You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.247,
ImprovementsSection of the release
What
Loading a plugin's MCP servers can now run in a read-only listing mode that counts the servers a plugin declares without actually resolving them. File-based server definitions are resolved through a containment check rather than a plain path join, so a plugin cannot point outside its own directory.
Details
The mode is an option at the call site and is off by default.
MCPB bundle sources are refused in listing mode, with an explanation that they require the pre-approval download.
The skip warning now says "directory-loaded plugin" instead of "project-scope @skills-dir plugin".
Evidence
Skipping MCPB source
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
