WP MCP 0.8.125: The content tools now require each post type's own capabilities

WP MCP 0.8.125 is out. Here is what changed in this release:

• Security: the content tools now require each post type’s own capabilities. A non-public post type needs that type’s edit capability, and one without an admin screen is refused below administrator, so Contributors, Authors and Editors can no longer read other plugins’ private records (such as enrollments, orders or form entries) through the generic post tools. Some calls that used to succeed are now refused.
• New filter wpmcp_agent_readable_hidden_post_types opens specific non-public types without an admin screen to users who hold their capabilities.
• list-posts with post_type “any”, search-content and count-content now leave out post types the caller may not read.

Download it from the GitHub release, or see this release on the changelog alongside every earlier one.