{
  "markdown": "# release-to-tasks-mcp\n\nTurn one **public release-note URL** into ordered upgrade tasks that retain a source excerpt, anchor, confidence, and uncertainty. The MCP server never executes release text or project code.\n\n## Install\n\nNode.js 22.14 or newer is required.\n\n```json\n{\n  \"mcpServers\": {\n    \"release-to-tasks\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"release-to-tasks-mcp@0.1.0\"]\n    }\n  }\n}\n```\n\nFor a clean local invocation before npm publication:\n\n```sh\nnpm ci\nnpm test\nnode dist/index.js\n```\n\n## Tool\n\n`release_url_to_tasks`\n\n```json\n{\n  \"release_url\": \"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.1.1\"\n}\n```\n\nThe result contains `sourceFormat`, `releaseTitle`, ordered `tasks`, and `warnings`. Every task includes the exact source URL/anchor and a short source excerpt. Low-confidence entries explicitly require human impact assessment.\n\nSupported sources:\n\n1. GitHub release pages (resolved through the public GitHub API)\n2. GitHub release API URLs\n3. GitLab release pages\n4. Public Markdown/plain-text changelogs\n5. Public HTML release-note pages\n\nMalformed URLs, non-HTTPS URLs, local/private destinations, unsupported pages, missing release bodies, oversized responses, and unsafe redirects return explicit errors.\n\n## Demo\n\n1. Configure the server in an MCP client.\n2. Call `release_url_to_tasks` with a real public release URL.\n3. Check each proposed task against its `source.excerpt` and `source.url` before applying an upgrade.\n\nThe repository includes a non-fabricated [sample response shape](examples/sample-output.json). The sample deliberately contains no tasks because release content can change; tests contain deterministic source fixtures.\n\n## Privacy and security\n\nTelemetry is disabled by default and there is no hosted collector. Optional local aggregate telemetry never includes URLs or release contents. See [PRIVACY.md](PRIVACY.md) and [SECURITY.md](SECURITY.md).\n\n## Future extension points\n\nThe parser and fetcher boundaries can later support authenticated private-source connectors. This release contains no payment, Stripe, private-source, or hosted-service dependency.\n\n## Development\n\n```sh\nnpm ci\nnpm test\nnpm pack --dry-run\n```\n\nInternal tests and owner traffic are technical signals only; they never count as external adoption. LEVEL 2 requires three unrelated external users to install the public package and successfully process real release URLs.\n\n## License\n\nMIT\n",
  "bytes": 2439,
  "sha": "92bde6b9ccef25b95b77ed9045f22824399bfa28a546aa088092f6349d288e28",
  "repo_slug": "apomt/release-to-tasks-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_apomt_release_to_tasks_99721668/readme"
}