v0.38.0

0.38.0 (2026-09-03)

Features

• auth: /mcp-scoped RFC 8414 + RFC 9728 discovery + 401 resource_metadata (3a-4) (#1221) (fef9aa4)
• auth: anonymous DCR front door + awaiting-approval page (3a-2) (#1219) (7b83f69)
• auth: consent→agent binding with oauth_client_grants + grant-channel tokens (3a-3) (#1220) (76bdacf)
• auth: OAuth client registry, agent JWKS PUT, and token provenance (#1151) (288978e)
• auth: public secret-less OAuth clients + approval lifecycle (3a-1) (#1218) (6a3604e)
• cli: add execute + get_execution_result MCP tools with broker hardening (#1186) (30fbc9c)
• cli: add jentic mcp stdio server skeleton with pre-auth tools (#1209) (d3f9bc4)
• cli: add search_apis + inspect_operation MCP discovery tools (#1183) (2602274)
• cli: add search_catalog + import_api + request_access MCP tools (#1213) (70b91b2)
• cli: auto-register MCP entries per runtime with optional isolation (#1191) (a3a6ea5)
• cli: official CLI container image + MCP registry entry (2-E4 PR A+B) (#1224) (1f203d0)
• cli: serve skills as MCP resources with hosted/bundled provenance (#1192) (9ab637c)
• mcp: daemon-native Streamable HTTP /mcp mount (phase-3 items 1-3) (#1230) (9856c3f)
• mcp: HTTP-transport session telemetry + docs/advertisement (phase-3 items 6+8) (#1232) (d262d6f)
• mcp: isolated local daemon mode — jentic mcp --http + --connect relay (phase-3 item 9) (#1234) (250ff66)
• telemetry: add Origin.MCP + MCP session/config events (#1178) (241c609)
• ui: OAuth approval queue + per-agent connected-clients panel (3a-5) (#1223) (5c83bfa)
• ui: per-agent MCP config card + sessions list + origin filter (#1210) (d6e9eb5)

Bug Fixes

• auth: revoke OAuth client grants on agent ownership transfer (G10, #1222) (#1231) (5737f99)
• cli: pin CA on cobra execute and refuse redirects on the broker leg (#1217) (25ec336)
• cli: route token mint through pinned CA transport + attribution hook (closes #1205) (#1215) (84e866a)
• db: linearize admin migration heads after parallel merges (#1211) (298b24f)
• ui: use --url in the DCR quickstart register snippet (closes #1204) (#1216) (c555e2e)

Refactors

• cli: extract agentops from cmd for reuse (#1179) (0923f06)

Documentation

• deploy: buyer-facing AWS Marketplace install guide (#1187) (8fa0e5c)
• web: advertise jentic mcp in llms.txt + same-host hardening recipes (#1180) (3955d5f)

Build System

• deps-dev: bump @testing-library/user-event (#1197) (1e58ced)
• deps-dev: bump @types/node (#1198) (e70094f)
• deps-dev: bump @types/react-dom (#1196) (ed78328)
• deps-dev: bump browserslist from 4.28.2 to 4.28.8 in /ui (#1226) (a856092)
• deps-dev: bump the python group with 3 updates (#1202) (6cd37e1)
• deps-dev: bump the vite group in /ui with 2 updates (#1193) (428fe17)
• deps: bump @tanstack/react-query from 5.101.4 to 5.102.3 in /ui (#1199) (31133e1)
• deps: bump framer-motion from 13.1.0 to 13.1.1 in /ui (#1200) (bcf0c34)