You'll notice
Useful2 Signal3
Plugin MCP servers can be counted without being resolved, and their config paths must stay inside the plugin.
What's wrong with this entry?
Anonymous. No account, no email.
What
Loading a plugin's MCP servers can now run in a read-only listing mode that counts the servers a plugin declares without actually resolving them. File-based server definitions are resolved through a containment check rather than a plain path join, so a plugin cannot point outside its own directory.
Details
- The mode is an option at the call site and is off by default.
- MCPB bundle sources are refused in listing mode, with an explanation that they require the pre-approval download.
- The skip warning now says "directory-loaded plugin" instead of "project-scope @skills-dir plugin".
Evidence
Skipping MCPB source
Strings lifted out of the shipped bundle, so the claim above can be checked against them.