Toolport v1.11.0
Modern MCP over Streamable HTTP, with sessionless requests, multi-round-trip
approvals, subscription listeners, and the legacy session flow still available
on the same endpoint.
Highlights
MCP 2026-07-28 over Streamable HTTP
Modern clients can call POST /mcp without an initialize request or
Mcp-Session-Id. Each request carries its protocol metadata and routing headers,
and ordinary results identify themselves with resultType: complete.
Nothing moves for existing HTTP clients. The legacy 2025-06-18
initialize/session flow remains on the same URL, and Toolport chooses the path
from the request rather than requiring a server-wide mode switch. (#584, #586)
Multi-round-trip requests and human approval
A modern destructive call no longer has to hold an HTTP request open while a
person decides. Toolport returns input_required with an opaque requestState;
the client supplies inputResponses on a fresh request to deny or resume the
exact bound call. Denial never reaches the downstream server, and approval
executes the accepted call once. (#585)
Modern subscriptions
Modern clients use subscriptions/listen instead of the legacy GET stream.
Listeners choose the notifications they need, receive their subscription id in
each event, and clean up when the POST stream closes. A follow-up fix makes sure
events are flushed rather than waiting in the response buffer. (#583, #590)
Cacheable catalogs and downstream headers
Modern list and discovery results carry ttlMs and cacheScope, with stable
ordering across equivalent requests. Modern HTTP servers receive the required
protocol and routing headers, including values moved from tool arguments by
x-mcp-header; legacy servers continue to receive their established wire
format. (#584, #587)
Four more clients
Toolport now detects and configures 31 AI clients. This release adds:
Their existing config shapes and unrelated application settings are preserved;
an unparseable whole-app config still fails safely instead of being replaced.
Reliability and security
- Registry recovery accepts only a valid backup instead of silently starting
from an empty registry. (#582) - Corrupt integrity pins fail closed. (#581)
- Removing a server also removes its overrides, pins, result budget, content
exemption, and fingerprint-bound approvals. (#509) - Import-time private-host detection matches the OAuth SSRF guard. (#564)
- Unsupported legacy protocol versions return an actionable negotiation error.
(#588)
Search, import review, result formatting, rate-limit matching, corrupt inspect
lines, share-link copy failures, and several misleading error states also got
smaller fixes. See the full changelog for the complete list.
Upgrade notes
- Install 1.11.0 and open Toolport once so the new gateway is installed.
- Restart AI clients that were already open. A client can cache the old
versioned gateway path until the client process exits. - Shared HTTP users keep the same endpoint and bearer configuration. Modern
clients can move to the sessionless flow; legacy clients need no changes. - Modern HITL requires the client's elicitation capability. Clients without it
fail closed rather than running a gated call.
This is the modern Streamable HTTP transport milestone, not a claim that every
optional MCP 2025-11-25 and 2026-07-28 feature is complete. Auth catch-up,
URL-mode elicitation and icons, Tasks/extensions, and the roots replacement are
tracked separately.
Thanks
Thanks to BharadwajKanneveti,
ColumbusLabs,
wenn-id,
rohankumardubey,
Vam-si-krish,
arimu1, and
Vermitrude for patches in this release.
Full changelog
See CHANGELOG.md
and the related PRs: #509, #538, #541, #553, #560, #564, #566-#578, and
#581-#590.