keboola/keboola-mcp-server

v1.66.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP Data & Storage

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

data-platform etl-pipeline keboola-platform mcp mcp-server model-context-protocol

Affected surfaces

auth

ReleasePort's take

Moderate signal

editorial:auto 1mo

The release now encrypts #-prefixed secrets before persisting them and redacts those secrets during read operations.

Why it matters: Encrypting #‑prefixed secrets mitigates accidental exposure in storage; the change applies to all such secrets without version constraints.

Summary

AI summary

Encrypt #-prefixed secrets before saving, redact them on reads, hardening supply‑chain with a 7‑day dependency cooldown.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Encrypt #-prefixed secrets before save and redact them on reads Encrypt #-prefixed secrets before save and redact them on reads Source: llm_adapter@2026-06-15 Confidence: high	—
Feature	Medium	Add variables parameter to create/update SQL transformation and config tools Add variables parameter to create/update SQL transformation and config tools Source: llm_adapter@2026-06-15 Confidence: high	—
Dependency	Low	Implement 7‑day cooldown for dependency updates to harden supply chain Implement 7‑day cooldown for dependency updates to harden supply chain Source: llm_adapter@2026-06-15 Confidence: low	—

Full changelog

What's Changed

chore: add 7-day dependency cooldown for supply-chain hardening by @Matovidlo in https://github.com/keboola/mcp-server/pull/548
fix(security): encrypt #-prefixed secrets before save and redact them on reads [AI-3327] by @Matovidlo in https://github.com/keboola/mcp-server/pull/556
chore: bump GitHub Actions versions (dependabot #550-554) by @Matovidlo in https://github.com/keboola/mcp-server/pull/555
docs: document how to map a Docker image tag to a release version by @Matovidlo in https://github.com/keboola/mcp-server/pull/560
AI-1166: add variables parameter to create/update SQL transformation and config tools by @Matovidlo in https://github.com/keboola/mcp-server/pull/498

Full Changelog: https://github.com/keboola/mcp-server/compare/v1.64.0...v1.66.0

Security Fixes

Fix: encrypt #-prefixed secrets before save and redact them on reads [AI-3327]

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track keboola/keboola-mcp-server

Get notified when new releases ship.

About keboola/keboola-mcp-server

interact with Keboola Connection Data Platform. This server provides tools for listing and accessing data from Keboola Storage API.

All releases →