Skip to content

Toolport

v0.4.2 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai ai-agents anthropic claude cursor developer-tools
+10 more
gateway llm local-first mcp mcp-server model-context-protocol react rust tauri vscode

Summary

AI summary

Updates Conduit Teams, desktop side, Install, and beta across a mixed release.

Full changelog

Conduit v0.4.2: Teams desktop (beta) + 5 community fixes

Conduit Teams, desktop side (beta)

A new Teams tab connects your local Conduit to a self-hosted Conduit Teams server and syncs a shared MCP server set into your registry. Keys never leave your machine: only the server set syncs, and you authenticate each server locally. It's inert until you connect to a team. (The self-hosted Teams server is the paid layer; the local app stays free and MIT.)

Fixed (community)

  • Custom API keys now reach HTTP servers (#22, thanks @bradhallett). A remote/HTTP server that uses a manually vaulted secret (e.g. a BEARER key) gets it injected as the bearer token, not just OAuth tokens, so "Manage secrets" works for HTTP servers.
  • Cleaner multi-account duplicates (#24, thanks @BharadwajKanneveti). Duplicating a server produces collision-free names (Server (2), (3)) with an "add another account" hint.
  • Hermes config keys (#25, thanks @bradhallett). Hermes mcp_servers entries are keyed by server name, so the config round-trips correctly.

Added

  • Composio in the curated catalog (#23, thanks @bradhallett), connect agents to 1,000+ apps via MCP.

macOS keychain (internal)

Secret storage moved to the SecItem keychain API for new entries, which avoids the per-application ACLs behind repeated keychain prompts (#21, thanks @bradhallett). If you're on macOS and still see prompts, they're from entries created by older versions: clear Conduit's old entries in Keychain Access and re-authenticate to use the new path. A confirmed prompt-elimination claim is pending validation on a signed build.

Install

  • Windows: signed (Authenticode), installs without the SmartScreen "unknown publisher" warning.
  • macOS: signed and notarized (Apple Silicon + Intel .dmg).
  • Linux: .deb and .AppImage.

Existing installs (v0.3.3+) auto-update.

Full Changelog: https://github.com/tsouth89/conduit/compare/v0.4.1...v0.4.2

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Toolport

Get notified when new releases ship.

Sign up free

About Toolport

All releases →

Beta — feedback welcome: [email protected]