AnythingMCP

v0.1.26 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 16d MCP Developer Tools

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai-agents anthropic api-gateway api-to-mcp chatgpt claude

+14 more

database gemini graphql llm-tools mcp mcp-gateway mcp-middleware mcp-proxy mcp-server model-context-protocol openapi rest self-hosted soap

Affected surfaces

auth

Summary

AI summary

License activation UI is always visible and the Upgrade/View Plans links now carry a return_url.

Type	Severity	Summary	CVE
Feature
Feature	Medium	Activate License Key field now always visible on /settings/license for admins during cloud trial. Activate License Key field now always visible on /settings/license for admins during cloud trial. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Medium	Upgrade Plan and View Plans links include return_url pointing back to originating cloud instance. Upgrade Plan and View Plans links include return_url pointing back to originating cloud instance. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Medium	New /settings/license/activate callback page validates key format and activates license if admin signed in; otherwise redirects to login. New /settings/license/activate callback page validates key format and activates license if admin signed in; otherwise redirects to login. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Dependency	Medium	Marketing site now redirects after Stripe checkout with return_url, preventing open-redirects. Marketing site now redirects after Stripe checkout with return_url, preventing open-redirects. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—

Full changelog

End-to-end license auto-activation between the cloud instance and anythingmcp.com/pricing:

Activate License Key field is now always visible on /settings/license for admins — including during an active cloud trial. Previously hidden until the trial expired, which surprised customers who purchased a license mid-trial.
Upgrade Plan / View Plans links carry a return_url pointing back to the originating cloud instance, driven by NEXT_PUBLIC_MARKETING_URL (default https://anythingmcp.com).
New /settings/license/activate callback page: reads ?key=AMCP-..., validates the format, calls PUT /api/license/key if an admin is signed in, otherwise bounces through /login?redirect=... and resumes activation after sign-in.
Companion change on the marketing site (anythingmcp-website#57): after a successful Stripe checkout, the marketing site redirects the customer back to ${return_url}?key=<licenseKey> (host allowlisted to prevent open-redirects), turning the email-and-paste loop into a one-click handoff.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track AnythingMCP

Get notified when new releases ship.

About AnythingMCP