github.com/googleapis/mcp-toolbox
v1.9.0
#221 most downloaded on Go modules
googleapis/mcp-toolbox
What this package is like to depend on
Last release 10 days ago
14 Aug 2026
Ships on a steady schedule
a new release about every 2 weeks
Nearly every release is documented
notes for 11 of 11 stable releases
Nothing withdrawn
no release was ever pulled
4 months old
20 releases · first in 2026
20 releases in the last 12 months
see the full history below
Release timeline
20 releases · Apr 2026 to Aug 2026Releases
latest 20-
v1.9.014 Aug 2026Release notes
Open source →1.9.0 (2026-08-14)
Features
- groups: Add ttlMs and cacheScope customization to config (#3805) (a5d4947)
- migrate: Convert toolset to group kind during migration (#3704) (0adeaa5)
- server/mcp: Introduce generic client extension registry (#3723) (016245c)
- skill: Add review-prs skill for mcp-toolbox (#3743) (5b7bacc)
- source/bigquery: Add apiEndpoint field to override BigQuery API host (#3437) (4da1600)
- source/databaseinsights: Add databaseinsights source (#3461) (3b9615d)
- sources/spanner: Rename execute_sql_dql to execute_sql_readonly (#3776) (cf5a0c8)
- tools/bigtable: Add admin lifecycle and listing tools (#3596) (801d589)
- tools/bigtable: Bigtable-list-schemas MCP tool (#3683) (9228c61)
- tools/databaseinsights: Add Advanced Query Insights tools for AlloyDB (#3722) (74d18ae)
- tools/looker: Add additional tools to allow dashboards to be modified, and their layouts altered. (#3597) (b2b80fb)
- tools: Add cloud-sql-connect-gce for pg, mysql, mssql (#3740) (ca58fa4)
Bug Fixes
- auth/mcp: Derive PRM URL from Toolbox URL (#3765) (aa30842)
- config: Ignore environment variables in YAML comments (#3807) (79aa732), refs #3793
- mcp: Return Tool execution error for invalid input param (#3799) (8120197)
- prebuilt/cloud-storage: Declare tool collections as groups (#3764) (7d468be)
- server/mcp: Disallow client overriding URL bound parameters (#3798) (f15a9c7)
- server: Avoid a nil-flusher panic in the SSE handler (#3520) (947f42f)
- tools/bigquery: Keep the provider error classification in bigquery-execute-sql (#3738) (42570b8)
- tools/looker: Scope the filters quoting rule to values in query description (#3788) (78eb0b8)
- util: Convert exponent-form JSON numbers in ConvertNumbers (#3730) (e9713ee)
OS/Architecture Description SHA256 Hash linux/amd64 (Signature) For Linux systems running on Intel/AMD 64-bit processors. 18f420003278d839410ddf3290740863ab017955889ad4a9b7b6a827be90a9f2 darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. 182ed68a206742e41f31c29e669b3c657025b3e0c561490f58af569e1d364c77 darwin/amd64 For macOS systems running on Intel processors. c0598bfe7704d197d7c96bdd47cd18612141f9d46be9f52de6258d970979e4f1 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. cab08bf7ce933b040cc2b86f59d97433c82e3e5b5d944348df37336fd63c7f99 windows/arm64 For Windows systems running on ARM 64-bit processors. 4de939f84acba9c51175fe93b9c347567c71c158829a6300d2ff0f6914ddc156 Release notes
Open source →Features
- groups: Add ttlMs and cacheScope customization to config (#3805) (a5d4947)
- migrate: Convert toolset to group kind during migration (#3704) (0adeaa5)
- server/mcp: Introduce generic client extension registry (#3723) (016245c)
- skill: Add review-prs skill for mcp-toolbox (#3743) (5b7bacc)
- source/bigquery: Add apiEndpoint field to override BigQuery API host (#3437) (4da1600)
- source/databaseinsights: Add databaseinsights source (#3461) (3b9615d)
- sources/spanner: Rename execute_sql_dql to execute_sql_readonly (#3776) (cf5a0c8)
- tools/bigtable: Add admin lifecycle and listing tools (#3596) (801d589)
- tools/bigtable: Bigtable-list-schemas MCP tool (#3683) (9228c61)
- tools/databaseinsights: Add Advanced Query Insights tools for AlloyDB (#3722) (74d18ae)
- tools/looker: Add additional tools to allow dashboards to be modified, and their layouts altered. (#3597) (b2b80fb)
- tools: Add cloud-sql-connect-gce for pg, mysql, mssql (#3740) (ca58fa4)
Bug Fixes
- auth/mcp: Derive PRM URL from Toolbox URL (#3765) (aa30842)
- config: Ignore environment variables in YAML comments (#3807) (79aa732), refs #3793
- mcp: Return Tool execution error for invalid input param (#3799) (8120197)
- prebuilt/cloud-storage: Declare tool collections as groups (#3764) (7d468be)
- server/mcp: Disallow client overriding URL bound parameters (#3798) (f15a9c7)
- server: Avoid a nil-flusher panic in the SSE handler (#3520) (947f42f)
- tools/bigquery: Keep the provider error classification in bigquery-execute-sql (#3738) (42570b8)
- tools/looker: Scope the filters quoting rule to values in query description (#3788) (78eb0b8)
- util: Convert exponent-form JSON numbers in ConvertNumbers (#3730) (e9713ee)
-
v1.8.028 Jul 2026Release notes
Open source →1.8.0 (2026-07-28)
Features
- Add
groupssupport (#3605) (e75ec3b) - prebuilt: Migrate skills-repo toolsets to
kind: groupwith descriptions (#3595) (b895b36) - server: Add
/healthzendpoint for container health checks (#3060) (d5aefbc) - skills: Add
--groupflag to generate a skill from one group (#3585) (c1abd4f) - skills: Default
--nameto--group,--toolset, or single--prebuiltname (#3586) (2b33b08) - skills: Make description optional during skills gen (#3584) (d0a8f14)
- tool/looker: Add
get_field_value_suggestionstool (#3696) (3debe81) - tools/dataplex-update-data-product-aspects: Add dataplex-update-data-product-aspects tool (#3607) (f940937)
- Update draft specs to 2026-07-28 (#3699) (cf128ff)
Bug Fixes
- Re-add name validation to tools name (#3654) (944f6ce)
- Re-add tool validation during startup (#3705) (25ce953)
- server: Sort default toolset alphabetically for stable ordering (#3539) (e5da24c)
- source/cloud-sql-admin: Validate source instance for backup-run restore (#3555) (3ebe500)
- source/dataplex: Cleanup Dataplex Data Product resources that may have leaked due to previously aborted tests (#3627) (3fb5a3f)
- source/http: Block CGNAT 100.64.0.0/10 in default SSRF guard (#3625) (a0f36f4)
- tools/looker: Enhance looker-run-dashboard to handle result maker structures and merge queries (#3698) (7666bc0)
- tools/looker: Log request/response traces at debug, not error (#3552) (c3ad445)
OS/Architecture Description SHA256 Hash linux/amd64 (Signature) For Linux systems running on Intel/AMD 64-bit processors. 8c0ac3b9785d1424ad3d66799c26c5da695d73c74c45225a301689bf7d39d714 darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. c69e0b5e25bd5f5f3f3f4d7563d1d8ef0b8ecc922c6654d5db7641f4b0bc4b95 darwin/amd64 For macOS systems running on Intel processors. cd69bb08c9e25c372e39cfd765e9166a7473f66ea15865870bd141014ddf4212 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. f3cd288d184adae71c9cc2d627e7d4db1f0d5c8a00d5d4cab30a42acecb43082 windows/arm64 For Windows systems running on ARM 64-bit processors. a18405b1a13656ca23c6667cc4a8a9b01ebd29b4f0057e74811f44c78bc8d266 Release notes
Open source →Features
- Add
groupssupport (#3605) (e75ec3b) - prebuilt: Migrate skills-repo toolsets to
kind: groupwith descriptions (#3595) (b895b36) - server: Add
/healthzendpoint for container health checks (#3060) (d5aefbc) - skills: Add
--groupflag to generate a skill from one group (#3585) (c1abd4f) - skills: Default
--nameto--group,--toolset, or single--prebuiltname (#3586) (2b33b08) - skills: Make description optional during skills gen (#3584) (d0a8f14)
- tool/looker: Add
get_field_value_suggestionstool (#3696) (3debe81) - tools/dataplex-update-data-product-aspects: Add dataplex-update-data-product-aspects tool (#3607) (f940937)
- Update draft specs to 2026-07-28 (#3699) (cf128ff)
Bug Fixes
- Re-add name validation to tools name (#3654) (944f6ce)
- Re-add tool validation during startup (#3705) (25ce953)
- server: Sort default toolset alphabetically for stable ordering (#3539) (e5da24c)
- source/cloud-sql-admin: Validate source instance for backup-run restore (#3555) (3ebe500)
- source/dataplex: Cleanup Dataplex Data Product resources that may have leaked due to previously aborted tests (#3627) (3fb5a3f)
- source/http: Block CGNAT 100.64.0.0/10 in default SSRF guard (#3625) (a0f36f4)
- tools/looker: Enhance looker-run-dashboard to handle result maker structures and merge queries (#3698) (7666bc0)
- tools/looker: Log request/response traces at debug, not error (#3552) (c3ad445)
- Add
-
v1.7.016 Jul 2026Release notes
Open source →1.7.0 (2026-07-16)
Features
- Add
quotaProjectsupport for BigQuery and Looker conversational analytics (#2610) (f3e7ca9) - arcadedb: Add arcadedb source and tools (#2961) (351de00)
- cmd/internal,docs: Add warning log that prebuilt tools are for developer use (#3451) (8cffcef)
- source/postgres: Add optional connectTimeout (#3620) (b574b07)
- tool/clickhouse-sql: Add native vector embedding support (#3229) (6cbe1c2)
- tool/dataplex-update-data-product,tool/dataplex-create-data-asset,tool/dataplex-update-data-asset: Add update data product, create data asset, and update data asset tools for knowledge catalog source (#3574) (721c204)
- tools/dataplex-create-data-product: Add dataplex-create-data-product tool (#3504) (5cee0d2)
- tools/dataplex-get-data-asset: Add dataplex-get-data-asset tool (#3503) (1ddfbe9)
Bug Fixes
- parameters: Report the offending value in array/map type errors (#3512) (4034d6f)
- parameters: Return an error instead of panicking on a non-string type field (#3516) (66a0d53)
- source/looker: Dynamically resolve public host URL (#3603) (0428afd)
- tool/looker-run-dashboard: Add support for SQL Runner query tiles (#3594) (0975d0a)
OS/Architecture Description SHA256 Hash linux/amd64 (Signature) For Linux systems running on Intel/AMD 64-bit processors. ec24af08ebb9fc9fbeae8d47bc3cb74e6ba0b028884bbbcfb2c14ad1e1fb117d darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. df337f16e9bba23163ab543ade94f1a685b7d07baa88f19b37fa154ef686793e darwin/amd64 For macOS systems running on Intel processors. 2dba9b6ce39938a307fec9f66aea9973c115cadd1dccca0575e87b2bded28b21 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. d784d56db0497de5870f19884fe83765f1eb97dd39b963d47e813f7e11f5a0a2 windows/arm64 For Windows systems running on ARM 64-bit processors. 1eac04aa9555611805ad278a91b743dcb232201a327d201bc0cd5dd1a5df60ac Release notes
Open source →Features
- Add
quotaProjectsupport for BigQuery and Looker conversational analytics (#2610) (f3e7ca9) - arcadedb: Add arcadedb source and tools (#2961) (351de00)
- cmd/internal,docs: Add warning log that prebuilt tools are for developer use (#3451) (8cffcef)
- source/postgres: Add optional connectTimeout (#3620) (b574b07)
- tool/clickhouse-sql: Add native vector embedding support (#3229) (6cbe1c2)
- tool/dataplex-update-data-product,tool/dataplex-create-data-asset,tool/dataplex-update-data-asset: Add update data product, create data asset, and update data asset tools for knowledge catalog source (#3574) (721c204)
- tools/dataplex-create-data-product: Add dataplex-create-data-product tool (#3504) (5cee0d2)
- tools/dataplex-get-data-asset: Add dataplex-get-data-asset tool (#3503) (1ddfbe9)
Bug Fixes
- parameters: Report the offending value in array/map type errors (#3512) (4034d6f)
- parameters: Return an error instead of panicking on a non-string type field (#3516) (66a0d53)
- source/looker: Dynamically resolve public host URL (#3603) (0428afd)
- tool/looker-run-dashboard: Add support for SQL Runner query tiles (#3594) (0975d0a)
- Add
-
v1.6.001 Jul 2026Release notes
Open source →1.6.0 (2026-06-30)
Features
- Support MCP 2026 draft specs (#3544) (d12eaa8)
- release: Add digital signature to Toolbox binaries (#3528) (3f0f0af)
- tool/cloud-storage: Configure object operation parameters (#3529) (d6dc5fe)
- tool/cloud-storage: Support configurable parameters (#3478) (bc2de2a)
- tools/dataplex-list-data-products: Add dataplex-list-data-products tool (#3337) (6dd669a)
- tools/dataplex-get-data-product: Add dataplex-get-data-product tool (#3499) (7ea7a09)
- tools/dataplex-list-data-assets: Add dataplex-list-data-assets tool (#3500) (182f933)
- tools/looker: Support complex filter_expression parameter in queries (#3494) (997fb8c)
- tools/looker: Support dynamic_fields parameter in queries (#3507) (cd22b89)
Bug Fixes
- tools/gda: Support mTLS and GOOGLE_API_USE_MTLS_ENDPOINT for GDA client (#3460) (cc2a61e)
- tools/looker-conversational-analytics: Validate explore_references shape instead of panicking (#3531) (b67419d)
- tool/looker-create-view-from-table: Correct Looker API payload structure (#3515) (18c539c)
OS/Architecture Description SHA256 Hash linux/amd64 (Signature) For Linux systems running on Intel/AMD 64-bit processors. 0cd6fa1773926a37e55c803542f16ef621eaea38b015ec9778dfaae9f30da302 darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. feb567fb8416504004ff99acd4661278a88d70cc137681f6535a5e54469c6594 darwin/amd64 For macOS systems running on Intel processors. fbb5af6b170431edb08741828a2581f9ee8548dd37c3e8222a3c2722f0007f32 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. 3be7e587c86dd9dbdb593a380396f399358c179ce37aed3045b4c8bf42569394 windows/arm64 For Windows systems running on ARM 64-bit processors. 3c6345114032a0671a5b66764673124ec4c27b5b41d1816ea15ac8afb5ca7cdc Release notes
Open source →Features
- Support MCP 2026 draft specs (#3544) (d12eaa8)
- release: Add digital signature to Toolbox binaries (#3528) (3f0f0af)
- tool/cloud-storage: Configure object operation parameters (#3529) (d6dc5fe)
- tool/cloud-storage: Support configurable parameters (#3478) (bc2de2a)
- tools/dataplex-list-data-products: Add dataplex-list-data-products tool (#3337) (6dd669a)
- tools/dataplex-get-data-product: Add dataplex-get-data-product tool (#3499) (7ea7a09)
- tools/dataplex-list-data-assets: Add dataplex-list-data-assets tool (#3500) (182f933)
- tools/looker: Support complex filter_expression parameter in queries (#3494) (997fb8c)
- tools/looker: Support dynamic_fields parameter in queries (#3507) (cd22b89)
Bug Fixes
-
v1.5.1-0.20260623203314-8b600f1af42c23 Jun 2026 pre-releaseNothing published for this version
-
v1.5.018 Jun 2026Release notes
Open source →1.5.0 (2026-06-18)
Features
- auth/google: Require audience or clientId for mcpEnabled (#3450) (59f7b6e)
- Enable per source level flags for sql commenter (#3465) (ecce6b7)
- mcp: Add URL parameter binding for HTTP transport (#3112) (0cc7b37)
- scylladb: Adding support for ScyllaDB source and tool (#3119) (2dada83)
- server: Add support for toolset filtering in prebuilt CLI flag (#3245) (7cc4f65)
- skills: Generate skills offline without live source connections (#3388) (4c860b6)
- skills: Tolerate missing env vars during offline skills-generate (#3399) (ea5d3e5)
- source/cloud-storage: Restrict bucket and local path access (#3454) (2c3ca5d)
- tools/bigquery: Add per tool query label in BigQuery jobs (#1975) (3f6a49f)
- tools/dataplex: Add tools to support metadata enrichment workflow (#3270) (05289aa)
- tools/mysql: Add show-query-stats and list-all-locks tools for MySQL and Cloud SQL MySQL source (#2954) (a9693bd)
- tools: Decouple tool initialization from sources (#3355) (32a24e3)
Bug Fixes
- auth/dataplex: Fix failing source with service account credentials (#3369) (ba4deef)
- bigquery: Wire maximumBytesBilled into prebuilt config (#3385) (4abbf6e)
- Bound MCP HTTP body size (#3216) (d4f4342)
- config: Add doc/line context to parse errors (#2957) (4b097da)
- Escape delimiter characters in applyEscape to prevent SQL injection (#2811) (932519a)
- npm: Source binary version from cmd/version.txt (#3417) (6ffbdec)
- prebuilt/alloydb-omni: Require password env var explicitly (#3398) (fcbe3e7)
- server: Fail if MCP auth is enabled together with enable-api (#3435) (a6ff910)
- server: Return errors instead of panicking in InitializeConfigs (#3397) (f48b01d)
- source/cloudhealthcare: Validate pageURL parameter to prevent SSRF (#3453) (9abf47d)
- source/dataplex,source/datalineage: Specify cloud-platform scope for default credentials (#3376) (13e8c36)
- source/http: Implement SSRF guard (#3448) (24d7d29)
- tool/bigquery-execute-sql: Prevent dataset restriction bypass (#3452) (ca6d5e3)
- tool/mysql-get-query-plan: Prevent query execution bypass and statement injection (#3235) (7ed1e7b)
- tool/spanner-sql,tool/spanner-execute-sql: Use read-only annotations when readOnly is set (#3338) (8bde0ec)
OS/Architecture Description SHA256 Hash linux/amd64 For Linux systems running on Intel/AMD 64-bit processors. 7df2d9941ce34e53af0eacc74e09b29f6ac38543b010b637a0938f2dd2d75609 darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. 732da7bc161072073f8342dea376f7021711f3556f4153f160b8d0d58e097269 darwin/amd64 For macOS systems running on Intel processors. 3eae4f7786778ab07fcd5475763c9ffecdcfe1c77604b55aa8f27df20ccdc292 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. e9a598fc65dcde86bda89ad7fe4e7a4c7dbe8b916b656daf811cd42dd49dff2c windows/arm64 For Windows systems running on ARM 64-bit processors. ec43fc884dd9c8955335ac9259e9665206b12aa4f491504e00f28e3e8d47f122 Release notes
Open source →Features
- auth/google: Require audience or clientId for mcpEnabled (#3450) (59f7b6e)
- Enable per source level flags for sql commenter (#3465) (ecce6b7)
- mcp: Add URL parameter binding for HTTP transport (#3112) (0cc7b37)
- scylladb: Adding support for ScyllaDB source and tool (#3119) (2dada83)
- server: Add support for toolset filtering in prebuilt CLI flag (#3245) (7cc4f65)
- skills: Generate skills offline without live source connections (#3388) (4c860b6)
- skills: Tolerate missing env vars during offline skills-generate (#3399) (ea5d3e5)
- source/cloud-storage: Restrict bucket and local path access (#3454) (2c3ca5d)
- tools/bigquery: Add per tool query label in BigQuery jobs (#1975) (3f6a49f)
- tools/dataplex: Add tools to support metadata enrichment workflow (#3270) (05289aa)
- tools/mysql: Add show-query-stats and list-all-locks tools for MySQL and Cloud SQL MySQL source (#2954) (a9693bd)
- tools: Decouple tool initialization from sources (#3355) (32a24e3)
Bug Fixes
- auth/dataplex: Fix failing source with service account credentials (#3369) (ba4deef)
- bigquery: Wire maximumBytesBilled into prebuilt config (#3385) (4abbf6e)
- Bound MCP HTTP body size (#3216) (d4f4342)
- config: Add doc/line context to parse errors (#2957) (4b097da)
- Escape delimiter characters in applyEscape to prevent SQL injection (#2811) (932519a)
- npm: Source binary version from cmd/version.txt (#3417) (6ffbdec)
- prebuilt/alloydb-omni: Require password env var explicitly (#3398) (fcbe3e7)
- server: Fail if MCP auth is enabled together with enable-api (#3435) (a6ff910)
- server: Return errors instead of panicking in InitializeConfigs (#3397) (f48b01d)
- source/cloudhealthcare: Validate pageURL parameter to prevent SSRF (#3453) (9abf47d)
- source/dataplex,source/datalineage: Specify cloud-platform scope for default credentials (#3376) (13e8c36)
- source/http: Implement SSRF guard (#3448) (24d7d29)
- tool/bigquery-execute-sql: Prevent dataset restriction bypass (#3452) (ca6d5e3)
- tool/mysql-get-query-plan: Prevent query execution bypass and statement injection (#3235) (7ed1e7b)
- tool/spanner-sql,tool/spanner-execute-sql: Use read-only annotations when readOnly is set (#3338) (8bde0ec)
-
v1.4.004 Jun 2026Release notes
Open source →1.4.0 (2026-06-04)
Features
- ci: Add support for windows/arm64 binary distribution (#3231) (10abf3b)
- datalineage: Add Data Lineage integration (#3285) (19353c3)
- server: Ignore unknown tools at startup with
--ignore-unknown-toolsflag (#3353) (5f0304f) - tools/cloudsqlpg: Add remaining vector assist tools for Cloud SQL Postgres (#3203) (b514cbd)
- tools/spanner-search-catalog: Implement search_catalog tool (#3140) (defc086)
Bug Fixes
- auth/generic: Enforce issuer presence in opaque token validation (#3360) (1d8df0d)
- auth: Separate Google and Generic MCP OAuth verification (#3341) (dfd66ee)
- mcp: Support annotations and metadata within Tools to earlier MCP schemas (#3300) (9a88c72)
- oracle: Remove trailing semicolons from prebuilt tools (#3215) (fcad02d)
- server/auth: Centralize tool scopes validation (#3335) (adce4ab)
- server: Return null id for batch request rejection (#3333) (0b18d58)
- source/dataplex: Limit search results to pageSize (#3323) (905c1f6), closes #3308
- telemetry: Allow GCP project override (#2960) (3c83ba5)
- tool/bigquery: Prevent
allowedDatasetsbypass in forecast query (#3324) (45df461) - tool/clickhouse: Handle ignored ProcessParameters error (#3340) (ddfd887)
- tools/clickhouse,tools/bigquery: Validate identifier parameters to prevent injection (#3219) (2f45f75)
- tools/looker: Escape filter values for unquoted parameters (#3289) (1711156)
OS/Architecture Description SHA256 Hash linux/amd64 For Linux systems running on Intel/AMD 64-bit processors. 85bfe54db164ed835a6c9d7e4036dd6ad1a417542367385a4c3809ff29b62304 darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. a3dc09bfe029851950cd4a3174f67bf4e25dc711e489f2c7144013ba2c59f7d7 darwin/amd64 For macOS systems running on Intel processors. 19d09077202b0a9d9bf87edac2f97c4923a4f2d90ac6f22d099967e5aa416789 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. 4be0bd4bca26af0163a1de38738be4c358dae2a2696bddd9344c900d9cd62cf6 windows/arm64 For Windows systems running on ARM 64-bit processors. 5ce6a6b8335650c3dfdca86eee52867ebce7045fafef55142c60689131ca37ae Release notes
Open source →Features
- ci: Add support for windows/arm64 binary distribution (#3231) (10abf3b)
- datalineage: Add Data Lineage integration (#3285) (19353c3)
- server: Ignore unknown tools at startup with
--ignore-unknown-toolsflag (#3353) (5f0304f) - tools/cloudsqlpg: Add remaining vector assist tools for Cloud SQL Postgres (#3203) (b514cbd)
- tools/spanner-search-catalog: Implement search_catalog tool (#3140) (defc086)
Bug Fixes
- auth/generic: Enforce issuer presence in opaque token validation (#3360) (1d8df0d)
- auth: Separate Google and Generic MCP OAuth verification (#3341) (dfd66ee)
- mcp: Support annotations and metadata within Tools to earlier MCP schemas (#3300) (9a88c72)
- oracle: Remove trailing semicolons from prebuilt tools (#3215) (fcad02d)
- server/auth: Centralize tool scopes validation (#3335) (adce4ab)
- server: Return null id for batch request rejection (#3333) (0b18d58)
- source/dataplex: Limit search results to pageSize (#3323) (905c1f6), closes #3308
- telemetry: Allow GCP project override (#2960) (3c83ba5)
- tool/bigquery: Prevent
allowedDatasetsbypass in forecast query (#3324) (45df461) - tool/clickhouse: Handle ignored ProcessParameters error (#3340) (ddfd887)
- tools/clickhouse,tools/bigquery: Validate identifier parameters to prevent injection (#3219) (2f45f75)
- tools/looker: Escape filter values for unquoted parameters (#3289) (1711156)
-
v1.3.021 May 2026Release notes
Open source →1.3.0 (2026-05-21)
Features
- auth: Implement MCP auth tool-level scopes validation (#3049) (c528985)
- looker: Propagate client IP from incoming MCP requests to downstream SDK calls (#3253) (75da6c2)
- Setup SQLCommenter and allow client metadata (#3064) (9f1f9b3)
- tool/cloudsqladmin: Add
cloud-sql-admin-execute-sql-manyandcloud-sql-admin-sql-many(#3083) (ef300a8)
Bug Fixes
- auth/generic: Fix generic auth expiration field and integration with
authRequired(#3251) (f4d16c0) - Enforce toolset/promptset boundary on tools/call and prompts/get (#3036) (c739b80)
- tools/http: Prevent path traversal and base path scope escape (#3218) (80a6602)
- tools/looker: Return a 401 error to MCP client when Looker returns a 401 (#3233) (4f409a3)
- tools/looker: Strip wrapping quotes from filter values for unquoted parameters (#3273) (1e3de96)
- tools: Initialize query result slices to empty array (#3250) (60ddf48)
OS/Architecture Description SHA256 Hash linux/amd64 For Linux systems running on Intel/AMD 64-bit processors. 08e00671737ff4fd6c7af25a1a0c5da43b3657c4a435fd0a381757876d694b45 darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. b16ea9f864b0b9c711dff0b08a663e6dee5969b41033fe6d05412dc04e85cfb8 darwin/amd64 For macOS systems running on Intel processors. 94d6fd02a4bbc67ad9dcf69d5f36af5a584735d2fb2ebb0023e91cb701e7a98a windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. 4661004b9cd37ea258d82332a24b3955fd9a258a5b8b6da471584cd7cb3de35d Release notes
Open source →Features
- auth: Implement MCP auth tool-level scopes validation (#3049) (c528985)
- looker: Propagate client IP from incoming MCP requests to downstream SDK calls (#3253) (75da6c2)
- Setup SQLCommenter and allow client metadata (#3064) (9f1f9b3)
- tool/cloudsqladmin: Add
cloud-sql-admin-execute-sql-manyandcloud-sql-admin-sql-many(#3083) (ef300a8)
Bug Fixes
- auth/generic: Fix generic auth expiration field and integration with
authRequired(#3251) (f4d16c0) - Enforce toolset/promptset boundary on tools/call and prompts/get (#3036) (c739b80)
- tools/http: Prevent path traversal and base path scope escape (#3218) (80a6602)
- tools/looker: Return a 401 error to MCP client when Looker returns a 401 (#3233) (4f409a3)
- tools/looker: Strip wrapping quotes from filter values for unquoted parameters (#3273) (1e3de96)
- tools: Initialize query result slices to empty array (#3250) (60ddf48)
-
v1.2.007 May 2026Release notes
Open source →1.2.0 (2026-05-07)
Features
- Add support for HTTPS/TLS listener (#3126) (8bc385d)
- source/bigquery: Add maximumBytesBilled source config (#2724) (42f2d07)
- source/cloud-storage: Add bucket and object management tools (#3129) (8de9bcf)
- source/cloud-storage: Add Cloud Storage source with list_objects and read_object tools (#3081) (da27b37)
- source/cloud-storage: Add write/copy/move/delete object tools (#3139) (b225fc4)
- tools/knowledge-catalog: Search Data Quality Scans (#2444) (1c63551)
Bug Fixes
- Allow converting string literal block with list (#3050) (36ab2a9), closes #3023
- mcp: Implement router-level logger injection for MCP auth (#3067) (ccc7cf5)
- Prevent test.db from being created during unit tests (#3042) (d10d2ca)
- Remove hardcoded * allowed origin for sse (#3054) (c4c7bd9)
- sources/postgres: Apply URL encoding to query string params (#3020) (6b860f4)
- tool/looker-conversational-analytics: OAuth token in GDA payload fix (#3058) (6632d96)
- tools/bigquery-execute-sql: Avoid surfacing invalid queries as MCP 500s (#3056) (7ed92c8)
- tools/looker: Fix OAuth for Converational Analytics (#3044) (f9e3e55)
OS/Architecture Description SHA256 Hash linux/amd64 For Linux systems running on Intel/AMD 64-bit processors. b2574e37945f5ecf8cd2a1cdcd4dabcbb32f93aafb2a5fac16db5f6289173f40 darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. e414fd5bf05798bdc31139ff9f4f9712a7d404aba68f0f6cafdbbf712ab0f409 darwin/amd64 For macOS systems running on Intel processors. 89a97dd5df0d67134c5ea7ca70894d8340993e8f67dfd86a6ed51783aa6bcb43 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. 6682d5d1bd384c0ead116ae0c88b75b78a8ddd5b070bd241959b7d912063d00f Release notes
Open source →Features
- Add support for HTTPS/TLS listener (#3126) (8bc385d)
- source/bigquery: Add maximumBytesBilled source config (#2724) (42f2d07)
- source/cloud-storage: Add bucket and object management tools (#3129) (8de9bcf)
- source/cloud-storage: Add Cloud Storage source with list_objects and read_object tools (#3081) (da27b37)
- source/cloud-storage: Add write/copy/move/delete object tools (#3139) (b225fc4)
- tools/knowledge-catalog: Search Data Quality Scans (#2444) (1c63551)
Bug Fixes
- Allow converting string literal block with list (#3050) (36ab2a9), closes #3023
- mcp: Implement router-level logger injection for MCP auth (#3067) (ccc7cf5)
- Prevent test.db from being created during unit tests (#3042) (d10d2ca)
- Remove hardcoded * allowed origin for sse (#3054) (c4c7bd9)
- sources/postgres: Apply URL encoding to query string params (#3020) (6b860f4)
- tool/looker-conversational-analytics: OAuth token in GDA payload fix (#3058) (6632d96)
- tools/bigquery-execute-sql: Avoid surfacing invalid queries as MCP 500s (#3056) (7ed92c8)
- tools/looker: Fix OAuth for Converational Analytics (#3044) (f9e3e55)
-
v1.1.013 Apr 2026Release notes
Open source →1.1.0 (2026-04-13)
Features
Bug Fixes
Docs Update
OS/Architecture Description SHA256 Hash linux/amd64 For Linux systems running on Intel/AMD 64-bit processors. 17948e7538914320c4141d155bcf283c9a8c168c6abce09ae87837057899ba29 darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. 7ac04d4563c633bb44a2c1b3ec9c5aab5f1e5885625afd3f159c73e399698495 darwin/amd64 For macOS systems running on Intel processors. 8ade0efe8989556084a876095a8f82969eab22567bbb58554e4db76854a2fdc7 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. 52827be44a40b790bea6f357dd62727ddc034fcdf4b0e0aba25ae0ab11b8302f -
v1.0.010 Apr 2026Release notes
Open source →1.0.0 (2026-04-10)
Important
This is the first stable release. Please review the UPGRADING.md guide for instructions on migrating from previous beta versions.
⚠ BREAKING CHANGES
- tools/elasticsearch: add vector search support and remove query passing through param (#2891)
- tools/looker: refactor looker-git-branch tool into 5 separate tools (#2976)
Features
- auth: Support opaque token validation for
genericauthService (#2944) (c924701) - cloudsqlpg: Run
SELECT 1after successful connection attempt (#2997) (6ed9700) - tools/bigquerysql: Add semantic search support (#2890) (862c396)
- tools/elasticsearch-execute-esql: Add Tool to execute arbitrary ES/QL queries (#3013) (ae49fb7)
- tools/elasticsearch: Add vector search support and remove query passing through param (#2891) (d44e879)
- tools/looker: Refactor looker-git-branch tool into 5 separate tools (#2976) (b2472d4)
- tools/mysql: Add list-table-stats-tool to list table statistics in MySQL and Cloud SQL MySQL source. (#2938) (dc2c2b4)
OS/Architecture Description SHA256 Hash linux/amd64 For Linux systems running on Intel/AMD 64-bit processors. 012adace943a1fab35837138afa2a701ffd179a5dc02e1f5a6fd7d2d78ed6d2f darwin/arm64 For macOS systems running on Apple Silicon (M1, M2, M3, etc.) processors. 8da9e0785b83cf652300642a6262f6e788ffe98f91fa8c3728d911a9db6f50cf darwin/amd64 For macOS systems running on Intel processors. 9e8aeebfefe3120706ee4892ef925fd6ce00892c0ccea20fbfbf35e335e8f5d1 windows/amd64 For Windows systems running on Intel/AMD 64-bit processors. 40d0e085bb0b14c8d8c94c4911ecf678336c6f9b8030c49d07a94dbbc1b1f66c Release notes
Open source →[!IMPORTANT] This is the first stable release. Please review the UPGRADING.md guide for instructions on migrating from previous beta versions.
⚠ BREAKING CHANGES
- tools/elasticsearch: add vector search support and remove query passing through param (#2891)
- tools/looker: refactor looker-git-branch tool into 5 separate tools (#2976)
Features
- auth: Support opaque token validation for
genericauthService (#2944) (c924701) - cloudsqlpg: Run
SELECT 1after successful connection attempt (#2997) (6ed9700) - tools/bigquerysql: Add semantic search support (#2890) (862c396)
- tools/elasticsearch-execute-esql: Add Tool to execute arbitrary ES/QL queries (#3013) (ae49fb7)
- tools/elasticsearch: Add vector search support and remove query passing through param (#2891) (d44e879)
- tools/looker: Refactor looker-git-branch tool into 5 separate tools (#2976) (b2472d4)
- tools/mysql: Add list-table-stats-tool to list table statistics in MySQL and Cloud SQL MySQL source. (#2938) (dc2c2b4)
-
v0.32.1-0.20260409104353-0a0e8f6b7c0909 Apr 2026 pre-releaseNothing published for this version
-
v0.32.008 Apr 2026Release notes
Open source →⚠ BREAKING CHANGES
- update repo name (#2968)
Features
- Add MCP tool annotations to all remaining tools (#2221) (ea09db9)
- bigquery: Add conversational analytics tools for Data Agents (#2517) (2490a4b)
- embeddingModel: Add Backend API selection fields (#2592) (912aa9e)
- skills: Add Claude Code support to generated scripts (#2966) (a1609e1)
- skills: Add codex user agent (#2973) (070e939)
- skills: Tool invocation via npx (#2916) (377dc5b)
- sources/singlestore: Add ConnectionParams to SingleStore Config (#2555) (73e2a8c)
- tool/dataplex-lookup-context: Relax project constraint and enforce location (#2952) (7ebfdf1)
- tools/looker: Looker agent management from MCP (#2830) (649d4ad)
- ui: Update to use
/mcpendpoint (#2829) (c3059c2)
Bug Fixes
- bigquery: Add impersonateServiceAccount to prebuilt config (#2770) (9c3a748)
- quickstart: Robust tool lookup and modernize dependencies in Python samples (#2863) (4c0845d)
- skills: Fix skill generation template (#2914) (a01a15e)
- skills: Prevent empty strings overriding optional env vars in node scripts (#2963) (c52adeb)
- tests/bigquery: Implement uuid-based isolation and reliable resource cleanup (#2547) (479d842)
- tests/Bigtable: Implement uuid-based isolation and reliable resource cleanup (#2880) (a769f15)
- Update error for ConvertConfig function (#2993) (62bdabb)
Code Refactoring
-
v0.0.0-20260814011558-5de8f13bd1ef14 Aug 2026 pre-releaseNothing published for this version
-
v0.0.0-20260728012529-44d1a050161628 Jul 2026 pre-releaseNothing published for this version
-
v0.0.0-20260718053046-944f6ce97bc718 Jul 2026 pre-releaseNothing published for this version
-
v0.0.0-20260716184809-fbe2b211d75616 Jul 2026 pre-releaseNothing published for this version
-
v0.0.0-20260701002759-35c13adbbeae01 Jul 2026 pre-releaseNothing published for this version
-
v0.0.0-20260521214943-b0010060a93921 May 2026 pre-releaseNothing published for this version
-
v0.0.0-20260408224639-b9ae1c66164108 Apr 2026 pre-releaseNothing published for this version