AI MCP Proxy

Release date 2026/02/01

Bugfix

• Fixed an issue where tools/list could expose tools to consumers denied by tool ACL in listener mode.

• Fixed an issue where PATCHing the tool caused an error.

Release date 2025/12/18

Feature

• Added support for MCP ACL control.

• Added support for cookie in OpenAPI spec when doing MCP conversion.

• Added support for structured output from MCP conversion.

Bugfix

• Fixed an issue where path traversal can be done with path parameter.

• Fixed an issue where MCP server could not call upstream when proxy protocol is used.

• Fixed an issue where failing to fetch tools cache was not handled properly.

• Fixed an issue where forwarding client headers to upstream could not be disabled.

• Fixed an issue where trusted ip relative headers were forwarded upstream.

• Fixed an issue where tools/call could accept malformed requests and generate wrong responses.

• Fixed an issue where path invalid error was not handled properly.

• Fixed an issue where we could not override the upstream’s scheme when converting MCP tool to RESTful API.

• Fixed an issue where MCP server could not call upstream when self-signed certificate is used in Kong.

• Fixed an issue where mcp proxy is not parsing default values properly.

• Fixed an issue when using passthrough-mode, tools without tool ACL do not apply default ACL.

Release date 2025/12/10

Bugfix

• Fixed an issue where failing to fetch tools cache was not handled properly.

• Fixed an issue where trusted ip relative headers were forwarded upstream.

• Fixed an issue where tools/call could accept malformed requests and generate wrong responses.

• Fixed an issue where path invalid error was not handled properly.

• Fixed an issue where we could not override the upstream’s scheme when converting MCP tool to RESTful API.

Release date 2025/11/18

Bugfix

• Fixed an issue where MCP server could not call upstream when proxy protocol is used.

• Fixed an issue where forwarding client headers to upstream could not be disabled.

• Fixed an issue where MCP server could not call upstream when self-signed certificate is used in Kong.

Release date 2025/10/01

Feature

• The plugin now forwards client headers when calling the tool.