This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Moderate signalThe /api/tools endpoint has been removed in v0.12.0.
Why it matters: This breaking change eliminates the /api/tools surface; update any integrations before deploying v0.12.0 to avoid runtime errors.
Summary
AI summaryRemoved /api/tools endpoint, a breaking change.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Removes /api/tools endpoint. Removes /api/tools endpoint. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds dynamic fetch OAuth credential injection. Adds dynamic fetch OAuth credential injection. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds CLI flags to override MCP server instructions and run_js description. Adds CLI flags to override MCP server instructions and run_js description. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds WASM module stubs on the MCP surface. Adds WASM module stubs on the MCP surface. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
Fixes mermaid diagram rendering on sub-pages. Fixes mermaid diagram rendering on sub-pages. Source: llm_adapter@2026-06-07 Confidence: high |
— |
Full changelog
What's Changed
- Remove /api/tools endpoint by @r33drichards in https://github.com/r33drichards/mcp-js/pull/154
- feat: add dynamic fetch oauth credential injection by @r33drichards in https://github.com/r33drichards/mcp-js/pull/153
- docs: add mkdocs docs skeleton design by @r33drichards in https://github.com/r33drichards/mcp-js/pull/155
- Update mcp-pass-through.md by @r33drichards in https://github.com/r33drichards/mcp-js/pull/157
- Fix mermaid diagram rendering on sub-pages by @r33drichards in https://github.com/r33drichards/mcp-js/pull/158
- Remove explanation of stubs and
run_jsby @r33drichards in https://github.com/r33drichards/mcp-js/pull/159 - Update mcp-pass-through.md by @r33drichards in https://github.com/r33drichards/mcp-js/pull/160
- Add WASM module stubs on the MCP surface by @r33drichards in https://github.com/r33drichards/mcp-js/pull/161
- docs: four-pillar (Diátaxis) restructure + disable JSX/TSX parsing by @r33drichards in https://github.com/r33drichards/mcp-js/pull/162
- Add CLI flags to override MCP server instructions and run_js description by @r33drichards in https://github.com/r33drichards/mcp-js/pull/163
Full Changelog: https://github.com/r33drichards/mcp-js/compare/v0.11.0...v0.12.0
Breaking Changes
- Removed /api/tools endpoint
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About r33drichards/mcp-js
A Javascript code execution sandbox that uses v8 to isolate code to run AI generated javascript locally without fear. Supports heap snapshotting for persistent sessions.
Related context
Related tools
Earlier breaking changes
- v0.11.0 Switch license from ISC to GNU Affero General Public License v3
Beta — feedback welcome: [email protected]