WP MCP 0.8.99: MCP clients can now sign in through OAuth with a client metadata document

WP MCP 0.8.99 is out. Here is what changed in this release:

• New: MCP clients can now sign in through OAuth with a client metadata document (an https URL as their client ID), the registration method the MCP authorization spec now prefers. Dynamic client registration keeps working for older clients.
• The client’s document is fetched only while a signed-in user authorizes it, refusing private addresses and redirects, capped in size and cached. See External services in the readme.
• Site owners can require approval for new OAuth clients, and approve or block them, on the WP MCP Connection screen. Blocking a client revokes its tokens.

Download it from the GitHub release, or see this release on the changelog alongside every earlier one.