This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Light signalUpstash Context7 2.3.0 adds authentication prompts for anonymous users who exceed per-IP search thresholds. This feature applies to MCP server and CLI interactions.
Why it matters: Anonymous users exceeding per-IP search thresholds now encounter sign-in prompts. Review rate-limit configuration to align behavior with your API design goals.
Summary
AI summaryPrompt anonymous users to sign in after crossing per‑IP usage thresholds.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Prompt anonymous users to sign in when per‑IP search threshold exceeded. Prompt anonymous users to sign in when per‑IP search threshold exceeded. Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
Minor Changes
- 34fda7d: Prompt anonymous users to sign in. After the backend signals (via the
X-Context7-Auth-Prompt: 1response header on/v2/libs/searchor/v2/context) that an anonymous client has crossed the per-IP threshold, the MCP server appends a one-time sign-in invitation to the tool result.- Both stdio and HTTP transports surface the same nudge: a tool-result notice asking the assistant to run
npx ctx7 setup --<client> --mcp -y(with--stdioappended when the MCP server is running on stdio) after explicit user confirmation. The CLI handles OAuth and writes credentials into the MCP client's config; the user restarts their MCP server / editor to pick up the new credentials. - Detects the calling client from
X-Context7-Client-IDE/ User-Agent and selects the matching CLI flag (--cursor,--claude,--codex,--opencode,--gemini); falls back to interactive setup when unknown. - HTTP transport remains stateless — the threshold is tracked by the backend (per-IP, 24h TTL), the MCP server only reacts to the signal.
- Both stdio and HTTP transports surface the same nudge: a tool-result notice asking the assistant to run
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]