What's Changed
Fixed
-
OAuth CORS preflight failures and missing resource_metadata (#877, @ghelleks): Resolves three bugs in the OAuth remote connector flow:
- CORS headers were missing on the
oauth_appsub-application, blocking cross-origin browser requests OPTIONSrequests to/mcpwere not handled, causing preflight checks to failWWW-Authenticateheaders lacked theresource_metadatafield required by RFC 9728, preventing Remote MCP clients from completing authentication discovery
Fixes #876.
- CORS headers were missing on the
-
Milvus consolidation returning 0 clusters/associations (#878, @henry201605): Adds
include_embedding: bool = Falseopt-in parameter to Milvus read paths (retrieve_memory,list_memories). WhenTrue, raw embedding vectors are returned alongside memory data, enabling the consolidation pipeline to access embeddings during clustering and association discovery. Previously, consolidation silently returned 0 clusters and 0 associations on all Milvus deployments because embeddings were stripped from query results before reaching the consolidation stages.
Upgrade
pip install --upgrade mcp-memory-service==10.51.2
# or
uv pip install --upgrade mcp-memory-service==10.51.2PyPI: https://pypi.org/project/mcp-memory-service/10.51.2/
Full Changelog
https://github.com/doobidoo/mcp-memory-service/blob/main/CHANGELOG.md#10512---2026-05-08