Skip to main content
Sign inSign up
← Changelog

The new MCP Connector

v2.0

What's new

  • Signed panel API — every request between your Moodle and the panel is signed with HMAC-SHA256 using a per-install secret, within a ±5-minute window. The license key alone no longer authenticates anything.
  • Configurable endpoints — panel URL, signing secret and MCP endpoint are all set on the plugin's License page.
  • Key metadata mirrored locally — the Keys page reads a local table holding only each key's last 4 characters, roles and status, and reconciles with the panel on demand.

Security

  • MCP key values exist only in the panel's create response: they're emailed once and never stored in Moodle. "Resend" became "regenerate + email".
  • Payloads carrying tokens are no longer written to Moodle's logs.

Requirements

Moodle 4.2 to 5.1, and a MoodleMCP account. The plugin is now named local_mcpconnector.