0.2.3 (2026-08-18)
Features
- groups: Add ttlMs and cacheScope customization to config (mcp-toolbox#3805) (a5d4947) (cff6189)
- migrate: Convert toolset to group kind during migration (mcp-toolbox#3704) (0adeaa5) (cff6189)
- server/mcp: Introduce generic client extension registry (mcp-toolbox#3723) (016245c) (cff6189)
- skill: Add review-prs skill for mcp-toolbox (mcp-toolbox#3743) (5b7bacc) (cff6189)
- tools: Add cloud-sql-connect-gce for pg, mysql, mssql (mcp-toolbox#3740) (ca58fa4) (cff6189)
- adopt Agent Plugin spec and generate harness manifests (#105) (2a4523f)
Bug Fixes
- auth/mcp: Derive PRM URL from Toolbox URL (mcp-toolbox#3765) (aa30842) (cff6189)
- config: Ignore environment variables in YAML comments (mcp-toolbox#3807) (79aa732), refs mcp-toolbox#3793 (cff6189)
- mcp: Return Tool execution error for invalid input param (mcp-toolbox#3799) (8120197) (cff6189)
- prebuilt/cloud-storage: Declare tool collections as groups (mcp-toolbox#3764) (7d468be) (cff6189)
- server: Avoid a nil-flusher panic in the SSE handler (mcp-toolbox#3520) (947f42f) (cff6189)
- server/mcp: Disallow client overriding URL bound parameters (mcp-toolbox#3798) (f15a9c7) (cff6189)
- util: Convert exponent-form JSON numbers in ConvertNumbers (mcp-toolbox#3730) (e9713ee) (cff6189)
- ci: restore pull_request_target for mirror-changelog (#109) (05b0618)
- treat database tool output as untrusted data in model context (#102) (a98397a)