Summary
MCPHub v1.1.2 adds JWKS-based forward authentication and enables MCP Apps widgets for pinned tools on smart-routing group endpoints. It also improves upstream compatibility and server lifecycle reliability by correcting overly broad IP blocking, adding an administrator-controlled exception for HTTP OAuth token endpoints, preserving personal credentials during plain server renames, and preventing duplicate queued on-demand discovery.
Features
- Add JWKS-based forward authentication for dashboard APIs and MCP transports. by @yash025 in #1295
- Preserve MCP Apps metadata on pinned tools at
$smart/{group}, enabling widgets for compatible clients. by @jcollas in #1296
Fixes
- Cancel queued on-demand discovery when tools are already cached or the runtime is no longer eligible, avoiding duplicate server processes. by @xujiantop-crypto in #1297
- Correct the CGNAT blocklist range so public 100.x and 101.x addresses are no longer incorrectly blocked. by @OsamaAnsar in #1294
- Allow administrators to explicitly enable HTTP OAuth token endpoints per upstream, with the exception disabled by default. by @samanhappy in #1293
- Preserve personal credential bindings when renaming a server without changing its connection configuration. by @SelfRef in #1291
摘要
MCPHub v1.1.2 新增基于 JWKS 的转发认证，并支持在智能路由分组端点上为固定工具展示 MCP Apps 小组件。本版本还提升了上游兼容性和服务器生命周期的稳定性：修正范围过大的 IP 拦截，为 HTTP OAuth 令牌端点提供由管理员控制的例外设置，在仅重命名服务器时保留个人凭据，并避免排队的按需发现任务重复启动进程。
功能
- 为仪表盘 API 和 MCP 传输新增基于 JWKS 的转发认证。by @yash025 in #1295
- 保留
$smart/{group}固定工具的 MCP Apps 元数据，让兼容客户端能够展示小组件。by @jcollas in #1296
修复
- 当工具已缓存或运行实例不再满足执行条件时，取消排队的按需发现任务，避免重复启动服务器进程。by @xujiantop-crypto in #1297
- 修正 CGNAT 拦截范围，避免错误拦截公网 100.x 和 101.x 地址。by @OsamaAnsar in #1294
- 允许管理员为单个上游显式启用 HTTP OAuth 令牌端点，该例外默认关闭。by @samanhappy in #1293
- 在仅重命名服务器且未更改连接配置时，保留用户的个人凭据绑定。by @SelfRef in #1291
New Contributors
- @xujiantop-crypto made their first contribution in #1297
- @yash025 made their first contribution in #1295
- @OsamaAnsar made their first contribution in #1294
References
- fix: cancel already primed queued on-demand discovery by @xujiantop-crypto in #1297
- feat(smart-routing): keep MCP Apps metadata on pinned tools of $smart/{group} by @jcollas in #1296
- feat(auth): add JWKS forward auth by @yash025 in #1295
- fix(ssrf): correct the CGNAT range so public 100.x addresses are not blocked by @OsamaAnsar in #1294
- fix(oauth): allow admin-controlled HTTP token endpoints per upstream by @samanhappy in #1293
- fix(servers): keep personal credential bindings across a plain server rename by @SelfRef in #1291
- Full changelog: v1.1.1...v1.1.2