Skip to content

ViperJuice/mcp-gateway

v1.19.2 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 15d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

auth

Summary

AI summary

Per-server credential storage now uses namespaced keys to avoid generic name collisions.

Changes in this release

Bugfix Medium

Fixes per-server credential storage-key collision risk by namespacing keys.

Fixes per-server credential storage-key collision risk by namespacing keys.

Source: llm_adapter@2026-07-15

Confidence: low

 —
Full changelog

Fixed

  • Per-server credential storage-key namespacing. A server can now store its
    credential under a namespaced key (manifest secret_key, e.g. Bright Data's
    BRIGHTDATA_API_TOKEN) while the downstream process still receives the generic
    runtime env_var it reads (API_TOKEN). This removes the collision risk of
    two servers sharing a generic name like API_TOKEN in the flat secret store.
    Every credential path resolves through credential_lookup_keys (namespaced key
    first, legacy env_var as a backward-compatible fallback — no migration
    required): the auth_connect write path, the provision auth gate
    (check_api_key), manifest/configured/eager/lazy/refresh startup-config
    resolution, the install-and-run subprocess environment (adopted npx servers),
    and the connect/describe availability checks. Configured .mcp.json entries
    that match a manifest api-key server inherit the resolved credential (including
    dead ${VAR}/$VAR placeholders that local stdio env never expands), and the
    pmcp secrets check / pmcp init diagnostics are namespace-aware. (#95)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track ViperJuice/mcp-gateway

Get notified when new releases ship.

Sign up free

About ViperJuice/mcp-gateway

A meta-server for minimal Claude Code tool bloat with progressive disclosure and dynamic server provisioning. Exposes 9 stable meta-tools, auto-starts Playwright and Context7, and can dynamically provision 25+ MCP servers on-demand from a curated manifest.

All releases →

Related context

Beta — feedback welcome: [email protected]