Summary
This release adds group-scoped personal API keys for tighter agent access control and improves upstream compatibility and recovery. It enables resource reads through upstream resource templates, reports missing personal OAuth authorization during tool discovery, and restores personal runtimes on the next request after an upstream session is lost.
Highlights
- Restrict personal API keys to selected groups, with scope controls in the dashboard. Existing unrestricted keys retain their behavior. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1470
Fixes
- Route
resources/readrequests through matching upstream resource templates when the URI is absent from the static resource list, while respecting group resource selections. by @pauldev20 in https://github.com/samanhappy/mcphub/pull/1472 - Return an actionable authorization error when missing personal OAuth leaves no tools available during discovery. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1469
- Recover personal runtimes on the next request after an upstream reports a missing session, without automatically replaying the failed operation. by @samanhappy in https://github.com/samanhappy/mcphub/pull/1467
References
- fix: route resources/read through upstream resource templates by @pauldev20 in https://github.com/samanhappy/mcphub/pull/1472
- feat: restrict personal API keys to allowed groups by @samanhappy in https://github.com/samanhappy/mcphub/pull/1470
- fix: report missing personal OAuth during tool discovery by @samanhappy in https://github.com/samanhappy/mcphub/pull/1469
- fix: recover personal runtimes after upstream session loss by @samanhappy in https://github.com/samanhappy/mcphub/pull/1467
- Full changelog: https://github.com/samanhappy/mcphub/compare/v1.2.2...v1.2.3