This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Affected surfaces
Summary
AI summaryAdded remote MCP over Streamable HTTP with token and header auth.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds support for remote MCP servers via Streamable HTTP. Adds support for remote MCP servers via Streamable HTTP. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds token and header authentication options (--bearer, --token, repeatable --header). Adds token and header authentication options (--bearer, --token, repeatable --header). Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
/mcp list now displays each server's transport type ([http] or [stdio]). /mcp list now displays each server's transport type ([http] or [stdio]). Source: llm_adapter@2026-06-07 Confidence: high |
— |
Full changelog
Connect hosted MCP servers, not just local ones.
Added
- Remote MCP over Streamable HTTP — point
/mcp addat a URL:
Handles JSON and SSE responses and reuses the server's session id across calls./mcp add linear https://mcp.linear.app/mcp --bearer env:LINEAR_TOKEN /mcp add api https://example.com/mcp --header "X-Api-Key:abc123" - Token / header auth:
--bearer/--tokenand repeatable--header K:V; values supportenv:VARandfile:PATHso secrets aren't typed inline. /mcp listshows each server's transport ([http]/[stdio]). Remote tools work with lazy mode too.
Notes
- Interactive OAuth login (browser PKCE) is the next increment; this release covers the static-token auth most hosted MCP servers use today.
Tests
- A real in-process HTTP MCP server end-to-end (start, tool call, session reuse, routing) plus SSE/error/auth tests. 397 total; ruff + CI green.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Kodiqa Agent
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]