AI MCP Proxy

Release date 2026/04/28

Bugfix

• Fixed an issue where WWW-Authenticate: Bearer error=”insufficient_scope” header was not emitted.

Release date 2026/04/07

Feature

• Added support for ACL with OAuth claim.

• Added support for session sharing and active notice when doing MCP conversion.

Bugfix

• Fixed an issue where the latest 2025-11-25 spec defines the Authorization error codes which are different from ours.

• Fixed an issue where ACL denial caused parsing body failure.

• Fixed an issue where the ACL metric label value was incorrect.

• Fixed an issue where tools/list could expose tools to consumers denied by tool ACL in listener mode.

• Fixed an issue where we didn’t keep the port after MCP conversion.

• Fixed an issue where we have not reported metrics to konnect since 3.13.

• Fixed an issue where PATCHing the tool caused an error.

Performance

• reduced tool cache build time and avoided long blocking.

Release date 2026/04/08

Bugfix

• Fixed an issue where the latest 2025-11-25 spec defines the Authorization error codes which are different from ours.

• Fixed an issue where the ACL metric label value was incorrect.

• Fixed an issue where we have not reported metrics to konnect since 3.13.

Release date 2026/02/01

Bugfix

• Fixed an issue where tools/list could expose tools to consumers denied by tool ACL in listener mode.

• Fixed an issue where PATCHing the tool caused an error.

Release date 2025/12/18

Feature

• Added support for MCP ACL control.

• Added support for cookie in OpenAPI spec when doing MCP conversion.

• Added support for structured output from MCP conversion.

Bugfix

• Fixed an issue where path traversal can be done with path parameter.

• Fixed an issue where MCP server could not call upstream when proxy protocol is used.

• Fixed an issue where failing to fetch tools cache was not handled properly.

• Fixed an issue where forwarding client headers to upstream could not be disabled.

• Fixed an issue where trusted ip relative headers were forwarded upstream.

• Fixed an issue where tools/call could accept malformed requests and generate wrong responses.

• Fixed an issue where path invalid error was not handled properly.

• Fixed an issue where we could not override the upstream’s scheme when converting MCP tool to RESTful API.

• Fixed an issue where MCP server could not call upstream when self-signed certificate is used in Kong.

• Fixed an issue where mcp proxy is not parsing default values properly.

• Fixed an issue when using passthrough-mode, tools without tool ACL do not apply default ACL.

Release date 2026/04/15

Bugfix

• Fixed an issue where we didn’t keep the port after MCP conversion.

Release date 2026/02/26

Bugfix

• Fixed an issue where path traversal can be done with path parameter.

• Fixed an issue where PATCHing the tool caused an error.

Release date 2025/12/10

Bugfix

• Fixed an issue where failing to fetch tools cache was not handled properly.

• Fixed an issue where trusted ip relative headers were forwarded upstream.

• Fixed an issue where tools/call could accept malformed requests and generate wrong responses.

• Fixed an issue where path invalid error was not handled properly.

• Fixed an issue where we could not override the upstream’s scheme when converting MCP tool to RESTful API.

Release date 2025/11/18

Bugfix

• Fixed an issue where MCP server could not call upstream when proxy protocol is used.

• Fixed an issue where forwarding client headers to upstream could not be disabled.

• Fixed an issue where MCP server could not call upstream when self-signed certificate is used in Kong.

Release date 2025/10/01

Feature

• The plugin now forwards client headers when calling the tool.