v0.9.0

Added

• list_flag_triggers lists a flag's triggers in one environment, and manage_flag_trigger creates, updates (rename, re-describe, turn off and on), rotates and deletes them. A trigger is a secret URL that a monitoring tool such as a Grafana alert or Datadog monitor calls to turn the flag on or off. Create and rotate return the URL, the header-form endpoint and the secret once, with a warning to keep them out of source control. Needs the Team plan or above and a Member token (#4651).
• list_flag_triggers takes an optional trigger id to get one trigger. A refusal for a plan below Team (PLAN_FEATURE_UNAVAILABLE) or for triggers not yet enabled (FEATURE_NOT_ENABLED) now says what it means, including what a lower plan can still do. A trigger that isn't an id is refused before the call, instead of coming back as a 404 that suggests the public API is off. An update with nothing to change is refused, and description: "" clears the description (#5090).

v0.8.0

Added

• compare_environments lists the flags whose configuration differs between two environments and which sections differ (state, default variation, strategy, rules, prerequisites). copy_flag_config copies one flag's targeting from one environment into another. It previews by default (dry_run: true) and changes nothing; on/off is copied only with include_state: true. To apply, call again with dry_run: false and both of the preview's ETags as source_etag and target_etag (an apply without both is refused); a 412 means something changed, so preview again. Copying needs the Team plan or above, and a reason when the target is a critical environment. Needs the API's environment compare and copy (#4643). (#5094)

Changed

• The Dockerfile's build and runtime stages move from node:24-alpine to node:26-alpine, the Active LTS line since 2026-10-28 (#5074).

v0.7.0

Added

• Critical environments. manage_environment takes require_change_reason and require_confirmation on create and update (omit either on update to leave it unchanged), and list_environments returns both. An environment with require_change_reason needs a reason on every write to it. The write tools take an optional reason, sent as X-Intent-Reason and recorded in the audit log: manage_environment, toggle_flag, update_flag_environment_config, update_targeting, manage_targeting_rule, manage_segment, manage_variation, delete_flag, archive_flag and restore_flag. A write the API refuses with change_reason_required now tells the agent to retry with reason. Needs the API's critical environments (#4639). (#4994)
• update_flag and manage_sdk_key take reason too. The API requires one when a clientSideVisible change touches a project with a critical environment, and when revoking a critical environment's SDK key (#4999, #5000). (#5028)
• manage_webhook takes provider: "Datadog" (Events API change events) or provider: "Grafana" (annotations) on create. Both need a write-only credential, a Datadog API key or a Grafana service account token, which is stored encrypted and never returned. On update, omit credential to keep the stored one; changing the url of a Datadog or Grafana subscription needs it again. rotate_secret is refused on these subscriptions, which authenticate with the credential instead. Needs the API's Datadog and Grafana destinations (#4650). (#4979)

Changed

• Turning a critical setting off through manage_environment needs an Admin or Owner token as well as a reason (#4998). (#5028)

v0.6.0

Added

• manage_webhook takes an optional provider on create: GenericHttp (the default) or Slack, so an agent can send flag changes to a Slack channel. Needs the API's Slack destination (#4649). (#4664)

Changed

• manage_webhook refuses a Slack incoming webhook URL (https://hooks.slack.com/services/...) on a GenericHttp subscription, at create or update. Slack rejects the generic JSON payload, so that subscription would fail every delivery until auto-disable paused it. It also refuses provider on any action except create, because a subscription's provider can't change, and refuses rotate_secret on a Slack subscription, whose signing secret is never used. (#4664)

v0.5.0

Added

• manage_targeting_rule and update_targeting take an optional bucketBy on a rule: the context attribute its percentage rollout hashes on, such as anonymous_id or accountId. It defaults to user_id. A visitor whose context lacks the attribute skips the rule, even at 100%. A manage_targeting_rule update that leaves it out keeps the rule's current value, except that a fixed rule has none: one made a rollout that way gets user_id (#4607). flag_evaluations now returns rollout.bucketBy, and rollout.unreached when a live rollout rule got no evaluations while 100 or more reached the flag's rules. (#4224)

v0.4.0

Added

• flag_evaluations reports what a flag served in one environment over the last 7, 30 or 90 days. It returns the total evaluations, the split by variation, and which rule (or the fallthrough, off, a prerequisite or an error) served what. A percentage-rollout rule also returns its configured weights and a sample-ratio check, and rollout.flagged is true when the served split is statistically off them. These are evaluation counts, not unique users. Zero means no SDK reported an evaluation, not necessarily that there was no traffic. Needs the API's new GET .../flags/{flag}/environments/{env}/evaluations. (#4225)

v0.3.0

Added

• update_flag, update_targeting and a manage_segment update now return the etag of what they wrote, taken from the write's own response. An agent can pass it as ifMatch on its next write without reading the resource again. Before this, a second conditional write needed a fresh read first, or it failed with a 412. The ETag is never fetched with a follow-up read, which could pick up someone else's later write. When the API sends no ETag, the field is left out. (#3842)

Fixed

• A manage_targeting_rule update that leaves out conditionGroups no longer fails with a TypeError when one of the rule's current groups has conditions: null. The API contract allows null there. The group is now carried over with an empty list. (#3842)

v0.2.0

Added

• set_default_flag_lifetime sets or removes a project's default flag lifetime. preview: true reports how many flags would newly be, or stop being, past expiry, without changing anything. (#3794)
• list_sdk_keys and manage_sdk_key (create, rename, revoke). Creating a key returns the full key once, so an agent setting up an SDK can write it into an .env file. The list shows only the last four characters.
• manage_segment (create, update, delete). update_targeting could already reference a segment that nothing in the MCP server could create. A segment created without conditions is sent with an empty list, which the API requires.
• manage_project and manage_environment (create, update). Neither can delete.
• manage_targeting_rule adds, updates, removes or reorders one rule without replacing the whole list. A rule added here or through update_targeting without conditionGroups (segment-only or rollout-only) is sent with an empty list, which the API requires.
• Optimistic concurrency. get_flag, get_targeting and get_segment return an etag, and update_flag, update_targeting and a manage_segment update take it back as ifMatch. manage_segment refuses ifMatch on create and delete, which the API can't make conditional, instead of dropping it and writing unconditionally. (#3808) The write then fails with a 412 if the resource changed after the agent read it, instead of overwriting the other change. Tools that read before writing (update_flag, manage_webhook, manage_segment, manage_environment, manage_targeting_rule) also send the ETag from their own read.

Changed

• A write carrying If-Match is no longer retried after a 502 or 504. If the first attempt landed, the retry would fail with a 412 and blame someone else for the agent's own change. A 503 is still retried.
• An ifMatch passed without its surrounding quotes (abc instead of "abc") is quoted before it is sent. Otherwise every conditional write would fail with a 412 that looks like a concurrent change.

v0.1.13

Added

• Every tool declares an outputSchema and returns structuredContent alongside the JSON text. Clients can type-check a result instead of parsing prose. Tools that pass an API response through take their schema from the public API spec, so it matches the API contract. The schema allows extra fields and nulls, so a field the API adds later can't make an older server version fail a call.
• find_stale_flags counts a project's default flag lifetime. Each result now carries effectiveExpiresAtUtc, the date in effect from the flag or its project's default, and expirySource (explicit, project-default, or null). A flag with no date of its own can still be reported as past expiry. Against an API that doesn't report project defaults yet, effectiveExpiresAtUtc falls back to the flag's own date. (#3194)

Changed

• Every tool parameter now has a description. 54 of 113 had only a name and a type, mostly project, flag, environment, limit and cursor, along with fields like create_flag's type and update_targeting's rules. Agents now see what each parameter expects.

v0.1.12

Added

• Each release now carries featureflip-mcp-<version>.mcpb, an MCP Bundle with the server and its dependencies inside. Claude Desktop installs it in one click and asks for the API token in its own settings, so there is no JSON config to write. Needs Node.js 20.19 or later. (#2588)