v1.6.0

v1.6.0 (2026-06-02)

This release is published under the MIT License.

Documentation

• Documented access_control, per_user_token, export + request_json (7a9e7bc)

• Update README.MD [automated] (1e89be6)

• Update SECURITY.MD [automated] (914b8dd)

• agents: Added AGENTS.md — agent guide for building MCP↔API servers (59de5c6)

Features

• access: Added declarative access_control role/claim gate (8c02c99)

• auth: Added per_user_token outbound resolver (declarative OBO) (4c22987)

• tools: Added declarative export tool source (paginated bulk export) (754585a)

• tools: Added ToolContext.request_json + UpstreamError (721fff1)

---

Detailed Changes: v1.5.0...v1.6.0

v1.5.0

v1.5.0 (2026-06-01)

This release is published under the MIT License.

Documentation

• Update README.MD [automated] (f0e0a00)

• Update SECURITY.MD [automated] (a53ce5c)

---

Detailed Changes: v1.4.0...v1.5.0

v1.4.0

v1.4.0 (2026-06-01)

This release is published under the MIT License.

Chores

• deps: Update rich requirement (2cc55f0)

Documentation

• Update README.MD [automated] (09ae5c8)

• Update SECURITY.MD [automated] (93400fd)

• examples: Added a custom tool-source plugin + indexed Phase 7 examples (6fa64ab)

Features

• cli: Implemented the bg-mcpcore new scaffolder (ec5266f)

• gateway: Added build_gateway for multi-mount composition (7b6e6c9)

---

Detailed Changes: v1.3.0...v1.4.0

v1.3.0

v1.3.0 (2026-06-01)

This release is published under the MIT License.

Bug Fixes

• auth: Restored OIDC explicit-endpoint issuer derivation (885c988)

Documentation

• Update README.MD [automated] (fb1b8aa)

• Update SECURITY.MD [automated] (45a3505)

Features

• profile: Added ${env:VAR:-default} interpolation (7e99d87)

---

Detailed Changes: v1.2.1...v1.3.0

v1.2.1

v1.2.1 (2026-06-01)

This release is published under the MIT License.

Bug Fixes

• profile: Replaced the placeholder schema URL with the real shipped schema (51662e8)

Continuous Integration

• Pinned doc/security update toggles to match the blueprint (ed043f4)

Documentation

• Added icons to navigation and section headings (1525501)

• Expanded the documentation into a comprehensive guide (c17bd3b)

• Update project name in index.md and mkdocs.yml for consistency (e4f7d8d)

• Update README.MD [automated] (4b20669)

• Update SECURITY.MD (forced update) (policy v1.0.0) [automated] (a65b15c)

---

Detailed Changes: v1.2.0...v1.2.1

v1.2.0

v1.2.0 (2026-06-01)

This release is published under the MIT License.

Bug Fixes

• Hardened runtime paths surfaced by an audit (cfc6902)

• Hardened the library across a full-source audit (b39f45c)

Documentation

• Added markdownlint config and corrected doc/packaging accuracy (aa47e6e)

• Corrected install command and plugin/security framing (9a9b749)

• Remove redundant comments in .gitignore (bdbc094)

• Update README.MD [automated] (185bde7)

• Update README.MD [automated] (20d125a)

• Update SECURITY.MD [automated] (7244bed)

• Update SECURITY.MD [automated] (fc4c4c5)

Features

• cli: Exposed lifespan and middleware passthrough on make_cli (d210682)

Testing

• Covered audit-surfaced runtime paths; raised the gate to 80% (7ed0dfd)

---

Detailed Changes: v1.1.1...v1.2.0

v1.1.1

v1.1.1 (2026-06-01)

This release is published under the MIT License.

Bug Fixes

• profile: Ignored $schema editor hint when loading profiles (054a554)

Documentation

• Deepened guides and completed per-tier examples (ca61210)

• Update README.MD [automated] (d7af7ef)

• Update SECURITY.MD [automated] (624ca0a)

---

Detailed Changes: v1.1.0...v1.1.1

v1.1.0

v1.1.0 (2026-06-01)

This release is published under the MIT License.

Documentation

• Update README.MD [automated] (da13570)

• Update README.MD [automated] (dc48db8)

• Update SECURITY.MD [automated] (f6dc39a)

---

Detailed Changes: v1.0.1...v1.1.0

v1.0.1

v1.0.1 (2026-06-01)

This release is published under the MIT License.

Bug Fixes

• authors: Update authors section to combine names for clarity (a3f3507)

• ci: Removed permissions:{} that broke the Teams workflow call (433604a)

Documentation

• Update README.MD [automated] (f8a5ab0)

• Update SECURITY.MD [automated] (0930158)

• Update SECURITY.MD [automated] (d99531b)

---

Detailed Changes: v1.0.0...v1.0.1

v1.0.0

v1.0.0 (2026-06-01)

This release is published under the MIT License.

Bug Fixes

• ci: Green the release pipeline (lazy init, gitleaks allowlist, coverage scope) (4287200)

Chores

• Completed packaging, CI/governance, docs, and examples (21105e6)

Continuous Integration

• Documented and configured dependabot (32cd3a8)

• Documented and hardened the GitHub Actions workflows (f72f354)

Documentation

• Aktualisierte CODEOWNERS-Datei mit klareren Erklärungen und Syntaxhinweisen (85af127)

• Update README.MD [automated] (91ff977)

• Update SECURITY.MD [automated] (fdbbb97)

Features

• Added BaseMcpSettings with composable mixins + fail-closed validation (420d0f9)

• Added the [oauth-providers] extra (Entra + Google + tenant gate) (ea86e5d)

• Added the [openapi] tool source, central tool library, and [testkit] (c956235)

• Added the config-driven extensions layer (prompts + resources) (b4c9477)

• Added the config-driven profile engine (c79d72b)

• Full FastMCP inbound-provider parity via a spec-driven builder (e5ef110)

• Lifted byte-identical infra into core (f1e0008)

• Scaffolded bg-mcpcore package skeleton (52d614a)

Refactoring

• Simplified OAuth-state storage + proved both auth models (0c7b122)

---

Detailed Changes: v0.0.0...v1.0.0