Release date 2025/12/18
Feature
-
Added support for MCP ACL control.
-
Added support for cookie in OpenAPI spec when doing MCP conversion.
-
Added support for structured output from MCP conversion.
Bugfix
-
Fixed an issue where path traversal can be done with path parameter.
-
Fixed an issue where MCP server could not call upstream when proxy protocol is used.
-
Fixed an issue where failing to fetch tools cache was not handled properly.
-
Fixed an issue where forwarding client headers to upstream could not be disabled.
-
Fixed an issue where trusted ip relative headers were forwarded upstream.
-
Fixed an issue where
tools/callcould accept malformed requests and generate wrong responses. -
Fixed an issue where path invalid error was not handled properly.
-
Fixed an issue where we could not override the upstream’s scheme when converting MCP tool to RESTful API.
-
Fixed an issue where MCP server could not call upstream when self-signed certificate is used in Kong.
-
Fixed an issue where mcp proxy is not parsing default values properly.
-
Fixed an issue when using passthrough-mode, tools without tool ACL do not apply default ACL.