Release v1.0.12 - Multi-Provider IAM, DocumentDB Storage & Well-Known Health Fix

January 2026

Major Features

Multi-Provider IAM Support for Keycloak and Microsoft Entra ID

Full IAM support enabling both Keycloak AND Microsoft Entra ID through a unified API:

• Harmonized API: Same user and group management experience regardless of IdP
• Self-Signed JWT Tokens: Human users can generate tokens for CLI tools and AI coding assistants
• M2M Service Accounts: AI agent identity with OAuth2 Client Credentials flow
• Fine-Grained Access Control: Scopes define exactly which MCP servers, methods, tools, and agents each user can access

PR #378

CloudFront HTTPS Support for AWS ECS

Production-ready AWS deployment with CloudFront for HTTPS termination:

• CDN Caching: Global edge distribution for improved latency
• Three Deployment Modes: Flexible configurations to match requirements
• SSL/TLS Termination: Secure connections without managing certificates on ECS

PR #363 | Issue #293

Well-Known Discovery Health Status Fix

The /.well-known/mcp-servers endpoint now returns actual health status instead of hardcoded "healthy":

• Accurate Status Reporting: Servers show real health status (healthy, unhealthy, disabled, unknown)
• Status Normalization: Detailed messages like "unhealthy: timeout" normalized to "unhealthy" for client consumption
• Comprehensive Tests: 457 lines of new tests for the well-known routes

PR #384 | Issue #375

What's New

Authentication & IAM

• Multi-Provider IAM Support for Keycloak and Microsoft Entra ID (#378)
• JWT token scopes improvements (#383)

Infrastructure & Docker

• Add lightweight Dockerfile for simple MCP servers (Dockerfile.mcp-server-light)
• Synchronize docker-compose files for consistency
• Reference official mongo8:2 image in docker-compose.prebuilt.yml (#364)
• Update images and add scope.yml to mongo setup job (#360)

AWS ECS Deployment

• CloudFront HTTPS support for AWS ECS deployment (#363)
• Deployment mode fixes and security group rules limit (#374)
• AWS ECS deployment improvements and script hardening (#365)

Bug Fixes

• Fix well-known endpoint returning hardcoded health status (#384)
• Quick Start docs, MongoDB auth, and JWT token scopes fixes (#383)

Documentation

• Mark #232 and #297 as completed in roadmap
• Add HuggingFace CLI explanation and installation link (#371)
• Mark MCP server description as required (#362)

Configuration Changes

New Dockerfile for Simple MCP Servers

A lightweight Dockerfile (docker/Dockerfile.mcp-server-light) is now available for simple MCP servers that don't need PyTorch or the registry module:

# docker-compose.yml example
currenttime-server:
  build:
    context: .
    dockerfile: docker/Dockerfile.mcp-server-light
    args:
      SERVER_DIR: servers/currenttime

Benefits:

• Smaller image size (no PyTorch dependencies)
• Faster builds
• Suitable for: currenttime, fininfo, realserverfaketools servers

Upgrade Instructions

For Docker Compose Deployments

1. Pull the latest changes:

cd mcp-gateway-registry
git pull origin main
git checkout v1.0.12

1. Rebuild and restart:

./build_and_run.sh

For AWS ECS Deployment

1. Update Terraform variables for CloudFront configuration if desired
2. Apply Terraform changes:

cd terraform/aws-ecs
terraform plan
terraform apply

Bug Fixes

• Fix /.well-known/mcp-servers endpoint returning hardcoded "healthy" status for all servers (#384)
• Fix Quick Start documentation and MongoDB authentication issues (#383)
• Fix JWT token scopes handling (#383)
• Fix deployment mode issues and security group rules limit in AWS ECS (#374)
• Synchronize docker-compose files for consistency

Pull Requests Included

Issues Closed

• #375 - Bug: /.well-known/mcp-servers endpoint returns hardcoded "healthy" status
• #293 - Add CloudFront HTTPS support for AWS ECS deployment

Contributors

Thank you to our amazing contributors for this release:

• Omri Shiv
• Viviana Luccioli
• Andreas Feldmann
• Wallace Printz
• Gaurav Rele
• cxhello
• Gabriel Rojas

Resources

Documentation

• Storage Architecture - MongoDB/DocumentDB storage design
• IdP Provider Support - Multi-provider IAM documentation
• Authentication Design - Authentication architecture

Support

• GitHub Issues
• GitHub Discussions
• Documentation

Full Changelog: v1.0.10...v1.0.12

What's Changed

• fix: Quick Start docs, MongoDB auth, and JWT token scopes by @aarora79 in #383
• fix: retrieve actual health status in well-known discovery endpoint by @viviluccioli in #384

Full Changelog: v1.0.11...v1.0.12