Changelog

✨ Features

• Imported connectors gain the operations that were silently dropped.
• Imports now report which operations produced no action.
• The confirmation prompt now asks about blast radius, not the HTTP verb.
• Risk categories now recognise imported action names.
• A risk category now says whether it prompts or disables.
• Confirmation now tracks reach, not recoverability.
• One decision for what a path addresses.
• Confirmation now explains itself, and reach is read from the API's own structure.
• Shared automations now advertise the arguments they accept.
• A shared automation's approval now remembers what it accepted.
• Pipedrive notes are now readable.
• Form-encoded request bodies.
• Connection tiles can now verify the upstream is actually reachable.

🐛 Fixes

• A parameter a connector cannot apply is refused instead of ignored.
• Confirmation gate covers vendor resource:verb endpoints.
• A destroying operation is recognised when the path names it, not only when the method does.
• The advertised automation arguments stay current.
• Pipedrive deals, contacts and notes accept quoted ids.
• Four auth error paths now name the failure.
• Auto-merge intent is never silently lost.
• Confirmation gate now covers irreversible POST operations.
• Names the failure in two more connector error paths.
• A field the upstream really has is no longer shadowed by the caller's identity.
• An OpenAPI import now says what it will not be able to send.
• Guest invites now cover per-user-credential services.
• Concurrent admin visibility changes no longer overwrite each other, and a freshly connected hidden service says so.
• Outbound request errors now name the failure.
• Grafana log search now applies every search term.
• Actions no longer ask for metadata the service does not want.
• Starting an MCP session no longer scales with the size of the install.
• Refreshing a token from the connections page uses the same coordination as everywhere else.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2095

✨ Features

• Release assets and translation files move as files in both directions.

🐛 Fixes

• A connection must be finished by the person who started it.
• Connection ownership is judged by canonical identity.
• Starting a service connection always requires signing in.
• Transfer-route reachability is checked against the running code.
• Uploads refuse a destination they cannot honour.
• Connect flows no longer trust an identity the upstream or the link supplied.
• Signing in and connecting a service are now separate acts.
• A connector cannot become the sign-in provider.
• Authorization flows keep working while service connections stay gated.
• Turned-away connection attempts are recorded as such.
• The listings that make a download addressable.
• Analytics report listings accept the field selector Apple offers.
• Parameters an action documents can now actually be passed.
• Hardened OAuth connect identity and token revocation.
• Sturdier token storage and permission adoption.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2065

🐛 Fixes

• MCP OAuth authorization responses now carry the RFC 9207 iss parameter.
• OAuth error redirects now carry state and the RFC 9207 iss parameter.
• Hardened authorization-response composition.
• Fail-closed error handling on the ChatGPT authorization entry point.
• Authorization error responses are bound to the redirect allow-list.
• Three parameters that were silently ignored now take effect.
• Calmer logging for caller-input errors after token refresh.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2052

✨ Features

• Files from Microsoft 365 and Home Assistant now stream instead of filling the context window.
• Adds a check that a page's scripts only address elements the page contains.
• Upload routes for repository files, release artifacts, translations and product images.
• Group conversation attachments and Pipedrive product images now stream.
• Five more Microsoft 365 file shapes now stream.
• GitHub, Figma and Sentry can now stream files.

🐛 Fixes

• Repository files from GitLab now stream as files.
• Hardens the check that a page's scripts only address elements the page contains.
• Your brand colour now actually reaches the admin panel.
• Hardens the check that keeps operator branding visible.
• Cuts the service-import page from 1.2 MB to 217 KB.
• Tightens admin-surface HTML escaping and import validation.
• Closes a hook-import dead end.
• Trims further dead stylesheet rules from the service-import page.
• A lost permission mapping is no longer reported as a resolved one.
• The gateway can now tell which Microsoft 365 actions your permissions cannot run.
• The transfer coverage inventory can no longer drift.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2045

✨ Features

• OneNote support for Microsoft 365.
• A connector can now select an upstream representation by request header.
• Teams meeting recordings and transcripts download as files.
• OneDrive and SharePoint files download by drive id, and via sharing links.
• Teams inline images are now retrievable.
• Responses that carry a file inline now say so.
• File coverage is now guarded, and reaches calendar attachments.

🐛 Fixes

• A single-workload grant now reaches that workload's file transfers.
• Endpoint identity in the action importers is now decided the same way on both sides.
• Binary responses now point at a tool that exists.
• Long-tail action catalogues no longer lose an endpoint to a name collision.
• Jenkins credentials are checked when they are entered.
• A credential check that cannot answer no longer blocks connecting.
• Per-user credentials are checked when they are entered, not when they are first used.
• A CI job log no longer arrives unbounded, and keeps the part that matters.
• A log search is no longer silently truncated.
• Per-user connectors can derive the account login from the signed-in identity.
• A paused shared automation is now described as paused on every surface.
• Clearer operator alert when a shared automation pauses itself.
• Transfer tickets now always carry size_bytes and sha256.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2032

✨ Features

• Microsoft 365 files now move in both directions.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2012

🐛 Fixes

• Confluence scope adoption connects and saves safely.
• A credential saved in the admin UI now counts as configured everywhere.
• Service availability now reflects every required credential, wherever it is stored.
• Search-discovery tests follow the full credential requirement set.
• Startup encryption sweep now follows owner-declared key policies.
• Action search reflects configuration and permission changes immediately.
• The action catalogue reports credential state from the same gate the tool list uses.
• The PII sweep leaves deliberately-unencrypted annotations alone.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2011

🐛 Fixes

• Connectors stay available when an optional setup field is empty.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2003

✨ Features

• Connector for a role-aware internal CRM/admin API.

🔧 Improvements

• Service detail page uses the shared status colours.
• Removes a duplicated sign-in stylesheet and lets admin cards follow the theme.
• Stylesheets are now covered by the design-system check.
• CI now verifies the merge result, not only the branch.
• Faster self-heal correction before review.
• Leaner service detail page.
• The admin UI's page shell is now enforced, not just documented.
• Lighter hook builder.

🐛 Fixes

• Fixes an unreadable active filter button in the support view.
• Restores the missing focus outline on four input fields.
• Clear self-heal approval hand-offs.
• Consistent service visibility across replicas.
• Admin pages now answer a refusal instead of rendering an empty shell.
• Quieter logs when a request is abandoned.
• Two query-parameter shapes the gateway could not send at all.
• Tightens authorization on the operator console.
• Hardened how the admin pages embed data for the browser.
• Steadier hook builder and a tighter action feed.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.2002

✨ Features

• A user is told when their own connection has fallen behind.

🔧 Improvements

• Consistent loading placeholders across the admin surface.
• Much lighter services page.
• The Branding and Welcome pages move into their own modules.
• The Tokens and Subscription pages move into their own modules.
• The Organization and Overview pages move into their own modules.
• Admin pages render substantially faster.
• Faster service detail page.
• The service detail page moves into its own module.
• Steadier admin section rendering under the section split.
• The services list moves into its own module.

🐛 Fixes

• The last floating tag in the build chain is pinned too.
• Release numbering only ever moves forward.
• Release numbering stays reliable even with an unusual tag in history.
• The whole CI docker toolchain is pinned, not floating.
• Image builds push a single manifest again.
• Hardens the admin render-path caches.
• Tightens the key-cache lifetime.
• Saving an action change no longer rebuilds every connector's tool schema.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1985

🔧 Improvements

• Every place that reports an unconfirmed permission now offers the next step.
• The per-connection drift line is gone from the service page.
• The action summary opens with what is switched on.
• Permissions can be requested for on-demand actions without promoting them.
• The action table asks one question fewer.
• Switching actions on or off is now near-instant.
• A published version number describes exactly one release.
• Unconfirmed permissions are visible where an operator looks for work.
• Permissions for newly enabled actions are derived, not retyped.
• Every published version number now identifies a build you can pull.
• A service tile stops reporting green once a capability it exposes is unproven.
• Action table columns line up, and the summary line is now a filter.
• A playbook for diagnosing slow test runs.

🐛 Fixes

• Saving an action change is roughly ten times faster.
• The permission marker on an action row is drawn instead of typed.
• A governance save no longer costs the other container a full catalogue re-parse.
• The permission marker on an action row is legible and no longer clipped.
• Context Map sync re-scans the configured discovery groups.
• Connectors can declare that a provider's scope lists are permission tiers.
• The affected-actions list now matches the permission it is shown next to.
• Clearer signal when a parameter is not applied.
• A governance change now reaches every container, and the fix button only appears where it can act.
• Service tiles now receive the permission status the server computes for them.
• Workspace exports honour the format you ask for.
• Four parameters that were being silently ignored now take effect.
• Paging through starred projects.
• Four corrections to the permission-adoption flow.
• A promoted action no longer disappears on the next save.
• A Google permission failure reaching the connections tile is now pinned by tests.
• File transfers now validate every redirect they follow.
• Configuration writes now survive a host crash, and an empty environment variable no longer shadows a configured value.
• The shared configuration file now has the last word in every case.
• The magic-link confirmation step is bound to the browser that opened it.
• Configuration ordering across containers is now anchored on the file, not the broadcast.
• Public URL resolution now honours APP_BASE_URL everywhere.
• A configuration save that cannot get the shared lock no longer writes the file.
• A configuration file that is behind what a container already applied is now left alone entirely.
• The magic-link confirmation step now requires proof that the request came from the gateway's own page.
• Configuration saves are now ordered across containers.
• Magic-link login now shares the hardened same-origin rule.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1970

✨ Features

• Service pages now say which actions a connection cannot run.
• The OAuth scope field now shows the whole set, not just your additions.
• The permission warning moved to the moment it matters.
• Admins can now see which connected users hold an out-of-date OAuth grant.
• Saving a service now warns when its actions need OAuth permissions the installation does not request.
• Extra OAuth scopes are now the operator's to configure.
• Actions now record the OAuth scopes they need.

🔧 Improvements

• Service definitions are read once per test process instead of repeatedly.
• An automatically filed bug report now says when it is one of several from the same failure.
• Test collection no longer waits on a Redis that is not there.
• Test collection parses service definitions with the fast YAML reader.
• Test runs report how much parallel capacity they were given.
• Release numbering no longer needs a hand-picked version.
• Merge validation checks the specifications this repository ships.
• Admin pages are verified to parse in a browser before release.
• The OpenAPI import checks parse their catalogue once instead of four times.
• The dependency audit runs when dependencies change, and nightly.
• Page-output verification runs alongside the rest of the suite again.
• The permission-surface checks build their catalogue once instead of per assertion.
• Page-output verification runs when a page can have changed, not on every commit.
• Test runs report the machine they got at both ends, not just the start.
• Startup stops resolving a Redis hostname it cannot reach.
• Startup no longer waits out a full retry budget it has already spent.
• Continuous-integration runs record the CPU they were given.
• Page-level verification reaches the parameterised admin pages.
• The admin surface begins splitting into per-section modules.
• The log viewer inherits the shared admin layout.
• Admin page output is pinned at the HTTP-response level.
• Setup page rendering is pinned against silent drift.

🐛 Fixes

• Configuration saves inside one container stay strictly ordered.
• Switching read-only mode now tells you whether it actually took effect everywhere.
• Importing a spec through the admin interface now routes each API family correctly.
• Log searches survive more regular-expression shapes, and a self-healing change parked for review is now reported.
• A parameter alias can no longer shadow another parameter.
• A guessed action name can no longer run a different operation.
• The service configuration page recovers its interactive controls.
• An expired connection is reported as a reconnect prompt, not as a gateway fault.
• Credential and permission fields are no longer spell-checked.
• Signing in with Google works again on every entry point.
• Saved-question and dashboard reads keep their timeout retries.
• Connector connect links no longer advertise a narrower scope than they grant.
• Configuration saves report what the gateway actually observed.
• Two follow-ups from an external review of the same batch.
• A long-running statement that can modify data is no longer retried after a timeout.
• A wrong-typed action parameter now gets an actionable answer instead of an internal error.
• Every operation in an imported specification now reaches the action catalogue.
• Tightens what a governance Save confirms.
• The gateway's public URL is configuration, not something a request can set.
• A contact write is refused when an identifying field still holds an unresolved placeholder.
• Same-origin check now derives the gateway's own origin from the request the browser addressed.
• Governance saves report what actually happened, on every route.
• Contact notes sent as HTML are allow-listed before they leave the gateway.
• Connector scope sets are chosen by the gateway, not by the caller.
• Confirmation now covers writes that destroy content or lower a security control, not only deletes.
• Governance saves report a truthful, ordered outcome.
• Stricter same-origin checks on state-changing admin endpoints.
• Bulk action-governance saves now confirm success only when the save is complete.
• Tightens the everyday/on-demand and high-risk approval toggles to real booleans.
• Self-healing reports why a commit was refused, and stops repeating a refusal it cannot clear.
• Multi-action saves on a service page apply in one request.
• The per-service tool-search switch can no longer be routed around.
• Sharper permission diagnostics and honest permission reporting.
• The per-service tool-search switch now bounds what runs, not just what is found.
• 403 responses now say which side has to grant the permission.
• Curated action lists now only advertise actions a stock install can call.
• The additional-scopes field is checked against the page an operator actually sees.
• The admin page-rendering gate no longer expires overnight.
• Confluence installs can now request scopes beyond the connector default.
• Imported API specifications are validated more strictly.
• Scope metadata reads an API spec's "no scope required" marker correctly.
• Permission advice no longer points at site administration, and 17 dead Jira actions are gone.
• Confluence's searchable action catalogue is reachable.
• A missing-permission error now names the permission.
• Actions that take a list accept a single value.
• Jira board actions are now opt-in, so upgrading never blocks a connection.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1936

✨ Features

• Jira boards, sprints and backlogs are now reachable.
• Action required for Jira operators.

🔧 Improvements

• The stylesheet cache-buster check reports what it could not verify.
• Local pre-commit and CI now provably run the same test lane.
• The admin route module is ready to be split by section.
• Groundwork for splitting the admin route module.
• Every setup and admin page now inherits one shared layout.
• The design-system check now runs where the work happens.
• Three accessibility rules are enforced at commit time.
• The setup and admin pages render through a real template engine.

🐛 Fixes

• Board listings return usable fields, and Atlassian scope errors name the right tab.
• Stylesheet updates reach browsers reliably.
• Restores the design-token cache-busting references.
• Jira long-tail actions now route correctly.
• Form fields and the hook preset cards show keyboard focus.
• The design-system check also runs in the pipeline.
• Protecting an extra term in a document review no longer needs a mouse.
• Popup menus no longer announce interactions they do not support.
• Two admin pages are usable on a narrow screen.
• Payment-card detection no longer misses numbers written next to short digit runs.
• Boolean tool parameters accept the string "false" as false.
• The review ledger tracks per-file review anchors.
• The review-ledger consistency check now fails on every output path.
• Test isolation for read-only mode no longer depends on run order.
• Curating an OpenAPI import no longer requires a mouse.
• The Hook Builder action picker opens from the keyboard.
• Sortable table headers can now be operated by keyboard, and announce their sort state.
• The "Send test via …" action in notification settings is reachable by keyboard.
• Risk classification badges are reachable by keyboard.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1869

✨ Features

• Object- and array-typed write fields accept JSON text.
• Metabase database description now rides schema and inspect responses.
• Metabase schema tools now surface table and column descriptions.
• Hook Builder: disabled hooks grouped and dimmed.
• Hook Builder: enable/disable switch in the hook detail pane.

🔧 Improvements

• Log queries and the automated review gate are harder to mislead.
• The self-healing review gate judges a fix with the context it needs.
• A failing test run now re-checks its failures before going red.
• Windmill connections explain how to run code that is not yet deployed.
• Deliberate guard refusals read as warnings in the audit log, not errors.

🐛 Fixes

• Toggles and icon pickers now show keyboard focus.
• Remaining page-level focus styles adopt the shared ring.
• Keyboard focus is now clearly visible on every surface and with any brand colour.
• Destructive buttons meet the contrast standard for their label.
• Screen readers now announce toggle state, field names and async results across the admin panel.
• Text that was effectively invisible is readable again.
• Button text on a filled brand colour now picks itself.
• The connections page no longer reloads itself every five minutes.
• The audit stream labels its severity in text.
• The CI flaky-test retry now actually runs.
• Missing-parameter checks follow what the handler actually needs.
• Long-tail action generation is reproducible, and drift is now detected.
• Test isolation for the read-only switch.
• The GitHub mirror no longer fails on its own concurrency.
• A call missing a required parameter gets an actionable answer.
• Spec refreshes now produce the actions they describe.
• Actions accept the upstream API's own parameter names.
• Log search tolerates any search text.
• Long-tail actions return their full payload when the spec omits a response schema.
• Plain-line postal addresses reach the CRM.
• Organization writes now cover every field the CRM accepts.
• Recognises operator-provisioned connectors in the automation connection precheck.
• Removes a stray design note from the delegated-access card.
• Tightens the delegated-access environment gate.
• Adds pseudonym resolution for CRM person email fields.
• Restricts placeholder resolution to minted placeholders.
• Requires explicit service ids when an operator mints delegated access.
• Windmill connections can now run scripts and flows.
• Multi-service scope declarations parse whitespace as a separator.
• Scheduled log scan no longer stalls after its first run.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1850

✨ Features

• Hook Builder: enable/disable toggle on every hook.
• A content connector's note-write action can now request HTML rendering.

🔧 Improvements

• Makes the Metabase connector engine-agnostic.

🐛 Fixes

• Sharper payment-card detection.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1818

✨ Features

• A content connector can now append a note to a customer record.
• The context-memory grade gate is now a runtime toggle on the Context Map admin page.
• Context memory can now collect owed grades at the next write (grade gate).

🔧 Improvements

• Enforces tool visibility at execution time.
• Retires two completed one-time startup migrations.
• Removes unused internal modules and dead code paths.
• Strengthens automated verification of the OAuth and admin-authorization surfaces.
• Trims unused internal modules.

🐛 Fixes

• Isolates PKCE verifiers per authorization flow.
• Fixes the toggle switches on the Context Map admin page.
• Fixes several latent defects in token refresh, action routing, and metrics.
• Tightens the context-memory grade gate: delegated (run-as-invoker) calls are never gated.
• Operator alerts now timestamp in the configured display timezone.
• Extends the operator deny-by-default gate to guest-management endpoints.
• Hardens session, task, and token-refresh handling.
• Hardens OAuth connection storage against transient decryption failures.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1814

🔧 Improvements

• Hardens PII scanning for large and grouped-path inputs.
• Tightens self-heal approval clicks.
• Release notes stay customer-neutral automatically.
• Operators-only restriction now holds on grouped-service tools.
• Standalone pages join the design-token system.
• Requires proof of ownership before registering an automation.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1798

✨ Features

• Email-to-user-id resolution for the content connector.
• Context Map: assign a review by name, resolved against active gateway users.
• Context Map: an open-requests board + clearer review pings.
• Context Map: a report can ask a specific colleague to review a page — and closes the loop.
• Context Map: expertise routing is on by default with a one-click admin toggle.
• Context Map: request a colleague's review from a page.
• Context Map: reader issue reports.
• Context Map: verify reviewed sources.
• Context Map: read-time staleness signal.
• Context Map: change ledger for declared sources.
• Context Map: typed page sources.

🔧 Improvements

• Consistent page titles and cleaner stylesheet loading in the admin panel.
• Design-system guardrails now block style drift at commit time.
• Tightens per-action authorization for grouped services.
• Leaner admin styling foundation.
• Recurring review ledger.
• MCP proxy unknown-tool errors now list the available tools and suggest the closest match.
• Clearer Google Admin SDK Reports setup.
• Skip privacy scrubbing for vendored specification reads.
• Clearer message when a response is withheld for privacy.

🐛 Fixes

• Admin tab titles follow the gateway display name.
• Refreshes design-token stylesheet cache-busters.
• Context Map: review notifications are in English and use first names.
• Context Map: name-based review assignment now understands real names.
• Context Map: review notifications use people's names, not email addresses.
• Context Map: tighter safety on reports.
• Context Map: clearer, safer expertise requests.
• Context Map: freshness epoch also applies to search previews.
• Context Map: freshness cursors survive a metadata-store reset.
• Context Map: harden freshness watch + reader reports.
• Context Map: freshness watcher fix + pass visibility.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1790

✨ Features

• Sharper parameter feedback for AI clients.
• Sharing decisions close the loop for everyone involved.

🔧 Improvements

• Build-time guard against actions that expose a parameter they do not apply.

🐛 Fixes

• Filters and fields now take effect on more search and write actions.
• Project-scoped GitLab issue search.
• Token refreshes for a connection now serialize behind a single lock.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1758

✨ Features

• Silently-ignored parameters are now visible to the caller.
• Shared-automation approvals now cover the code version, not just the name.
• User-submitted bug reports can now be fixed hands-free — with a maintainer approve step.
• Terms-of-service onboarding for the vocabulary connector.
• Creators can now share their automations self-serve, gated by a one-click operator approval.
• Windmill path errors now come with directions.
• WebMCP browser-agent surface (experimental).
• Multipart passthrough for batch binary uploads.
• Direct binary upload for vocabulary card images.
• Bulk card edits for the vocabulary connector.
• Self-heal MRs now carry a structured Confidence Card.
• OpenTelemetry trace export (OTLP).
• Duplicate bug reports are now caught before they fork.

🔧 Improvements

• Browser-agent (WebMCP) controls moved to the Clients page.
• Calibrated risk weighting on the self-heal confidence card.
• Hook writes are now traceable.

🐛 Fixes

• Manually configured service credentials now remain connected until explicitly removed.
• Shared service access is reflected consistently.
• Complete audit exports and clearer authorization errors.
• Connection cards now reflect shared and external setup states accurately.
• Clearer external connection guidance.
• Reconnect prompts now catch status-only refresh rejections.
• Per-page attachment listing for Confluence and honest body passthrough for Outlook reply actions.
• Smoother terms acceptance on slow upstreams.
• Hardens the shared-automation approval flow.
• Hardened the untrusted-report self-heal flow.
• The automation scope check now reads JSON-serialized definitions correctly.
• The automation register action now accepts JSON-string list parameters.
• Dependency locks refreshed against new advisories.
• Confluence CQL search now works out of the box.
• Connect errors now land on the connections page.
• Bulk vocabulary writes now report skipped cards.
• Hardens the vocabulary connector's media handling and read reliability.
• Hardened the action off-switch and honest discovery copy.
• The action catalogue is strictly two kinds: curated or searchable.
• Action catalogue speaks one vocabulary: curated, searchable, or disabled.
• Jira/Confluence Markdown rendering: nested formatting around inline code now converts to spec-valid ADF.
• Action-catalogue discoverability: search flags, curated-subset markers, teaching errors.
• Bot MRs stay clean of run artifacts.
• Self-heal confidence proof now runs reliably in every engine.
• Sub-service grants now unlock their umbrella tools.
• Hot-reload no longer blocks the gateway.
• Slack search results now render natively in Slack.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1752

✨ Features

• Edit vocabulary cards in place, with images.
• Browse a deck's units and cards.
• Generated cover images for content decks.
• Service headers can bind to the calling user.
• Token-exchange auth resolver gains per-request base-URL routing and custom exchange payloads.

🔧 Improvements

• Dedupe against a whole deck in one call.
• Smarter deck organisation.
• Readable cover titles.
• Guided deck creation — no more surprise decks.
• Fewer accidental duplicate decks.
• Clearer defaults when creating a vocabulary deck.
• Setup wizard gates Connect/Verify behind the activation toggle.

🐛 Fixes

• Reworks connector image-fetch rebind protection.
• Further hardens connector image handling.
• Hardens server-side image fetching for content connectors.
• More robust card/cover image fetching.
• Session renewal now slides the backing store too.
• Reliable photo covers from a URL.
• Better generated deck covers.
• Per-environment routing now applies to the whole request.
• IP-address masking no longer trips on dotted number runs.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1709

✨ Features

• Oversight tools can log the query they ran, not just that they ran.
• Operators-only audience toggle on the service admin page.
• Google Admin SDK Reports connector (Drive audit).
• Operators-only service visibility.
• Pipedrive deal, organization and person creation.

🔧 Improvements

• Official Google Admin icon for the Admin SDK Reports connector.
• Single 3-state visibility control for built-in services.
• Google Cloud Logging defaults to operators-only.
• Encrypts the download replay cache at rest.
• Extends audit coverage to every tool-execution channel.

🐛 Fixes

• Drive folder/search now honour the result limit.
• Service registry never hands back an empty snapshot after a reload.
• Drive folder listing and shared-drive search now work correctly.
• Hardened MCP tools/list auth and operator recognition.
• Audit-report reads keep the real actor identity.
• Operators-only services are now hidden from search and can be widened to all.
• Operators-only services are now hidden on the connections page too.
• Session validation rides out transient backend blips.
• Pipedrive single-record reads return full detail.
• Run-as-invoker automations no longer fail on repeated runs.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1688

🔧 Improvements

• Broadens automated security test coverage.
• Microsoft profile photos on by default.
• Pinned the magic-link (passwordless) token security contract.
• Pinned the authorization-decision matrix with adversarial tests.
• Extended Google OAuth handler test coverage.
• Removed an unwired token-security policy layer.
• Hardened test coverage of the OAuth connect flow.
• Consolidated OAuth callbacks onto one hardened path.
• Added tamper-evidence to the audit trail.
• Tightened credential-at-rest, delegated-access scope, and cross-session content isolation.
• Hardened outbound request validation on spec-import and transfer paths.

🐛 Fixes

• Hardens authentication, OAuth and logging edge cases.
• Tightens OAuth and email input validation.
• Audit log distinguishes caller-side argument errors from real failures.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1668

🐛 Fixes

• Profile photos render consistently across the admin area.
• More robust OAuth, health and connector paths.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1655

🐛 Fixes

• Resolved edge-case defects surfaced by the coverage pass.
• Deterministic OpenAPI spec-cache test.
• Hardened OAuth redirects, webhook verification and diagnostics.
• Hardened spec import, redaction and connector robustness.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1653

✨ Features

• Tool access grants now resolve from the tool registry.

🔧 Improvements

• Locked-in PII redaction guarantees.
• More refactor-resilient UI tests.

🐛 Fixes

• Tightened token attack detection.
• Accurate sign-in method in audit logs.
• Leaner security surface.
• One-time token backfill for the audit identity map.
• Faster startup on large installs.
• Denied service connects land back on the connections page.
• Automation job status stays available across extension hot-reloads.
• Per-service access grants now apply precisely to MCP-proxy connectors.
• Audit log now explains every failed tool call.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1649

✨ Features

• Team admin: guest access as a services matrix.

🐛 Fixes

• Client-side aborts now show as explained yellow rows in the audit log.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1636

✨ Features

• Microsoft avatars now render on the OIDC-bootstrap dashboard login.
• Context Map can be granted to guest accounts.

🔧 Improvements

• Self-healing agent runs without push or API credentials.
• First-run instance claim is operator-gated.
• Context Map results carry authorship.

🐛 Fixes

• Signing out no longer ends the identity provider's browser session.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1634

🔧 Improvements

• Tightened access checks on several endpoints.
• Context Map: capture nudge on pitfall hints.
• GitLab: consistent branch alias.
• Context Map pages file themselves by domain.
• Context Map writes now give domain feedback.

🐛 Fixes

• OAuth service-connect now derives the account from the signed-in session.
• Weekly self-healing analysis learns only from merged fixes.
• Jira: update_issue can change the issue type.

Full changelog: https://mcpgate.de/changelog/

Docker: docker pull mcpgate/mcpgate:2.0.1628