release-2026-07-31: MCP general availability

This is Internet Identity release release-2026-07-31 for commit e646fe9338d0aedd3ee35aa9ea70c1d6b95c511d.

This release prepares II for MCP general availability.

Additionally, this release enables the new URL transport support for a more seamless app sign in journey.

Try it out

• Staging: https://beta.id.ai
• Testing application: https://try.id.ai

What's Changed

• test(be): SSO gating cross-domain takeover regression test + threat-model docs by @sea-snake in #4155
• feat(be,fe): turn AI access on at registration and let the upgrade arg control the migration by @MRmarioruci in #4164
• fix(fe): use the current sign-in picker on /mcp and /cli by @MRmarioruci in #4165
• feat(fe): add ICRC-167 URL transport (redirect) as a signer transport by @sea-snake in #4123
• chore: consolidate Dependabot into one weekly version PR + grouped security updates by @sea-snake in #4131
• feat(scripts): add deploy-main-to-beta for deploying main's latest CI build by @aterga in #4065
• feat(fe): show which identity an MCP connection will act as by @MRmarioruci in #4166
• chore(fe): update translations (de, es, fr, id, it, nl, pl, ru, uk, ur) by @sea-snake-translation-bot in #4167
• fix(fe): don't track last-used identities in the 1-click SSO flow by @sea-snake in #4168
• feat(be): migrate every anchor to AI access on the official connector by @MRmarioruci in #4169

Full Changelog: release-2026-07-28...release-2026-07-31

Artifacts

Filename	sha256 (links to CI Run)
internet_identity_backend.wasm.gz	32217d4c7d0139b1c5a10850f048a23704aee36bbe3afeab871005f216085e3c
internet_identity_frontend.wasm.gz	a5f0c96aec8c5a233d2208432e27acce769c38fa8ee8a09bd0ea7aedd02eecbf
archive.wasm.gz	8b35b8b2d20dfb605a86ebd9a9c99bce759bb2cd0cfcbcf08dabfdf8f70574a2

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout e646fe9338d0aedd3ee35aa9ea70c1d6b95c511d
./scripts/verify-hash     --ii-hash 32217d4c7d0139b1c5a10850f048a23704aee36bbe3afeab871005f216085e3c     --iife-hash a5f0c96aec8c5a233d2208432e27acce769c38fa8ee8a09bd0ea7aedd02eecbf     --archive-hash 8b35b8b2d20dfb605a86ebd9a9c99bce759bb2cd0cfcbcf08dabfdf8f70574a2

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.