v1.0.4

Release v1.0.4

Features

• OpenAPI Adapter Enhancements: Introduced resolveFormats and formatResolvers options to enrich tool input schemas with concrete constraints from OpenAPI format values.
• Security Enhancements: Added refResolution option to configure $ref resolution security, preventing SSRF attacks by filtering which API operations become MCP tools.

Security

This release addresses a high-severity SSRF vulnerability (CVE-2026-39885) caused by unsafe $ref dereferencing in OpenAPI specifications.

We sincerely thank @TharVid for responsibly disclosing this issue via GitHub Security Advisory GHSA-v6ph-xcq9-qxxj and for helping improve the security of the project.

Improvements

• Dependency Updates: Upgraded mcp-from-openapi to version 2.3.0 and @frontmcp/observability to version 1.0.3 for improved performance and compatibility.
• Testing Configuration: Expanded transformIgnorePatterns in Jest configuration to include mcp-from-openapi and @apidevtools/json-schema-ref-parser, ensuring broader test coverage.

What's Changed

• feat: add support for format resolution and custom resolvers in OpenAPI adapter by @frontegg-david in #346

Full Changelog: v1.0.3...v1.0.4

v1.0.3

Release v1.0.3

Release type: stable
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.3

What's New

FrontMCP v1.0.3 Changelog

Features

• Dynamic NX Versioning: Introduced a function to dynamically retrieve the NX version, enhancing flexibility in version management.

Improvements

• Dependency Updates: Upgraded several dependencies to their latest versions for improved performance and security:
  • vectoriadb updated to ^2.2.0
  • @nx/devkit updated to 22.6.4
  • @enclave-vm/core updated to ^2.13.0
  • @enclave-vm/ast updated to ^2.13.0
  • @jest/globals and jest now support ^29.0.0 || ^30.0.0
  • @types/jest updated to ^30.0.0
• Observability Enhancement: Updated @frontmcp/observability to version 1.0.2 for better monitoring capabilities.

Bug Fixes

Breaking Changes

What's Changed

• chore: update dependencies to latest versions and rename @frontmcp/cli to frontmcp by @frontegg-david in #339

Full Changelog: v1.0.2...v1.0.3

v1.0.2

Release v1.0.2

Release type: stable
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.2

Features

• Skill Command Enhancements: Introduced a new skills read <name> command to provide detailed information about specific skills, including descriptions, instructions, and tools.
• Client Management: Added closeClient function to ensure proper cleanup of client connections, enhancing stability during shutdown processes.

Improvements

• Skill Listing Output: Enhanced the output format for skills list and skills search commands, providing clearer and more informative results, including skill descriptions and tags.
• Version Detection: Improved the mechanism for detecting the package version in monorepo setups, ensuring accurate version reporting.
• Dependency Update: Updated @frontmcp/observability to version 1.0.1 for improved observability features.

Bug Fixes

• Skill Search Index: Resolved an issue with the lazy-loading of the vectoriadb library, optimizing performance for commands that do not require full initialization.

Breaking Changes

• Process Exit Handling: Modified the process exit strategy for CLI commands to explicitly call process.exit() after closing clients, which may affect scripts relying on implicit process termination.

What's Changed

• feat: add 'skills read ' command for detailed skill retrieval and enhance skills list command output by @frontegg-david in #337

Full Changelog: v1.0.1...v1.0.2

v1.0.1

Release v1.0.1

Release type: stable
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.1

Features

• Greeting Helper Skill: Introduced a new greeting-helper skill for greeting users, enhancing the interactive capabilities of the CLI applications.
• Verbose Logging Option: Added --verbose flag to enable detailed console logging, providing better insights during CLI operations.
• Log Directory Configuration: Introduced --log-dir option to specify a custom directory for storing log files, offering more flexibility in log management.

Improvements

• Build Output Structure: Enhanced build process to output files into dist/{target}/ subdirectories, ensuring a cleaner and more organized build output.
• Skill Asset Collection: Implemented a mechanism to collect and manage skill assets during the build process, improving the handling of skill-related files.
• File Logging: Integrated a file-based logging system for CLI mode, capturing full verbosity logs for diagnostics without cluttering the console.

Bug Fixes

• CLI Execution Output: Fixed an issue where the CLI execution output was incorrectly handled, ensuring accurate and reliable command execution results.

Breaking Changes

• Build Directory Structure: The build output directory structure has changed. All build targets now output to dist/{target}/ subdirectories. This change may require updates to deployment scripts and configurations.

What's Changed

• feat: enhance CLI logging with file transport and verbosity options by @frontegg-david in #335

Full Changelog: v1.0.0...v1.0.1

v1.0.0

Release v1.0.0

Release type: stable
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.0

Features

• Enhanced Weather Tool: Transitioned the weather tool to use a React-based UI, providing a more dynamic and interactive user experience.
• New E2E Testing Setup: Introduced comprehensive end-to-end testing configurations for agent adapters, ensuring robust validation of agent interactions.
• Observability Enhancements: Added logging, request logs, and tracing capabilities to improve monitoring and debugging of MCP applications.

Improvements

• Code Formatting: Applied consistent code formatting across all tools and components for improved readability and maintainability.
• Authentication Configuration: Simplified authentication provider configuration with default values, reducing setup complexity.
• Tool Execution: Enhanced tool execution with improved input validation and error handling mechanisms.

Bug Fixes

• Site Authorization: Fixed a bug in site authorization logic that could incorrectly determine site scope.
• Division Tool: Corrected input validation to prevent division by zero errors, ensuring reliable arithmetic operations.

Breaking Changes

• Weather Tool UI: The weather tool's UI has been refactored to use React components. This change requires updates to any custom integrations relying on the old template-based UI.

What's Changed

• Cherry-pick: feat: Update package.json and project.json with repository and author details; add README.md for Nx plugin documentation by @github-actions[bot] in #257
• Cherry-pick: feat: Add @types/cors dependency to improve TypeScript support for CORS by @github-actions[bot] in #259
• feat: Add feature flag tools and resources with updated plugin structure by @frontegg-david in #264
• feat: Add UI generators for components, pages, and shells ponding schemas and templates by @frontegg-david in #265
• feat: Implement live polling for OpenAPI spec changes with automatic tool rebuild and fix some docs by @frontegg-david in #266
• chore: remove obsolete template generation logic and related resources by @frontegg-david in #268
• chore: remove outdated bundler test suite by @frontegg-david in #269
• Preparing for v1.0 by @frontegg-david in #263
• refactor: change all files with .test. to .spec. by @frontegg-david in #272
• feat: Add initial exports for browser compatibility and protocol client by @frontegg-david in #273
• feat: Enhance browser compatibility and update LLM provider references by @frontegg-david in #274
• feat: Add exports for new hooks and components in the React SDK by @frontegg-david in #275
• chore: upgrade GitHub Actions dependencies and adjust Node.js setup configuration by @frontegg-david in #276
• feat: support dynamic loading remote tools by @frontegg-david in #277
• feat: add rate limiting, concurrency control, and timeout utilities with IP filtering support by @frontegg-david in #278
• fix(nx): add Nx monorepo support with scaffolding instructions and commands by @frontegg-david in #284
• test: add E2E tests for session reconnect behavior with terminated session ID by @frontegg-david in #286
• feat: persist client capabilities in session store for recreation by @frontegg-david in #288
• fix: enhance type safety by using explicit interfaces in schemas and type checks by @frontegg-david in #290
• feat: add auto-generated input types for guard configuration schemas and enhance metadata options by @frontegg-david in #292
• fix: update elicitation support logic to align with MCP spec and enhance type handling (Fixes #279) by @frontegg-david in #294
• test: add end-to-end tests for elicitation capability round-trip and session state persistence by @frontegg-david in #296
• fix: improve string escaping in toTsLiteral function for better compatibility by @frontegg-david in #298
• test: add end-to-end tests for Streamable HTTP Transport session ID and elicitation capabilities by @frontegg-david in #300
• feat: enhance type safety by extending context classes for agents, jobs, prompts, and resources by @frontegg-david in #302
• feat(nx-plugin): add git initialization to workspace generator with fallback for missing git by @frontegg-david in #304
• fix: update session ID retrieval to prefer context session over authinfo by @frontegg-david in #306
• feat: add SEA build support with reinitialization handling for transport by @frontegg-david in #308
• refactor: update type definitions and improve scope handling across files by @frontegg-david in #310
• feat: add skill directory generator and CLI commands for skills management by @frontegg-david in #311
• chore: update Node.js version requirements and bug fixes by @frontegg-david in #314
• feat: improve error handling and validation in skills manifest and related files by @frontegg-david in #316
• Fixes before beta version by @frontegg-david in #318
• feat: enhance plugin provider handling and add tests for decorator providers by @frontegg-david in #320
• feat: add examples directory support and update metadata schema in skill files by @frontegg-david in #323
• feat: add reinitialization support for terminated sessions and improve data injection in weather widget by @frontegg-david in #325
• feat: implement observability features with OpenTelemetry integration and structured logging support by @frontegg-david in #327
• feat: implement environment-aware availability filtering for tools, resources, and prompts by @frontegg-david in #329
• feat: implement skills:// MCP resource templates for skill discovery and content retrieval by @frontegg-david in #331
• feat: implement health and readiness endpoints with configurable probes and routes by @frontegg-david in #333

Full Changelog: v0.12.1...v1.0.0

v1.0.0-rc.1

Release v1.0.0-rc.1

Release type: rc
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.0-rc.1

Note: This is a pre-release version.

What's Changed

• feat: implement observability features with OpenTelemetry integration and structured logging support by @frontegg-david in #327
• feat: implement environment-aware availability filtering for tools, resources, and prompts by @frontegg-david in #329
• feat: implement skills:// MCP resource templates for skill discovery and content retrieval by @frontegg-david in #331
• feat: implement health and readiness endpoints with configurable probes and routes by @frontegg-david in #333

Full Changelog: v1.0.0-beta.14...v1.0.0-rc.1

v1.0.0-beta.14

Release v1.0.0-beta.14

Release type: beta
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.0-beta.14

Note: This is a pre-release version.

What's Changed

• feat: add examples directory support and update metadata schema in skill files by @frontegg-david in #323
• feat: add reinitialization support for terminated sessions and improve data injection in weather widget by @frontegg-david in #325

Full Changelog: v1.0.0-beta.13...v1.0.0-beta.14

v1.0.0-beta.13

Release v1.0.0-beta.13

Release type: beta
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.0-beta.13

Note: This is a pre-release version.

What's Changed

• feat: enhance plugin provider handling and add tests for decorator providers by @frontegg-david in #320

Full Changelog: v1.0.0-beta.12...v1.0.0-beta.13

v1.0.0-beta.12

Release v1.0.0-beta.12

Release type: beta
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.0-beta.12

Note: This is a pre-release version.

What's Changed

• feat: improve error handling and validation in skills manifest and related files by @frontegg-david in #316
• Fixes before beta version by @frontegg-david in #318

Full Changelog: v1.0.0-beta.10...v1.0.0-beta.12

v1.0.0-beta.10

Release v1.0.0-beta.10

Release type: beta
Release line: 1.0.x
Branch: release/1.0.x

Installation

npm install @frontmcp/sdk@1.0.0-beta.10

Note: This is a pre-release version.

What's Changed

• chore: update Node.js version requirements and bug fixes by @frontegg-david in #314

Full Changelog: v1.0.0-beta.9...v1.0.0-beta.10