Skip to content

AnythingMCP

v0.1.3 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 4mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents api-gateway chatgpt chatgpt-apps claude claude-connectors
+14 more
database-mcp-server gemini graphql-to-mcp mcp mcp-gateway mcp-servers model-context-protocol no-code openapi-to-mcp rest-to-mcp self-hosted soap-to-mcp sql-to-mcp typescript

Affected surfaces

auth

Summary

AI summary

Proactive OAuth2 token refresh adds automatic pre‑expiry renewal and session management clears stale JWTs on 401.

Full changelog

What's new

Proactive OAuth2 token refresh

  • Tokens are now refreshed automatically before they expire (5-minute buffer), so AI clients never encounter a 401 due to token expiration
  • Per-connector refresh mutex prevents concurrent refresh storms
  • McpClientEngine now uses the shared OAuth2TokenService with DB persistence (removed duplicate logic)
  • expiresAt timestamp is stored at initial OAuth grant for accurate expiry tracking

Frontend session management

  • Saved JWT is validated against the backend on page load — stale tokens are cleared immediately
  • Auto-logout on 401: if any API call returns Unauthorized, the user is redirected to login
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track AnythingMCP

Get notified when new releases ship.

Sign up free

About AnythingMCP

All releases →

Related context

Beta — feedback welcome: [email protected]