AnythingMCP

v0.3.4 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 12d MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai-agents api-gateway chatgpt chatgpt-apps claude claude-connectors

+14 more

database-mcp-server gemini graphql-to-mcp mcp mcp-gateway mcp-servers model-context-protocol no-code openapi-to-mcp rest-to-mcp self-hosted soap-to-mcp sql-to-mcp typescript

Affected surfaces

auth

ReleasePort's take

Moderate signal

editorial:auto 12d

The MCP OAuth login flow now includes an explicit Cancel/deny action and double‑submit CSRF protection to stop consent‑phishing attacks.

Why it matters: Prevents user consent‑phishing on the MCP authorization login page; security severity rated 90. Prioritize review for all teams handling authentication flows.

Summary

AI summary

Updates Connectors, Cloud, and Email across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Adds explicit Cancel/deny action and double-submit CSRF protection to MCP OAuth login flow, preventing consent-phishing. Adds explicit Cancel/deny action and double-submit CSRF protection to MCP OAuth login flow, preventing consent-phishing. Source: llm_adapter@2026-07-14 Confidence: high	—
Feature
Feature	Low	Introduces optional per-tool `responseMapping.followUp` workflow hint. Introduces optional per-tool `responseMapping.followUp` workflow hint. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Feature	Low	Exposes `LOGIN_TOKEN` authentication and custom headers in connector GUI. Exposes `LOGIN_TOKEN` authentication and custom headers in connector GUI. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Feature	Low	Adds GTIN/barcode lookup adapter for connectors. Adds GTIN/barcode lookup adapter for connectors. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Feature	Low	Provides Stripe billing portal within the cloud app to manage subscriptions. Provides Stripe billing portal within the cloud app to manage subscriptions. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Dependency	Low	Includes 21 dependency updates. Includes 21 dependency updates. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix
Bugfix	Medium	Unblocks the Deutsche Bahn connector (dbweb profile + Zyte egress). Unblocks the Deutsche Bahn connector (dbweb profile + Zyte egress). Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Improves workspace-SMTP UX with timeouts, delivery fallback, invite reuse, and editable config; adds org-aware SMTP with system fallback. Improves workspace-SMTP UX with timeouts, delivery fallback, invite reuse, and editable config; adds org-aware SMTP with system fallback. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Raises healthcheck `start_period` to prevent false failures during live deploys. Raises healthcheck `start_period` to prevent false failures during live deploys. Source: llm_adapter@2026-07-14 Confidence: high	—

Full changelog

Security

MCP OAuth consent screen + login CSRF (#417): the MCP authorization login page now shows which client and which redirect destination is being authorized before credentials are entered, with an explicit Cancel/deny action that aborts the flow. This closes a consent-phishing vector where a client registered via open Dynamic Client Registration could obtain a user's organization-scoped authorization code with no informed consent. Adds double-submit CSRF protection to the login form. Active only under MCP_AUTH_MODE=oauth2/both; inert in the default self-hosted legacy configuration.

Features

Optional per-tool responseMapping.followUp workflow hint (#416)
Connectors: expose LOGIN_TOKEN auth and custom headers in the GUI
Connectors: GTIN/barcode lookup adapter (#386)
Cloud: Stripe billing portal — manage your subscription from the app

Fixes

Cloud: unblock the Deutsche Bahn connector (dbweb profile + Zyte egress) (#402)
Email: workspace-SMTP UX — timeouts, delivery fallback, invite reuse, editable config; org-aware SMTP with system fallback
Deploy: raise healthcheck start_period so live deploys stop reporting false failures

Notes

This release also folds in the previously-unreleased 0.3.1–0.3.3 changes since v0.3.0, plus 21 dependency updates.

Verification: backend typecheck clean; src/auth 50/50 tests pass (7 new for consent/CSRF); lint clean; CI green on merge.

Security Fixes

MCP OAuth consent screen now displays client and redirect destination before login with explicit Cancel/deny action; adds double-submit CSRF protection under MCP_AUTH_MODE=oauth2/both

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track AnythingMCP

Get notified when new releases ship.

About AnythingMCP

All releases →