OpnForm

Added

• Added the OpnForm MCP server and Agent Plugin package. AI assistants can create and preview private form drafts, hand them off to the OpnForm editor, and—after OAuth authentication—manage forms and work with submissions.
• Added authenticated form-management tools with workspace selection, revision conflict detection, and explicit confirmation before publishing or moving a form to trash.
• Added submission reading, search, form-level statistics, and asynchronous CSV export tools. Submission records cannot be deleted or restored through MCP.
• Added native campaign attribution for public submissions. Supported UTM parameters and advertising click identifiers can now be captured from standalone forms, embeds, SDK integrations, and popups, then exposed in submissions, webhooks, SDK events, and selected CSV exports.
• Added an email-notification option to display supported uploaded images and signatures inline, with safe fallbacks to secure file links.

Self-hosted MCP

• Self-hosted administrators can enable MCP from Settings → MCP & AI agents after configuring Laravel Passport and public HTTPS URLs.
• The settings page provides ready-to-copy setup instructions for ChatGPT, Cursor, Claude Code, Codex, and portable Agent Plugin clients.
• MCP is disabled by default on self-hosted installations. Guest draft endpoints are intentionally unavailable there; account-scoped tools require OAuth and normal workspace permissions.
• The hosted OpnForm service supports private guest drafts before account creation. Publishing and destructive form actions still require an authenticated account and explicit confirmation.

Improved

• Uploaded images are easier to review directly from notification emails while preserving attachment limits and secure download behavior.
• Attribution fields are grouped behind a compact Attribution & tracking section and detected parameters are prioritized in submission views.
• Homepage and comparison-page demo forms keep their English navigation labels regardless of the visitor’s application locale.
• Added Synology Container Manager setup guidance for self-hosted installations.
• Restored Privacy Policy and Terms & Conditions links in the public footer.

Security

• Restricted workspace deletion to workspace administrators and prevented read-only members from changing workspace information.
• Hardened submitted URL and email rendering in notification and submission output. Unsupported schemes, misleading credential-style URLs, malformed values, and attribute-injection payloads remain escaped plain text.
• MCP uses delegated OAuth with PKCE, workspace authorization, revision checks, private capability tokens, and confirmation gates for sensitive form actions.

Upgrade

This release includes database migrations for MCP guest drafts and related persistence. Follow the standard OpnForm upgrade process, update both Docker images to v2.4.0 (or pull latest), run migrations, and restart the instance.

Self-hosted MCP is optional. Existing installations continue to work without enabling it. To use MCP, configure Passport and your public APP_URL and FRONT_URL, then enable it from Settings → MCP & AI agents. See the self-hosted MCP guide.

The portable Agent Plugin package is included in the repository. Public ChatGPT directory registration remains a separate distribution step.

Full changelog

• #1261 Complete guest-first MCP server and Agent Plugin
• #1263 Submission URL and email-link hardening
• #1238 Inline uploaded images in email notifications
• #1247 Native campaign attribution
• #1249 Workspace role authorization fixes
• #1248 Stable English labels in live demo forms
• #1246 Synology Container Manager documentation
• #1245 Restored public footer legal links