https://papercliped.co/changelog 2026-10-06T00:00:00Z https://papercliped.co/changelog#v2-1-0 2026-10-06T00:00:00Z • Dependencies up to date: Zod 4 (tool schemas and the ChatGPT Actions OpenAPI now come from Zod's built-in JSON Schema; the published contract is unchanged), the latest MCP SDK, undici 8, TypeScript 7, Vitest 5, React 19 and esbuild 0.28 in the plugin, and GitHub Actions v7. No known vulnerabilities in either package. Dependabot now also watches the website and groups minor and patch updates into one pull request per package. • Install in one step from Claude Code and Codex. Both plugin marketplaces live in this repository: /plugin marketplace add OpenSourcx/papercliped in Claude Code, codex plugin marketplace add OpenSourcx/papercliped in Codex. The plugin now connects to the hosted server (https://mcp.papercliped.co/mcp) instead of a local build that wasn't in the repository; people running Paperclip on their own machine use npx papercliped@latest (see the README). • A README that gets you running: what Papercliped is and copy-paste setup for Claude, Claude Code, Codex, ChatGPT, any MCP app and local Paperclips, without visiting the docs. • Every push is a release. CI publishes both npm packages, tags the commit and writes the GitHub release from the changelog and the commit descriptions. scripts/version.mjs bumps Major.Minor.Patch in every file, and a release skill for Claude and Codex (.claude/skills/release, .agents/skills/release) explains when to use which, and how to adopt the same flow in other repositories. • Ready for contributors: SECURITY.md (private reporting, response times), a contributor guide with the path from first PR to maintainer, CLAUDE.md/AGENTS.md for AI coding agents, and a complete Discord setup in docs/COMMUNITY.md. • New website, phase 1 (foundation): web/, a static React + Tailwind site with self-hosted fonts (Bricolage Grotesque, Inter, JetBrains Mono), the mascot as an animated component (eyes follow the pointer, blinks; still with reduced motion), a component kit and a /kit showcase page. Seasonal themes: the default clip theme plus two palettes per season, each with light and dark, rotating on a schedule that is the same for everyone on a given day; visitors can pick a theme and light/dark/system mode. Every theme passes WCAG AA contrast (tested), every route is checked in headless Chromium under the strict CSP, and nothing is loaded from third parties. Not yet served by the bridge (phase 4). • New website, phase 2 (pages): a full landing page (live user count, an interactive how-it-works stepper, a permission playground generated from the real tool list, the two plugins, security highlights, FAQ), a changelog page built from this file with New/Improved/Fixed filters and an Atom feed (/changelog.xml), a community page (a suggest-a-feature form that pre-fills a GitHub issue, bug reports, contributing; social links only appear once they exist), a brand page with mascot and wordmark downloads and usage rules, and privacy and terms rendered from the same Markdown as the bridge. Playful but accessible interactions (lifting buttons, tilting cards, a mascot that hops), checked for sideways scrolling on a 375px phone. Also: CODE_OF_CONDUCT.md, issue and pull request templates, docs/COMMUNITY.md (forum and Discord plan), sitemap, robots.txt and a social preview image. • Public stats API (no sign-in): GET /api/public/v1/info, status, stats, series and errors (plus openapi.json) publish aggregate users, live connections, sign-in success and failure reasons, request success rate, latency percentiles, error mix and load. Aggregate only: no usernames, aliases, ids, Paperclip addresses, app names or IPs, and no per-user breakdown (tested against memory and Postgres). GET-only, CORS-open without credentials, cached 30 s, 60 requests per minute per address. Types in src/public-api/types.ts. New docs page: Public API and status. • Status page on the new website (/status): live status badge, people, connections, request and sign-in success, latency percentiles, and charts for requests and errors, response time and sign-ins, plus error-mix, sign-in-failure and top-tool bars. Every chart has a text summary and a table view and never relies on colour alone; it refreshes every 30 seconds. • Removed the operator panel from this repository (papercliped-panel, src/panel/, the demo, PANEL_* settings, docs/panel-role.sql). The operator dashboard now lives in a separate, access-controlled service. Nothing changed in the database: the telemetry tables and the read-only panel_* views are still written and kept for it. npm run build now cleans dist/ first. • New website, phase 3 (docs): a docs site at /docs with a three-column layout (collapsible sections with counts, the article with breadcrumb, last-updated date, copy link and edit-on-GitHub, and an "On this page" outline that follows your scroll), previous/next links, copy buttons on code, and Ctrl/Cmd-K search built at compile time (no outside service). The GitHub star count shows in the header: the bridge fetches it from GitHub and caches it for an hour (GET /api/public/v1/repo), so browsers never call GitHub directly. • Much more documentation: new pages What is Papercliped? (with a glossary), Run it yourself, Tool reference (generated from the code), Manage API, Environment variables, Command line, Limits and errors, and FAQ. Docs now have 20 pages in five sections; the bridge serves the same pages until the new site goes live. • The bridge serves the new website (from web/dist, built into the Docker image) with host routing (PUBLIC_HOSTS): papercliped.co for the site, docs.papercliped.co/topics for the docs, mcp./api.papercliped.co for MCP, OAuth and the APIs, forum. redirects to the forum, www redirects to the apex. Old /docs/... links redirect to the docs host. Every host still answers the protocol and API paths. Unknown pages return a real 404. Without the built site (e.g. the npm package), the bridge serves its Markdown pages as before. Setup and the issuer decision: docs/DOMAINS.md. • Sign-in, consent and manage pages restyled with the website's fonts (Bricolage Grotesque, Inter, JetBrains Mono) and colours, including dark mode. Still plain server-rendered HTML. • New tool papercliped_service_status (read only): the AI can check whether the hosted service is working, from the public status API. The catalogue is now 30 tools. • Paperclip plugin: a "Papercliped service" card shows the bridge's public status (no link needed). • AI apps now connect at https://mcp.papercliped.co/mcp (the OAuth issuer moves to mcp.papercliped.co; the website, docs and /manage stay on papercliped.co). Docs show the connector address through a new {{MCP}} placeholder, so self-hosted bridges show their own. Anyone connected before must remove the connector and add the new address. • Website redesign: a bolder homepage (a centred headline, pill buttons, a gradient pill hero with the mascot in the middle; click it for a wave), a shorter header (Product, Docs, Resources, Community, search, GitHub stars, Get started). The docs get their own header (links left, "papercliped Docs" centred, search and stars right), a sidebar grouped into Learn, Reference and Project with icons, counts and collapsible sections, and a page header with breadcrumb, tag and a Copy link menu (view the Markdown source, suggest an edit). The changelog moves into the docs layout as expandable release cards. • Light and dark now follow your device automatically. The manual System/Light/Dark switch is gone (an old saved choice is cleared); the seasonal palettes still rotate on their own. • Two access levels: Read only and Full control. Full control is now every tool (pause, wake, terminate, issues, goals, comments, approvals, budgets and raw API writes), so you can run your Paperclip from anywhere. The separate "Admin" level is gone; existing admin grants and apps that still ask for it get Full control (migration 006_two_levels.sql tidies stored grants). The sign-in page, the manage page, the Paperclip plugin, the docs and the website playground all show the two levels. • Managing your account moved into Paperclip. The Papercliped plugin is now the connection manager: link it with your username and secret key (checked once, not stored), then change levels, disconnect apps, switch anonymity, see and remove linked Paperclips, make a new secret key (this Paperclip stays linked), disconnect your Paperclip or delete your account. The /manage web page, its cookie sign-in, one-time link codes and the beta opt-in are gone (/manage now points to the plugin docs); the manage API accepts plugin tokens only. • Docs live at docs.papercliped.co/<page> (for example docs.papercliped.co/permissions), with a real docs landing at docs.papercliped.co/: search, the connector address, four start-here cards and every topic. Old /topics/... and papercliped.co/docs/... links redirect. • A cleaner homepage hero: instead of decorative art, a live demo of the product. An AI app on the left steers a Paperclip on the right (pause an agent, weekly report, approve a request), using the real tool names, with tabs to replay each one. The footer gets X, GitHub and Discord icons (X and Discord point to the community page until their addresses are set). • The Papercliped page in Paperclip, rebuilt with Paperclip's own components (status badges, metric cards, tables, toasts) so it looks native: a service panel, an account summary, and tabs for Connected apps (level dropdown, two-step disconnect), Privacy, Linked Paperclips and Account (new secret key shown once with copy, disconnect Paperclip, delete account). Covered by UI tests against the real plugin actions. https://papercliped.co/changelog#v2-0-0 2026-10-06T00:00:00Z Papercliped v2 is the free, open-source foundation: the bridge, the connector for Claude and any MCP app, and the Paperclip plugin. Paid features (managed subdomains, pricing, legal) are planned for v3 (docs/V3-SUBDOMAINS.md). Not tested live: the Paperclip plugin has never run inside a real Paperclip, and the release workflow has not run yet (it can only run on GitHub). • New home: https://papercliped.co. Every reference to the old domain is gone. The Paperclip plugin's default bridge URL is now https://papercliped.co. Operators: set BRIDGE_PUBLIC_URL=https://papercliped.co; apps connected under the old address must connect again (the OAuth issuer changed). Cloudflare + Render setup: docs/LAUNCH.md §3. • Two plugins, documented side by side: Papercliped for AI apps (Claude, ChatGPT, any MCP client) and the Papercliped plugin for Paperclip. New docs page: Any AI app (MCP). • Automated npm publishing through GitHub Actions with npm trusted publishing (OIDC, no token): one tag publishes papercliped and papercliped-paperclip-plugin and creates the GitHub release (docs/RELEASING.md). CI now also packs both packages and installs them as a user would, and a test keeps every version string in step. • Foundation: CodeQL, Dependabot, dependency audit and read-only permissions in CI; CONTRIBUTING.md; docs/SITEMAP.md (every page and endpoint); new docs page Set up your Paperclip (public address with or without a domain); the security doc covers plugin links. • Fixed: the Claude Code install command in the README (/plugin install papercliped@papercliped). https://papercliped.co/changelog#v1-2-0-beta-1 2026-10-06T00:00:00Z Not tested: the plugin has never run inside a live Paperclip. It is covered by unit tests against a fake bridge and the SDK's test harness only. • Paperclip plugin (plugin/, npm papercliped-paperclip-plugin, a separate package built on @paperclipai/plugin-sdk): a Papercliped sidebar entry and page inside Paperclip to link your account, list connected apps, switch them between Read only and Full control (beta), disconnect them, toggle anonymity, and unlink. The bridge URL is configurable (https only). • Plugin link API: POST /api/manage/plugin-link (beta, browser session) makes a one-time pcl_… code (10 minutes, single use); POST /api/manage/plugin-link/exchange trades it for a long-lived pcb_pl_… token (rate-limited by address; wrong, used and expired codes answer identically); GET /api/manage/plugin-links; DELETE /api/manage/plugin-links/:id. The /manage page gains a Link Paperclip plugin section. • Plugin tokens are accepted as Authorization: Bearer on the manage API (no CSRF header needed). They hold no scopes, so they cannot call any Paperclip tool or the MCP endpoint, and they cannot mint codes, change the beta, sign out, or reach any action that needs the secret key (rotate key, disconnect Paperclip, delete account); those return 403 and need the browser. A token can remove only itself. • Making a new secret key now also revokes every plugin link. • New docs page: Paperclip plugin. • New docs page: Set up your Paperclip, a step-by-step guide to getting a public https address (Cloudflare Tunnel with your own domain, or Tailscale Funnel, ngrok or a Cloudflare quick tunnel without one). https://papercliped.co/changelog#v1-1-0-beta-2 2026-10-06T00:00:00Z • Beta connection manager at /manage and a management API (/api/manage/*): sign in with username + secret key, see every connected app, switch it between Read only and Full control (beta) with immediate effect, disconnect it, toggle anonymity, make a new secret key, disconnect your Paperclip, delete your account. Sensitive actions re-ask for the secret key; Admin is never grantable from here. Opt in with Join the beta on the permission screen (migration 005_beta.sql, applied automatically). • Full control (beta) is offered to everyone on the permission screen; Admin only when the app asks for it. • Public site served by the bridge: an interactive landing page ("Papercliped, not Paperclipped."), live user count, docs (getting started, create your account, permissions, anonymous mode, manage connections, security, ChatGPT, troubleshooting), privacy and terms. A new smiling-paperclip favicon on every page. • Windows-friendly test suite; npm publish only builds. • Set SITE_CONTACT (an email or support URL) so the privacy and terms pages show a real contact. https://papercliped.co/changelog#v1-0-0-beta-1 2026-10-05T00:00:00Z Papercliped connects Claude and ChatGPT to your own Paperclip: control agents, sync state, pull reports. Known limits: not yet validated against live Render / Supabase / claude.ai / ChatGPT; code has not had an independent security audit. See docs/SECURITY.md. • MCP server (stdio + Streamable HTTP) and ChatGPT Actions (generated OpenAPI) over Paperclip's REST API. • Hosted multi-tenant bridge with its own OAuth 2.1 server (DCR, PKCE, rotating refresh tokens, scopes read/control/admin). • Papercliped accounts: choose a unique username (6–32 chars, at least one number or . # _) and get a secret key. Sign in with the key, or reconnect by approving in your Paperclip — you keep your account and a live connection. • Anonymous mode: show as an alias (e.g. Ann02) in logs and the operator panel. • SSRF-hardened egress for user-supplied Paperclip URLs; sealed (AES-256-GCM) stored credentials with key rotation. • Operator panel — a separate program (papercliped-panel) reading a read-only database role: latency, system faults, success rate, user count, and the community log (09:25:30 og.kpnwrld - joined cliped). • Free-tier friendly: keep-alive worker, database heartbeat, auto-migrate; one-paste Supabase schema (docs/supabase-schema.sql).