Drupal MCP 1.2 Released with Security Coverage, Tools API Integration, and OAuth Support

Staff Reporter

Drupal MCP 1.2 Released with Security Coverage, Tools API, and OAuth Support

The Drupal community marked a milestone with the release of the MCP module version 1.2, which now carries official security coverage and introduces several enhancements aimed at AI readiness. The update was announced by Giorgi Jibladze, CTO & Partner of Omedia, a core contributor, and comes in alignment with the goals of the Drupal AI Initiative. Other co-maintainers of the module include Giorgi Gagoshidze, Marcus Johnannson and Josh Miller.

The update streamlines tool setup by bundling all plugins with the module, making features like Drush commands, JSON:API search, and AI function calls readily accessible. A new configuration layer allows admins to manage tools per role, override descriptions for LLM clarity, and export settings through Drupal’s config system.

OAuth support debuts in this version, implemented via the simple_oauth_21 extension by Mateu Aguiló Bosch. This addition allows LLM clients such as ChatGPT to authenticate and interface with Drupal using standard OAuth flows.

Integration with the Tools API, thanks to Michael Lander and community collaborators, enables a modular, interoperable layer for exposing tools. MCP 1.2 supports both HTTP and STDIO transports, with the latter supported via a Node companion for local dev use.

Security coverage was formalized with guidance from Marcus Johansson, ensuring the module meets Drupal’s security standards. Giorgi Gagoshidze and James Abrahams also contributed to testing and refinement.

The roadmap includes a deployable MCP recipe, support for multiple servers, and enhanced low-code tooling through MCP Studio. The module remains compatible with Drupal 10 and 11 and introduces no breaking changes.

Reference: Drupal MCP Module 1.2 – Security Coverage, Tools API Integration and OAuth by Giorgi Jibladze (18 November 2025)

AI Integration

Drupal Modules

Disclosure: This content is produced with the assistance of AI.

Note: The vision of this web portal is to help promote news and stories around the Drupal community and promote and celebrate the people and organizations in the community. We strive to create and distribute our content based on these content policy. If you see any omission/variation on this please reach out to us at #thedroptimes channel on Drupal Slack and we will try to address the issue as best we can.