Release v0.37.0

📦 Downloads

Binary Downloads

Compressed archives containing platform-specific binaries:

• Linux (x64): 1mcp-linux-x64.tar.gz
• Linux (ARM64): 1mcp-linux-arm64.tar.gz
• Windows (x64): 1mcp-win32-x64.zip
• macOS (ARM64): 1mcp-darwin-arm64.tar.gz
• macOS (Intel): 1mcp-darwin-x64.tar.gz

Docker Images

# Stable version
# Extended version (recommended)
docker pull ghcr.io/1mcp-app/agent:v0.37.0
docker pull ghcr.io/1mcp-app/agent:latest

# Lite version (minimal dependencies)
docker pull ghcr.io/1mcp-app/agent:v0.37.0-lite
docker pull ghcr.io/1mcp-app/agent:lite

NPM Installation

npm install -g @1mcp/agent@latest

🚀 Features

• Manage Template Server definitions (#493) by @xizhibei in #493
• Delete configured server targets safely (#494) by @xizhibei in #494
• Manage Template Server lifecycle (#506) by @xizhibei in #506
• Configure runtime operational policies (#507) by @xizhibei in #507

🐛 Bug Fixes

• Make authorization code redemption atomic and drop plaintext code logs (#470) by @Xxx91n in #470
• Warn on fail-open config when auth is disabled but scope validation is enabled (#496) by @Xxx91n in #496
• Escape control characters in secureLogger (CWE-117 log forging) (#497) by @Xxx91n in #497
• Write token files with 0600 and storage dir with 0700 permissions (#492) by @Xxx91n in #492
• Unify atomic write primitive, fail-closed migration flags, and capability-degrade directory permissions (#509) by @Xxx91n in #509
• Sanitize sensitive error metadata and IDs in extractUuidPart and isValidId (CWE-532) (#513) by @Xxx91n in #513

⚙️ Miscellaneous Tasks

• Add .gitattributes for cross-platform line-ending normalization (#511) by @Xxx91n in #511

Full Changelog: v0.36.0...v0.37.0