Changelog

0.1.2 - 2026-08-19

Tag stripping in summaries now runs to a fixpoint, so overlapping constructs like <<script>script> can no longer reassemble into markup (CodeQL js/incomplete-multi-character-sanitization). Defense-in-depth: the output is plain text, but an MCP client rendering results as markdown could have interpreted leftover HTML.

Documentation site at calibreweb-mcp.ni-c.de with a full tools reference and a reproducible demo recording (the demo runs against a bundled fixture library, no Calibre-Web instance needed).
Release pipeline: npm publishing via Trusted Publishing with provenance, GitHub releases from the changelog, MCP registry submission, and a multi-arch container image on GHCR with SBOM and build provenance.

Initial release: read-only MCP server for Calibre-Web via its OPDS feed.
Tools: search_books, list_books (new/hot/rated/discover/read/unread/all), list_shelves, get_shelf_books, get_cover (image content), get_stats.
HTTP Basic auth with support for anonymous-browsing instances.
Hardened XML pipeline: DOCTYPE/entity refusal, no entity processing, bounded response bodies, control-character stripping, credential redaction.