Skip to content

confluentinc/mcp-confluent

v1.3.0 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 20d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 3 known CVEs

Affected surfaces

deps

ReleasePort's take

Moderate signal
editorial:auto 9d

OAuth support is now available across multiple tools and telemetry enhancements have been added in this release.

Why it matters: Enables secure, OAuth‑authenticated access to Kafka REST tools, list‑clusters, schema operations, and other utilities; addresses high‑severity security alerts by running `npm audit fix` and updating fastify, follow-redirects, and hono dependencies.

Summary

AI summary

OAuth support added across multiple tools, telemetry enhancements, and numerous refactors.

Changes in this release

Security High

Run `npm audit fix` to address security/quality alerts

Run `npm audit fix` to address security/quality alerts

Source: granite4.1:30b@2026-05-22-audit

Confidence: high

 —
Security High

Update fastify, follow-redirects, and hono dependencies for security fixes

Update fastify, follow-redirects, and hono dependencies for security fixes

Source: granite4.1:30b@2026-05-22-audit

Confidence: high

 —
Feature Medium

Add list-organizations tool with OAuth-aware enablement

Add list-organizations tool with OAuth-aware enablement

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Enable native Kafka tools under OAuth

Enable native Kafka tools under OAuth

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add --init-config flag to bootstrap a starter config.yaml

Add --init-config flag to bootstrap a starter config.yaml

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add get_product_doc_page tool

Add get_product_doc_page tool

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Enable OAuth support for list-schemas

Enable OAuth support for list-schemas

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Enable OAuth support for delete-schema

Enable OAuth support for delete-schema

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add CCloud OAuth login telemetry

Add CCloud OAuth login telemetry

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Express runtimeWith atop runtimeWithConnections

Express runtimeWith atop runtimeWithConnections

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Centralize all configuration documentation

Centralize all configuration documentation

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add --init-oauth-config flag to bootstrap a starter OAuth config.yaml

Add --init-oauth-config flag to bootstrap a starter OAuth config.yaml

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Allow direct connections with no service blocks

Allow direct connections with no service blocks

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Defer OAuth browser launch to first tool invocation

Defer OAuth browser launch to first tool invocation

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add integration tests for billing tool handler

Add integration tests for billing tool handler

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add integration tests for catalog tool handlers

Add integration tests for catalog tool handlers

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add integration tests for docs tool handler

Add integration tests for docs tool handler

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add integration tests for connect tool handlers

Add integration tests for connect tool handlers

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add integration tests for tableflow list tool handlers

Add integration tests for tableflow list tool handlers

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Enable OAuth for Kafka REST tools and list-clusters

Enable OAuth for Kafka REST tools and list-clusters

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Wean connectors off of env vars

Wean connectors off of env vars

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Wean tableflow handlers off of global env

Wean tableflow handlers off of global env

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Wean Flink handlers off of global env interaction within handle()

Wean Flink handlers off of global env interaction within handle()

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Wean metrics off of env vars

Wean metrics off of env vars

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Wean list-clusters-handler off env.KAFKA_ENV_ID

Wean list-clusters-handler off env.KAFKA_ENV_ID

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Promote OAuth to a ConnectionConfig variant

Promote OAuth to a ConnectionConfig variant

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add partition count option to create topics tool

Add partition count option to create topics tool

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Improve size of the readme

Improve size of the readme

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add SECURITY.md

Add SECURITY.md

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Add OAuth type definitions and Auth0 environment config

Add OAuth type definitions and Auth0 environment config

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Introduce SECURITY.md document outlining security practices

Introduce SECURITY.md document outlining security practices

Source: granite4.1:30b@2026-05-22-audit

Confidence: high

 —
Feature Medium

Implement token exchange chain for OAuth

Implement token exchange chain for OAuth

Source: llm_adapter@2026-05-21

Confidence: low

 —
Feature Medium

Add in-memory token store with CRUD for OAuth

Add in-memory token store with CRUD for OAuth

Source: llm_adapter@2026-05-21

Confidence: low

 —
Refactor Medium

Wean connectors off of environment variable usage

Wean connectors off of environment variable usage

Source: granite4.1:30b@2026-05-22-audit

Confidence: low

 —
Refactor Medium

Wean metrics tooling off of environment variables

Wean metrics tooling off of environment variables

Source: granite4.1:30b@2026-05-22-audit

Confidence: low

 —
Full changelog

What's Changed

  • docs: update README to split tooling based on API key/secret requirements by @shouples in https://github.com/confluentinc/mcp-confluent/pull/117
  • fix ESM stubbing and add claude configs for test stub patterns by @shouples in https://github.com/confluentinc/mcp-confluent/pull/112
  • 🍒 [main] add links to Metrics API docs for TELEMETRY_* env vars by @shouples in https://github.com/confluentinc/mcp-confluent/pull/120
  • MINOR: remove createTestServer mention from sinon skill by @shouples in https://github.com/confluentinc/mcp-confluent/pull/121
  • Fix billing tool by @flippingbits in https://github.com/confluentinc/mcp-confluent/pull/124
  • docs: add CHANGELOG.md by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/126
  • chore: set next version under development to 1.3.0 by @shouples in https://github.com/confluentinc/mcp-confluent/pull/133
  • [security] run npm audit fix to address security/quality alerts by @shouples in https://github.com/confluentinc/mcp-confluent/pull/140
  • fix precommit to only target staged files by @shouples in https://github.com/confluentinc/mcp-confluent/pull/138
  • chore(CI): update release pipeline by @shouples in https://github.com/confluentinc/mcp-confluent/pull/136
  • 🍒 [main] fix: embed telemetry write key in prepack step by @shouples in https://github.com/confluentinc/mcp-confluent/pull/137
  • MATRIX-1508: Remove the mcp-conversations guidance by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/141
  • Improve size of the readme by @flippingbits in https://github.com/confluentinc/mcp-confluent/pull/130
  • docs: update external docs links by @shouples in https://github.com/confluentinc/mcp-confluent/pull/142
  • Fix/139 remove base url tool param by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/143
  • Have each tool register its read-only, create-update, or destructive delete intent by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/146
  • add SECURITY.md by @shouples in https://github.com/confluentinc/mcp-confluent/pull/148
  • chore: set project npm registry and update package-lock.json by @shouples in https://github.com/confluentinc/mcp-confluent/pull/153
  • chore: update Dockerfile and add docker image scan block for CI by @shouples in https://github.com/confluentinc/mcp-confluent/pull/156
  • Feat/147 local connection yaml parsing by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/155
  • MINOR: rename TypeScript test:ts script to typecheck for clarity by @shouples in https://github.com/confluentinc/mcp-confluent/pull/167
  • update local dev configs to support VS Code launch via F5, pretty logs, and defaults for Copilot + Claude Code by @shouples in https://github.com/confluentinc/mcp-confluent/pull/163
  • fix: set actual default HTTP port in docker-compose.yml by @shouples in https://github.com/confluentinc/mcp-confluent/pull/170
  • Add partition count option to create topics tool by @MosheBlumbergX in https://github.com/confluentinc/mcp-confluent/pull/160
  • Begin refactoring main() into subordinate functions with test coverage. by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/171
  • minor: Move log statement to after declaration by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/184
  • fix(CI): set TELEMETRY_WRITE_KEY before npm pack in release-version pipeline by @shouples in https://github.com/confluentinc/mcp-confluent/pull/179
  • Interpolate env vars into YAML-loaded configuration prior to Zod validation. by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/176
  • feat(oauth): add OAuth type definitions and Auth0 environment config by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/183
  • [security] update fastify, follow-redirects, and hono by @shouples in https://github.com/confluentinc/mcp-confluent/pull/188
  • feat(oauth): implement token exchange chain by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/185
  • chore(CI): set up scheduled npm audit fix pipeline by @shouples in https://github.com/confluentinc/mcp-confluent/pull/189
  • MINOR: update npm-audit pipeline to catch nonzero exits by @shouples in https://github.com/confluentinc/mcp-confluent/pull/194
  • feat(oauth): add in-memory token store with CRUD by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/187
  • Clean up env manipulation and cmdline parsing by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/191
  • chore: add PR template by @shouples in https://github.com/confluentinc/mcp-confluent/pull/196
  • chore: set default behavior for import sorting by @shouples in https://github.com/confluentinc/mcp-confluent/pull/197
  • [main] chore(deps): npm audit fix by @semaphore-agent-production[bot] in https://github.com/confluentinc/mcp-confluent/pull/199
  • chore: update PR template and add script for regenerating CCloud openapi client code by @shouples in https://github.com/confluentinc/mcp-confluent/pull/200
  • chore: add initial copilot-instructions.md to help with PR review feedback by @shouples in https://github.com/confluentinc/mcp-confluent/pull/201
  • feat(oauth): auto-refresh token lifecycle by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/193
  • minor: follow-up fixes to #193 by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/237
  • chore(deps): bump node:22-alpine base image digest by @flippingbits in https://github.com/confluentinc/mcp-confluent/pull/241
  • refactor(oauth): introduce AuthContext owning token lifecycle by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/238
  • Feat/162 configure server from either yaml or env by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/198
  • feat(oauth): classify refresh errors and retry transient failures by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/242
  • [main] chore(deps): npm audit fix by @semaphore-agent-production[bot] in https://github.com/confluentinc/mcp-confluent/pull/246
  • docs: add example YAML config by @shouples in https://github.com/confluentinc/mcp-confluent/pull/245
  • chore(tests): migrate sinon stubbing to vitest spy/mock patterns by @shouples in https://github.com/confluentinc/mcp-confluent/pull/243
  • MINOR fix(docs): updated outdated tool registration references by @shouples in https://github.com/confluentinc/mcp-confluent/pull/244
  • Model server config in yaml by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/247
  • Feat/215 yaml transports and do not track by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/248
  • Tighten MCPServerConfiguration and members to be fully readonly by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/250
  • Create class ServerRuntime by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/251
  • Add new predicate functions and ToolHandler enabledConnectionIds() lifecycle method by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/255
  • Add OAuthHolder and browser PKCE login flow by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/258
  • Migrate billing and catalog handlers to enabledConnectionIds() by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/260
  • Migrate kafka and cluster handlers to enabledConnectionIds() by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/261
  • Add OAuth bearer middleware by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/262
  • Migrate connect, environments, and metrics tools to enabledConnectionIds() by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/266
  • Tighten kafka block Zod refinement to require either bootstrap_servers or rest_endpoint and not cluster_id or env_id (#265) by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/269
  • Migrate the Flink tools to enabledConnectionIds() via a subclass. by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/275
  • Migrate schema, search, and tableflow handlers to getConnectionIds(). by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/276
  • Add oauth connection path by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/263
  • MINOR: update .env.example with missing recently-introduced env vars by @shouples in https://github.com/confluentinc/mcp-confluent/pull/280
  • Feat/228 enabledConnectionIds() migration completion work by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/278
  • chore: update claude+Copilot instructions based on YAML config migration progress [ci skip] by @shouples in https://github.com/confluentinc/mcp-confluent/pull/281
  • Run OAuth login concurrently with tool registration by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/279
  • Introduce shared StubHandler fixture; delete orphaned envFactory (#259 + #212) by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/282
  • MINOR: combine build+test jobs to speed up CI by @shouples in https://github.com/confluentinc/mcp-confluent/pull/283
  • chore(CI): move Docker image scan to dedicated pipeline, rename Test job by @shouples in https://github.com/confluentinc/mcp-confluent/pull/286
  • Delay eslint import revising from vscode save to pre-commit hook (or explicit lint:fix invocation) by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/290
  • MINOR: update npm audit scheduled task to run daily by @shouples in https://github.com/confluentinc/mcp-confluent/pull/292
  • [REPO CONFIG] Pre push hook to run whole repo linting and typescript check by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/293
  • update CI pipeline run lint+typecheck before build+test in the same job by @shouples in https://github.com/confluentinc/mcp-confluent/pull/294
  • Feat/229 handle() gets runtime, not clientmanage passed now by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/295
  • Extract reusable handle() test infrastructure; add two POC focused handler suites by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/302
  • set up integration test patterns with @smoke and @kafka tag groups by @shouples in https://github.com/confluentinc/mcp-confluent/pull/300
  • Add search-product-docs tool by @eguicf in https://github.com/confluentinc/mcp-confluent/pull/267
  • [main] chore(deps): npm audit fix by @semaphore-agent-production[bot] in https://github.com/confluentinc/mcp-confluent/pull/304
  • Extract BaseClientManager from DefaultClientManager refactor by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/299
  • stubClientGetters() expands to support array of stub responses; new BaseToolHandler.resolveParam() by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/310
  • Add OAuthClientManager and wire into ServerRuntime by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/301
  • Type-separate OAuthClientManager from the native-Kafka contract by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/306
  • feat: Add list-organizations tool with OAuth-aware enablement by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/291
  • stubClientGetters() now captures REST call payloads by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/314
  • [main] chore(deps): npm audit fix by @semaphore-agent-production[bot] in https://github.com/confluentinc/mcp-confluent/pull/340
  • Promote OAuth to a ConnectionConfig variant by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/339
  • Wean Flink handlers off of global env interaction within handle() by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/307
  • set up SessionRegistry to support multiple sessions for HTTP transport config by @shouples in https://github.com/confluentinc/mcp-confluent/pull/116
  • Feat/232 wean metrics off of env vars by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/344
  • Wean list-clusters-handler off env.KAFKA_ENV_ID by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/346
  • chore: add pr-review claude skill and add permissions.deny settings [ci skip] by @shouples in https://github.com/confluentinc/mcp-confluent/pull/349
  • Feat/287 wean connectors off of env vars by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/350
  • [main] chore(deps): npm audit fix by @semaphore-agent-production[bot] in https://github.com/confluentinc/mcp-confluent/pull/361
  • refactor stubClientGetters into nested mock instances by @shouples in https://github.com/confluentinc/mcp-confluent/pull/360
  • Wean tableflow handlers off of global env by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/353
  • Cleanup/305 delete get ensured param and test cleanup by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/363
  • Retire env default export; thread ServerConfig through HTTP startup (#234) by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/368
  • chore(local dev): update default .vscode/launch.json for YAML-first config [ci skip] by @shouples in https://github.com/confluentinc/mcp-confluent/pull/268
  • Expand predicate results to describe reason why failed. by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/369
  • chore: add integration tests for schema tool handlers by @shouples in https://github.com/confluentinc/mcp-confluent/pull/371
  • chore: add integration tests for environments tool handlers by @shouples in https://github.com/confluentinc/mcp-confluent/pull/373
  • chore: add integration tests for clusters tool handler by @shouples in https://github.com/confluentinc/mcp-confluent/pull/374
  • Enable native Kafka tools under OAuth by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/359
  • MINOR: remove 'weekly' mentions in for scheduled npm audit fix [ci skip] by @shouples in https://github.com/confluentinc/mcp-confluent/pull/382
  • [main] chore(deps): npm audit fix by @semaphore-agent-production[bot] in https://github.com/confluentinc/mcp-confluent/pull/377
  • Add --init-config flag to bootstrap a starter config.yaml by @flippingbits in https://github.com/confluentinc/mcp-confluent/pull/379
  • Add get_product_doc_page tool by @eguicf in https://github.com/confluentinc/mcp-confluent/pull/354
  • Fix flake OAuth refresh test by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/392
  • OAuth tool-surface partition test by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/388
  • Refactor/357 predicate data member in all tools by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/385
  • Lockdown tool predicates to known (tested) set. by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/395
  • fix: set up backoff/retry middleware for integration tests by @shouples in https://github.com/confluentinc/mcp-confluent/pull/394
  • chore: add integration tests for connect tool handlers by @shouples in https://github.com/confluentinc/mcp-confluent/pull/376
  • Centralize all ToolHandler -> enablement predicate tests; remove tool level connectionids tests by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/400
  • chore: update readme by @noeldevelops in https://github.com/confluentinc/mcp-confluent/pull/398
  • Cleanup residual test components no longer needed. by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/402
  • Enable OAuth for Kafka REST tools and list-clusters by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/399
  • chore: add integration tests for metrics tool handlers by @shouples in https://github.com/confluentinc/mcp-confluent/pull/383
  • Refactor arg resolution for OAuth mirgrated handlers and clean up hasConfluentCloud predicate by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/403
  • chore: add integration tests for flink tool handlers by @shouples in https://github.com/confluentinc/mcp-confluent/pull/387
  • Allow direct connections with no service blocks by @eguicf in https://github.com/confluentinc/mcp-confluent/pull/408
  • Defer OAuth browser launch to first tool invocation by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/415
  • chore: add integration tests for tableflow "list" tool handlers by @shouples in https://github.com/confluentinc/mcp-confluent/pull/406
  • Remove unneeded BaseClientManager.confluentCloudTableflowBaseUrl by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/421
  • describe-tool-gating diagnostic tool by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/414
  • Add --init-oauth-config flag to bootstrap a starter OAuth config.yaml by @flippingbits in https://github.com/confluentinc/mcp-confluent/pull/393
  • [main] chore(deps): npm audit fix by @semaphore-agent-production[bot] in https://github.com/confluentinc/mcp-confluent/pull/423
  • fix: support multiple sessions for SSE transport config by @shouples in https://github.com/confluentinc/mcp-confluent/pull/412
  • Rename describe-tool-gating → explain-disabled-tools + tighten description by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/424
  • chore: add integration tests for billing tool handler by @shouples in https://github.com/confluentinc/mcp-confluent/pull/411
  • Tests/404 cover missing bit of env config by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/420
  • fix(tests): wait for Flink statement RUNNING phase by @shouples in https://github.com/confluentinc/mcp-confluent/pull/422
  • chore: rename env-path connection to _default and pin fallback shape by @eguicf in https://github.com/confluentinc/mcp-confluent/pull/416
  • Close off env var access by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/428
  • hotfix(CI): skip tests when only running with INTEGRATION_TEST_TRANSPORT=stdio by @shouples in https://github.com/confluentinc/mcp-confluent/pull/434
  • feat(264): emit boot-time config dimensions as SERVER_START payload by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/432
  • Tests: New mockKafkaConstructor helper by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/433
  • feat: better login pages by @noeldevelops in https://github.com/confluentinc/mcp-confluent/pull/436
  • Enable Schema Registry serialization for produce/consume under OAuth by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/429
  • chore: add integration tests for docs tool handler by @eguicf in https://github.com/confluentinc/mcp-confluent/pull/427
  • fix: handle cloud being undefined when invoking list-tableflow-regions by @shouples in https://github.com/confluentinc/mcp-confluent/pull/431
  • Enable OAuth support for list-schemas by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/440
  • chore: add integration tests for catalog tool handlers by @shouples in https://github.com/confluentinc/mcp-confluent/pull/426
  • Clean up and centralize multi-connection runtime test fixture. by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/441
  • Enable OAuth support for delete-schema by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/437
  • Tests/396 rename test connection config helper by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/442
  • Improve the output format from the list-connectors tool by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/445
  • Respell flink.environment_name as flink.catalog_name... by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/447
  • hotfix(tests): remove GCP assertion from the list-tableflow-regions cloud=undefined case by @shouples in https://github.com/confluentinc/mcp-confluent/pull/449
  • feat: Add CCloud OAuth login telemetry by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/448
  • [main] chore(deps): npm audit fix by @semaphore-agent-production[bot] in https://github.com/confluentinc/mcp-confluent/pull/458
  • Add link to config, couple of nits by @rmoff in https://github.com/confluentinc/mcp-confluent/pull/460
  • Express runtimeWith atop runtimeWithConnections by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/457
  • Centralize all configuration documentation. by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/463
  • docs: Update telemetry.md verbiage by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/462
  • docs: Update OAuth Docs by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/464
  • Fix VSCode+Copilot installation instructions by @jlrobins in https://github.com/confluentinc/mcp-confluent/pull/467
  • Docs backports to v1.3.x: Clarify tool availability (#461) + OSPL (#469) by @rmoff in https://github.com/confluentinc/mcp-confluent/pull/470
  • minor: Adjust 1.3.0 changelog formatting and add list org tool by @bcscc in https://github.com/confluentinc/mcp-confluent/pull/471
  • [v1.3.x] update changelog for 1.3.0 release by @shouples in https://github.com/confluentinc/mcp-confluent/pull/465

New Contributors

  • @MosheBlumbergX made their first contribution in https://github.com/confluentinc/mcp-confluent/pull/160
  • @semaphore-agent-production[bot] made their first contribution in https://github.com/confluentinc/mcp-confluent/pull/199
  • @eguicf made their first contribution in https://github.com/confluentinc/mcp-confluent/pull/267
  • @noeldevelops made their first contribution in https://github.com/confluentinc/mcp-confluent/pull/398

Full Changelog: https://github.com/confluentinc/mcp-confluent/compare/v1.2.2...v1.3.0

Security Fixes

  • [security] run npm audit fix to address security/quality alerts
  • [security] update fastify, follow-redirects, and hono
  • [main] chore(deps): npm audit fix (multiple entries)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track confluentinc/mcp-confluent

Get notified when new releases ship.

Sign up free

About confluentinc/mcp-confluent

Confluent integration to interact with Confluent Kafka and Confluent Cloud REST APIs.

All releases →

Related context

Beta — feedback welcome: [email protected]