Repository navigation
Unlist Playtomic connectors: login blocked by app attestation - #1506
Merged
Merged
Conversation
Playtomic's login endpoint now returns 403 APP_ATTESTATION_REQUIRED to every server-side request, with any credentials and from any network. It requires a mobile-app attestation that a server cannot produce, and we do not bypass it. - playtomic and playtomic-public: add "unlisted": true and a status notice at the top of the instructions, pointing to #1498. The adapters stay resolvable by slug, so connectors installed earlier keep their icon and catalog re-sync. - Advertised catalog count drops from 695 to 693 as a result; update the quoted numbers in the READMEs, CITATION.cff, glama.json, package.json, server.json and the regenerated llms.txt / llms-full.txt. Cloud evidence: the last successful Playtomic tool call was 2026-08-10; every call since has failed, matching when the attestation check appeared. Refs #1498
helpcodeai
enabled auto-merge (squash)
November 4, 2026 09:31
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Playtomic's login endpoint now answers
403 APP_ATTESTATION_REQUIRED("We couldn't verify your device") to every server-side request — any credentials, any network. Playtomic requires a mobile-app attestation a server cannot produce, and AnythingMCP does not attempt to bypass it (see the maintainer's reply on #1498).This marks both catalog connectors
unlistedso they leave the store, the install endpoint and the advertised count, while staying resolvable by slug so connectors installed earlier keep their icon and catalog re-sync. A status notice is prepended to each adapter's instructions.Evidence it affects no working user
On AnythingMCP Cloud (production
tool_invocations):Changes
playtomic.json,playtomic-public.json:"unlisted": true+ status notice referencing Playtomic connector: login returns 403APP_ATTESTATION_REQUIREDfrom a home connection #1498.README.md,README.de.md,README.ja.md,README.zh-CN.md,CITATION.cff,glama.json,package.json,server.json, regeneratedllms.txt/llms-full.txt.Testing (repo root / packages/backend)
node scripts/validate-adapters.mjs— no new errors (only pre-existing warnings).node scripts/adapter-count.mjs --check— OK: 693 adapters, 35 keyless, 12261 tools.node scripts/generate-llms-txt.mjs --check— clean.node scripts/regenerate-catalog.mjs— no diff (catalog.ts imports the JSON;unlisted/instructionsare read at load), confirming no unrelated churn.oauth2-token.service.tsfails to type-check on a cleanorigin/maintoo (local Prisma client is behind the schema) — a pre-existing baseline, not from this change. CI runs with a generated client.Refs #1498