30 days free. No credit card. Full access from the moment you connect your site.

Start free trial

v0.9.10 — Connect-tab methods, host version floors, curated connector order, styled OAuth errors

Requires AcrossAI MCP Manager 0.3.3+. Tested up to WordPress 7.1; requires 6.9 and PHP 8.1.

Highlights

MCP Manager 0.3.3 is now enforced as a minimum, not merely assumed (#84). Sibling plugins stay optional — this plugin activates cleanly and keeps working when MCP Manager or Abilities Manager is absent. What's new is the other half of that contract: when a sibling is installed but is older than the version this release integrates against, the features targeting it stay dormant and an admin notice offers a one-click Update, instead of the integration breaking silently. Nothing is ever deactivated and the site never fatals; the Settings tab stays reachable so "Delete all data on uninstall" is never stranded. Abilities Manager is wired into the same mechanism with no floor set yet.

Connectors follow a curated order, and the tab opens on Claude (#85). The AI Connectors tab previously listed connectors alphabetically — an accident of spelling rather than a decision. The order is now Claude, ChatGPT, Gemini, Grok, Cursor, followed by Connections, Approved Users and Settings, and opening the tab lands on the first connector rather than the server-wide Connections panel. Order is expressed as a per-connector priority following the host's own convention, so third-party connectors get a predictable position and can claim any slot. The same order drives the Settings checkboxes and MCP Manager's Quick Connect list; the promo tab was aligned in acrossai-mcp-manager#115.

Connectors and n8n now live inside the host's Connect tab (#78). MCP Manager 0.3.3 merged its five per-server connection tabs into a single How would you like to connect? tab. This release registers Connectors/Integrations/Plugins and n8n as choices in that row rather than as top-level tabs. Against an older host the plugin registers its tabs exactly as before, so nothing breaks either way. Both panels keep their own third-level navigation and existing bookmarks keep working.

Every browser-facing OAuth error page is now styled (#77). Previously several error paths — invalid client, invalid redirect URI, rate limiting, expired sessions, unknown routes — rendered as unstyled browser text or blank pages. All six now render a branded card with a clear explanation and a way back, with status codes, Retry-After and cache headers unchanged.

Per-grant Connections panel (#76). One row per authorization grant rather than per user/connector pair, so someone who authorized twice from two different accounts sees two independently revocable rows, each with its own first-connected timestamp.

Security

The two admin asset gates now require manage_options. The AI Connectors and n8n admin bundles were enqueued on the server-edit screen without checking the visitor's capability. No known exploit — the screen itself was already capability-gated — but the bundles should never have loaded without it.

Also in this release

  • UI — the Connectors tab is labelled Connectors/Integrations/Plugins to match the host exactly (#79, #80).
  • Internal — ACROSSAI_PRO_VERSION and Stable tag bumped to 0.9.10 matching the plugin header (#83).

Full changelog: v0.9.9…v0.9.10


Keep reading