# Curbi v27 — developer hub and public MCP preview

Live deployment: https://d62e644d.curbi-landing.pages.dev · canonical https://curbi.io/

The API and MCP now have dedicated entry pages. Explore and Products organize the actual tools; Repair Lab has a source download; platform readiness, workflow and support pages have been rebuilt. The shared navigation and expanded footer cover all 38 HTML pages, removing duplicate footers and obsolete homepage section links.

Public MCP: https://curbi.io/api/mcp — stateless JSON Streamable HTTP; policy_check, search, fetch. No auth or private project access, provider actions, signing authority or completion-receipt verification. Input 64KiB; tool output24KiB; best-effort per-isolate30POST/min/IP. Official SDK transport tested. ChatGPT/Claude UI onboarding is not verified; no one-click compatibility claim.

Validation:104 tests pass, including raw handler and exact exported Worker via official SDK. Static audit:1,934 internal links across38 HTML pages, zero missing targets or anchors. Repair download extracted into a clean directory and its exported regression executed. Repeat build changes no tracked public text output. Desktop/mobile API and MCP render checked; real API response and catalog filtering exercised in browser.

Independent integration attacks caught routing accidentally injected into the private-project handler, plus stale hosted-MCP availability copy. Both fixed in build source; attack tests preserved.

Build: python3 v17/build.py. Prior auth/project logic and Supabase CSP allowance are preserved. This release changes the developer site and adds a read-only public endpoint; it does not implement arbitrary integration repair, real test-mode refunds, durable Repair Lab state, new paid plans, hosted models, or new account providers.

For a clean source checkout, install build dependencies with `npm ci --prefix v24` and test dependencies with `npm ci --prefix v27`. The latter pins official MCP SDK1.32.1 and Zod4.6.7. MCP production code has no SDK runtime dependency. Exclude node_modules from source publication.