This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+3 more
Summary
AI summaryManifest generator now strips PORTKEY_TOOL_DOMAINS/MCP_TOOL_DOMAINS env vars and regenerates LobeHub manifest from live server, fixing truncation and drift.
Full changelog
Fixed
migrate_prompt's 0.4.1 description enumerated only two of the threeactionreturn values; the common re-run case returnsunchanged(prompt found, content identical, no new version created). The description now covers all three outcomes plus themessagefield.- The LobeHub manifest generator inherited the caller's environment, so a stray
PORTKEY_TOOL_DOMAINS/MCP_TOOL_DOMAINSexport made it silently write a truncated manifest (reproduced: 34 of 150 tools). It now strips both variables, refuses to write fewer tools than the manifest already has, and carries each tool'sannotationsthrough to the manifest (previously dropped). - Pin the actionlint bootstrap script in CI to a commit SHA — the tag-based raw URL was the one remaining mutable reference in the hardened workflows.
- Correct two claims in the 0.4.1 changelog entry (mirrored to its GitHub Release): the six tools carry the first hand-authored annotations, not the first annotations, and the manifest drift was 29 tool entries, not 34.
Changed
- Rewrite the six lowest-scoring tool descriptions (Glama TDQS):
update_config,update_integration,create_integration,update_mcp_integration_capabilities,update_mcp_integration_workspaces, andmigrate_promptnow disclose side effects and reversibility, name sibling tools and where to source parameter values, and enumerate return fields. These six are also the first tools to carry explicit hand-authored MCP annotations (readOnlyHint/destructiveHint/idempotentHint/openWorldHint), overriding the operation-type-inferred annotations every tool has carried since 0.2.0.
Fixed
- The LobeHub manifest (
lhm.plugin.json) had drifted from the server: 29 tool entries were out of date — the six rewritten descriptions plus 0.4.0's pagination schema changes, including alist_guardrailsschema still advertising apage_sizemaximum of 1000 that the server rejects at 100. The tools array is regenerated from the live server over MCPtools/list(newscripts/generate-lobehub-tools.mjs, wired intopublish:lobehubso it can't drift again), which also picks up the Enterprise-gating notes the server appends at registration. glama.jsonmaintainers listed the GitHub org instead of a username, which Glama's claim flow can't match; restoredscttbnsnso the org-hosted server page can be claimed.
Full Changelog: https://github.com/CodesWhat/portkey-admin-mcp/compare/v0.4.1...v0.4.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About s-b-e-n-s-o-n/portkey-admin-mcp
MCP server for the Portkey AI Gateway Admin API — 150 tools for prompts, configs, analytics, keys, guardrails, integrations, and more.
Related context
Beta — feedback welcome: [email protected]