0.13.0 - 2025-07-15
OAuth features snapshot
From now on, 1mcp support oauth servers, e.g.
{
"mcpServers": {
"notion": {
"url": "https://mcp.notion.com/sse",
"tags": ["notion"],
"disabled": false
},
"sentry": {
"url": "https://mcp.sentry.dev/sse",
"tags": ["sentry"],
"disabled": false
}
}
And 1mcp also support add auth client, use --enable-auth to enable it.
🚀 Features
- Add debug logging for authorization and token management processes by @xizhibei
- Implement sanitizeHeaders utility for safe logging by @xizhibei
- Enhance E2E testing framework with new configurations and utilities by @xizhibei
- Implement grouped feature flags for auth and security features by @xizhibei
- Implement scope validation and user consent for OAuth authorization by @xizhibei
- Add dedicated parsing utilities with comprehensive tests by @xizhibei
- Enhance rate limiting configuration for OAuth endpoints by @xizhibei
- Introduce comprehensive sanitization utilities and refactor existing code by @xizhibei
- Implement rate limiting and HTML escaping in OAuth routes by @xizhibei
- Implement ClientSessionManager for file-based client session storage by @xizhibei
- Enhance transport and client management with OAuth support by @xizhibei
- Implement OAuth management routes and enhance client handling by @xizhibei
- Enhance OAuth client configuration and session management by @xizhibei
- Introduce SDKOAuthClientProvider and refactor authentication management by @xizhibei
- Implement MCPOAuthClientProvider for OAuth 2.1 authentication flow by @xizhibei
- Add Contributor Covenant Code of Conduct by @xizhibei
🐛 Bug Fixes
- Improve XSS detection in input validation middleware by @xizhibei
- Limit input length in hashToUuid to prevent DoS attacks by @xizhibei
- Update dev script to enable authentication flag by @xizhibei
- Correct import paths and test mocks by @xizhibei
- Refine transport type inference based on URL suffix by @xizhibei
💼 Other
- Merge pull request #71 from 1mcp-app/dependabot/npm_and_yarn/eslint/js-9.31.0 by @xizhibei in #71
- Merge pull request #72 from 1mcp-app/dependabot/npm_and_yarn/tsc-watch-7.1.1 by @xizhibei in #72
- Merge pull request #73 from 1mcp-app/dependabot/npm_and_yarn/globals-16.3.0 by @xizhibei in #73
- Merge pull request #74 from 1mcp-app/dependabot/npm_and_yarn/prettier-3.6.2 by @xizhibei in #74
- Merge pull request #75 from 1mcp-app/dependabot/npm_and_yarn/typescript-eslint/parser-8.37.0 by @xizhibei in #75
- Merge pull request #70 from 1mcp-app/oauth by @xizhibei in #70
- Merge branch 'main' into oauth by @xizhibei
🚜 Refactor
- Enhance input validation in hashToUuid method to prevent DoS attacks by @xizhibei
- Update mock from ConfigManager to McpConfigManager in SDKOAuthServerProvider tests by @xizhibei
- Replace ConfigManager with McpConfigManager and introduce AgentConfigManager by @xizhibei
- Rename and restructure client and server types for clarity and consistency by @xizhibei
- Transition Clients type from Record to Map for improved performance and functionality by @xizhibei
- Update rate limit configuration to use config manager by @xizhibei
- Create scope validation middleware using SDK's bearer auth by @xizhibei
- Reorganize middleware files to appropriate directories by @xizhibei
- Encapsulate client access with getClient method by @xizhibei
- Streamline route setup and remove redundant rate limiting by @xizhibei
- Migrate transport creation to transportFactory and remove deprecated config module by @xizhibei
- Update transport type in ClientInfo and enhance OAuth callback handling by @xizhibei
- Unify client session management in SDKOAuthClientProvider by @xizhibei
- Rename SessionManager to ServerSessionManager and introduce ClientSessionManager by @xizhibei
- Remove reconnectAfterOAuth function and streamline OAuth callback handling by @xizhibei
- Streamline OAuth client configuration and remove deprecated properties by @xizhibei
- Rename SDKOAuthProvider to SDKOAuthServerProvider by @xizhibei
📚 Documentation
- Update CONTRIBUTING.md with enhanced testing guidelines and project structure by @xizhibei
- Add CONTRIBUTING.md to guide community contributions by @xizhibei
- Update README and CLI options for authentication and transport types by @xizhibei
- Update authentication and rate limiting features by @xizhibei
🧪 Testing
- Mock ConfigManager in SDKOAuthServerProvider tests by @xizhibei
- Add unit tests for SDKOAuthClientProvider by @xizhibei