v1.0.9 - mTLS, OAuth Quick Wins, Tool Preview, Catalog Actions, and Security Hardening

[ja8zyjits]

[1.0.9] - 2026-08-31 - mTLS, OAuth Quick Wins, Tool Preview, Catalog Actions, and Security Hardening

Overview

Release 1.0.9 consolidates 41 PRs focused on inbound mTLS client certificate auth, MCP server OAuth improvements, pluggable OAuth token storage, tool preview and schema publishing, catalog gateway actions, TLS/SSL enhancements, and security hardening:

• Security & Auth - Inbound mTLS (client certificate authentication), pluggable OAuth token storage with HashiCorp Vault backend, MCP server OAuth form quick wins (read-only redirect URI, drop password grant), session refresh and validate endpoints, default token creation to creator's personal team, invisible Unicode stripping from stored auth credentials, and catalog registration scope enforcement.
• API & Platform - MCP handshake test endpoint for Test Connection and virtual servers, new tool preview permission and preview functions, tool schema publishing to dataplane, catalog gateway actions backend support, gateway-side TLS override for end-to-end HTTPS, versioned API aliases, recent activity feed endpoint, and durable observability metrics endpoints.
• Operations - Experimental UI added to compose, SSL/TLS exposed for gateway pods, TLS cipher suite exposure, automated catalog icon generation, and load test consolidation.
• Documentation - Dynamic env production risk documentation for translate, live black-box test requirement policy.

Added

Security & Auth

• Inbound mTLS (client certificate authentication) (#6352) - Added inbound mTLS support for client certificate authentication.
• MCP server OAuth form quick wins (#6315) - Read-only redirect URI and dropped password grant from MCP server OAuth form.
• Session refresh and validate endpoints (#6235) - Added session refresh and validate endpoints.
• Pluggable OAuth token storage with HashiCorp Vault backend (#5599) - Pluggable OAuth token storage with HashiCorp Vault backend.

API & Platform

• MCP handshake test endpoint for Test Connection (#5934) - Added MCP handshake test endpoint for Test Connection.
• Tool preview permission (#6321) - Added new permission for tool preview.
• Tool preview functions (#6360) - Added preview functions to the tools service.
• Tool schema publishing to dataplane (#6348) - Publish tool schemas to the dataplane.
• Catalog gateway actions backend (#6355) - Support catalog gateway actions in backend.
• Gateway-side TLS override (#6422) - Added gateway-side TLS override for end-to-end HTTPS.
• Versioned API aliases (#6257) - Two new paths added as versioned API aliases.
• Recent activity feed endpoint (#6292) - Recent activity feed endpoint (audit + security union).
• Durable observability metrics endpoints (#6293) - Durable observability metrics endpoints for the home dashboard.

Operations & Tooling

• Experimental UI in compose (#6320) - Added experimental UI to docker-compose.
• SSL/TLS exposed for gateway pods (#6362) - SSL/TLS exposed for gateway pods.
• TLS cipher suite exposure (#6483) - Exposed TLS cipher suite configuration.
• Automated MCP server catalog icon generation (#6397) - Automated MCP server catalog icon generation.

Fixed

Security & Auth

• Default token creation to creator's personal team (#6354) - Token creation now defaults to the creator's personal team.
• Reject/strip invisible Unicode in stored auth credentials (#6350) - Gateway rejects or strips invisible Unicode in stored auth credentials.
• Enforce component-aware directory confinement on admin log download (#6393) - Enforced component-aware directory confinement on admin log download.
• Harden local A2A egress handling (#6399) - Hardened local A2A egress handling.
• Security hardening: catalog registration scope enforcement (#6247) - Security hardening for catalog registration scope enforcement.

Gateway & Platform

• Missing migration columns in migrate_enc_secret (#6324) - Added missing migration columns to migrate_enc_secret.
• MCP handshake test endpoint for virtual servers (#6405) - Added MCP handshake test endpoint for virtual servers.
• Gateway/tool/prompt/resource audit rows in activity feed (#6351) - Render gateway/tool/prompt/resource audit rows correctly in activity feed.
• Cache StatefulHTTP JWT admin lookups (#6437) - Cached StatefulHTTP JWT admin lookups.
• Normalize bundled catalog icon bounds (#6441) - Normalized bundled catalog icon bounds.

Deprecations & Cleanup

• Remove deprecated PUT /admin/users endpoint (#6304) - Removed deprecated PUT /admin/users endpoint and added sunset marker pre-commit hook.

Build & CI

• CI venv recreation for broken Python symlink (#6302) - Recreate CI venv when cached Python symlink is broken.
• Raise clippy large-error-threshold for mcp_runtime (#6349) - Raised clippy large-error-threshold for mcp_runtime.
• Bump pinned UBI10 base image tags (#6413) - Bumped pinned UBI10 base image tags to pick up python3 CVE fix.

Changed

• Remove fast_test_server; consolidate load tests (#6192) - Removed fast_test_server and consolidated load tests.

Documentation

• Document dynamic env production risk (#6388) - Documented dynamic env production risk for translate.
• Require live black-box tests where applicable (#6326) - Required live black-box tests where applicable.

Chores

PR	Description
#6301	remove temporary min-release-age-exclude pins from .npmrc
#6312	bump dependency-review-action from v4.9.0 to v5.0.0
#6319	.env.example cleanup
#6325	tool invoke function refactor
#6306	add MCP Apps live stack tests to TestRawJsonRpc
#6398	fix Playwright gateway OAuth and team flakiness
#6375	routine python/node dependency updates