This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryPrivate/custom manifest overlay enables user-defined provisionable MCP servers via configurable YAML files
Full changelog
Added
- Private/custom manifest overlay: define your own provisionable MCP servers in
~/.pmcp/manifest.yaml(user),<project>/.pmcp/manifest.yaml(project), or a
file pointed to byPMCP_MANIFEST_PATH, merged over the shipped manifest
without editing it. Precedence is shipped < user < project <PMCP_MANIFEST_PATH
(same-named entries are replaced whole). Overlay parsing is fail-soft — a
missing file is skipped, and a malformed file or a single bad entry logs a
warning and is skipped without crashing the gateway. Merged servers
participate identically ingateway.request_capability,gateway.catalog_search,
gateway.provision, and startuprefreshresolution, gated by the same
policy/auth checks.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About ViperJuice/mcp-gateway
A meta-server for minimal Claude Code tool bloat with progressive disclosure and dynamic server provisioning. Exposes 9 stable meta-tools, auto-starts Playwright and Context7, and can dynamically provision 25+ MCP servers on-demand from a curated manifest.
Related context
Beta — feedback welcome: [email protected]