Skip to main content

​
Changelog

All notable changes to the Tydli platform will be documented in this file. The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

​
[Unreleased]

​
Added

  • Comprehensive documentation overhaul with FAQ, security best practices, and rate limits
  • Database schema now includes complete tool_invocation_logs and ai_usage_tracking documentation

​
Changed

  • OAuth refresh tokens fully implemented and documented (no longer “prepared for future use”)
  • Documentation now avoids hardcoded counts, references source lists instead
  • Consolidated OAuth documentation - USER_GUIDE.md now references OAUTH_INTEGRATION_GUIDE.md
  • Trimmed ARCHITECTURE.md to high-level overview with references to detailed docs

​
Fixed

  • Corrected refresh token implementation status in all documentation
  • Added missing scope column documentation for oauth_refresh_tokens table

​
[1.0.0] - 2025-01-XX

​
Added

  • MCP Protocol 2025-03-26 Compliance: Full support for MCP specification version 2025-03-26
  • OAuth 2.1 with PKCE: Complete OAuth 2.1 authorization server with PKCE (S256) support
  • OAuth Refresh Tokens: Automatic token refresh flow for seamless long-term access
  • Email Verification: Required email verification for all new accounts
  • AI Document Processor: Convert PDF, Word, and other documents to OpenAPI specs using AI
  • Three Authentication Methods: OAuth 2.1, JWT, and public access modes
  • Credential Encryption: AES-256 encryption for API credentials
  • Rate Limiting: Per-user hourly and monthly rate limits with quota enforcement
  • Usage Analytics: Detailed request tracking, tool invocation logs, and performance metrics
  • Deployment Logs: Structured logging with info, warn, and error levels
  • Security Events: Comprehensive audit log for authentication and security events
  • MCP Router: Dynamic routing to deployed MCP servers with authentication
  • Claude Desktop Integration: Native support for Claude Desktop MCP clients
  • Base URL JSON-RPC Support: Compatible with mcp-remote and other clients
  • Discovery Endpoint: Standard /.well-known/mcp-server metadata endpoint
  • Health Checks: Built-in health monitoring for all deployments
  • OpenAPI Validation: Comprehensive validation with detailed error messages
  • Deployment Management: Start, stop, health check operations via UI and API

​
Security

  • Row Level Security (RLS): Enforced on all database tables
  • Database Functions: Security definer functions for safe operations
  • Encrypted Credentials: AES-256-GCM encryption via pgcrypto
  • OAuth Token Security: 1-hour access token expiration, revocation support
  • PKCE Enforcement: S256 code challenge method required for OAuth flows
  • Rate Limit Protection: OAuth-specific and user-specific rate limiting
  • Audit Logging: All security events logged to security_events table

​
Performance

  • Sub-second Validation: OpenAPI validation typically completes in 2-5 seconds
  • Fast Generation: MCP server generation in 10-20 seconds
  • Quick Deployment: End-to-end deployment in 20-40 seconds
  • Efficient Routing: Dynamic MCP routing with minimal latency
  • Database Indexes: Optimized indexes on all major tables

​
Infrastructure

  • Supabase Backend: PostgreSQL database with Edge Functions (Deno runtime)
  • React Frontend: Modern React 18 with TypeScript and Tailwind CSS
  • Edge Functions: Serverless functions for all backend operations
  • Storage Buckets: Secure file storage for API specifications
  • Real-time Subscriptions: Live deployment status updates

​
Release Notes

​
Upgrade Instructions

This is the initial production release. No upgrade steps required for new installations.

​
Breaking Changes

None - initial release.

​
Known Issues

  • OAuth Refresh in Claude Desktop: Some MCP clients may not automatically use refresh tokens. Workaround: Re-authorize when access token expires.
  • Large OpenAPI Specs: Specifications over 5MB may take longer to process. Consider splitting into multiple smaller specs.
  • Email Delivery: Email verification may be delayed in some regions. Check spam folder if not received within 5 minutes.

​
Deprecations

None - initial release.

​
Migration Guide

Not applicable for initial release. See USER_GUIDE.md for getting started instructions.

​
Contributors

Special thanks to all contributors who made this release possible.

​
Version History Legend

  • Added: New features
  • Changed: Changes to existing functionality
  • Deprecated: Features that will be removed in future versions
  • Removed: Features that have been removed
  • Fixed: Bug fixes
  • Security: Security improvements and vulnerability fixes
  • Performance: Performance improvements

​
Support

For questions about specific versions or upgrade assistance: