> ## Documentation Index > Fetch the complete documentation index at: https://docs.agentfront.dev/llms.txt > Use this file to discover all available pages before exploring further. # Updates > Changelog and release history for FrontMCP This release introduces support for the MCP protocol revision 2026-07-28, enhancing server capabilities with features like Multi Round-Trip Requests (MRTR) and improved client-server interactions. The update includes a robust end-to-end testing suite and new tools to aid developers in leveraging the latest protocol advancements. ๐Ÿ”Œ **Protocol 2026-07-28 Support** โ€“ Enables advanced protocol features and ensures compatibility with the latest standards. ๐Ÿ”„ **E2E Testing Suite** โ€“ Comprehensive testing suite to validate implementations against new protocol features. ๐Ÿ“‹ **New Tools and Resources** โ€“ Provides practical examples and utilities for working with the updated protocol. โšก **Enhanced Logging** โ€“ Improved logging and progress reporting for better monitoring and debugging. This release focuses on enhancing security and introspection capabilities within the FrontMCP SDK. By introducing structured-clone semantics and standardized tool descriptions, developers can now handle complex data types more securely and introspect tools more effectively. ๐Ÿ”Œ **toSandboxValue** โ€“ Ensures values crossing the sandbox boundary are structured-cloneable, enhancing security. ๐Ÿ“‹ **CodeCallToolDescription** โ€“ Standardizes tool descriptions for improved introspection in sandboxed scripts. ๐Ÿ”„ **copyIfExists** โ€“ Now uses asynchronous operations for better performance and reliability. โšก **getTool** โ€“ Returns JSON-projected tool descriptions, improving compatibility and reducing errors. This release focuses on enhancing the security and flexibility of the OpenAPI Spec Poller. By introducing SSRF protection and improved redirect handling, users can now enjoy safer and more robust URL polling capabilities. ๐Ÿ›ก๏ธ **SSRF Protection** โ€“ New options to block internal/private addresses by default, enhancing security. ๐Ÿ”„ **Redirect Handling** โ€“ Support for following and re-validating redirects during spec polling. ๐Ÿ›ก๏ธ **Security Enhancement** โ€“ Replaced raw fetch with `safeFetch` to prevent SSRF vulnerabilities. This release focuses on improving the compatibility of FrontMCP with the latest OpenAPI specifications. By updating a key dependency, developers can expect more reliable server generation and integration processes. ๐Ÿ”„ **OpenAPI Compatibility** โ€“ Updated `mcp-from-openapi` to version 2.5.1 for improved specification support. This release of FrontMCP focuses on bolstering security and enhancing flexibility in token management and authorization processes. Key updates include improved SSRF protection, enhanced JWKS fetching mechanisms, and refined token verification capabilities. ๐Ÿ” **Enhanced SSRF Protection** โ€“ New DNS-aware checks prevent unauthorized internal access, safeguarding your infrastructure. ๐Ÿ“ฆ **JWKS Fetch Improvements** โ€“ Introduced limits on document size and redirect hops, enhancing security against hostile bodies. ๐Ÿ›ก๏ธ **Token Verification Enhancements** โ€“ Support for asymmetric algorithms and issuer constraints improves security and flexibility. ๐Ÿ”„ **Authorization Code Handling** โ€“ Improved handling of issued refresh tokens to detect and mitigate replay attacks. This release focuses on improving the bundling process and enhancing compatibility with the latest dependencies. By introducing a new plugin and updating the dynamic import strategy, FrontMCP ensures a more robust and flexible development environment. ๐Ÿ”Œ **enclaveCoreExactExternalPlugin** โ€“ Externalizes `@enclave-vm/core` while bundling its worker subpath for better deployment compatibility. ๐Ÿ”„ **Dynamic Import for Enclave Core** โ€“ Uses `import()` to maintain runtime agnosticism and treat the enclave sandbox as a lazy optional dependency. ๐Ÿ“ฆ **Dependency Updates** โ€“ Upgraded `@enclave-vm/core` and `@enclave-vm/ast` to leverage the latest improvements and security patches. This release of FrontMCP focuses on optimizing the initialization and synchronization processes, particularly for stateless environments. The enhancements ensure that resources are used efficiently and that the skill registry is reliably populated before operations commence. ๐Ÿ”Œ **Lazy Initialization** โ€“ BundleSyncService now initializes only when needed, optimizing resource use. ๐Ÿ”„ **Skill Registry Population** โ€“ Tools now ensure the skill registry is populated before execution. ๐Ÿ“‹ **Error Handling** โ€“ Improved error messages in RunWorkflowTool for better debugging. This release focuses on enhancing the robustness of JSON-Schema conversion within the FrontMCP SDK. By ensuring that lazy schemas are materialized before conversion, developers can now enjoy a more reliable and error-free experience when working with complex schema transformations. ๐Ÿ”Œ **Enhanced JSON-Schema Conversion** โ€“ Automatically materializes lazy schemas for seamless conversion. ๐Ÿ”„ **Internal Refactoring** โ€“ Improves schema handling to prevent mutation errors. This release focuses on expanding FrontMCP's capabilities with enhanced support for edge deployments and improved security measures. The introduction of Cloudflare Worker support and a skilled-OpenAPI bundle compiler highlights our commitment to providing robust and secure solutions for MCP server deployment. ๐Ÿ”Œ **Cloudflare Worker Support** โ€“ Deploy MCP servers on Cloudflare's edge network with persistent storage capabilities. ๐Ÿ“ฆ **Skilled-OpenAPI Bundle Compiler** โ€“ Compile OpenAPI documents and skills into secure bundles, exposing only referenced operations. ๐Ÿ” **Security Enhancements** โ€“ Default SSRF protections in OpenAPI adapter, preventing unauthorized external `$ref` resolution. ๐Ÿ”„ **Ref Resolution Policy** โ€“ Secure default for `$ref` resolution, enhancing security against untrusted specifications. This release of FrontMCP focuses on enhancing the command-line interface and logging capabilities. By allowing excess arguments in CLI commands and improving the logging configuration, developers gain more flexibility and better visibility into application diagnostics. ๐Ÿ”Œ **CLI Flexibility** โ€“ Supports excess arguments, allowing custom flags without errors. ๐Ÿ“‹ **Improved Logging** โ€“ Console logs now route to stderr, ensuring terminal visibility while keeping structured logs intact. This release of FrontMCP introduces significant enhancements in authentication and consent management, including custom authentication UI support and improved local authentication capabilities. These features provide developers with greater flexibility and control over user authentication processes. ๐Ÿ”Œ **Custom Auth UI Support** โ€“ Define custom authentication UI components for a tailored login experience. ๐Ÿ”„ **Local Authentication Enhancements** โ€“ Flexible local authentication modes with custom verifiers for secure user authentication. ๐Ÿ“‹ **Consent Mode with Remember Feature** โ€“ Streamline user experience by remembering tool selections across sessions. โšก **Session Secure-Secret Store** โ€“ Manage session-specific secrets securely without exposing raw data. This release focuses on enhancing plugin management and improving the developer experience with new features and documentation updates. The introduction of automated schema generation and plugin metadata management simplifies the setup and maintenance of MCP servers. ๐Ÿ”Œ **CLI Schema Emission** โ€“ Automatically generates JSON schema for configuration files, enhancing IDE support. ๐Ÿ”„ **Plugin Installation Enhancements** โ€“ Streamlines the process of installing and managing plugins for different providers. ๐Ÿ“‹ **Metrics Documentation** โ€“ Provides detailed insights on monitoring and performance tracking. โšก **Type Safety in E2E Tests** โ€“ Improves type safety by addressing implicit `any` types in configurations. This release focuses on improving the documentation structure and SEO optimization. By introducing new icons and updating metadata, users can navigate the documentation more intuitively and find information faster. ๐ŸŽจ **Improved Navigation** โ€“ New icons added to documentation sections for enhanced visual guidance. ๐ŸŒ **SEO Optimization** โ€“ Updated canonical URL for better search engine indexing. This release focuses on expanding the capabilities of the FrontMCP SDK with enhanced support for OpenAPI integrations. Key updates include a new mock billing server, a demo application for OpenAPI skills, and an end-to-end testing suite to ensure robust functionality. ๐Ÿ”Œ **Mock Billing Server** โ€“ Provides a simulated environment for testing billing operations, enhancing development workflows. ๐Ÿ“‹ **OpenAPI Demo App** โ€“ Demonstrates the integration of OpenAPI skills, serving as a practical guide for developers. ๐Ÿ›ก๏ธ **E2E Testing Suite** โ€“ Ensures robust validation of OpenAPI-based skills, improving plugin reliability. ๐ŸŒ **OpenAPI Utilities** โ€“ Streamlines request building and parsing, simplifying OpenAPI integration. This release focuses on enhancing serverless deployment capabilities and improving CLI prompt handling. Key improvements include better validation for Cloudflare and Lambda environments, ensuring smoother deployments and more robust error handling. ๐Ÿ”Œ **ExplainCalcPrompt** โ€“ New prompt for performing and explaining arithmetic operations. โšก **Cloudflare Adapter Validation** โ€“ Improved validation to prevent Node-only storage issues. ๐Ÿ“ฆ **Lambda Adapter Module Format** โ€“ Switched to 'commonjs' for better compatibility. ๐Ÿ”„ **Prompt Argument Registration** โ€“ Enhanced CLI to handle prompt arguments more effectively. This release of FrontMCP focuses on enhancing the CLI experience and introducing new tools for mathematical operations. The update improves error handling and deployment processes, especially for Cloudflare environments. ๐Ÿ”Œ **New Divide Tool** โ€“ Enables division operations directly within the MCP server, extending mathematical capabilities. ๐Ÿ”„ **Enhanced CLI Error Handling** โ€“ Provides clearer error messages and appropriate exit codes for better user feedback. ๐Ÿ“‹ **Cloudflare Build Validation** โ€“ Ensures unsupported configurations are flagged early, preventing deployment issues. โšก **Installer Script Enhancements** โ€“ Simplifies deployment by removing the need for Node.js in CLI/SEA installations. This release of FrontMCP introduces significant enhancements in authority management, including new tools for role-based and attribute-based access control. The integration of `@frontmcp/lazy-zod` optimizes schema validation, improving performance and efficiency across the board. ๐Ÿ”Œ **Lazy Zod Integration** โ€“ Efficient schema validation with reduced load times. ๐Ÿ”„ **Authorities E2E Testing** โ€“ Comprehensive testing suite for role and attribute-based access control. ๐Ÿ“‹ **New Authority Tools** โ€“ Tools like `admin-only` and `tenant-scoped` for enhanced role management. โšก **Codebase Optimization** โ€“ Streamlined imports for better maintainability and performance. This release focuses on enhancing the OpenAPI adapter capabilities, introducing new options for format resolution and security hardening. These updates provide developers with more control and flexibility when integrating OpenAPI specifications into MCP tools. ๐Ÿ”Œ **OpenAPI Adapter Enhancements** Introduced options for format resolution to enrich schemas. ๐Ÿ” **Security Enhancements** Added \$ref resolution security to prevent SSRF attacks. ๐Ÿ“ฆ **Dependency Updates** Upgraded critical dependencies for improved performance. ๐Ÿ”„ **Testing Configuration** Expanded Jest configuration for broader test coverage. This release focuses on enhancing the flexibility and security of the FrontMCP SDK by updating key dependencies and introducing dynamic version management for NX. These improvements ensure a more robust and adaptable development environment. ๐Ÿ”Œ **Dynamic NX Versioning** Introduced a function to dynamically retrieve the NX version. ๐Ÿ”„ **Dependency Updates** Upgraded multiple dependencies for enhanced performance and security. ๐Ÿ“‹ **Observability Enhancement** Improved monitoring capabilities with updated observability tools. โšก **Jest Compatibility** Expanded compatibility for Jest versions, supporting both 29 and 30 series. This release focuses on enhancing the skill management capabilities of FrontMCP, introducing detailed skill information retrieval and improved client connection handling. These updates ensure a smoother and more informative user experience. ๐Ÿ”Œ **Skill Command Enhancements** Introduces detailed skill information retrieval. ๐Ÿ”„ **Client Management** Ensures proper cleanup of client connections. ๐Ÿ“‹ **Skill Listing Output** Provides clearer and more informative command outputs. ๐Ÿ’พ **Dependency Update** Updates observability features for better performance. This release of FrontMCP focuses on enhancing the CLI experience and improving logging capabilities. With new features like the greeting-helper skill and configurable logging options, developers can build more interactive and manageable MCP servers. ๐Ÿ”Œ **Greeting Helper Skill** A new skill for greeting users, enhancing interactivity. ๐Ÿ”„ **Verbose Logging Option** Enables detailed console logging for better insights. ๐Ÿ“‹ **Log Directory Configuration** Allows custom log directory specification. โšก **Build Output Structure** Organizes build outputs into target-specific directories. FrontMCP v1.0.0 marks a significant milestone with the introduction of a React-based UI for the Weather Tool, enhancing user interaction. This release also includes a new E2E testing setup for agent adapters and improved observability features for better application monitoring. ๐Ÿ”Œ **Enhanced Weather Tool** Now uses a React-based UI for a dynamic experience. ๐Ÿ“ฆ **New E2E Testing** Comprehensive tests for agent adapters. ๐Ÿ”„ **Observability Enhancements** Added logging and tracing capabilities. ๐Ÿ” **Authentication Configuration** Simplified setup with default provider values. This release of FrontMCP focuses on improving the developer experience by enhancing TypeScript support for CORS configurations. With the addition of type definitions, developers can now enjoy better type safety and more robust code. ๐Ÿ”Œ **CORS Type Definitions** Improved TypeScript support for CORS configurations. This release of FrontMCP focuses on enhancing connectivity and performance, introducing real-time data streaming capabilities and optimizing server response times. It also includes crucial bug fixes to improve overall stability and reliability. ๐Ÿ”Œ **Real-time Streaming** Enables dynamic server interactions with live data. ๐Ÿ”„ **Optimized Performance** Boosts server efficiency and response times. ๐Ÿ“‹ **Enhanced API Support** Provides new endpoints for better data handling. โšก **Connection Stability** Improves server reliability with fixed connection issues. This release focuses on strengthening security and improving logging capabilities. Key updates include enhanced JWT detection to prevent token leakage and expanded skill metadata to align with industry standards. ๐Ÿ”Œ **JWT Detection Enhancement** Robust method to detect JWT-like patterns. ๐Ÿ”„ **Logging Enhancements** More verbose and structured logs across components. ๐Ÿ“‹ **Skill Metadata Expansion** New fields for skills aligning with standards. โšก **Bearer Token Extraction** Improved accuracy in token handling. This release of FrontMCP introduces significant flexibility with the ability to choose your preferred package manager, alongside revamped interactive prompts for a smoother user experience. The update also enhances Docker and CI/CD configurations to adapt to your chosen package manager. ๐Ÿ”Œ **Package Manager Selection** Choose between npm, yarn, or pnpm during setup. ๐Ÿ”„ **Interactive Prompts** Improved user interaction with `@clack/prompts`. ๐Ÿ“ฆ **Docker Enhancements** Updated templates for better build efficiency. ๐ŸŒ **GitHub Actions** Dynamic workflows based on package manager choice. This release of FrontMCP introduces a more flexible default authentication mode, shifting towards a 'public' setup that simplifies initial configurations. It also removes unnecessary warnings to streamline the user experience. ๐Ÿ”Œ **Public Mode Authentication** Default mode now set to 'public' for broader accessibility. ๐Ÿ”„ **Code Simplification** Removed redundant warning logs for cleaner initialization. ๐Ÿ“‹ **Default Auth Options** Updated to reflect new public mode settings. โšก **Streamlined Setup** Enhancements for a smoother initial configuration process. This release of FrontMCP introduces significant enhancements to the authentication framework, including a robust authorization interface and improved provider detection. The documentation for the CodeCall plugin has been restructured for better accessibility and understanding. ๐Ÿ”Œ **Authorization Interface** Comprehensive management of user authentication contexts. ๐Ÿ”„ **Auth Provider Detection** Enhanced detection across nested applications. ๐Ÿ“‹ **CodeCall Plugin Docs** Improved navigation and detailed configuration sections. โšก **Auth Logger** Decoupled logging interface for authentication components. This release introduces robust Unix socket support, enhancing the flexibility and testing capabilities of MCP servers. The update includes a new Unix Socket MCP client helper, a note-taking application for E2E testing, and expanded CLI functionalities. ๐Ÿ”Œ **Unix Socket MCP Client Helper** Provides low-level HTTP-over-Unix-socket transport and JSON-RPC client for testing. ๐Ÿ“‹ **Notes Application** A new note-taking app for E2E testing, featuring tools for creating and managing notes. ๐ŸŒ **CLI Enhancements** Expanded CLI with Unix socket and process management commands. ๐Ÿ“ฆ **Documentation Updates** Improved guidance on deployment and error handling. This release focuses on enhancing security and flexibility for MCP server developers. With new features like secure ID generation and direct server creation, developers can now build more robust and secure applications. ๐Ÿ”Œ **Secure ID Generation** Cryptographically secure IDs for request logging. ๐Ÿ”„ **Direct Server Creation** Flat-config server setup with caching. ๐ŸŒ **Safe Redirect URI** Enforces HTTP/HTTPS schemes in OAuth flows. ๐Ÿ”ง **CORS Configuration** Customizable CORS options for Express adapters. This release focuses on enhancing security features and improving compatibility with updated dependencies. With the introduction of new security options and updated module configurations, developers can build more robust and secure MCP servers. * ๐Ÿ” **Enhanced Security Options** Introduces limits on nesting depth and properties in outputs. * ๐Ÿ“ฆ **Dependency Updates** Updates `vectoriadb` for improved performance. * ๐ŸŒ **Module Configuration** Refines patterns for better module resolution. * ๐Ÿ”„ **Package Renaming** Updates to `@enclave-vm/core` for improved compatibility. The most feature-rich release yet, introducing new primitives for building advanced agentic workflows with reusable patterns, interactive prompts, and external app integration. ๐ŸŽฏ **Skills** reusable tool patterns exposed via HTTP with caching and authentication for CLI discovery. ๐Ÿ’ฌ **Elicitation** interactive user prompts during tool execution for mid-flow input requests. ๐Ÿ“ฆ **MCP Apps** first-class support for grouping external applications (ext-apps) in your server. โšก **DirectClient** programmatic SDK-mode MCP access without transport layer overhead. Maintenance release ensuring backwards compatibility for dependency injection types used by existing integrations. ๐Ÿ”ง **DI Type Re-exports** restored internal DI types for seamless upgrades from earlier versions. Foundational release introducing dependency injection and multi-server orchestration capabilities for building modular, scalable MCP architectures. ๐Ÿ”Œ **Dependency Injection** core DI interfaces and utilities for modular, testable architectures. ๐Ÿ”„ **Remote Orchestration** aggregate tools, resources, and prompts from multiple remote MCP servers. ๐Ÿ“‹ **Scoped Plugins** app-level and server-level plugin configurations for fine-grained control. ๐Ÿ“Š **Dashboard Plugin** built-in visualization tools for real-time monitoring and debugging. Security-focused release strengthening session management with cryptographic protections and rate limiting. ๐Ÿ” **HMAC Signing** cryptographic session validation to prevent token tampering. ๐Ÿ›ก๏ธ **Rate Limiting** built-in protection against abuse and brute-force attacks. ๐Ÿ”ง **Bug Fixes** resolved circular dependencies in @FrontMcp decorator. Streamlined UI development with a redesigned API and improved multi-platform bundling capabilities. ๐ŸŽจ **Simplified UI API** intuitive interface for creating interactive widgets and forms. ๐Ÿ“ฆ **Multi-Platform Bundling** enhanced theme support and metadata handling across clients. ๐Ÿ’พ **Auto-Persistence** automatic transport configuration transformation for Redis storage. Edge deployment improvements and optimized UI library architecture for server-side rendering. โ˜๏ธ **Vercel KV** native session store support for Vercel's edge infrastructure. ๐Ÿ“ฆ **UI Package Split** server-side UI usage without React dependency. ๐Ÿ”ง **Deployment Fixes** resolved Vercel deployment and UI widget build issues. Major release enabling serverless deployments across cloud platforms with persistent session management. ๐ŸŒ **Serverless Support** deploy to Vercel, AWS Lambda, and Cloudflare Workers. ๐Ÿ’พ **Redis Session Store** persistent sessions with automatic transport recreation. ๐Ÿ”„ **Request Context** session key validation and async context propagation. โšก **Enhanced CLI** improved commands for local development and debugging. Patch release addressing build configuration issues in testing and UI libraries. ๐Ÿ”ง **Bug Fixes** fixed asset paths in project.json for proper build resolution. Comprehensive MCP protocol expansion with resources, prompts, and a dedicated testing library. ๐Ÿ“‚ **MCP Resources** full support for resources and templates with URI-based addressing. ๐Ÿ’ฌ **MCP Prompts** reusable prompt templates with argument interpolation. ๐Ÿงช **Testing Library** Jest integration with mock clients and assertion helpers. ๐Ÿ”’ **CodeCall Plugin** secure code execution with AST-based validation. Compatibility fix ensuring consistent schema validation across dependencies. ๐Ÿ”ง **Dependency Fix** pinned @modelcontextprotocol/sdk to v1.22.0 for Zod v3 consistency. New OpenAPI adapter for automatic tool generation from existing REST API specifications. ๐Ÿ”Œ **OpenAPI Adapter** generate MCP tools from OpenAPI/Swagger specs automatically. ๐Ÿ“‹ **Output Schemas** extended support for complex response types with validation. ๐Ÿ“ฆ **Independent Versioning** libraries can now be released on their own cadence. Enhanced authentication capabilities for multi-application deployments. ๐Ÿ”‘ **Split by App** different auth configurations per application in a single server. ๐Ÿ“š **Versioned Docs** documentation support for multiple SDK versions. Introducing the hooks system for cross-cutting concerns and unified CLI tooling. ๐Ÿช **Hook Flows** will/did/around hooks for logging, validation, and transformation. โšก **CLI Integration** unified tooling for scaffolding, development, and deployment. ๐Ÿ”„ **CI/CD Pipeline** automated releases and documentation synchronization.