What is the Neural Link?

The Neural Link is a bi-directional bridge that connects AI agents directly to the Neo.mjs runtime. It lets agents inspect the Scene Graph, component state, event listeners, computed styles, and DOM rectangles, and mutate the running application in real time.

Why is Neo.mjs called an Application Engine instead of a framework?

Neo.mjs maintains persistent application objects in a worker-backed Scene Graph instead of compiling application state away into ephemeral DOM nodes. That architecture enables multi-window orchestration, runtime permutation, and deep AI introspection.

What is Context Engineering?

Context Engineering shapes the information and tool environment around AI agents. Neo.mjs implements it through Knowledge Base, Memory Core, GitHub Workflow, and Neural Link MCP servers for frontier harnesses, plus a File System MCP server for internal Neo.ai.Agent local loops.

What is the Neo.mjs Agent OS?

The Neo.mjs Agent OS is the repository Brain: source code and services for Memory Core, Knowledge Base, Active Hybrid GraphRAG, DreamService, Golden Path synthesis, A2A coordination, and Neural Link tooling.

Frontmatter

id	9576
title	Draft Release Notes: MCP Infrastructure & Security
state	Closed
labels	documentationai
assignees	tobiu
createdAt	Mar 27, 2026, 11:58 AM
updatedAt	Mar 27, 2026, 11:59 AM
githubUrl	https://github.com/neomjs/neo/issues/9576
author	tobiu
commentsCount	1
parentIssue	9569
subIssues	[]
subIssuesCompleted	0
subIssuesTotal	0
contentTrust
projected
quarantined	0
signals	[]
blockedBy	[]
blocking	[]
closedAt	Mar 27, 2026, 11:59 AM

Draft Release Notes: MCP Infrastructure & Security

Closed v12.1.0/archive-v12-1-0-chunk-3 documentationai

tobiu commented on Mar 27, 2026, 11:58 AM

Sub-task of Epic #9569.

This ticket tracks the drafting of the MCP Server Enhancements section for the v12.1 release notes.

Scope:

Dual-Transport Architecture (addition of HTTP SSE alongside stdio).
OIDC & OAuth 2.1 Security Anchor (Discovery, Token Introspection, PRM).
Audience (aud) Enforcement to prevent passthrough attacks.
Playwright security & handshake CI/CD testing.

tobiu Mar 27, 2026, 11:59 AM

Drafted the MCP Infrastructure section, committed, and pushed to dev.