* fix: reject GET requests on MCP endpoints to eliminate idle SSE timeouts
Stateless MCP server does not send server-initiated notifications, so
GET SSE streams sit idle until NGINX proxy_read_timeout (3600s) kills them.
Humio data shows ~4M GET timeouts vs 69 actual POST tool calls over 2 days,
accounting for 99.997% of all 5XX errors.
Returning 405 is spec-compliant per MCP StreamableHTTP (2025-03-26).
* chore: add changeset for MCP GET rejection fix
* refactor: move GET rejection into handleMcpRequest and fix error code
- Consolidate GET check into handleMcpRequest to avoid duplication
- Fix JSON-RPC error code from -32601 (method not found) to -32000 (server error)
* Add on-premise deployment docs
Hidden page covering what's included, setup steps, configuration
reference, MCP client connection, and architecture diagram.
* Update on-premise docs: switch from tar.gz to GHCR registry pull
Replace curl+docker load approach with standard docker login + docker pull
using a license-gated registry token from context7.com.
* Fix on-premise docs: separate auth step, clarify docker compose pull
- Split into distinct "Authenticate" and "Configure and start" steps
- Remove redundant docker pull (docker compose up -d handles it)
- Add driver: local to volumes declaration
- Clarify that docker login credentials persist for docker compose
* docs: mention docker pull as alternative to docker compose pull
* docs: use -p flag instead of --password-stdin for docker login
* Move on-premise docs to enterprise/, add configuration details
- Move on-premise.mdx from docs root to docs/enterprise/
- Add setup wizard documentation
- Add AI provider settings with OpenRouter and local model examples
- Add embedding settings with incompatibility warning
- Add access control section with permission toggles
- Add volume persistence warning
- Remove env vars for AI/git config (now UI-configured)
* Docs: clarify git tokens, add health check example, group operations
* Docs: extract LICENSE_KEY variable for easier configuration
* Add ChatGPT web and desktop app MCP client examples
Add installation instructions for connecting Context7 as an MCP
connector in ChatGPT (Web) and ChatGPT (Desktop) via Developer Mode.
https://claude.ai/code/session_01GRs4CVcBFNZt1otbGqZKH3
* Add ChatGPT web and desktop app MCP client examples
Add installation instructions for connecting Context7 as an MCP
connector in ChatGPT (Web) and ChatGPT (Desktop) via Developer Mode.
Uses the /mcp/oauth endpoint for seamless OAuth authorization since
ChatGPT connectors natively support OAuth and don't allow custom headers.
https://claude.ai/code/session_01GRs4CVcBFNZt1otbGqZKH3
* Update README.md to reflect changes in Developer Mode and app terminology
---------
Co-authored-by: Claude <noreply@anthropic.com>
* feat(cli): install documentation-lookup skill during ctx7 setup
The setup command now installs the Context7 documentation-lookup skill
alongside the MCP server and rule for each agent.
Skill paths per agent:
- Claude: .claude/skills/documentation-lookup/SKILL.md
- Cursor: .cursor/skills/documentation-lookup/SKILL.md
- OpenCode: .agents/skills/documentation-lookup/SKILL.md (universal)
* chore: add changeset for skill install in setup
* add `ctx7 setup` command for configuring MCP and rules
Adds an interactive setup command that configures the Context7 MCP server
and agent rules for Claude Code, Cursor, and OpenCode. Authenticates via
OAuth, generates an API key, and writes per-agent config files.<noreply@anthropic.com>
* revert auth.ts client ID change
* add changeset for setup command
* fix lint: format import line
* feat(cli): adopt .agents/skills as universal install target
Install to .agents/skills/ by default as the shared standard directory.
Universal agents (Amp, Codex, OpenCode, Gemini CLI, GitHub Copilot) all
read from this path natively. Vendor-specific agents (Claude Code, Cursor,
Antigravity) get symlinks pointing back to .agents/skills/.
- Add "universal" as a first-class IDE type across all path maps
- Auto-detect .agents/ and vendor dirs: detected → confirm, nothing
detected → checkbox picker with Universal pre-checked
- Update list/remove commands to check universal + vendor-specific dirs
- Update DEFAULT_CONFIG.defaultIde from "claude" to "universal"
- Show labeled install summary (Universal, Claude Code, etc.) with paths
* feat(cli): consolidate agent flags into single --universal option
Replace --codex, --opencode, and --amp flags with a single --universal flag that points to .agents/skills/. This simplifies the CLI interface since these agents all share the same installation path.
* refactor(cli): simplify IDE types and remove UNIVERSAL_AGENTS Set
- Simplify IDE type from 7 types to 4 (remove codex, opencode, amp)
- Remove UNIVERSAL_AGENTS Set and replace with direct equality checks
- Update documentation to add --universal flag examples throughout
- Consolidate Supported Clients table to show single Universal row
All universal agents (Amp, Codex, Gemini CLI, GitHub Copilot, OpenCode, etc.)
are now represented by the single "universal" type since they're functionally
identical and use the same .agents/skills/ directory.
* docs(skills): update CLI flags to use --universal
- Replace --codex, --opencode, --amp flags with single --universal flag
- Update all command examples (install, list, remove, suggest, generate)
- Consolidate Supported Clients table with Universal at top
- Reorder tables to prioritize Universal agents
* docs: expand skills documentation with CLI commands and features
Add comprehensive documentation for the Context7 skills feature including:
- What skills are and why to use them
- Trust score system explanation (0-10 scale)
- Security features (prompt injection detection)
- Complete CLI command reference (install, search, list, info, remove)
- Skill generation workflow and authentication
- Supported clients table with directories
- SKILL.md file format specification
- Command shortcuts reference
- Troubleshooting section
* docs: add skills suggest command documentation
Document the new `ctx7 skills suggest` command that automatically
discovers relevant skills based on project dependencies (package.json,
requirements.txt, pyproject.toml). Also adds `ssg` shortcut alias.
* docs: improve skills examples and add npx prefix to commands
- Update popular skills table with better descriptions of what each skill does
- Add quick start commands after registry section
- Add npx prefix to all CLI examples for easier copy-paste
- Remove generation limits section
* fix: remove incorrect content
* discover
* feat(cli): use backend suggest endpoint for skill suggestions
Replace client-side NOTABLE_SET filtering with a single POST request to
/api/v2/skills/suggest. The backend now handles SKIP_SET filtering,
vector search, install count enrichment, and ranking.
- Remove NOTABLE_SET/SKIP_SET from deps.ts
- Add suggestSkills API function
- Add SuggestGroup and SuggestResponse types
- Simplify suggestCommand to use backend response
* feat(cli): send auth token with suggest request
Pass the user's OAuth token (if logged in) when calling the suggest
endpoint so the request counts against their quota.
* chore: add changeset
* refactor: simplify suggest API usage
- Remove ecosystem field from deps detection
- Use flat skills array from backend instead of groups
- Simplify display logic
* fix: use white color for Relevant value in metadata panel
* refactor: rename DiscoverOptions to SuggestOptions
* feat: add Context7 plugin for Cursor marketplace
Adds a Cursor plugin with MCP server (OAuth), rules, skills, and agent
for up-to-date library documentation lookup via Context7.
* chore: update Cursor plugin author to Context7
* feat(cli): add trust score column and improve skill search display
Add trust score and installs columns with aligned headers to skill search results.
Trust scores use yellow/red color coding (0-10 scale).
* chore: add changeset for trust score column
* feat(cli): auto-login when generate requires authentication
Extract login flow into reusable `performLogin()` function.
Generate command now triggers OAuth login automatically instead of
showing an error asking the user to run 'ctx7 login' manually.
* feat(cli): show recommended option first in generate questions
Reorder options so the recommended answer is always displayed at
position 1 with cursor starting on it, regardless of original index.
* feat(cli): open generated skill in default editor instead of inline view
Replace inline terminal "View full skill" with "View skill" that opens
the content in the system default editor ($EDITOR or 'open' fallback)
via a temp file.
* feat(cli): revamp generate UX with improved copy and examples
Update skill generation flow:
- Show do/don't examples (✕/✓) for skill descriptions
- Rename "libraries" to "sources" in user-facing text
- Add explanation of what sources are used for
- Update spinner text for questions and generation steps
- Remove unused libraryNames variable
* chore: update changeset to include generate UX changes
* fix(cli): show dash placeholder for missing installs and trust scores
* feat(cli): add external link icon to terminal hyperlinks and show dash for empty fields
* feat(cli): improve view/edit skill with persistent edits and preview cleanup
Save preview files to ~/.context7/previews/ instead of OS temp dir, read
edits back before install, and clean up preview files on exit.
* feat(cli): improve generate UX copy and flow polish
Update skill generation flow with clearer descriptions, better spinner
messages, and improved finalize menu options.
* fix(cli): fix stale editor preview, install count side effect, and editor spawn
- Reset previewFileWritten between regeneration cycles so editor shows fresh content
- Add placeholder param to formatInstallCount to avoid showing "-" in list command
- Replace execFile with spawn for proper $EDITOR support (terminal editors, args)
- Move trustScore to Skill base type and remove redundant installCount from SkillSearchResult
Display exact install count numbers instead of rounded values (e.g. 41 instead of 40+), sort skills by install count descending in the install command, and show "installs" column header inline with the prompt.
* feat: add oauth 2.0 support with login,whoami and logout commands
* ci: lockfile
* fix: address security and port issues in OAuth flow
- Fix XSS vulnerability by escaping HTML in error page messages
- Change callback port from 9876 to 52417 (high ephemeral range, less likely to conflict)
* refactor: clean up auth code and remove unnecessary comments
- Remove obvious comments that duplicate function names
- Extract duplicate expiration display logic into printTokenExpiration helper
- Simplify logoutCommand (remove async, inline condition)
- Remove unused saved_at field from token storage
* fix: address auth bugs and remove unused code
Bug fixes:
- whoami now shows "Session expired" instead of misleading "Logged in" when token is invalid
- expires_at calculation preserves existing value instead of overwriting
- Login check now allows re-login when tokens are expired with no refresh token
Simplifications:
- Remove unused getAccessToken and refreshAccessToken functions
- Simplify printTokenExpiration (remove unused showExpired parameter)
* refactor: improve whoami output formatting
- Align labels using padEnd for consistent output
- Remove expiration time display from whoami
- Show login status first, then fetch user details
* chore: add changeset for OAuth feature
github-actions[bot]