MCP Connectors Canvas 1.2.0 (preview)

Release artifact: connector-namespaces-canvas-1.2.0.zip

Source commit: 473d526

The connector-namespaces-canvas-1.2.0.awesome-copilot.json asset contains the immutable source coordinates for the awesome-copilot external-plugin submission.

SHA-256:

2d444ac9c7264fddae1328d56b7fedee8f3ed13ccf12a1d1ff9da0defa2b75d4  connector-namespaces-canvas-1.2.0.zip
21673c5221ec6b701e13f9b74fd154b666ead69941067d1704eddc5c5d999ded  connector-namespaces-canvas-1.2.0.awesome-copilot.json

What's Changed

• chore(deps)(deps): bump actions/attest-build-provenance from 3.0.0 to 4.1.1 by @dependabot[bot] in #143
• Add CodeQL Python coverage and ShellCheck/PSScriptAnalyzer/ruff lint gates by @daviburg in #145
• chore(deps)(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 by @dependabot[bot] in #142
• chore(deps)(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0 by @dependabot[bot] in #147
• chore(deps)(deps): bump github/codeql-action/init from 4.37.0 to 4.37.1 by @dependabot[bot] in #149
• Add bundled MCP Connectors canvas by @alexyaang in #151
• Use component-scoped canvas release tags by @alexyaang in #152

New Contributors

• @alexyaang made their first contribution in #151

Full Changelog: https://github.com/Azure/Connectors/compare/v1.0.0b34...connector-namespaces-canvas@1.2.0

v1.0.0b34 (preview)

Release artifact: Connectors-1.0.0b34.zip

Source commit: 4e3b4f4

SHA-256:

a3f6cd67d99bac8a1e9a34b2ef1143d0617a8d695325186c312b7391eda1f675  Connectors-1.0.0b34.zip

This source archive is built from reviewed repository content by GitHub Actions and attested by the workflow run.

What's Changed

• docs(connector-namespace-cli): bump install references to v1.0.0b33 by @DevArjun23 in #137
• chore(deps)(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #139
• Pin CodeQL workflow actions to commit SHAs by @daviburg in #140
• Add source archive release workflow and guide by @daviburg in #141

New Contributors

• @daviburg made their first contribution in #140

Full Changelog: v1.0.0b33...v1.0.0b34

v1.0.0b33 (preview)

The next preview of the az connector-namespace Azure CLI extension. Builds on v1.0.0b9 with a new end-to-end OAuth connection authenticate flow, connector/operation discovery commands, catalog and search modes, security hardening, and a long list of fixes.

⚠ Pre-release — Command names, arguments, and behaviors may change before GA. For evaluation and feedback only; don't pin production workloads to this version yet.

✨ New commands

• az connector-namespace connection authenticate — runs a connection's OAuth consent flow end to end: list-consent-links → opens the connector's login page in the browser → captures the redirect on an ephemeral 127.0.0.1 loopback → confirm-consent-code (when the connector returns a code) → polls the connection overallStatus to a terminal state. On success it also grants the authenticating user an access policy (their oid/tid from the current token). Flags: --no-browser (headless/CI — print URL, paste the code), --no-access-policy, --object-id/--tenant-id (advanced overrides), --redirect-url, --parameter-name, --timeout.
• az connector-namespace connector list-operations — lists a connector's operations, filtered by --operation-type {trigger,action,all} (default action). Works in gateway mode and --catalog <region> mode. Designed for trigger discovery and previewing mcp-connector create auto-fill.
• az connector-namespace list-locations — enumerates the Azure regions where a connector namespace can be created ({name, displayName} sorted by display name, normalized region ids), matching the az account list-locations convention.

➕ New flags on existing commands

• connection create --authenticate — create a connection and run its OAuth consent flow in a single command. The consent options (--no-browser, --no-access-policy, --timeout, --object-id/--tenant-id, --redirect-url, --parameter-name) apply only when --authenticate is set. connection authenticate and connection create share the same consent engine internally.
• connector show --catalog <region> and --export-swagger — independently combinable, giving four modes: gateway+metadata (default, unchanged), gateway+swagger, catalog+metadata, catalog+swagger. --catalog reads the regional managedApis catalog and makes --namespace / --resource-group optional.
• connector list / connector list-operations --search <keywords> — client-side filter; an item matches only when it contains every space-separated keyword (case-insensitive substring). list matches name/displayName/description; list-operations matches name/summary/description/path.
• mcp-connector create operation auto-fill — auto-populates operations[] from the connector swagger (one MCP tool per non-trigger operation, every parameter mapped to agentParameters) when a --connectors entry omits it. --no-auto-tools opts out; an explicit empty operations: [] is honored as "zero tools".

💥 Breaking changes (vs v1.0.0b9)

• trigger run list, trigger run show, trigger status show: --trigger-config-name is renamed to --name / -n (no back-compat alias — the old option is removed). To free the --name slot, the leaf-resource args drop their --name/-n aliases: trigger run show now takes --run-id only, and trigger status show now takes --trigger-status-name only.

  Migration: replace --trigger-config-name <x> with -n <x> on all three commands; use --run-id / --trigger-status-name for the leaf ids.

🔒 Security hardening

• ARM-name pattern enforcement extended to the inherited api_name / connector_namespace_name args (connector show, connector list-operations), and now rejects exact . / .. — closing a dot-segment URL-collapse vector (e.g. /managedApis/.. rewriting to a different ARM resource).
• Format constraints added to --catalog and to connectors[].connection_name / connectors[].name so ? / / / % can't smuggle URL delimiters into the ARM URLs the extension builds.

🐛 Notable fixes

• connection invoke no longer crashes (Expect <class 'dict'>…) when the upstream response body is a JSON array, scalar, or null (e.g. SharePoint GetViewScopeOptions, OneDrive folder listings). Resolves #131.
• mcp-connector create auto-fill: handles Swagger 2.0 / JSON-Schema allOf / anyOf / oneOf / additionalProperties (SharePoint/Outlook/Teams body schemas no longer drop to empty); tool_name now comes from operationId (no duplicate toolName within a connector); deprecated-operation filtering honors the spec-standard deprecated: true; $ref resolution depth raised 5 → 10; falsy x-ms-trigger (false/"") treated as "not a trigger".
• connection authenticate consent capture: the loopback is now a threaded server with a per-connection timeout, so a browser preconnect can't stall the real "Allow access" redirect; the consent URL prints as a clickable OSC 8 hyperlink.
• Consent UX polish (this release): loop-free /start launcher popup; the command waits for the browser to finish before reading status (then polls every 40s) — fixing a premature "Connected" on already-authenticated connections; an up-front heads-up when the connection is already Connected; concise green success output (no full-resource JSON dump); the terminal consent link is shown in blue rather than as a yellow warning.

🔧 CLI conventions / internals

• ARM-failure errors now raise AzureResponseError (correct azclierror taxonomy); --no-auto-tools / --export-swagger are true bare-flag switches; every command ships :example: help blocks; the command loader wires every @register_command recipe and fails loud if one is missing from __all__.

Install

az extension add --upgrade --yes --source \
  https://github.com/Azure/Connectors/releases/download/v1.0.0b33/connector_namespace-1.0.0b33-py3-none-any.whl

Verify: az connector-namespace --help · az extension show --name connector-namespace --query version

Verify the download

• Wheel: connector_namespace-1.0.0b33-py3-none-any.whl (223,281 bytes)
• SHA-256: 4012e771185b0bfcce7cc0e6dacdfb364d3a161bee1855ce874c5641310c568f

curl -L -O https://github.com/Azure/Connectors/releases/download/v1.0.0b33/connector_namespace-1.0.0b33-py3-none-any.whl
sha256sum connector_namespace-1.0.0b33-py3-none-any.whl
# Expect: 4012e771185b0bfcce7cc0e6dacdfb364d3a161bee1855ce874c5641310c568f

Filing issues

https://github.com/Azure/Connectors/issues. Include az --version, az extension show --name connector-namespace, the full command (redact secrets), and the full error (run with --debug if helpful).

v1.0.0b9 (preview)

First preview release of the az connector-namespace Azure CLI extension.

⚠ Pre-release — Command names, arguments, and behaviors may change before GA. For evaluation and feedback only; don't pin production workloads to this version yet.

Install

# Linux / macOS — installer script
curl -fsSL https://raw.githubusercontent.com/Azure/Connectors/main/docs/early/cli/install.sh \
  | CONNECTOR_NAMESPACE_VERSION=1.0.0b9 sh

# Windows
& ([scriptblock]::Create((irm https://raw.githubusercontent.com/Azure/Connectors/main/docs/early/cli/install.ps1))) -Version 1.0.0b9

Or pin directly without the script:

az extension add --upgrade --yes --source \
  https://github.com/Azure/Connectors/releases/download/v1.0.0b9/connector_namespace-1.0.0b9-py3-none-any.whl

Verify: az connector-namespace --help

What's in this preview

9 sub-groups, 45 commands for Microsoft.Web/connectorGateways and its children:

Group	Highlights
az connector-namespace	create/show/list/update/delete + list-api-key + regenerate-access-key
az connector-namespace identity	assign / remove / show
az connector-namespace connection	+ invoke, list-connection-keys, list-consent-links, confirm-consent-code
az connector-namespace connection access-policy	nested principal schema
az connector-namespace mcp-connector	with 5 auth modes (Developer, OBO, OBO+App, AppOnly, NotSpecified)
az connector-namespace mcp-connector access-policy	flat principal schema
az connector-namespace trigger (+ run, status)	webhook-style triggers + run history
az connector-namespace connector (catalog)	list / show managed connectors
az connector-namespace managed-mcp-operation (catalog)	list MCP-aware operations

Full reference: docs/early/cli/complete-reference.md.
AI-agent integration guide: docs/early/cli/AGENTS.md.

Known limitations (preview)

• Hosted-MCP-server image discovery is not in the CLI for v1 — get valid --hosted-mcp-server hosted-mcp-server-id=… values from the Connectors portal.
• az connector-namespace update is tag-only. All other namespace fields are immutable; delete + recreate to change them.
• --scope on list-api-key takes the MCP server config name as a plain string (e.g. --scope office365Mcp), not a JSON wrapper.
• OBO --connectors uses name (the managed connector id, e.g. sql), not connectionName — the gateway provisions per-user connections automatically.

Verify the download

• Wheel: connector_namespace-1.0.0b9-py3-none-any.whl (146,361 bytes)
• SHA-256: 30b7e8e0273ee11c582d9d1fad1c734937d30e322b2dc6dbc1598df909183724
• MD5 (base64): 03d6FLFRGszQD8+HbvsCkg==

curl -L -O https://github.com/Azure/Connectors/releases/download/v1.0.0b9/connector_namespace-1.0.0b9-py3-none-any.whl
sha256sum connector_namespace-1.0.0b9-py3-none-any.whl
# Expect: 30b7e8e0273ee11c582d9d1fad1c734937d30e322b2dc6dbc1598df909183724

Filing issues

https://github.com/Azure/Connectors/issues. Include az --version, az extension show --name connector-namespace, the full command (redact secrets), and the full error (run with --debug if helpful).