diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 3d5a920..4a7ee1b 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -10,7 +10,7 @@
       "name": "prerenderbuddy",
       "source": "./plugins/prerenderbuddy",
       "description": "Connect AI coding agents to crawler audits and optional Prerender Buddy workspace evidence.",
-      "version": "0.2.4"
+      "version": "0.2.5"
     }
   ]
 }
diff --git a/.grok-plugin/marketplace.json b/.grok-plugin/marketplace.json
index 3d5a920..4a7ee1b 100644
--- a/.grok-plugin/marketplace.json
+++ b/.grok-plugin/marketplace.json
@@ -10,7 +10,7 @@
       "name": "prerenderbuddy",
       "source": "./plugins/prerenderbuddy",
       "description": "Connect AI coding agents to crawler audits and optional Prerender Buddy workspace evidence.",
-      "version": "0.2.4"
+      "version": "0.2.5"
     }
   ]
 }
diff --git a/README.md b/README.md
index 11cf413..d9e6347 100644
--- a/README.md
+++ b/README.md
@@ -97,12 +97,12 @@ grok plugin install prerenderbuddy --trust
 Or add the local MCP server without the plugin package:
 
 ```sh
-grok mcp add prerenderbuddy -- npx --yes @prerenderbuddy/mcp@0.2.4
+grok mcp add prerenderbuddy -- npx --yes @prerenderbuddy/mcp@0.2.5
 ```
 
 ### Grok Bot
 
-Grok on grok.com, iOS, and Android does not run local `npx` plugins. Add a custom MCP connector at [grok.com/connectors](https://grok.com/connectors) pointing at a public HTTPS Streamable HTTP URL from `@prerenderbuddy/mcp@0.2.4 --http`. See the [MCP README](https://github.com/kopachlager/prerenderbuddy-mcp#streamable-http--grok-bot).
+Grok on grok.com, iOS, and Android does not run local `npx` plugins. Add a custom MCP connector at [grok.com/connectors](https://grok.com/connectors) using `https://mcp.prerenderbuddy.com/mcp`. The hosted connector uses Prerender Buddy OAuth with PKCE and read-only workspace scopes. See the [MCP README](https://github.com/kopachlager/prerenderbuddy-mcp#streamable-http--grok-bot).
 
 
 ## Privacy and safety
diff --git a/docs/release-readiness.md b/docs/release-readiness.md
index 5ba1a75..c0a8ae4 100644
--- a/docs/release-readiness.md
+++ b/docs/release-readiness.md
@@ -5,7 +5,7 @@ This document separates implemented compatibility from external publication and
 ## Implemented
 
 - Shared crawler-visibility and workspace-review Agent Skills.
-- Local `@prerenderbuddy/mcp@0.2.4` stdio server.
+- Local `@prerenderbuddy/mcp@0.2.5` stdio server.
 - Optional read-only Pro workspace evidence through the scoped Developer API.
 - Agent Plugins 1.0 root manifest and MCP configuration.
 - Native Codex, Claude Code, and Grok Build manifests.
diff --git a/package-lock.json b/package-lock.json
index 0e5a5aa..b493248 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "prerenderbuddy-plugins",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "prerenderbuddy-plugins",
-      "version": "0.2.4",
+      "version": "0.2.5",
       "devDependencies": {
         "ajv": "8.20.0"
       }
diff --git a/package.json b/package.json
index 9f687c8..c42a882 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "prerenderbuddy-plugins",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "private": true,
   "description": "Validation tooling for the Prerender Buddy agent plugin package.",
   "type": "module",
diff --git a/plugins/prerenderbuddy/.claude-plugin/plugin.json b/plugins/prerenderbuddy/.claude-plugin/plugin.json
index 4e3db50..f8b414e 100644
--- a/plugins/prerenderbuddy/.claude-plugin/plugin.json
+++ b/plugins/prerenderbuddy/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "prerenderbuddy",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Developer companion to the Prerender Buddy platform for crawler audits and optional workspace evidence.",
   "author": {
     "name": "Prerender Buddy",
diff --git a/plugins/prerenderbuddy/.codex-plugin/plugin.json b/plugins/prerenderbuddy/.codex-plugin/plugin.json
index dca172f..bef79a3 100644
--- a/plugins/prerenderbuddy/.codex-plugin/plugin.json
+++ b/plugins/prerenderbuddy/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "prerenderbuddy",
-  "version": "0.2.4+codex.20260914180513",
+  "version": "0.2.5+codex.20260915145200",
   "description": "Developer companion to the Prerender Buddy platform for crawler audits and optional workspace evidence.",
   "author": {
     "name": "Prerender Buddy",
diff --git a/plugins/prerenderbuddy/.grok-plugin/plugin.json b/plugins/prerenderbuddy/.grok-plugin/plugin.json
index 4e3db50..f8b414e 100644
--- a/plugins/prerenderbuddy/.grok-plugin/plugin.json
+++ b/plugins/prerenderbuddy/.grok-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "prerenderbuddy",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Developer companion to the Prerender Buddy platform for crawler audits and optional workspace evidence.",
   "author": {
     "name": "Prerender Buddy",
diff --git a/plugins/prerenderbuddy/.mcp.json b/plugins/prerenderbuddy/.mcp.json
index 9e7a7ef..48a8de5 100644
--- a/plugins/prerenderbuddy/.mcp.json
+++ b/plugins/prerenderbuddy/.mcp.json
@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "--yes",
-        "@prerenderbuddy/mcp@0.2.4"
+        "@prerenderbuddy/mcp@0.2.5"
       ],
       "env_vars": [
         "PRERENDER_BUDDY_API_KEY"
diff --git a/plugins/prerenderbuddy/README.md b/plugins/prerenderbuddy/README.md
index be50a71..05b7f8b 100644
--- a/plugins/prerenderbuddy/README.md
+++ b/plugins/prerenderbuddy/README.md
@@ -9,7 +9,7 @@ This package contains:
 - a local Prerender Buddy MCP server configuration;
 - native compatibility manifests for Codex, Claude Code, and Grok Build.
 
-The MCP server runs through `npx --yes @prerenderbuddy/mcp@0.2.4`. It requires Node.js 20 or newer. Its three public audit tools need no account, API key, analytics, or telemetry. When `PRERENDER_BUDDY_API_KEY` is available to the MCP process, it also registers read-only workspace tools backed by the scoped Pro Developer API. Restart the agent host after adding or changing the key.
+The MCP server runs through `npx --yes @prerenderbuddy/mcp@0.2.5`. It requires Node.js 20 or newer. Its three public audit tools need no account, API key, analytics, or telemetry. When `PRERENDER_BUDDY_API_KEY` is available to the MCP process, it also registers read-only workspace tools backed by the scoped Pro Developer API. Restart the agent host after adding or changing the key. Grok website connectors use the hosted OAuth endpoint at `https://mcp.prerenderbuddy.com/mcp` instead of this local process.
 
 Never paste the API key into a chat or commit it to a repository. Create a narrowly scoped key in Prerender Buddy and expose it to the local MCP process through the host environment.
 
diff --git a/plugins/prerenderbuddy/mcp.json b/plugins/prerenderbuddy/mcp.json
index ce107bf..8c8ecb8 100644
--- a/plugins/prerenderbuddy/mcp.json
+++ b/plugins/prerenderbuddy/mcp.json
@@ -6,7 +6,7 @@
       "command": "npx",
       "args": [
         "--yes",
-        "@prerenderbuddy/mcp@0.2.4"
+        "@prerenderbuddy/mcp@0.2.5"
       ],
       "env": {
         "PRERENDER_BUDDY_API_KEY": "${PRERENDER_BUDDY_API_KEY}"
diff --git a/plugins/prerenderbuddy/plugin.json b/plugins/prerenderbuddy/plugin.json
index 492aaa8..e2f7310 100644
--- a/plugins/prerenderbuddy/plugin.json
+++ b/plugins/prerenderbuddy/plugin.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "prerenderbuddy",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Developer companion to the Prerender Buddy platform for crawler audits and optional workspace evidence.",
   "author": {
     "name": "Prerender Buddy",
diff --git a/scripts/validate.mjs b/scripts/validate.mjs
index d0edc19..1f1e9cb 100644
--- a/scripts/validate.mjs
+++ b/scripts/validate.mjs
@@ -28,10 +28,10 @@ for (const manifest of [codex, claude, grok]) {
   if (manifest.mcpServers !== "./.mcp.json") fail("Manifest must use the shared MCP config.");
   if (manifest.skills !== "./skills/") fail("Manifest must use the shared skills directory.");
 }
-if (!/^0\.2\.4(?:\+codex\.[0-9]+)?$/.test(codex.version)) fail("Unexpected Codex plugin version.");
-if (claude.version !== "0.2.4") fail("Unexpected Claude plugin version.");
-if (grok.version !== "0.2.4") fail("Unexpected Grok plugin version.");
-if (portable.version !== "0.2.4") fail("Unexpected portable plugin version.");
+if (!/^0\.2\.5(?:\+codex\.[0-9]+)?$/.test(codex.version)) fail("Unexpected Codex plugin version.");
+if (claude.version !== "0.2.5") fail("Unexpected Claude plugin version.");
+if (grok.version !== "0.2.5") fail("Unexpected Grok plugin version.");
+if (portable.version !== "0.2.5") fail("Unexpected portable plugin version.");
 
 const ajv = new Ajv2020({ allErrors: true, strict: true });
 const validatePortablePlugin = ajv.compile(portablePluginSchema);
@@ -59,7 +59,7 @@ const nativeServer = nativeMcp.mcpServers?.prerenderbuddy;
 const portableServer = portableMcp.mcpServers?.prerenderbuddy;
 for (const server of [nativeServer, portableServer]) {
   if (server?.command !== "npx") fail("MCP server must start through npx.");
-  if (server?.args?.join(" ") !== "--yes @prerenderbuddy/mcp@0.2.4") {
+  if (server?.args?.join(" ") !== "--yes @prerenderbuddy/mcp@0.2.5") {
     fail("MCP package must be pinned to the reviewed version.");
   }
 }