Changelog

0.2.3 (2026-08-21)

Features

• arcadedb: Add arcadedb source and tools (mcp-toolbox#​2961) (351de00) (91c1c62)
• cmd/internal,docs: Add warning log that prebuilt tools are for developer use (mcp-toolbox#​3451) (8cffcef) (91c1c62)
• groups: Add ttlMs and cacheScope customization to config (mcp-toolbox#​3805) (a5d4947) (91c1c62)
• migrate: Convert toolset to group kind during migration (mcp-toolbox#​3704) (0adeaa5) (91c1c62)
• prebuilt: Migrate skills-repo toolsets to kind: group with descriptions (mcp-toolbox#​3595) (b895b36) (91c1c62)
• release: Add digital signature to Toolbox binaries (mcp-toolbox#​3528) (3f0f0af) (91c1c62)
• server: Add /healthz endpoint for container health checks (mcp-toolbox#​3060) (d5aefbc) (91c1c62)
• server/mcp: Introduce generic client extension registry (mcp-toolbox#​3723) (016245c) (91c1c62)
• skill: Add review-prs skill for mcp-toolbox (mcp-toolbox#​3743) (5b7bacc) (91c1c62)
• skills: Add --group flag to generate a skill from one group (mcp-toolbox#​3585) (c1abd4f) (91c1c62)
• skills: Default --name to --group, --toolset, or single --prebuilt name (mcp-toolbox#​3586) (2b33b08) (91c1c62)
• skills: Make description optional during skills gen (mcp-toolbox#​3584) (d0a8f14) (91c1c62)
• source/bigquery: Add apiEndpoint field to override BigQuery API host (mcp-toolbox#​3437) (4da1600) (91c1c62)
• tools: Add cloud-sql-connect-gce for pg, mysql, mssql (mcp-toolbox#​3740) (ca58fa4) (91c1c62)
• Add groups support (mcp-toolbox#​3605) (e75ec3b) (91c1c62)
• Add quotaProject support for BigQuery and Looker conversational analytics (mcp-toolbox#​2610) (f3e7ca9) (91c1c62)
• Support MCP 2026 draft specs (mcp-toolbox#​3544) (d12eaa8) (91c1c62)
• Update draft specs to 2026-07-28 (mcp-toolbox#​3699) (cf128ff) (91c1c62)

Bug Fixes

• auth/mcp: Derive PRM URL from Toolbox URL (mcp-toolbox#​3765) (aa30842) (91c1c62)
• config: Ignore environment variables in YAML comments (mcp-toolbox#​3807) (79aa732), refs mcp-toolbox#​3793 (91c1c62)
• mcp: Return Tool execution error for invalid input param (mcp-toolbox#​3799) (8120197) (91c1c62)
• parameters: Report the offending value in array/map type errors (mcp-toolbox#​3512) (4034d6f) (91c1c62)
• parameters: Return an error instead of panicking on a non-string type field (mcp-toolbox#​3516) (66a0d53) (91c1c62)
• prebuilt/cloud-storage: Declare tool collections as groups (mcp-toolbox#​3764) (7d468be) (91c1c62)
• server: Avoid a nil-flusher panic in the SSE handler (mcp-toolbox#​3520) (947f42f) (91c1c62)
• server: Sort default toolset alphabetically for stable ordering (mcp-toolbox#​3539) (e5da24c) (91c1c62)
• server/mcp: Disallow client overriding URL bound parameters (mcp-toolbox#​3798) (f15a9c7) (91c1c62)
• tools/bigquery: Keep the provider error classification in bigquery-execute-sql (mcp-toolbox#​3738) (42570b8) (91c1c62)
• util: Convert exponent-form JSON numbers in ConvertNumbers (mcp-toolbox#​3730) (e9713ee) (91c1c62)
• Re-add name validation to tools name (mcp-toolbox#​3654) (944f6ce) (91c1c62)
• Re-add tool validation during startup (mcp-toolbox#​3705) (25ce953) (91c1c62)

0.2.2 (2026-08-06)

Features

• auth: Implement MCP auth tool-level scopes validation (mcp-toolbox#​3049) (c528985) (71ac358)
• auth/google: Require audience or clientId for mcpEnabled (mcp-toolbox#​3450) (59f7b6e) (71ac358)
• ci: Add support for windows/arm64 binary distribution (mcp-toolbox#​3231) (10abf3b) (71ac358)
• datalineage: Add Data Lineage integration (mcp-toolbox#​3285) (19353c3) (71ac358)
• looker: Propagate client IP from incoming MCP requests to downstream SDK calls (mcp-toolbox#​3253) (75da6c2) (71ac358)
• mcp: Add URL parameter binding for HTTP transport (mcp-toolbox#​3112) (0cc7b37) (71ac358)
• scylladb: Adding support for ScyllaDB source and tool (mcp-toolbox#​3119) (2dada83) (71ac358)
• server: Add support for toolset filtering in prebuilt CLI flag (mcp-toolbox#​3245) (7cc4f65) (71ac358)
• server: Ignore unknown tools at startup with --ignore-unknown-tools flag (mcp-toolbox#​3353) (5f0304f) (71ac358)
• skills: Generate skills offline without live source connections (mcp-toolbox#​3388) (4c860b6) (71ac358)
• skills: Tolerate missing env vars during offline skills-generate (mcp-toolbox#​3399) (ea5d3e5) (71ac358)
• source/bigquery: Add maximumBytesBilled source config (mcp-toolbox#​2724) (42f2d07) (71ac358)
• tools: Decouple tool initialization from sources (mcp-toolbox#​3355) (32a24e3) (71ac358)
• tools/bigquery: Add per tool query label in BigQuery jobs (mcp-toolbox#​1975) (3f6a49f) (71ac358)
• Add support for HTTPS/TLS listener (mcp-toolbox#​3126) (8bc385d) (71ac358)
• Enable per source level flags for sql commenter (mcp-toolbox#​3465) (ecce6b7) (71ac358)
• Onboard bigquery-data-analytics to Evalbench CI pipeline (#123) (db1f480)
• plugin: support agent plugin spec (#139) (1cbf14f)
• Setup SQLCommenter and allow client metadata (mcp-toolbox#​3064) (9f1f9b3) (71ac358)

Bug Fixes

• auth: Separate Google and Generic MCP OAuth verification (mcp-toolbox#​3341) (dfd66ee) (71ac358)
• auth/dataplex: Fix failing source with service account credentials (mcp-toolbox#​3369) (ba4deef) (71ac358)
• auth/generic: Enforce issuer presence in opaque token validation (mcp-toolbox#​3360) (1d8df0d) (71ac358)
• auth/generic: Fix generic auth expiration field and integration with authRequired (mcp-toolbox#​3251) (f4d16c0) (71ac358)
• bigquery: Wire maximumBytesBilled into prebuilt config (mcp-toolbox#​3385) (4abbf6e) (71ac358)
• config: Add doc/line context to parse errors (mcp-toolbox#​2957) (4b097da) (71ac358)
• mcp: Implement router-level logger injection for MCP auth (mcp-toolbox#​3067) (ccc7cf5) (71ac358)
• mcp: Support annotations and metadata within Tools to earlier MCP schemas (mcp-toolbox#​3300) (9a88c72) (71ac358)
• npm: Source binary version from cmd/version.txt (mcp-toolbox#​3417) (6ffbdec) (71ac358)
• oracle: Remove trailing semicolons from prebuilt tools (mcp-toolbox#​3215) (fcad02d) (71ac358)
• prebuilt/alloydb-omni: Require password env var explicitly (mcp-toolbox#​3398) (fcbe3e7) (71ac358)
• server: Fail if MCP auth is enabled together with enable-api (mcp-toolbox#​3435) (a6ff910) (71ac358)
• server: Return errors instead of panicking in InitializeConfigs (mcp-toolbox#​3397) (f48b01d) (71ac358)
• server: Return null id for batch request rejection (mcp-toolbox#​3333) (0b18d58) (71ac358)
• server/auth: Centralize tool scopes validation (mcp-toolbox#​3335) (adce4ab) (71ac358)
• telemetry: Allow GCP project override (mcp-toolbox#​2960) (3c83ba5) (71ac358)
• tool/bigquery-execute-sql: Prevent dataset restriction bypass (mcp-toolbox#​3452) (ca6d5e3) (71ac358)
• tool/bigquery: Prevent allowedDatasets bypass in forecast query (mcp-toolbox#​3324) (45df461) (71ac358)
• tools: Initialize query result slices to empty array (mcp-toolbox#​3250) (60ddf48) (71ac358)
• tools/bigquery-execute-sql: Avoid surfacing invalid queries as MCP 500s (mcp-toolbox#​3056) (7ed92c8) (71ac358)
• tools/clickhouse,tools/bigquery: Validate identifier parameters to prevent injection (mcp-toolbox#​3219) (2f45f75) (71ac358)
• Allow converting string literal block with list (mcp-toolbox#​3050) (36ab2a9), closes mcp-toolbox#​3023 (71ac358)
• Bound MCP HTTP body size (mcp-toolbox#​3216) (d4f4342) (71ac358)
• Escape delimiter characters in applyEscape to prevent SQL injection (932519a) (71ac358)
• Prevent test.db from being created during unit tests (mcp-toolbox#​3042) (d10d2ca) (71ac358)
• Remove hardcoded * allowed origin for sse (mcp-toolbox#​3054) (c4c7bd9) (71ac358)

0.2.1 (2026-04-21)

Features

• add bigquery ai-ml skills (#119) (586ea7e)

0.2.0 (2026-04-16)

⚠ BREAKING CHANGES

• Add support for skills (#111) (ce52772)

Features

• skill: Attach user agent metadata for generated skill (mcp-toolbox#​2697) (9598a6a) (aac0c31)
• skill: Update skill generation logic (mcp-toolbox#​2646) (c233eee) (aac0c31)
• skills: Add Claude Code support to generated scripts (mcp-toolbox#​2966) (a1609e1) (aac0c31)
• skills: Add codex user agent (mcp-toolbox#​2973) (070e939) (aac0c31)
• skills: Tool invocation via npx (mcp-toolbox#​2916) (377dc5b) (aac0c31)
• source/bigquery: Restructure prebuilt toolsets (mcp-toolbox#​2637) (dc984ba) (aac0c31)
• sources/bigquery: Support custom oauth header name (mcp-toolbox#​2564) (d3baf77) (aac0c31)
• tools/bigquerysql: Add semantic search support (mcp-toolbox#​2890) (862c396) (aac0c31)
• Add Claude code plugin config (#113) (6f0d620)
• Add Codex plugin config (#114) (cf41faa)

Bug Fixes

• bigquery: Add impersonateServiceAccount to prebuilt config (mcp-toolbox#​2770) (9c3a748) (aac0c31)
• skill: Fix env variable propagation (mcp-toolbox#​2645) (5271368) (aac0c31)
• skills: Fix integer parameter parsing through agent skills (mcp-toolbox#​2847) (4564efe) (aac0c31)
• skills: Fix skill generation template (mcp-toolbox#​2914) (a01a15e) (aac0c31)
• skills: Prevent empty strings overriding optional env vars in node scripts (mcp-toolbox#​2963) (c52adeb) (aac0c31)

0.1.7 (2026-01-28)

Features

• add Configuration settings (#82) (ba8aba6)
• deps: update dependency googleapis/mcp-toolbox to v0.26.0 (#84) (1ccf9f1)

0.1.6 (2026-01-13)

Features

• deps: update dependency googleapis/mcp-toolbox to v0.25.0 (#79) (35bab1c)

0.1.5 (2025-12-26)

Features

• Support combining prebuilt and custom tool configurations (mcp-toolbox#​2188) (5788605) (6271131)

Bug Fixes

• spanner: Move list graphs validation to runtime (mcp-toolbox#​2154) (914b3ee) (6271131)

0.1.4 (2025-12-15)

Features

• deps: update dependency googleapis/mcp-toolbox to v0.23.0 (#72) (7135b88)

0.1.3 (2025-12-05)

Bug Fixes

• Format BigQuery numeric output as decimal strings (mcp-toolbox#​2084) (155bff8) (0c77a2d)

0.1.2 (2025-11-07)

Features

• source/bigquery: Add client cache for user-passed credentials (mcp-toolbox#​1119) (cf7012a) (fbcd44f)

Bug Fixes

• Bigquery execute_sql to assign values to array (mcp-toolbox#​1884) (559e2a2) (fbcd44f)

0.1.1 (2025-09-30)

Features

• additional instructions for the context file (#30) (2736be9)
• standardize mcp server names (#28) (23dd94f)

0.1.0 (2025-09-22)

Features

• add the BigQuery Data Analytics Extension (#10) (e70c7dd)