Release notes from mcpproxy-go
Articles about Release notes from mcpproxy-go
Release v0.70.0
Highlights: profiles v3, per-client credentials and a reworked navigation, with upgrade-safe quarantine and agents that know where their tools are. Profiles v3 (Spec 108): per-profile tool policy (max_tier, allow/deny rules, unannotated handling), client and token bindings, anonymous_profile, and an access explainer on Web UI, macOS app, CLI and the MCP profiles tool. Connect now writes a per-client mcp_cli_ credential instead of the admin key. UX consistency (Spec 109): one needs-attention list, informed Review
Release v0.70.0-rc.2 · smart-mcp-proxy/mcpproxy-go
mcpproxy v0.70.0-rc.2 (Prerelease) ⚠️ This is a prerelease version - Use at your own risk! Smart MCP Proxy - Intelligent tool discovery and proxying for Model Context Protocol servers. Download Links This Prerelease (v0.70.0-rc.2): Linux AMD64 Linux ARM64 Windows AMD64 Windows ARM64 macOS AMD64 macOS ARM64 macOS Installer: Signed DMG (Apple Silicon)
Release v0.70.0-rc.3 · smart-mcp-proxy/mcpproxy-go
v0.70.0-rc.3: fix RC-UPG-001 upgrade admission (#1485); agent visibil
Release v0.70.0-rc.1 · smart-mcp-proxy/mcpproxy-go
v0.70.0-rc.1: Profiles v3 (scoped access, per-client credentials, pro
Release v0.69.0
Highlights: security hardening from the architecture review. The admin API key is no longer written to log files (SEC-01; rotate it if your logs were shared), /metrics requires admin auth (SEC-07), REST/SSE CORS is limited to loopback and trusted_hosts (SEC-04), constant-time key compare (SEC-05), config.db is owner-only (SEC-03), and the tray self-update verifies checksums and installs the tray binary. Plus Connect TOCTOU fixes, ZCode as a Connect client, a hard shutdown deadline, and Activity filter and scan-report fixes.
Release v0.68.0 · smart-mcp-proxy/mcpproxy-go
🔒 Colon-named tools are approved by their exact name — one-time review after upgrade A tool's approval record, search-index entry and callability are now keyed by the exact name its server reports, colons included. Earlier releases filed a namespaced tool such as ns:erase under the text after its first colon, so it shared — and silently inherited — the approval of a sibling erase on the same server.
Release v0.67.0 · smart-mcp-proxy/mcpproxy-go
🔒 Colon-named tools are approved by their exact name — one-time review after upgrade A tool’s approval record, search-index entry and callability are now keyed by the exact name its server reports,
Release v0.66.1 · smart-mcp-proxy/mcpproxy-go
v0.66.1: OAuth per-method upstreams, scope/detection gaps, log-sink f
Release v0.66.0 · smart-mcp-proxy/mcpproxy-go
⚡ code_execution is now on by default The sandboxed JavaScript/TypeScript code_execution tool — one request that orchestrates several upstream tool calls, with loops, conditionals and data transformation in between — ships enabled starting with this release. Previously it had to be switched on by hand.