This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryUpdates ✨ Highlights, Connectors, and Onboarding across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds proxy/web-unblocker support for outbound tool requests. Adds proxy/web-unblocker support for outbound tool requests. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Feature | Low |
Adds per-tool UI checkbox to opt‑in proxy usage when CONNECTOR_PROXY_URL is set. Adds per-tool UI checkbox to opt‑in proxy usage when CONNECTOR_PROXY_URL is set. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Feature | Low |
Implements default cloud rate limit of 100 proxy calls per hour per workspace. Implements default cloud rate limit of 100 proxy calls per hour per workspace. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Feature | Low |
Adds Help Scout connector with OAuth2 client‑credentials and auto‑refresh support. Adds Help Scout connector with OAuth2 client‑credentials and auto‑refresh support. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Feature | Low |
Expands Clockify connector to support 18 tools. Expands Clockify connector to support 18 tools. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Feature | Low |
Introduces in‑app `/welcome` wizard with gate‑aware redirect respecting LicenseWall and license choice. Introduces in‑app `/welcome` wizard with gate‑aware redirect respecting LicenseWall and license choice. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Bugfix | Medium |
Fixes Deutsche Bahn connector 403 errors on Akamai-protected endpoints via proxy. Fixes Deutsche Bahn connector 403 errors on Akamai-protected endpoints via proxy. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Bugfix | Medium |
Requires `to_country` in Sendcloud connector to avoid 14‑second "all carriers" calls. Requires `to_country` in Sendcloud connector to avoid 14‑second "all carriers" calls. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Bugfix | Medium |
Resolves `user_id` extraction from JWT email for accurate cloud analytics. Resolves `user_id` extraction from JWT email for accurate cloud analytics. Source: llm_adapter@2026-05-31 Confidence: high |
— |
| Bugfix | Medium |
Hides license wall on logout and auth routes, clears stale block state. Hides license wall on logout and auth routes, clears stale block state. Source: llm_adapter@2026-05-31 Confidence: high |
— |
Full changelog
✨ Highlights
Proxy / Web-Unblocker (#280, #281, #282)
Route a tool's outbound request through a proxy or web-unblocker (e.g. Zyte API proxy mode) to reach anti-bot / geo / rate-limited APIs. Fixes the Deutsche Bahn connector that 403'd on Akamai-protected endpoints.
- Per-tool opt-in:
mcp_tools.use_proxy(seeded from the adapter spec'suseProxy), toggled via a per-tool UI checkbox shown only whenCONNECTOR_PROXY_URLis set. - Cloud rate limit:
PROXY_RATE_LIMIT_DEFAULT(default 100) proxy calls/hour per workspace; over-cap returns an explicit error. Overridable only by a service admin viaorganizations.proxy_rate_limit(no API). - Engine: REST + GraphQL attach an
HttpsProxyAgent. SOAP/DB/MCP ignore it. - Adapters shipped with
useProxy: true: Deutsche Bahn, Playtomic (+ public), Sorare, OpenTable, Resy, Vinted, Untappd, idealista, Trenitalia, ImmobilienScout24, Etsy, Mercado Libre. - Docs:
docs/connectors/proxy.md.
Onboarding (#272, #273, #276)
- In-app
/welcomewizard with a gate-aware redirect (respects LicenseWall + license-choice). - Email drip cron for users who registered but never created a connector.
Connectors
- Help Scout → OAuth2 client-credentials with auto-refresh (#277).
- Clockify → expanded to 18 tools (#279).
- Sendcloud →
to_countryrequired to avoid 14s "all carriers" calls (#274).
Fixes
- Audit: resolve
user_idfrom the JWT email so cloud analytics aren't always NULL (#275). - License wall: hide on logout + auth routes, clear stale block state (#278).
Diff
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About AnythingMCP
All releases →Related context
Beta — feedback welcome: [email protected]