Release 1.0.0-alpha22 New standalone package: code-wheel/mcp-http-security - API key management with secure hashing (SHA-256 + pepper) - IP allowlisting with CIDR support (IPv4/IPv6) - Origin/hostname allowlisting with wildcard subdomains - PSR-15 SecurityMiddleware for any PHP framework - Multiple storage backends: Array, File, PDO Drupal adapters for extracted package: - DrupalStateStorage - bridges Drupal State API - DrupalClock - bridges Drupal TimeInterface to PSR-20 mcp_tools_remote now delegates to extracted package. Backward compatible - existing API keys continue to work.