v0.2.0 - Security fixes & version sync

@timergy/mcp v0.2.0

Security Fixes

• Bump @modelcontextprotocol/sdk to ^1.26.0 (fixes 3 HIGH severity CVEs)
  • GHSA-8r9q-7v3j-jr4g: ReDoS vulnerability
  • GHSA-345p-7cg4-v4c7: Cross-client data leak via shared transport reuse
  • GHSA-w48q-cv73-mx4w: DNS rebinding protection not enabled by default

Other Changes

• Fix mcpName identifier to com.timergy/mcp
• Sync version across package.json, server.json, and McpServer runtime
• Add 30s fetch timeout to API client
• Improve URL validation in poll creation response

Install

{
  "mcpServers": {
    "timergy": {
      "command": "npx",
      "args": ["@timergy/mcp"]
    }
  }
}

v0.1.2 - MCP Server for Scheduling Polls

@timergy/mcp v0.1.2

MCP server for Timergy. Create scheduling polls, vote, and finalize times from AI agents like Claude, GPT, and Gemini. No authentication required.

Tools

• create_poll - Create a scheduling poll with time slots
• get_poll - Fetch poll details and available options
• vote_on_poll - Submit votes for time slots
• get_results - View voting results
• finalize_poll - Lock in the winning time

Install

{
  "mcpServers": {
    "timergy": {
      "command": "npx",
      "args": ["@timergy/mcp"]
    }
  }
}

Changes since v0.1.1

• Fix shared session state (security: passphraseMap no longer shared across users)
• Add per-tool parameter documentation to README
• Fix package.json exports to point to dist/
• Ship src/ in npm package for workspace consumers
• Add createSessionState() for stateless HTTP mode
• Add Smithery badge and remote HTTP endpoint docs