NewFixedSecurity

v2.9.6.1

A Fleet Overview for the API, and Two Fixes

This small update gives the Public API and MCP a single overview of every server and site your token can see, refuses MySQL 8.4 on ARM servers where it cannot be installed, and fixes site creation on OpenLiteSpeed with Cloudflare SSL.

🔥 New Features

🆕 Fleet Overview in the Public API and MCP

GET /api/v1/overview returns every server and site your token can see, with their status, counts by status and usage warnings for CPU, memory and disk, in one request. The same overview is available as an MCP tool. It needs a token with both read:servers and read:sites.

Get a fleet overview with the xCloud Public API and MCP

🔒 Security Improvements

  • Cloud provider regions can only be read by the team that owns the provider.

🐛 Bug Fixes

  • OpenLiteSpeed with Cloudflare SSL. Creating a site with Cloudflare multi-domain SSL no longer fails when the Cloudflare certificate cannot be issued. The site comes up over HTTP with SSL marked as failed, so you can fix the cause and retry.
  • MySQL 8.4 on ARM. xCloud now refuses MySQL 8.4 on ARM servers running an Ubuntu release before 26.04 (which has no ARM packages for it) as early as it can: when you create or connect the server, or at the very start of provisioning, instead of failing partway through.