Summary
MCPHub v1.1.15 adds user-group sharing, more flexible system bearer-key scopes, masked personal credential previews, and opt-in OAuth authorization relay for private brokers. It also improves catalog notifications and preserves upstream connections during group changes. Breaking change: Node.js 22 or newer is now required; Node.js 20 users must upgrade before installing this release.
Highlights
- Share servers and Group routes with administrator-managed user groups while retaining underlying server permissions and tool policies. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1429
- Identify saved personal credentials through masked previews on your own Credentials page. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1428
- Enable personal OAuth authorization relay for explicitly configured private brokers, with allowed HTTPS redirect origins. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1422
- Configure system bearer keys to allow everything except selected groups and servers. by @3431481073 in https://github.com/samanhappy/mcphub/pull/1413
Fixes
- Preserve upstream connections when Group membership or configuration changes. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1427
- Deliver tool, prompt, and resource catalog changes to modern MCP subscriptions. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1416
- Correct same-day new-contributor detection in release-note drafts. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1412
- Require Node.js 22+ and test Node.js 22/24 in CI. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1430
- Update multer to 2.5.0, undici to 7.30.1, Vite to 6.4.5, better-auth to 1.7.7, and Zod to 4.6.6.
References
- chore!: require Node.js 22 and test Node.js 22/24 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1430
- feat: share servers and routes with user groups by @samanhappy in https://github.com/samanhappy/mcphub/pull/1429
- feat: show masked previews of personal credentials by @samanhappy in https://github.com/samanhappy/mcphub/pull/1428
- fix: preserve upstream connections on group changes by @samanhappy in https://github.com/samanhappy/mcphub/pull/1427
- feat: relay personal OAuth authorization to private brokers by @samanhappy in https://github.com/samanhappy/mcphub/pull/1422
- chore(deps-dev): bump zod from 4.4.3 to 4.6.6 by @app/dependabot in https://github.com/samanhappy/mcphub/pull/1421
- chore(deps): bump better-auth from 1.6.22 to 1.7.7 by @app/dependabot in https://github.com/samanhappy/mcphub/pull/1420
- chore(deps-dev): bump vite from 6.4.4 to 6.4.5 by @app/dependabot in https://github.com/samanhappy/mcphub/pull/1419
- chore(deps): bump undici from 7.29.1 to 7.30.1 by @app/dependabot in https://github.com/samanhappy/mcphub/pull/1418
- chore(deps): bump multer from 2.4.0 to 2.5.0 by @app/dependabot in https://github.com/samanhappy/mcphub/pull/1417
- fix: publish catalog changes to modern MCP subscriptions by @samanhappy in https://github.com/samanhappy/mcphub/pull/1416
- feat(bearer-keys): add all-except exclude scope for system keys by @3431481073 in https://github.com/samanhappy/mcphub/pull/1413
- fix: detect same-day new contributors in release-notes draft by @samanhappy in https://github.com/samanhappy/mcphub/pull/1412
- Full changelog: https://github.com/samanhappy/mcphub/compare/v1.1.14...v1.1.15