-
Synchronized the locked public OpenAPI contract with current capability, Social Data, onboarding, model, media, Effect, Workflow, and Realtime routes.
-
Distinguished the stable three-tool Hosted MCP from the plugin's 26 focused local MCP tools and documented the current Model/Data/Workflow catalog shape.
-
Updated Skill and CLI references to the published 0.3.0 capability interface.
-
Renamed the repository and package to
beatapi-agent-plugin. -
Added a Cursor/Grok Bot manifest and root
mcp.jsonalongside the existing Codex manifest, sharing the same Skill and MCP runtime. -
Declared
BEATAPI_API_KEYas a required Cursor plugin variable so users bind it through Plugins → Configure instead of chat or repository files. -
Added MCP tools for text-model discovery, non-streaming text responses, generation-model discovery, generic image/video generation, versioned Effects, and Video Analysis.
-
Synchronized the canonical Skill, typed client runtime, and OpenAPI snapshot with the complete 30-operation contract and USD-denominated usage semantics.
-
Replaced hardcoded image/video model unions with a stable
modelplusparametersinterface so newly published model IDs do not require a plugin release. -
Added host Configure guidance for
BEATAPI_API_KEYand kept credentials out of tool arguments and model-visible results. -
Confined uploads to configured trusted roots, rejected credential material in open-ended parameters, validated custom API origins, reduced CLI environment inheritance, and pinned release workflow dependencies.
-
Removed Realtime-session and webhook creation from agent-visible surfaces until hosts provide an opaque secret broker.
- Added Realtime Video session create, read, and close MCP tools.
- Store the one-time Realtime browser client secret in a mode-
0600local file and keep it out of model-visible tool results. - Synchronized the canonical Skill, official client runtime, and public OpenAPI contract to the Realtime baseline.
- Added exact-origin, duration, idempotency, billing, and browser trust-boundary guidance.
- Prefer bundled MCP execution in the canonical Skill with CLI fallback.
- Added the canonical
beatapi-videoSkill and eight review/evaluation cases. - Added a bundled local stdio MCP server with all 16 BeatAPI launch operations.
- Reused
BEATAPI_API_KEYor the API key stored by the official BeatAPI CLI. - Added exact OpenAPI and generated-client provenance locks.
- Added secure one-time webhook-secret storage with rollback on failure.
- Added production brand assets, marketplace packaging, CI, security guidance, and official Skills-only Plugin Directory submission materials.