0.3.6 (2026-06-22)
Features
- auth/google: Require audience or clientId for mcpEnabled (mcp-toolbox#3450) (59f7b6e) (6371c61)
- mcp: Add URL parameter binding for HTTP transport (mcp-toolbox#3112) (0cc7b37) (6371c61)
- scylladb: Adding support for ScyllaDB source and tool (mcp-toolbox#3119) (2dada83) (6371c61)
- server: Add support for toolset filtering in prebuilt CLI flag (mcp-toolbox#3245) (7cc4f65) (6371c61)
- skills: Generate skills offline without live source connections (mcp-toolbox#3388) (4c860b6) (6371c61)
- skills: Tolerate missing env vars during offline skills-generate (mcp-toolbox#3399) (ea5d3e5) (6371c61)
- tools: Decouple tool initialization from sources (mcp-toolbox#3355) (32a24e3) (6371c61)
- Enable per source level flags for sql commenter (mcp-toolbox#3465) (ecce6b7) (6371c61)
Bug Fixes
- auth/dataplex: Fix failing source with service account credentials (mcp-toolbox#3369) (ba4deef) (6371c61)
- bigquery: Wire maximumBytesBilled into prebuilt config (mcp-toolbox#3385) (4abbf6e) (6371c61)
- config: Add doc/line context to parse errors (mcp-toolbox#2957) (4b097da) (6371c61)
- npm: Source binary version from cmd/version.txt (mcp-toolbox#3417) (6ffbdec) (6371c61)
- prebuilt/alloydb-omni: Require password env var explicitly (mcp-toolbox#3398) (fcbe3e7) (6371c61)
- server: Fail if MCP auth is enabled together with enable-api (mcp-toolbox#3435) (a6ff910) (6371c61)
- server: Return errors instead of panicking in InitializeConfigs (mcp-toolbox#3397) (f48b01d) (6371c61)
- Bound MCP HTTP body size (mcp-toolbox#3216) (d4f4342) (6371c61)
- Escape delimiter characters in applyEscape to prevent SQL injection (mcp-toolbox#2811) (932519a) (6371c61)