Skip to content

TencentCloudBase/CloudBase-AI-ToolKit

v2.20.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 10d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai aicoding cloudbase cursor mcp miniprogram
+5 more
serverless supabase tencent vibe-coding web

Affected surfaces

auth

ReleasePort's take

Light signal
editorial:auto 9d

v2.20.0 adds CloudBase API Key authentication and improves its error diagnostics, while also blocking start_auth and logout when using this mode.

Why it matters: API Key auth is now supported but restricts session‑management calls; operators must adjust workflows that rely on start_auth or logout for API Key users.

Summary

AI summary

Broad release touches 🔐 身份认证, 工具与依赖, 🛠️ MCP 工具改进, and 环境管理.

Changes in this release

Breaking Medium

Blocks start_auth and logout operations when using API Key authentication mode

Blocks start_auth and logout operations when using API Key authentication mode

Source: llm_adapter@2026-05-25

Confidence: high

 —
Breaking Medium

Removes Tag parameter from deleteCollection, retaining only EnvId

Removes Tag parameter from deleteCollection, retaining only EnvId

Source: llm_adapter@2026-05-25

Confidence: high

 —
Feature Medium

Adds CloudBase API Key authentication method

Adds CloudBase API Key authentication method

Source: llm_adapter@2026-05-25

Confidence: high

 —
Feature Medium

Improves error diagnostics for API Key auth failures

Improves error diagnostics for API Key auth failures

Source: llm_adapter@2026-05-25

Confidence: high

 —
Feature Medium

Introduces project‑level credential storage via WORKSPACE_FOLDER_PATHS

Introduces project‑level credential storage via WORKSPACE_FOLDER_PATHS

Source: llm_adapter@2026-05-25

Confidence: high

 —
Dependency Medium

Upgrades @cloudbase/manager-node to version 5.5.0

Upgrades @cloudbase/manager-node to version 5.5.0

Source: llm_adapter@2026-05-25

Confidence: low

 —
Dependency Medium

Upgrades @cloudbase/toolbox to version 0.7.21-beta.3, fixing cwd handling on logout

Upgrades @cloudbase/toolbox to version 0.7.21-beta.3, fixing cwd handling on logout

Source: llm_adapter@2026-05-25

Confidence: low

 —
Bugfix Medium

Optimizes environment info query by using DescribeEnvInfo instead of DescribeEnvs with API Key mode

Optimizes environment info query by using DescribeEnvInfo instead of DescribeEnvs with API Key mode

Source: llm_adapter@2026-05-25

Confidence: low

 —
Bugfix Medium

Fixes parsing of EnvBaseInfo in DescribeEnvInfo response

Fixes parsing of EnvBaseInfo in DescribeEnvInfo response

Source: llm_adapter@2026-05-25

Confidence: low

 —
Bugfix Medium

Marks roleIdentity as required in createRole parameter validation

Marks roleIdentity as required in createRole parameter validation

Source: llm_adapter@2026-05-25

Confidence: low

 —
Full changelog

🎉 CloudBase MCP v2.20.0 正式版

✨ 新功能

🔐 身份认证

  • 新增 CloudBase API Key 认证方式：支持使用 CloudBase API Key 进行 MCP 身份验证，提升安全性和灵活性
  • 优化 API Key 认证失败诊断：改进 start_auth 中的错误提示，方便排查认证问题
  • 项目级凭证存储：使用 WORKSPACE_FOLDER_PATHS 实现项目级别的 API Key 凭证存储

🛠️ MCP 工具改进

  • 提升工具 Action 兼容性：改进 MCP 工具 action 的兼容性和参数校验
  • 同步工具文档和 Schema：自动同步生成的工具文档和数据模型

🐛 问题修复

环境管理

  • 优化环境信息查询：避免 API Key 模式下调用 DescribeEnvs，改为使用更轻量的 DescribeEnvInfo
  • 修复环境查询响应解析：正确提取 DescribeEnvInfo 响应中的 EnvBaseInfo

认证与权限

  • 屏蔽 API Key 模式的受限操作：在 API Key 模式下屏蔽 start_auth 和 logout 操作
  • 修复角色创建参数校验：明确 createRole 中 roleIdentity 为必填参数

数据库

  • 回退删除集合接口改动：从 deleteCollection 中移除 Tag 参数，保持仅使用 EnvId

工具与依赖

  • 升级 @cloudbase/manager-node 到 5.5.0：获取最新的 CloudBase 管理端能力
  • 升级 @cloudbase/toolbox 到 0.7.21-beta.3：修复 logout 时的 cwd 传递问题
  • 修复多个 MCP 工具问题：提升工具调用的稳定性

可观测性

  • 增强错误日志：在错误日志和工具响应中包含 RequestId，方便追踪问题

📚 文档更新

  • 添加 Cloud Mode 部署安全说明：说明自动登录的安全边界和风险
  • 添加 API Key 认证文档：详细说明如何配置和使用 CloudBase API Key 认证

⚡ 其他改进

  • 清理构建产物同步逻辑：优化 Claude skills 镜像的同步流程
  • 修复测试失败：修复 envQuery 和 cloudbase-manager 相关测试用例
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track TencentCloudBase/CloudBase-AI-ToolKit

Get notified when new releases ship.

Sign up free

About TencentCloudBase/CloudBase-AI-ToolKit

One-stop backend services for WeChat Mini-Programs and full-stack apps. Provides specialized MCP tools for serverless cloud functions, databases, and one-click deployment to production with China market access through WeChat ecosystem.

All releases →

Related context

Beta — feedback welcome: [email protected]