portainer/portainer-mcp

v2.43.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 27d MCP SaaS Integrations

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai containerization llm mcp mcp-server portainer

Summary

AI summary

Embedded spec updated to Portainer EE 2.43.0 and edge‑agent callbacks are now excluded via a dedicated edge_agent tag.

Full changelog

Embedded spec bumped to Portainer EE 2.43.0 (#73) (was 2.42.0). Total
operations 409 → 412; default BASE,DOCKER,KUBERNETES profile coverage
193 → 190, five-profile union 334 → 329. Upstream resolved a long-standing
tagging defect by moving the Edge-agent callbacks (heartbeat/status, async
poll, alert + chart status, edge stack/job sync) off the endpoints tag
onto a new dedicated edge_agent tag, so they no longer leak into the
DOCKER profile as tools that can never succeed for a non-agent caller. New
allowlist orphan tag (2 ops, URL allow list).
Edge-agent callback exclusion is now tag-based (#73). spec/patch_spec.py
drops every operation carrying the new edge_agent tag (eight callbacks that
403 for any caller without X-PortainerAgent-EdgeID), replacing the previous
four-op (method, path) matcher — possible because 2.43.0 also gave 15 of 16
previously-unnamed operations an operationId. Pruned patcher entries that no
longer match anything in 2.43.0 (SharedGit{Get,Update,Delete}, the
os.FileMode / v1.Duration enum strips).

Full changelog: https://github.com/portainer/portainer-mcp/blob/2.43.0/CHANGELOG.md

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track portainer/portainer-mcp

Get notified when new releases ship.

About portainer/portainer-mcp

Portainer MCP server

v2.42.5 Breaks HTTP-transport deployments: per-user Portainer API-key passthrough required; `PORTAINER_API_KEY` now hard-fails at startup under `PORTAINER_MCP_TRANSPORT=http`.
v2.42.1 Breaks `make dev` to now require PORTAINER_MCP_AUTH_TOKEN for local HTTP loop.