v0.35.3

What's New in v0.35.3

Features

• Host-confirmed MCP server registration — Interactive agents can propose stdio, HTTP, or SSE servers with mcp_register_server. Agent Threads always shows a host-owned confirmation dialog before saving the configuration, including when ordinary tool approvals are bypassed. Registration is create-only and idempotent, applies globally to newly initialized sessions, and never launches a command or contacts an endpoint during registration. (#532)

Security and behavior

• Credential values stay out of conversations and plugin settings by using ${VAR_NAME} placeholders with request_secret.
• Scheduled and other noninteractive threads cannot register servers because they cannot complete the host confirmation.
• The calling session keeps its existing tools; the saved server becomes available when a future session initializes or reinitializes.

Notes

• No migration is required.
• Registration validates common credential-bearing fields, but arbitrary literal arguments must still contain only nonsecret configuration.
• See the MCP server guide for configuration fields and examples.