
HIGH js-ssrf-outbound-request src/lib/edgeProxy.ts:69
MEDIUM js-unescaped-html-sink src/components/JsonLd.tsx:13
MEDIUM redos-nested-quantifier src/lib/emailMarkdown.ts:43
MEDIUM redos-nested-quantifier src/lib/emailMarkdown.ts:302
MEDIUM js-unescaped-html-sink src/views/Admin.tsx:1811
MEDIUM js-unescaped-html-sink src/views/BlogPost.tsx:168
MEDIUM js-unescaped-html-sink src/views/EmailBroadcast.tsx:429
MEDIUM js-open-redirect src/views/Featured.tsx:279
MEDIUM js-unescaped-html-sink src/views/NewsPost.tsx:137
MEDIUM js-open-redirect src/views/SoftwareDetail.tsx:160
MEDIUM redos-nested-quantifier supabase/functions/_shared/emailMarkdown.ts:43
MEDIUM redos-nested-quantifier supabase/functions/_shared/emailMarkdown.ts:302
LOW secret-generic-credential __tests__/lib/webhooks/supabaseStore.test.ts:11
LOW secret-generic-credential cli/test/cli.test.mjs:309

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit dd239ce into main Nov 11, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant