AnythingMCP

v0.3.5 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 10d MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents api-gateway chatgpt chatgpt-apps claude claude-connectors

+14 more

database-mcp-server gemini graphql-to-mcp mcp mcp-gateway mcp-servers model-context-protocol no-code openapi-to-mcp rest-to-mcp self-hosted soap-to-mcp sql-to-mcp typescript

Affected surfaces

auth

Summary

AI summary

Fixed DATEV connector OAuth token exchange by using HTTP Basic auth for the token endpoint.

Changes in this release

Type	Severity	Summary	CVE
Bugfix	Medium	Fixes DATEV connector OAuth token exchange by using HTTP Basic auth for client credentials. Fixes DATEV connector OAuth token exchange by using HTTP Basic auth for client credentials. Source: llm_adapter@2026-07-17 Confidence: low	—

Full changelog

Fixes

DATEV connector OAuth token exchange (#419): DATEV's token endpoint requires HTTP Basic client authentication (WWW-Authenticate: Basic) and rejects body-supplied credentials with 401 invalid_client. The connector authorization-code exchange previously sent client_id/client_secret only in the request body, so every DATEV confidential client failed at the token step. Added a per-connector tokenAuthMethod (basic | default post); the DATEV adapter now uses basic, applied to both the initial code exchange and token refresh. Default behaviour is unchanged for all other connectors.

Verification: confirmed read-only against DATEV's sandbox token endpoint (correct per DATEV's own OIDC discovery); backend typecheck + lint clean; connector OAuth tests 22/22 (3 new).

Note: a valid DATEV client secret is still required end-to-end — this release fixes the authentication method that was blocking all DATEV token exchanges.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track AnythingMCP

Get notified when new releases ship.

About AnythingMCP

All releases →