This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
Summary
AI summaryUpdates Also in this release, https://github.com/tsouth89/toolport/blob/main/docs/headless.md, and https://github.com/tsouth89/toolport/releases across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds headless gateway for Docker deployment and MCP over streamable‑HTTP. Adds headless gateway for Docker deployment and MCP over streamable‑HTTP. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Adds MCP server‑initiated RPC endpoints roots/list, sampling/createMessage, elicitation/create. Adds MCP server‑initiated RPC endpoints roots/list, sampling/createMessage, elicitation/create. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Adds AnythingLLM integration in Clients view. Adds AnythingLLM integration in Clients view. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Adds Teams usage rollups showing per‑server tool‑call counts on dashboard. Adds Teams usage rollups showing per‑server tool‑call counts on dashboard. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds headless documentation including production checklist, security notes, and smoke‑test script. Adds headless documentation including production checklist, security notes, and smoke‑test script. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Performance | Medium |
Improves gateway build speed by skipping Tauri/WebKit features (`--no-default-features`). Improves gateway build speed by skipping Tauri/WebKit features (`--no-default-features`). Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixes registry read failures from wiping user config. Fixes registry read failures from wiping user config. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixes false Error after 10 s for npx/uvx first connect; extends budget to 120 s and shows "Installing…" badge. Fixes false Error after 10 s for npx/uvx first connect; extends budget to 120 s and shows "Installing…" badge. Source: llm_adapter@2026-07-16 Confidence: low |
— |
| Bugfix | Low |
Extends first‑connect timeout for npx/uvx launchers to 120 seconds and displays an "Installing…" badge during download. Extends first‑connect timeout for npx/uvx launchers to 120 seconds and displays an "Installing…" badge during download. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
Full changelog
Toolport v1.6.0
Headless gateway, MCP over the network, and a much smoother first connect for npx servers.
This release is a big step if you've been running Toolport only as a desktop app. The same
toolport-gateway binary now deploys in Docker, speaks MCP streamable-HTTP, and publishes
to GHCR — while the desktop app picks up reliability fixes that matter day to day.
Before exposing headless on a network: read the production checklist in docs/headless.md.
Headless / container gateway
Run Toolport without the UI for sandboxes, agents, and Open WebUI:
| Endpoint | Use |
| ------------------------------------ | -------------------------------------------------------------------- |
| POST /mcp | MCP clients over streamable-HTTP (Claude Code remote, Cursor, Pi, …) |
| GET /mcp | Long-lived SSE listen stream for server→client JSON-RPC |
| GET /openapi.json + POST /{tool} | Open WebUI, n8n, LibreChat |
docker pull ghcr.io/tsouth89/toolport-gateway:latest
See docs/headless.md for compose, env-file secrets, and handshake examples.
MCP server-initiated RPC (#167)
When your MCP client declares roots, sampling, or elicitation at initialize,
downstream servers can call back through the gateway:
roots/listsampling/createMessageelicitation/create
Works over stdio and HTTP MCP (inline during SSE POST responses).
npx / uvx first connect
npx -y, uvx, pnpm dlx, and similar launchers often need 15–60 seconds to download on
a cold cache. Toolport used to show a false Error after 10 seconds, then succeed on
retry.
Now:
- 120s first-connect budget for download launchers (10s for everything else)
- "Installing…" badge while the package downloads
- Background pre-warm when you add an npx-style server
Also in this release
- AnythingLLM — connect from the Clients view
- Teams usage rollups — per-server tool-call counts on the team dashboard
- Registry safety — read failures no longer wipe your config
- Faster gateway builds — CI/docker skip Tauri/WebKit (
--no-default-features) - Headless docs — production checklist, security notes,
scripts/smoke-headless.ps1
Upgrade
Desktop: Settings → About → Check for updates (v0.3.3+), or download the installer
from Releases.
Docker: docker pull ghcr.io/tsouth89/toolport-gateway:latest and restart your
container.
From source: git pull, npm install, npm run build:gateway, npm run tauri dev.
Full changelog: CHANGELOG.md.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Toolport
All releases →Related context
Beta — feedback welcome: [email protected]