This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
Summary
AI summaryUpdates Auth & secrets, New, and Security & docs across a mixed release.
Full changelog
Conduit is a local-first gateway for your MCP servers: set up and authenticate each server once, and every AI coding tool (Claude, Cursor, VS Code, and more) shares them through one local gateway.
New
- macOS support (Apple Silicon), signed and notarized, no Gatekeeper warnings.
- Linux support (.deb and AppImage). Beta.
- Add API keys / env vars right when adding a server, so key-based servers (e.g. Resend) work in one step.
Auth & secrets
- OAuth now requests only the scopes a server advertises (fixes providers that rejected
offline_access, e.g. Stripe). - Hardened the OAuth loopback callback so it's read reliably across platforms (fixes a macOS "white screen after approval").
- In-app guidance when a provider's sign-in page is blank (use a Chromium browser, or paste a token).
- Clearer API-key entry; secret-read failures now report the real cause instead of failing silently.
Fixes
- Installed-but-unconfigured clients no longer show "not found"; you can't connect Conduit to a client that isn't installed.
- The "Import N from clients" count now matches what actually imports.
- Enabling a server re-probes immediately instead of sticking on "Checking…".
- A server that exits on startup surfaces its real error (e.g. a missing key) instead of "connection closed".
Security & docs
- Added SECURITY.md and a cargo-audit CI job; documented macOS/Linux install, signing, and troubleshooting.
Install: Windows is unsigned (SmartScreen → More info → Run anyway). macOS is signed + notarized (Apple Silicon). Linux is beta.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Toolport
All releases →Related context
Beta — feedback welcome: [email protected]