Release Notes
Bug Fixes
- Require admin_token when auth is jwt or oauth (#174)
- Patch TLS cert-validation advisories + compatible dep bumps (#173)
- Reject introspection tokens with missing aud when audience configured (closes #177) (#180)
- Enforce required_scopes in oauth auth (closes #175) (#182)
Features
- Add rbac default_deny for unmapped scopes (closes #176) (#181)
Miscellaneous Tasks
- Upgrade tower-mcp 0.9.2 -> 0.12.0 (#184)
- Upgrade opentelemetry stack 0.29 -> 0.32 (#185)
- Bump remaining dependencies to latest (#186)
Testing
- Add http-level negative auth tests (closes #178) (#183)
Install mcp-proxy 0.4.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/joshrotenberg/mcp-proxy/releases/download/v0.4.0/mcp-proxy-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/joshrotenberg/mcp-proxy/releases/download/v0.4.0/mcp-proxy-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install joshrotenberg/brew/mcp-proxy
Download mcp-proxy 0.4.0
