Release 0.25.1

🎉 Release 0.25.1

[0.25.1] - 2026-09-30

Added

• Listed in the official MCP Registry as io.github.debugmcp/mcp-debugger — the repository carries a server.json naming the npm package (run with npx, stdio) and the Docker image (stdio, with the project mounted at /workspace). The CLI package declares mcpName and the image carries the io.modelcontextprotocol.server.name label, which the registry checks before it accepts a version. Each release publishes the listing after npm and Docker, logging in with GitHub Actions OIDC, so no secret is stored; prerelease tags are skipped (#835)

Security

• npm packages publish with no stored token — every @debugmcp/* package now publishes through npm trusted publishing (OIDC) from the release workflow, so CI holds no npm or PyPI token; the NPM_TOKEN path is gone from release.yml (#837)

📦 Installation

Docker:

docker pull debugmcp/mcp-debugger:0.25.1

npm (global install):

npm install -g @debugmcp/mcp-debugger@0.25.1

npx (no install):

npx @debugmcp/mcp-debugger@0.25.1 stdio

PyPI:

pip install debug-mcp-server-launcher==0.25.1

Optional adapters (for programmatic embedding; the CLI above bundles all of them):

npm install @debugmcp/adapter-python   # or: adapter-ruby, adapter-javascript,
                                       # adapter-go, adapter-java, adapter-dotnet,
                                       # adapter-mock

🔏 Verify this release

gh attestation verify <asset>.tgz --repo debugmcp/mcp-debugger
gh attestation verify oci://index.docker.io/debugmcp/mcp-debugger:0.25.1 --repo debugmcp/mcp-debugger
npm audit signatures   # in a project that installs @debugmcp packages

The PyPI launcher carries PEP 740 attestations — see the "Verified details" on its PyPI page.
SBOMs (SPDX + CycloneDX) are attached as release assets.

📚 Documentation

See the README for usage instructions.