Which MCP servers running on this machine can see my real credentials?

wraps each server in an isolated container with a minimal permission file, so none of them hold local credentials directly

Which of my developers are running MCP servers my security team never approved?

gives platform teams audit logs and identity enforcement across every MCP server in use, closing off unsanctioned shadow use

Can an agent act on a user's behalf without that agent inheriting the user's full access?

issues delegated tokens through OAuth token exchange that carry both the user's identity and the acting agent's identity, so downstream checks see who really made the call

Who was denied access to an MCP server, and why?

logs authorization denials on the request path, giving a trail of exactly which requests were rejected and on what grounds

Is a client actually enforcing the access rules I wrote, including on nested claims?

evaluates Cedar policies against the request's claims, including nested map values, and returns the verdict per request

Is my traffic being throttled, and by what rule?

emits metrics and traces for rate limiting so throttling behavior on a given request can be traced back to its cause

ToolHive release history — The Cyber Toolchain

v0.60.0 Nov 2, 2026 · issue 130

ToolHive adds --scopes flag to thv llm setup and config set, Redis storage for exchange grants, and refresh token issuance through token exchange⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSIONDockergit

Docker

$ docker pull ghcr.io/stacklok/toolhive:v0.60.0

git

$ git clone --branch v0.60.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.60.0

published under the project's GitHub account · checked 4 Nov

└──▷ TRY IT

Restrict which OAuth scopes are requested when registering an LLM provider, so tokens carry only the permissions your deployment needs.

$ thv llm setup --scopes openid,profile,email

Scope LLM authentication at setup time by passing --scopes to thv llm setup and thv config set.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Store OAuth 2.0 exchange grants in Redis by configuring the new Redis storage backend for the token exchange subsystem.
Issue refresh tokens through token exchange, letting delegate clients obtain long-lived credentials without re-authentication.
Let DCR upstreams choose their token endpoint authentication method, expanding the range of identity providers that work with dynamic client registration.
Require a trust mode for private_key_jwt delegates, enforcing explicit trust configuration before asymmetric client authentication is permitted.

Scope LLM authentication at setup time by passing --scopes to thv llm setup and thv config set.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Store OAuth 2.0 exchange grants in Redis by configuring the new Redis storage backend for the token exchange subsystem.
Issue refresh tokens through token exchange, letting delegate clients obtain long-lived credentials without re-authentication.

2 more in Everything

v0.59.0 Oct 28, 2026 · issue 124

ToolHive adds Windows Claude Desktop credential helper support and TLS for operator-wide Redis defaults⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSIONDockergit

Docker

$ docker pull ghcr.io/stacklok/toolhive:v0.59.0

git

$ git clone --branch v0.59.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.59.0

published under the project's GitHub account · checked 29 Oct

Enable TLS for operator-wide Redis defaults to secure broker connections in Kubernetes deployments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
ToolHive now adds a credential helper for Windows Claude Desktop, extending client integration to Windows users.
Re-checks upstream Dynamic Client Registration (DCR) registrations while servers are running, keeping registrations current without restarts.
Adds in-memory backend storage for exchange grant data, supporting OAuth token exchange workflows.
Adds configured delegate client metadata support to expand OAuth delegation capabilities.

+1 more show less

Adds Context7 ownership verification and expanded library configuration for the Context7 integration.

Enable TLS for operator-wide Redis defaults to secure broker connections in Kubernetes deployments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
ToolHive now adds a credential helper for Windows Claude Desktop, extending client integration to Windows users.
Adds in-memory backend storage for exchange grant data, supporting OAuth token exchange workflows.
Adds configured delegate client metadata support to expand OAuth delegation capabilities.

2 more in Everything

v0.58.0 Oct 27, 2026 · issue 123

ToolHive v0.58.0 adds opt-in AT+JWT token type for embedded AS access tokens and tightens auth-server lifecycle controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSIONDockergit

Docker

$ docker pull ghcr.io/stacklok/toolhive:v0.58.0

git

$ git clone --branch v0.58.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.58.0

published under the project's GitHub account · checked 28 Oct

Adds opt-in at+jwt typ header for embedded Authorization Server access tokens, enabling standards-compliant JWT typing for downstream consumers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Refuses refresh grants whose upstream credential has expired or been revoked, preventing silent use of dead credentials to obtain new tokens.

Adds opt-in at+jwt typ header for embedded Authorization Server access tokens, enabling standards-compliant JWT typing for downstream consumers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

1 more in Everything

v0.57.0 Oct 26, 2026 · issue 122

ToolHive v0.57.0 adds backend-scoped vMCP authorization, authorization_details token exchange, workload auth secret mounting, and OIDC transport wiring for thv run.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.57.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.57.0

Adds dcrConfig.registrationProbe with an authorization-endpoint strategy for dynamic client registration probing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Supports authorization_details on token exchange requests, enabling fine-grained OAuth 2.0 Rich Authorization Requests (RAR) in vMCP token flows.
Wires OIDC transport flags into thv run auth middleware config, allowing OIDC settings to be passed directly at server launch.
Adds backend-scoped vMCP authorization, enabling per-backend access control policies on the Virtual MCP Server.
Mounts workload auth secrets in inline mode, so inline-mode deployments can consume workload identity credentials.

+5 more show less

Adds opt-in upstream subject identifiers, letting operators surface the upstream identity subject in token and auth flows.
Lets delegate clients change policy on restart, so updated authorization policies take effect without full redeployment.
Lets embedders refuse refresh grants on dead upstreams, preventing silent token refresh against unreachable upstream services.
Classifies MCPRemoteProxy pods by container readiness rather than phase alone, improving accuracy of proxy pod health reporting.
Rejects request bodies on non-POST methods, hardening the MCP HTTP transport against malformed or abusive requests.

Adds dcrConfig.registrationProbe with an authorization-endpoint strategy for dynamic client registration probing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Supports authorization_details on token exchange requests, enabling fine-grained OAuth 2.0 Rich Authorization Requests (RAR) in vMCP token flows.
Adds backend-scoped vMCP authorization, enabling per-backend access control policies on the Virtual MCP Server.
Mounts workload auth secrets in inline mode, so inline-mode deployments can consume workload identity credentials.
Adds opt-in upstream subject identifiers, letting operators surface the upstream identity subject in token and auth flows.

+2 more show less

Lets embedders refuse refresh grants on dead upstreams, preventing silent token refresh against unreachable upstream services.
Rejects request bodies on non-POST methods, hardening the MCP HTTP transport against malformed or abusive requests.

3 more in Everything

v0.56.0 Oct 22, 2026 · issue 117

ToolHive v0.56.0 adds auth-server TLS/SPIFFE support, Claude Code gateway model discovery, and DCR client caps with 24h expiry in the CRD.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.56.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.56.0

Exposes DCR client cap and register rate limit as CRD fields, letting Kubernetes operators declare limits declaratively.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds TLS listener and SPIFFE middleware to the auth server, and starts it in vMCP.
Caps Dynamic Client Registration (DCR) clients and expires unused ones after 24 hours.
Lets embedders skip OAuth consent for pre-authorized clients.
Decodes IPv4 addresses embedded in IPv4-compatible and SIIT (IPv4-mapped) IPv6 addresses.

+3 more show less

Adds native Go fuzz targets for untrusted parsers.
Returns HTTP 401 when a token session holds no upstream access token.
Adds OSS Scanner audit configuration.

Exposes DCR client cap and register rate limit as CRD fields, letting Kubernetes operators declare limits declaratively.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds TLS listener and SPIFFE middleware to the auth server, and starts it in vMCP.
Caps Dynamic Client Registration (DCR) clients and expires unused ones after 24 hours.
Lets embedders skip OAuth consent for pre-authorized clients.
Adds native Go fuzz targets for untrusted parsers.

+1 more show less

Adds OSS Scanner audit configuration.

2 more in Everything

v0.55.1 Oct 19, 2026 · issue 114

└──▷ GET THIS VERSION

$ git clone --branch v0.55.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.55.1

New integration Homebrew cask distribution for thv

v0.55.0 Oct 19, 2026 · issue 114

ToolHive v0.55.0 adds TLS/SPIFFE listener config, group-based vMCP upstream filtering, Pi LLM gateway support, and a Claude Desktop connector.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.55.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.55.0

Adds dcrConfig.rotationKey to re-register upstream DCR clients that have been evicted.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Exposes group-based upstream filter via the vMCP CRD, letting operators scope which upstreams a virtual MCP session can reach.
Adds TLS listener config and SPIFFE X.509 authority capability for securing MCP server endpoints.
Supports Pi in the LLM gateway setup.
Honors PI_CODING_AGENT_DIR environment variable for Pi MCP and skills configuration.

+3 more show less

Adds thv client connector for Claude Desktop, enabling automatic client wiring.
Allows omitting scope on upstream token refresh, simplifying token exchange flows.
Restricts pods/attach RBAC permission to stdio transport only, tightening the least-privilege posture.

Adds dcrConfig.rotationKey to re-register upstream DCR clients that have been evicted.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Exposes group-based upstream filter via the vMCP CRD, letting operators scope which upstreams a virtual MCP session can reach.
Adds TLS listener config and SPIFFE X.509 authority capability for securing MCP server endpoints.
Supports Pi in the LLM gateway setup.
Honors PI_CODING_AGENT_DIR environment variable for Pi MCP and skills configuration.

+1 more show less

Adds thv client connector for Claude Desktop, enabling automatic client wiring.

2 more in Everything

v0.54.0 Oct 14, 2026 · issue 109

ToolHive v0.54.0 adds Pi coding agent as a supported MCP client and a SPIFFE file bundle source for identity federation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.54.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.54.0

Refreshes upstream tokens automatically when the ID token expires.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

1 detail in Everything

v0.53.0 Oct 13, 2026 · issue 108

ToolHive v0.53.0 adds group-based upstream filtering in authserver-config.yaml for the vMCP embedded auth server.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.53.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.53.0

MCPServer.spec.permissionProfile is deprecated; the Kubernetes operator now ignores it, emits a PermissionProfileUnsupported Warning event on MCPServers that set it, and thv export --format k8s no longer emits the field — use podTemplateSpec security contexts and NetworkPolicy resources instead.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!The Kubernetes operator no longer passes spec.permissionProfile to the runner; MCPServers that set the field may have their proxy pods rolled once after upgrading.
!The configmap profile volume is no longer mounted by the operator.
!thv export --format k8s no longer emits the spec.permissionProfile field.

v0.52.0 Oct 12, 2026 · issue 106

ToolHive v0.52.0 adds TLS for Redis session storage, safer thv llm teardown defaults, and one-hour Claude Code prompt caching.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.52.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.52.0

└──▷ USE IT

Encrypt Redis session storage in the operator with a private CA — required for production deployments where the Redis TLS cert is signed by an internal CA.

yaml

spec:
  sessionStorage:
    tls:
      caCertSecretRef:
        name: redis-ca-secret
        key: ca.crt

Tear down all LLM tools in CI without invalidating cached tokens needed by a subsequent thv llm setup step.

$ thv llm teardown --keep-tokens

Set up Claude Code without one-hour prompt caching when shorter cache windows are preferred for cost or freshness reasons.

$ thv llm setup --short-prompt-cache

Adds spec.sessionStorage.tls (including caCertSecretRef for a private CA) to MCPServer, MCPRemoteProxy, and VirtualMCPServer Kubernetes resources, enabling TLS-encrypted Redis session storage in the operator; a startup WARN is logged when Redis runs without TLS.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Enables TLS for Redis session storage in the proxy runner, vMCP, and their rate limiters, with support for system roots or a private CA bundle.
thv llm setup now configures Claude Code for one-hour prompt caching by default; pass --short-prompt-cache to opt out.
thv llm teardown now accepts --keep-tokens to preserve cached OIDC tokens when tearing down all configured LLM tools.

Adds spec.sessionStorage.tls (including caCertSecretRef for a private CA) to MCPServer, MCPRemoteProxy, and VirtualMCPServer Kubernetes resources, enabling TLS-encrypted Redis session storage in the operator; a startup WARN is logged when Redis runs without TLS.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Enables TLS for Redis session storage in the proxy runner, vMCP, and their rate limiters, with support for system roots or a private CA bundle.

2 more in Everything

└──▷ BREAKING ON UPGRADE

!thv llm teardown now purges cached OIDC tokens by default on a full teardown (all tools removed) and exits non-zero if the secrets provider is unavailable or token operations fail. Scripts that relied on tokens surviving teardown must add --keep-tokens. --keep-tokens and --purge-tokens are mutually exclusive.
!Out-of-tree Go implementations of pkg/authserver/storage.DCRCredentialStore no longer compile until they add the new UpdateDCRCredentialsIfUnchanged(ctx context.Context, creds *DCRCredentials, expected *DCRCredentials) error method.

v0.51.0 Sep 22, 2026 · issue 082

ToolHive v0.51.0 adds SPIFFE JWT-SVID authentication for MCP clients.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.51.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.51.0

Authenticates MCP clients using SPIFFE JWT-SVIDs, enabling workload identity-based access control for MCP servers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

1 detail in Everything

v0.50.0 Sep 18, 2026 · issue 079

ToolHive v0.50.0 adds RFC 8707 resource indicators, RFC 8628 device authorization grant, ID-JAG assertion support, catalog provenance enforcement, and Argon2id secrets key derivation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.50.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.50.0

Adds RFC 8707 resource indicator parameters to the auth server's token-request handling, enabling audience-bound token requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds RFC 8628 device authorization grant (device flow) support, including a device flow verification page and Dynamic Client Registration (DCR) support.
Adds acceptance of ID-JAG assertions via a bound JWT-bearer handler in the auth server.
Enforces catalog provenance for plugin installs, ensuring plugins are verified against registry provenance before installation.
Derives the secrets encryption key using Argon2id, replacing the previous key derivation approach.

+1 more show less

Adds lock-driven skill key rotation and plugin key rotation workflows.

Adds RFC 8707 resource indicator parameters to the auth server's token-request handling, enabling audience-bound token requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds RFC 8628 device authorization grant (device flow) support, including a device flow verification page and Dynamic Client Registration (DCR) support.
Adds acceptance of ID-JAG assertions via a bound JWT-bearer handler in the auth server.
Enforces catalog provenance for plugin installs, ensuring plugins are verified against registry provenance before installation.
Adds lock-driven skill key rotation and plugin key rotation workflows.

1 more in Everything

v0.49.0 Sep 11, 2026 · issue 072

ToolHive v0.49.0 ships a dependency-light generated Go client for the management API and per-backend dial-control policy via session.WithDialControlResolver.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch v0.49.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.49.0

└──▷ USE IT

Apply a per-backend dial-control policy so private-range access is blocked for most workloads but permitted for a trusted internal service.

go

factory := session.NewSessionFactory(registry,
    session.WithDialControlResolver(
        func(workloadID string) func(string, string, syscall.RawConn) error {
            if allowsPrivateDialing(workloadID) {
                return nil
            }
            return denyPrivateRanges
        },
    ),
)

Opt a pre-registered OAuth2 upstream into HTTP Basic authentication at the token endpoint when your IdP requires it.

yaml

upstreamProviders:
  - name: my-idp
    type: oauth2
    oauth2Config:
      clientId: my-client
      clientSecretRef:
        name: idp-client-secret
        key: client-secret
      tokenEndpoint: https://idp.example.com/oauth2/token
      tokenEndpointAuthMethod: client_secret_basic

Adds session.WithDialControlResolver to pkg/vmcp/session, replacing WithDialControl with a per-backend dial-policy resolver so different network controls can be applied per workload ID.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds tokenEndpointAuthMethod / token_endpoint_auth_method field to oauth2 upstream provider config, enabling explicit selection of client_secret_basic or POST-body credential delivery per upstream.

Adds session.WithDialControlResolver to pkg/vmcp/session, replacing WithDialControl with a per-backend dial-policy resolver so different network controls can be applied per workload ID.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

1 more in Everything

└──▷ BREAKING ON UPGRADE

!session.WithDialControl in pkg/vmcp/session is removed; call sites must be migrated to session.WithDialControlResolver or the build fails with undefined: session.WithDialControl. Note: the identically-named pkg/vmcp/client.WithDialControl is unchanged.
!OAuth2 upstream tokenEndpointAuthMethod default is reverted: upgrading from v0.48.0 with a pre-registered oauth2 upstream that had a client secret and no explicit tokenEndpointAuthMethod reverts from client_secret_basic back to POST-body credential delivery; IdPs that require HTTP Basic must now set tokenEndpointAuthMethod: client_secret_basic explicitly.
!AWS STS role claims of type object, number, boolean, or null now fail closed with HTTP 403 instead of silently granting the fallback role; a bare-string claim that exactly matches a configured claim now selects its mapped role instead of fallbackRoleArn.
!The root Go module now requires Go 1.27; builds using GOTOOLCHAIN=local pinned to Go 1.26 will fail with go: go.mod requires go >= 1.27. The go:// workload default builder image moves from golang:1.26-alpine to golang:1.27-alpine.

v0.48.0 Sep 10, 2026 · release notes

Adds support for OIDC dynamic client registration and SPIFFE client authentication dispatch to ToolHive

└──▷ GET THIS VERSION

$ git clone --branch v0.48.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.48.0

Adds SPIFFE client authentication dispatch for verifying downstream identity
Make proxy request read timeout configurable via the --proxy-read-timeout flag

2 details in Everything

v0.47.0 Sep 8, 2026 · issue 068

ToolHive v0.47.0 adds SPIFFE trust config, key-signed artifact verification, configurable proxy body limits, and Cedar delegation without upstream sessions.

└──▷ GET THIS VERSION

$ git clone --branch v0.47.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.47.0

Adds SPIFFE trust configuration and exposes SPIFFE client-auth registration through the operator CRDs.
Verifies key-signed skill and plugin installs against a public key, and records the pinned cosign key in the lock schema.
Honoured pinned cosign key is now applied on sync and upgrade operations, and plugin pushes are signed with the lock feature gate removed.
Makes proxy request-body limit configurable.
Allows Cedar delegation without requiring an upstream session.

+7 more show less

Exposes canonical inbound grants in CRDs.
Allows embedded auth servers to operate without upstreams.
Guards OIDC discovery against private IPs.
Trusts private CAs for RFC 8693 trusted issuers.
Routes Claude workflows through the Stacklok LLM gateway.
Detects GUI editors without a PATH binary.
Suppresses OAuth callback Referer header.

Adds SPIFFE trust configuration and exposes SPIFFE client-auth registration through the operator CRDs.
Verifies key-signed skill and plugin installs against a public key, and records the pinned cosign key in the lock schema.
Exposes canonical inbound grants in CRDs.
Guards OIDC discovery against private IPs.
Routes Claude workflows through the Stacklok LLM gateway.

+1 more show less

Suppresses OAuth callback Referer header.

6 more in Everything

v0.46.0 Aug 27, 2026 · issue 058

ToolHive v0.46.0 adds private-CA trust for OIDC upstreams and signer-rotation blocking on plugin upgrades

└──▷ GET THIS VERSION

$ git clone --branch v0.46.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.46.0

└──▷ TRY IT

Upgrade a plugin whose signing identity has legitimately rotated, explicitly approving the new signer so it is recorded in the lock file.

$ thv ai-plugin upgrade --allow-signer-change <plugin-name>

Trust an internal CA for an in-cluster OIDC provider so the embedded auth server can reach it for discovery and token calls.

yaml

caBundleRef: my-internal-ca-secret

Adds --allow-signer-change flag to thv ai-plugin upgrade, which re-records a new signer identity in the project lock file; without it, upgrades whose signature identity differs from the lock file (or that are unsigned) exit with code 4 and report signer-change-blocked.
Adds caBundleRef field to OIDC and OAuth2 upstream specs, letting an embedded auth server trust a private CA for discovery, token, user-info, and dynamic client registration calls to an in-cluster identity provider.
Controlled by the TOOLHIVE_PLUGINS_LOCK_ENABLED environment variable; lock entries with no recorded provenance are unaffected by the new signer-rotation check.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The operator-crds chart must be updated to 0.46.0 before or together with the operator chart — a stale CRD silently prunes caBundleRef from applied resources instead of rejecting it.

v0.45.0 Aug 26, 2026 · issue 058

ToolHive v0.45.0 adds Sigstore plugin verification, RFC 7523 auth flows, Prometheus diagnostics port, and a new qoder skill client.

└──▷ GET THIS VERSION

$ git clone --branch v0.45.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.45.0

└──▷ TRY IT

Call the thv serve management API correctly after v0.45.0 requires Content-Type: application/json on mutating TCP requests.

$ curl -X POST http://127.0.0.1:8080/api/v1beta/workloads \
  -H 'Content-Type: application/json' \
  -d '{"name":"fetch","image":"ghcr.io/example/fetch:latest"}'

Sync skills only to a specific client to avoid unexpected drift into .qoder/skills/ after the new qoder client was added.

$ thv skill sync --clients claude-code
thv skill sync --check --clients claude-code

Push a skill artifact with keyless signing using --identity-token now that thv skill push requires exactly one signing option.

$ thv skill push --identity-token "$(cat /var/run/secrets/token)" ./my-skill

Adds Content-Type: application/json enforcement and Origin validation to the thv serve management API for TCP listeners, blocking CORS-based cross-origin attacks (GHSA-xv9h-79wp-q9w6).
Constrains npx://, uvx://, and go:// package names to [A-Za-z0-9@/:._+=~[]-] at build time, preventing shell metacharacter injection into generated Dockerfiles.
Adds end-to-end Sigstore bundle verification for plugin artifacts; stored bundles and git commit payloads/signatures are now size-capped at 1 MiB (rejected with 422 above that limit).
thv skill push now signs artifacts keylessly by default; requires exactly one of --key, --identity-token, or --no-sign.
Adds two new RFC 7523 flows to the embedded auth server.

+4 more show less

Adds qoder as the 18th skill-supporting client; thv skill sync without --clients now targets every skill-supporting client including .qoder/skills/.
Virtual MCP now honours operational.timeouts and propagates backend health changes to live sessions.
Non-2xx list responses from backends are now correctly forwarded with their original status code instead of being delivered as HTTP 200 with an unfiltered body.
A UTF-8 BOM in tools/list, prompts/list, or resources/list responses no longer bypasses Cedar policy or tool-filter authorization.

9 details in Everything

└──▷ BREAKING ON UPGRADE

!thv serve now requires Content-Type: application/json on state-changing requests that carry a body over TCP; callers without it receive 415 Unsupported Media Type. UNIX-socket paths (--socket=<path>) are unaffected.
!thv serve now validates Origin against a loopback-only allowlist for TCP listeners; non-loopback binds log a WARN and pass through.
!Package names for npx://, uvx://, and go:// references are now constrained to [A-Za-z0-9@/:._+=~[]-]; references containing other characters fail at build time instead of being interpolated into the Dockerfile.
!thv skill sync without --clients now targets every skill-supporting client; existing locked skills are reported as drifted on first sync after upgrade, and thv skill sync --check exits non-zero in CI until re-synced.
!runtime_config.build_with on npx:// or go:// images via POST /api/v1beta/workloads now returns 400 Bad Request instead of silently discarding the field.
!thv skill push now returns 400 if both --key and --no-sign are specified; exactly one of --key, --identity-token, or --no-sign is required.
!Virtual MCP now honours operational.timeouts; a configured value below 30 s will now actually cut backend calls that previously silently got the 30 s default.
!The thv llm local proxy returns 401 token_required instead of 502 server_error when the stored credential has been rejected by the IdP.
!Exported Go interfaces plugins.MaterializationAdapter, state.Store writers, storage.UpstreamTokenStorage, and six function signatures gained required methods or changed signatures; no effect on the CLI, operator, wire protocol, or persisted state.

v0.44.0 Aug 18, 2026 · issue 050

ToolHive v0.44.0 adds actor_token support in RFC 8693 token exchange and hardens OAuth/delegation security.

└──▷ GET THIS VERSION

$ git clone --branch v0.44.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.44.0

Supports actor_token parameter in RFC 8693 token exchange flows, enabling richer delegation chains in outgoing authentication.
Guards OAuth token and DCR (Dynamic Client Registration) endpoints against SSRF attacks.

2 details in Everything

v0.43.0 Aug 14, 2026 · issue 046

ToolHive v0.43.0 adds confidential client support, RFC 8693 delegate clients, lock file plugins, macOS binary signing, and rate-limiting observability.

└──▷ GET THIS VERSION

$ git clone --branch v0.43.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.43.0

Adds plugins key to the lock file schema, enabling plugin entries to be tracked in lock provenance.
Adds PluginLockService and a managed install flag for plugin lifecycle management.
Records certificate ref and runner in lock provenance, and enforces them on skill verification.
Supports confidential clients in dynamic client registration for OAuth flows.
Makes RFC 8693 delegate clients reachable and usable for token-exchange workflows.

+7 more show less

Signs pushes by default and removes the lock feature gate (previously required opt-in).
Adds rate-limiting observability via metrics and tracing (OpenTelemetry).
Displays recorded trust state to the user in the CLI.
Parses multi-line Modern SSE events, broadening SSE protocol compatibility.
Drops build fingerprint from the proxy /health response to reduce information exposure.
Resets the LLM config automatically when the last tool is torn down.
Uses a bare thv command as the LLM token helper.

12 details in Everything

v0.42.1 Aug 10, 2026 · issue 042

ToolHive v0.42.1 adds deny-by-default vMCP visibility, MCP tool annotations for composite tools, external OIDC trusted_issuers, and TOOLHIVE_API_TIMEOUT

└──▷ GET THIS VERSION

$ git clone --branch v0.42.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.42.1

└──▷ USE IT

Lock down a vMCP group so only explicitly listed workloads expose tools — prevents newly added workloads from silently advertising all their tools.

yaml

aggregation:
  defaultToolVisibility: deny
  tools:
    - workload: github
    - workload: jira

Allow a dev/test MCPOIDCConfig to use a plain-HTTP in-cluster Keycloak without breaking reconciliation after upgrading.

yaml

apiVersion: toolhive.stacklok.dev/v1beta1
kind: MCPOIDCConfig
metadata:
  name: keycloak-auth
spec:
  type: inline
  inline:
    issuer: http://keycloak:8080/realms/toolhive
    jwksUrl: http://keycloak:8080/realms/toolhive/protocol/openid-connect/certs
    insecureAllowHTTP: true

Adds aggregation.defaultToolVisibility: deny to vMCP config so only workloads explicitly listed in aggregation.tools have their tools advertised, closing the fail-open gap where adding a workload to a group silently exposed it.
Adds insecureAllowHTTP: true under spec.inline of MCPOIDCConfig to explicitly opt in to plain-HTTP issuer and JWKS URLs in dev/test environments; inline configs without it now validate both issuer and jwksUrl at reconcile time.
Adds TOOLHIVE_API_TIMEOUT environment variable to override the CLI's API client timeout for thv skill and thv ai-plugin commands (new default is 10 minutes).
Composite tools now support MCP tool annotations — readOnlyHint, destructiveHint, idempotentHint, and openWorldHint — with a fail-closed safety floor derived from step tools when none are set explicitly.
The embedded auth server now accepts trusted_issuers configuration, enabling agents to exchange subject tokens minted by external OIDC providers (Entra, Okta, Keycloak) for ToolHive-scoped delegated tokens under an RFC 8693 fail-closed consent policy.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!With Cedar authorization enabled (--authz-config or authzConfig in the CRD), POST requests without Content-Type: application/json (including a missing header) now return 400 instead of being forwarded; all MCP POST requests must send Content-Type: application/json.
!vMCP tools excluded via aggregation.tools filter, per-workload excludeAll, or global excludeAllTools are no longer directly callable on the Modern (2026-07-28) path — direct tools/call now returns JSON-RPC error -32602 at HTTP 400 instead of executing; un-filter the tool or wrap it in a composite tool to keep it reachable.
!MCPOIDCConfig resources of spec.type: inline with a plain-HTTP, malformed, or scheme-less issuer or jwksUrl now flip to Valid=False on their next reconcile and block reconciliation of every MCPServer, MCPRemoteProxy, and VirtualMCPServer referencing them; switch to HTTPS or add insecureAllowHTTP: true under spec.inline.

v0.42.0 Aug 5, 2026 · issue 037

thv ai-plugin gets a full CLI + REST API, registry catalog, and Sigstore signature verification at install/sync/upgrade

└──▷ GET THIS VERSION

$ git clone --branch v0.42.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.42.0

Adds thv ai-plugin subcommand with a full CLI and REST API for end-to-end AI-tool plugin management.
Adds a registry catalog to thv ai-plugin for discovering and deploying plugins from a curated index.
Adds Sigstore signature verification for skills/plugins at install, sync, and upgrade time.
Enables multiple MCP clients to share a single stdio server concurrently.

4 details in Everything

└──▷ BREAKING ON UPGRADE

!status.referencingWorkloads and status.referenceCount fields (and the References printer column) are removed from all six config CRDs (MCPOIDCConfig, MCPAuthzConfig, MCPExternalAuthConfig, MCPToolConfig, MCPWebhookConfig, MCPTelemetryConfig); replace any automation that reads them with workload field queries.
!Cedar authorization policy is now evaluated against the post-mutation MCP request — if you run a mutating webhook (--webhook-config with a mutating: entry, or MCPWebhookConfig.spec.mutating) alongside Cedar authz, policy decisions and audit records (type, target.name) can change on upgrade; re-audit policies against the post-mutation shape before upgrading.
!Recovered HTTP panics no longer emit a slog.Error log line or stack trace — setups relying on log-based alerts or support bundles to diagnose recovered panics will silently lose that diagnostic output (a patch fix is expected).
!pkg/telemetry/providers was deleted and two long-published optimizerdec constants were removed from the Go API, breaking any out-of-tree importers that reference them.

v0.41.0 Jul 28, 2026 · issue 029

ToolHive v0.41.0 adds MCP 2026-07-28 support, reproducible skill lock files, RFC 8693 token exchange, and an Envoy network-isolation backend.

└──▷ GET THIS VERSION

$ git clone --branch v0.41.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.41.0

└──▷ TRY IT

Restore and verify a project's pinned MCP skills on a CI machine from the lock file.

$ thv skill sync

Re-resolve all pinned skills to newer content and update the lock file without silent drift.

$ thv skill upgrade

Supports the MCP 2026-07-28 stateless (Modern) spec across all proxies and Virtual MCP, bridging era-mismatched client×backend combinations automatically.
Virtual MCP is now fully MCP-conformant: completions, resource templates, subscriptions, and mid-call server→client forwarding (progress, sampling, elicitation) all work.
Adds thv skill sync to restore a project's pinned skill set on any machine and verify on-disk content in CI.
Adds thv skill upgrade to re-resolve pinned skills to newer content without silent lock drift.
Project-scoped skill installs are now pinned in a toolhive.lock.yaml lock file for reproducibility.

+10 more show less

Sigstore signing groundwork for skill OCI artifacts: provenance fields in the lock schema, a signer package, and commit-signature plumbing with bundle storage.
RFC 8693 token exchange is wired into the embedded authorization server's token endpoint, with delegated token audience bounded by the subject token.
Subject tokens from trusted external OIDC issuers (Keycloak, Entra, Okta) can be validated for token exchange.
Audit logs capture the RFC 8693 act claim and full delegation chain, making 'agent X acting for Alice' distinguishable from Alice.
Dynamically registered OAuth clients renew expiring client secrets automatically per RFC 7591/7592.
Multi-valued JWT claims can be normalized to canonical space-delimited form for Cedar policies.
W3C trace context propagates through outbound MCP _meta, joining backend spans to the client→proxy→server trace.
Backend list_changed notifications are propagated to clients for tools, resources, and prompts.
Opt-in strict MCP-Protocol-Version header validation for the streamable proxy.
Sync and upgrade commands gain typed exit codes and a pre-install confirmation gate for scriptable CI use.

15 details in Everything

└──▷ BREAKING ON UPGRADE

!Namespace-scoped operator installs (operator.rbac.scope=namespace) now fail helm upgrade at render time unless operator.features.storageVersionMigrator: false is explicitly set, because the StorageVersionMigrator controller is enabled by default.
!JSON-RPC batch requests (top-level arrays) are now rejected with HTTP 400 / error code -32600 instead of being executed; send individual requests.
!The rate-limit JSON-RPC error code changed from -32029 to 429; clients branching on error.code == -32029 must match 429 instead.

v0.40.1 Jul 20, 2026 · issue 020

ToolHive v0.40.1 adds per-session prompt serving in vMCP and audit logging for authorization denials on the proxy runner path.

└──▷ GET THIS VERSION

$ git clone --branch v0.40.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.40.1

Serves MCP prompts on a per-session basis in VirtualMCP (vMCP), enabling session-scoped prompt isolation.
Audits authorization denials on the proxy runner path, giving operators a log trail of rejected requests.
Respects DCR-negotiated token endpoint authentication methods, improving standards-compliant OAuth flows.

3 details in Everything

v0.40.0 Jul 17, 2026 · issue 021

ToolHive v0.40.0 adds RFC 8693 token exchange for agentic delegation and early MCP 2026-07-28 revision support.

└──▷ GET THIS VERSION

$ git clone --branch v0.40.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.40.0

Adds RFC 8693 OAuth 2.0 Token Exchange grant handler to the embedded authorization server, enabling agents to exchange a user token for a delegated token carrying both the user (sub) and the acting agent (act.sub) — the foundation for agentic delegation.
Adds request-parsing support for the upcoming MCP 2026-07-28 (Modern) stateless revision, including a revision classifier, Mcp-Method/Mcp-Name headers, _meta vocabulary, and server/discover/subscriptions/listen authz registration (dormant until wired into proxy routing).
Migrates MCP protocol handling from mark3labs/mcp-go to the official modelcontextprotocol/go-sdk via the toolhive-core/mcpcompat compatibility shim.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The stdio bridge now forwards only progress/message notifications; tools/list_changed and similar notifications are dropped, so dynamic-capability servers may show stale capability lists until clients re-list.

v0.39.0 Jul 16, 2026 · issue 020

ToolHive v0.39.0 adds AWS Bedrock compatibility flag to the LLM setup command.

└──▷ GET THIS VERSION

$ git clone --branch v0.39.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.39.0

└──▷ TRY IT

Configure ToolHive to use an AWS Bedrock-compatible LLM endpoint instead of a default provider.

$ thv llm setup --bedrock

v0.38.0 Jul 15, 2026 · issue 020

ToolHive v0.38.0 adds Codex App LLM setup support.

└──▷ GET THIS VERSION

$ git clone --branch v0.38.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.38.0

v0.37.0 Jul 15, 2026 · issue 020

ToolHive v0.37.0 adds podTemplateSpec support for MCPRemoteProxy and exposes --allow-docker-gateway in the workload API.

└──▷ GET THIS VERSION

$ git clone --branch v0.37.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.37.0

└──▷ USE IT

Customize the pod spec for an MCPRemoteProxy deployment — useful when you need node selectors, resource limits, or custom annotations on the proxy pod.

yaml

spec:
  podTemplateSpec:
    metadata:
      annotations:
        my-org/team: security
    spec:
      nodeSelector:
        kubernetes.io/arch: amd64
      containers:
        - name: proxy
          resources:
            limits:
              memory: 256Mi

Adds spec.podTemplateSpec support to MCPRemoteProxy, enabling Kubernetes-native pod customization for remote MCP proxies.
Exposes --allow-docker-gateway option in the workload API, allowing workloads to reach the Docker host gateway network.
Adds runtime-stage environment variables to protocol Dockerfiles, enabling environment configuration at container runtime.
Adds MCP conformance CI validation for thv run proxy, improving protocol compliance guarantees.
Validates aud and resource claims in returned ID-JAG JWTs, strengthening authentication token verification.

5 details in Everything

v0.36.0 Jul 14, 2026 · issue 020

ToolHive v0.36.0 adds OpenAI Codex CLI direct-mode support to the thv llm setup command.

└──▷ GET THIS VERSION

$ git clone --branch v0.36.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.36.0

v0.35.0 Jul 13, 2026 · issue 020

ToolHive v0.35.0 adds rate-limiting observability, HTTP OIDC issuer support, and new backend discovery APIs.

└──▷ GET THIS VERSION

$ git clone --branch v0.35.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.35.0

Adds metrics and tracing for rate limiting, enabling observability into throttling behavior.
Supports HTTP upstream OIDC issuers for in-cluster development environments.
Adds ListBackends and LookupBackend methods to the vMCP core interface for programmatic backend discovery.

3 details in Everything

v0.34.0 Jul 7, 2026 · issue 020

ToolHive v0.34.0 adds plugin lifecycle management, Claude Desktop gateway support, and Cedar nested-map claim authorization.

└──▷ GET THIS VERSION

$ git clone --branch v0.34.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.34.0

Adds plugin install/list/info/uninstall commands plus a MaterializationAdapter for managing ToolHive plugins.
Adds Claude Desktop as a supported LLM gateway client.
Supports nested map claims in Cedar authorization for the act claim, enabling richer policy evaluation.
Allows custom HTTP headers on the OpenAI embedding client for flexible authentication and routing.
Filters the upstream auth chain via a configurable callback hook (UpstreamFilter) exposed through the authserver.New facade.

+2 more show less

Preserves external annotations on operator-managed Kubernetes Services across reconciliation cycles.
Sorts aggregated tools by name for deterministic embedding order.

7 details in Everything

└──▷ BREAKING ON UPGRADE

!The --allow-docker-gateway flag now actively grants host-level network access rather than merely unblocking it, which changes the effective network permissions for containers using this flag.
!The Amp editor extension clients have been removed.

v0.33.0 Jul 1, 2026 · issue 020

ToolHive v0.33.0 adds rate limiting on VirtualMCPServer and XAA auth strategy CRD support.

└──▷ GET THIS VERSION

$ git clone --branch v0.33.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.33.0

Supports configuring rate limits on VirtualMCPServer via the new rate-limit configuration.
Adds XAA authentication strategy support as a CRD for MCP server access control.

2 details in Everything

v0.32.0 Jun 30, 2026 · issue 020

ToolHive v0.32.0 adds XAA cross-app auth, OBO strategy seam, upstream ID-token propagation, OpenAI-compatible embeddings, and Origin/DNS-rebind protection.

└──▷ GET THIS VERSION

$ git clone --branch v0.32.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.32.0

└──▷ TRY IT

Allow a browser-based MCP client served from a custom origin to reach ToolHive's SSE transport after the wildcard CORS removal.

$ thv run --transport sse --allowed-origins https://my-web-app.example.com some/mcp-server

Adds XAA (Cross-Application Access) outgoing auth strategy implementing the ID-JAG two-step token exchange (RFC 8693 → RFC 7523) for per-backend cross-application access tokens.
Surfaces upstream ID tokens through the auth middleware, consolidating access and ID token retrieval into a single bulk lookup.
Adds the vMCP OBO (on-behalf-of) strategy seam — a new optional OBO field on BackendAuthStrategy with strategy registration and override hook.
Enables the vMCP optimizer to use an OpenAI-compatible embedding client via optional embeddingProvider/embeddingModel config fields (defaults to TEI, so existing configs are unchanged).
Adds insecureAllowHTTP to EmbeddedAuthServerConfig to allow an http:// issuer for in-cluster VirtualMCPServer deployments, with admission-time validation.

+2 more show less

Adds HTTP Origin header validation (MCP 2025-11-25 DNS-rebind protection) and a new --allowed-origins flag on thv run and thv proxy for SSE CORS control.
Operator Helm chart now prints a post-install NOTES.txt with verification commands, a minimal MCPServer example, and documentation links.

7 details in Everything

└──▷ BREAKING ON UPGRADE

!ToolHive now validates the HTTP Origin header and removed Access-Control-Allow-Origin: * from the legacy SSE transport; browser clients on a non-http://localhost origin must pass the new --allowed-origins flag to thv run or thv proxy.
!pkg/vmcp/server.New dropped its discovery.Manager parameter (7 → 6 args) and the pkg/vmcp/discovery package was removed; out-of-tree Go code calling server.New must remove the discovery.Manager argument, ensure Config.Aggregator is non-nil, and pair Config.AuthzMiddleware with Config.Authz or receive ErrInvalidConfig.

v0.31.0 Jun 24, 2026 · release notes

ToolHive v0.31.0 adds opt-in code mode decorator for vMCP and allows private IPs for OIDC/OAuth2

└──▷ GET THIS VERSION

$ git clone --branch v0.31.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.31.0

└──▷ USE IT

Launch a vMCP instance with the new code mode decorator enabled for enhanced session handling

shell

toolhive run my-service --code-mode

Configure an in-cluster OIDC provider using a private IP address (previously blocked)

shell

toolhive serve --oidc-provider http://10.0.0.5:8080

Adds --code-mode CLI flag to enable the new opt-in code mode decorator for vMCP sessions
Removes private IP restriction for in-cluster OIDC and OAuth2 upstream providers, allowing self-hosted IdPs

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Removed dead legacy session-registration path and session-factory aggregation logic; configurations relying on these internal components will fail

v0.30.1 Jun 23, 2026 · release notes

ToolHive v0.30.1 adds network isolation defaults, OIDC subjectClaim selection, global Redis store config, and new Go APIs.

└──▷ GET THIS VERSION

$ git clone --branch v0.30.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.30.1

└──▷ TRY IT

Allow a local MCP server to reach the host while keeping network isolation enabled.

$ thv run my-server --allow-docker-gateway

Use the new Go API to create a backend registry that discovers backends from Kubernetes resources.

go

registry := toolhive.NewKubernetesBackendRegistry(ctx, k8sClient)

New --isolate-network and --allow-docker-gateway flags on thv run enable default network isolation for local MCP servers
New optional subjectClaim field on MCPOIDCConfig CRD and Go config allows selecting the OIDC subject claim instead of hardcoded sub
New operator.defaultRedis (or global.redis) operator config key sets a global default Redis/Valkey session store for workloads lacking explicit storage
New public NewKubernetesBackendRegistry constructor enables live Kubernetes-driven backend discovery for vMCP embedders
REST API network_isolation field now defaults to enabled (optional *bool) when omitted in create/modify requests

5 details in Everything

└──▷ BREAKING ON UPGRADE

!thv run and REST API-created workloads now have network isolation ON by default; omitting --isolate-network=false or "network_isolation": false will block host access
!The thv mcp serve command and --experimental-mcp* flags are removed, breaking scripts relying on the unauthenticated embedded MCP control-plane server
!A non-Cedar authzConfigRef on a VirtualMCPServer now fails reconciliation instead of being silently ignored

v0.30.0 Jun 16, 2026 · release notes

ToolHive v0.30.0 adds rate limiting, header passthrough, CRD-based auth, and headless OIDC for virtual MCP servers.

└──▷ GET THIS VERSION

$ git clone --branch v0.30.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.30.0

└──▷ USE IT

Configure rate limits for a virtual MCP server using Redis-backed token buckets.

config

spec:
  config:
    rateLimiting:
      shared: 100
      perUser: 10

Forward specific headers like API keys to upstream backends.

config

spec:
  passthroughHeaders:
    - 'x-mcp-api-key'

Run LLM setup in a CI/CD pipeline without a browser.

shell

thv llm setup --skip-browser

spec.config.rateLimiting on VirtualMCPServer enables shared and per-user token bucket rate limiting backed by Redis session storage
New MCPAuthzConfig CRD allows any registered authorizer backend (e.g. Cedar, HTTP PDP) to be referenced via authzConfigRef on MCPServer, MCPRemoteProxy, and VirtualMCPServer
spec.passthroughHeaders on VirtualMCPServer allows an allowlist of incoming header names to be forwarded unchanged to backend services
spec.replicas and spec.sessionStorage on MCPRemoteProxy enable high-availability deployments with load balancing and Redis-backed shared session state
OBO external-auth type on MCPExternalAuthConfig now exposes a configuration schema (tenantId, authority, clientId, etc.) for Microsoft Entra On-Behalf-Of flow

+2 more show less

New disableUpstreamTokenInjection flag on the embedded auth server allows MCP clients to authenticate via OAuth while forwarding unauthenticated requests to the backend
--skip-browser flag on thv llm setup, thv llm token, and thv llm proxy start prints the OIDC authorization URL instead of opening a browser

7 details in Everything

└──▷ BREAKING ON UPGRADE

!Go code implementing AuthorizerFactory must add the required ConfigKey() string method to compile.

v0.29.2 Jun 10, 2026 · release notes

ToolHive v0.29.2 adds security headers to REST API and fixes OTLP header delivery

└──▷ GET THIS VERSION

$ git clone --branch v0.29.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.29.2

Adds X-Content-Type-Options: nosniff and Cross-Origin-Resource-Policy: same-origin headers to all thv REST API responses.
OTLP exporter headers from the OTEL_EXPORTER_OTLP_HEADERS environment variable are no longer dropped on POST /api/v1/workloads.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The MCPRegistry CRD is deprecated and will be removed in a future release.

v0.29.1 Jun 4, 2026 · release notes

ToolHive v0.29.1 adds --lazy flag to thv llm setup and defines VMCP core interface.

└──▷ GET THIS VERSION

$ git clone --branch v0.29.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.29.1

└──▷ TRY IT

Defer LLM key acquisition until the first tool invocation to speed up startup.

$ thv llm setup --lazy

Adds --lazy flag to thv llm setup to enable lazy mode for deferred LLM configuration
Defines VMCP core interface and Config contract to standardize MCP backend interactions

2 details in Everything

v0.29.0 Jun 3, 2026 · release notes

ToolHive v0.29.0 adds thv mcp call, in-place workload upgrades, and CIMD support

└──▷ GET THIS VERSION

$ git clone --branch v0.29.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.29.0

└──▷ USE IT

Invoke a specific tool on an MCP server without leaving the terminal

shell

thv mcp call <server-name> <tool-name> --params '{"arg": "value"}'

Check if any managed workloads have new versions available before applying them

shell

thv upgrade check --check-upgrades

Adds thv mcp call subcommand to invoke MCP server tools directly from the CLI
Adds --check-upgrades flag to thv upgrade check and thv upgrade list for detecting available workload upgrades
Adds thv upgrade apply CLI command and corresponding REST endpoints to perform in-place workload upgrades via the Applier package
Exposes CIMD configuration fields within the MCPExternalAuthConfig CRD, allowing control over Client Initiated Deployment
Wires CIMD config through the embedded authserver and enables its storage decorator

5 details in Everything

v0.28.0 May 19, 2026 · release notes

ToolHive v0.28.0 adds TOOLHIVE_SKIP_UPDATE_CHECK, RFC 7523 JWT auth, registry refresh API, and GitHub Copilot CLI support

└──▷ GET THIS VERSION

$ git clone --branch v0.28.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.28.0

Adds TOOLHIVE_SKIP_UPDATE_CHECK environment variable to disable update checks
Adds RFC 7523 JWT Bearer grant package support
Adds identityFromToken field to MCPExternalAuthConfig CRD
Adds API endpoint to refresh the registry cache
Adds GitHub Copilot CLI as a supported MCP client

5 details in Everything

v0.27.2 May 12, 2026 · release notes

ToolHive v0.27.2 adds forward of MCPServerEntry header in vMCP traffic and OTEL config support for API-created workloads.

└──▷ GET THIS VERSION

$ git clone --branch v0.27.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.27.2

Forward MCPServerEntry header to vMCP outbound requests
Apply OTEL configuration to workloads created via the API

2 details in Everything

v0.27.1 May 11, 2026 · release notes

ToolHive v0.27.1 adds Windows named-pipe support to the API listener and a Redis backend for DCRCredentialStore.

└──▷ GET THIS VERSION

$ git clone --branch v0.27.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.27.1

Restrict Windows named-pipe DACL to creating user
Add persistent DCRCredentialStore types and memory backend
Expose explicit primaryUpstreamProvider for Cedar authz on VirtualMCPServer

3 details in Everything

v0.27.0 May 7, 2026 · release notes

Adds --client flag for LLM setup, DCR credential store with Redis/Redis Cluster support, Envoy AI Gateway path prefix flag, and Gemini CLI .env injection.

└──▷ GET THIS VERSION

$ git clone --branch v0.27.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.27.0

└──▷ USE IT

Specify a custom OAuth client when setting up the LLM gateway from the CLI.

shell

thv llm setup --client my-custom-client-id

Configure an Envoy AI Gateway to prepend a specific path prefix for Anthropic API calls.

shell

thv run --ai-gateway-envoy --anthropic-path-prefix /api/v1/anthropic

thv llm setup and thv llm teardown now accept the --client flag to specify the OAuth client
Support for CIMD (Confidential Client ID) as the preferred OAuth client registration method in thv run
Auth server storage now supports standalone Redis and Redis Cluster mode via a new DCR credential store and resolver
Adds --anthropic-path-prefix flag to control path routing for the Envoy AI Gateway integration
Automatic injection of Gemini CLI .env file during LLM gateway proxy setup

5 details in Everything

v0.26.1 Apr 30, 2026 · release notes

ToolHive v0.26.1 adds --tls-skip-verify to LLM commands and DCR discovery for auth servers

└──▷ GET THIS VERSION

$ git clone --branch v0.26.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.26.1

└──▷ USE IT

Skip TLS verification for local development environments where self-signed certs are used.

shell

thv llm setup --tls-skip-verify

Enable dynamic client registration discovery for auth server integration.

shell

thv config set authserver.dcr.enabled true

Adds --tls-skip-verify flag to thv llm setup, config set, and proxy start commands.
Adds authserver DCR discovery and config surface.
Make Cedar group entity type name configurable.
Auto-detect Docker Desktop socket on Linux.

4 details in Everything

v0.26.0 Apr 29, 2026 · release notes

Adds interactive TUI dashboard for MCP servers and awsSts auth type for vMCP

└──▷ GET THIS VERSION

$ git clone --branch v0.26.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.26.0

v0.25.0 Apr 28, 2026 · release notes

ToolHive v0.25.0 adds thv llm commands for LLM gateway config and token management plus thv registry convert.

└──▷ GET THIS VERSION

$ git clone --branch v0.25.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.25.0

└──▷ TRY IT

Manage LLM gateway settings and tokens directly from the CLI.

$ thv llm --help

Convert an existing registry configuration to the new format.

$ thv registry convert <path>

Add thv llm command group with subcommands to manage LLM gateway configuration and tokens
Add thv registry convert command to transform registry configurations

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Drop legacy registry format support

v0.24.1 Apr 23, 2026 · release notes

ToolHive v0.24.1 adds --debug to vmcp, new OCI pull fallback, and exposes OAuth exchange fields.

└──▷ GET THIS VERSION

$ git clone --branch v0.24.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.24.1

Adds --debug flag to the vmcp subcommand to enable debug output in virtual MCP sessions
Exchanges Config fields via shared OAuth constants, allowing access to raw exchange response data

2 details in Everything

v0.24.0 Apr 22, 2026 · release notes

Enables thv vmcp CLI commands for local vMCP support

└──▷ GET THIS VERSION

$ git clone --branch v0.24.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.24.0

thv vmcp commands are now enabled by default and documented in the local vMCP architecture guide.
Local skill builds are automatically marked with an OCI descriptor annotation.

2 details in Everything

v0.23.0 Apr 21, 2026 · release notes

ToolHive v0.23.0 adds server-scoped Cedar policy support and CRD API stability via v1beta1.

└──▷ GET THIS VERSION

$ git clone --branch v0.23.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.23.0

CRDs now serve toolhive.stacklok.dev/v1beta1 as the storage version
Server-scoped Cedar policies like resource in MCP::"<server-name>" now work

2 details in Everything

v0.22.0 Apr 21, 2026 · release notes

ToolHive v0.22.0 adds thv vmcp scaffolding, --system secret flags, Cedar resource name attribute, and OAuth additional params

└──▷ GET THIS VERSION

$ git clone --branch v0.22.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.22.0

└──▷ TRY IT

Create a workload directly from registry metadata without an initial fetch step

$ curl -X POST https://<toolhive-host>/api/v1beta/workloads -H 'Content-Type: application/json' -d '{"name": "my-app", "registry": "ghcr.io", "server": "my-image:v1"}'

List internal ToolHive tokens for troubleshooting authentication issues

$ thv secret list --system

Scaffold a new vMCP configuration for semantic optimization workflows

$ thv vmcp init

POST /api/v1beta/workloads now accepts registry and server fields to create a workload in a single call
New thv vmcp serve, thv vmcp validate, and thv vmcp init commands land (hidden from --help)
thv secret list --system and thv secret delete --system flags expose internal __thv_* tokens
Upstream OAuth providers now accept additionalAuthorizationParams config key for flows like access_type=offline
Cedar authorization now extracts dual-claim groups (Entra roles + groups) and dot-notation claims (realm_access.roles)

+3 more show less

Cedar resource entities expose a name attribute matching the unsanitized resource URI
thv skill install <skill> now defaults to installing only for clients present on the system
Proxy audit middleware distinguishes JSON-RPC application errors via outcome=application_error (toggled by detectApplicationErrors)

8 details in Everything

v0.21.0 Apr 16, 2026 · release notes

ToolHive v0.21.0 adds Cedar role-based authorization, skills content API, and v0.1 registry endpoints

└──▷ GET THIS VERSION

$ git clone --branch v0.21.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.21.0

└──▷ TRY IT

Retrieve skill content via API without installation

$ curl -s https://<host>/api/v1beta/skills/content?skill_id=<id>

Query v0.1 registry for latest server versions

$ curl -s https://<host>/registry/<name>/v0.1/servers/<serverName>/versions/latest

Cedar authorizer now supports the RoleClaimName field for extracting IdP roles separately from group claims.
New oidcConfigRef.resourceUrl field allows specifying the public URL for OAuth protected resource metadata when servers are exposed via Ingress.
New GET /api/v1beta/skills/content endpoint retrieves SKILL.md content from OCI, git, and registry sources without installing the skill.
New v0.1 server browse endpoints (GET /registry/{name}/v0.1/servers and GET /registry/{name}/v0.1/servers/{serverName}/versions/latest) matching upstream MCP registry spec.
Cedar authorizer now stores serverName to scope policies per-MCP-server, enabling rules like resource in MCP::"<server>".

5 details in Everything

└──▷ BREAKING ON UPGRADE

!Inline telemetry field removed from MCPServer and MCPRemoteProxy; manifests using spec.telemetry must migrate to telemetryConfigRef with an MCPTelemetryConfig resource.
!Inline oidcConfig field removed from MCPServer and MCPRemoteProxy; manifests using spec.oidcConfig must migrate to oidcConfigRef with an MCPOIDCConfig resource.
!Inline incomingAuth.oidcConfig removed from VirtualMCPServer; manifests using spec.incomingAuth.oidcConfig must migrate to oidcConfigRef.
!config.groupRef fallback and external_auth_config_ref enum removed; VirtualMCPServer now requires spec.groupRef and the snake_case enum value is gone.
!thv group run no longer supports registry-based groups; use thv group create and thv run --group instead.

v0.20.0 Apr 14, 2026 · release notes

ToolHive v0.20.0 adds stateless mode, new CLI flags for OAuth scopes and health checks, and OpenAPI docs

└──▷ GET THIS VERSION

$ git clone --branch v0.20.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.20.0

└──▷ USE IT

Proxy a POST-only remote MCP server without maintaining persistent connections

shell

toolhive proxy --stateless --remote-url https://example.com/mcp

Authenticate with a Slack MCP server that requires the user_scope OAuth parameter instead of the standard scope

shell

toolhive proxy --remote-url https://slack-mcp.example.com --remote-auth-scope-param-name user_scope

Adds --stateless flag to proxy MCP servers that only accept POST requests, returning spec-compliant 405 for GET/HEAD/DELETE
Adds --remote-auth-scope-param-name CLI flag to support non-standard OAuth scope parameters (e.g., user_scope) for providers like Slack
Exposes an OpenAPI spec at /api/openapi.json for v0.1 skills registry endpoints, enabling tooling-driven API exploration
Introduces spec.telemetryConfigRef on VirtualMCPServer to reference shared MCPTelemetryConfig resources with CEL validation and CA bundle support
Expands supported client integrations: Kimi Code CLI, Factory.ai (Droid), VS Code / VS Code Insiders, Goose / Gemini CLI / Amp, Kiro, Cline / Roo Code / Windsurf / Mistral Vibe / Trae / Antigravity

5 details in Everything

└──▷ BREAKING ON UPGRADE

!groupRef changed from a bare string to a typed struct; manifests using groupRef: my-group must be updated to groupRef: { name: my-group } and resources re-applied
!protectedResourceAllowPrivateIP is now separated from jwksAllowPrivateIP; users who relied on the previous implicit behavior must explicitly set both fields in their OIDC config

v0.19.0 Apr 13, 2026 · release notes

ToolHive v0.19.0 adds webhook auth for thv run, multi-client skills install, Skills API v0.1, and Cursor client support

└──▷ GET THIS VERSION

$ git clone --branch v0.19.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.19.0

└──▷ USE IT

Authorize tool calls via webhook with a custom timeout and hard-fail policy.

shell

thv run --webhook-url 'https://auth.example.com/verify' --webhook-timeout 5s --webhook-failure-policy hard

Install a skill to multiple clients simultaneously.

shell

thv skills install myskill --clients claude-code,cursor

thv run gains --webhook-url, --webhook-timeout, and --webhook-failure-policy flags to enable webhook-based tool call authorization
Two new Skills API v0.1 endpoints for browsing and fetching skills from the registry
thv skills install now accepts --clients (comma-separated) or --all-clients to install to multiple clients in a single command with atomic rollback on failure
Cursor is now recognized as a skill-supporting client
MCPRemoteProxy gains telemetryConfigRef for shared telemetry configuration

5 details in Everything

└──▷ BREAKING ON UPGRADE

!remoteURL and externalURL JSON tags are renamed to remoteUrl and externalUrl; existing MCPRemoteProxy and MCPServerEntry resources in etcd will silently lose their values unless manifests are updated and re-applied
!Skills install API client field is replaced by clients; CLI --client flag is removed in favor of --clients or --all-clients
!enforceServers is removed from MCPRegistry; manifests containing this field will fail validation

v0.18.0 Apr 10, 2026 · release notes

ToolHive v0.18.0 adds per-user rate limiting and transparent proxy health check env vars; breaks legacy MCPRegistry config fields.

└──▷ GET THIS VERSION

$ git clone --branch v0.18.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.18.0

└──▷ USE IT

Enable per-user rate limiting with CEL validation on an MCP registry config.

yaml

apiVersion: toolhive.stacklok.dev/v1alpha1
kind: MCPRegistry
metadata:
  name: my-registry
spec:
  configYAML: |
    auth:
      mode: token
    rateLimitConfig:
      perUser:
        enabled: true
        tokensPerSecond: 10

Configure transparent proxy health checks via environment variables in a deployment.

yaml

env:
- name: PROXY_HEALTH_INTERVAL
  value: "5s"
- name: PROXY_HEALTH_TIMEOUT
  value: "3s"
- name: PROXY_HEALTH_FAILURE_THRESHOLD
  value: "3"

Configures spec.configYAML on MCPRegistry resources for sources, registries, database, and auth settings
Sets perUser field on RateLimitConfig to enable per-user token bucket rate limits at server or tool level
Uses environment variables to configure transparent proxy health check interval, timeout, and failure threshold

3 details in Everything

└──▷ BREAKING ON UPGRADE

!MCPRegistry CRD spec.sources, spec.registries, spec.databaseConfig, spec.authConfig, and spec.telemetryConfig fields are removed; resources must migrate to the required spec.configYAML field.

v0.17.0 Apr 9, 2026 · release notes

ToolHive v0.17.0 adds MCPServerEntry CRD for zero-infrastructure catalogs, mutating webhook JSONPatch middleware, and rate limiting.

└──▷ GET THIS VERSION

$ git clone --branch v0.17.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.17.0

Adds MCPServerEntry CRD for declaring remote MCP servers as lightweight catalog entries without proxy pods
Adds JSONPatch support to mutating webhook middleware for dynamic request/response mutation
Adds rate-limiting middleware that returns HTTP 429 with -32029 error for tools/call requests
Adds authServerRef field on MCPServer and MCPRemoteProxy CRDs to configure outgoing token exchange alongside embedded auth
Adds configYAML passthrough field on MCPRegistry CRD to bypass operator typed-field parsing with direct config.yaml control

+3 more show less

Adds caBundleRef field on MCPTelemetryOTelConfig to mount custom CA bundles for OTLP exporters
Adds supports_skills field to GET /api/v1beta/discovery/clients API response
Introduces type-safe UpdateRegistryConfig and DeleteRegistryConfig structs for registry policy gates

8 details in Everything

└──▷ BREAKING ON UPGRADE

!The .status.phase value for MCPServer, EmbeddingServer, and MCPRegistry is renamed from Running to Ready
!MCPRegistry CRD spec replaces flat registries[] with separate top-level sources[] and registries[] fields; PVC-based registry sources are removed
!MCPRegistryStatus flattens .status.syncStatus and .status.apiStatus to .status.phase, .status.conditions (type Ready), .status.readyReplicas, and .status.url
!The legacy MCPRegistry typed spec fields spec.sources[], spec.registries[], spec.databaseConfig, spec.authConfig, and spec.telemetryConfig are deprecated in favor of spec.configYAML

v0.16.0 Apr 8, 2026 · release notes

ToolHive v0.16.0 adds MCPServerEntry CRD, token-bucket rate limiting, thv skill builds subcommand, and structured proxy logs

└──▷ GET THIS VERSION

$ git clone --branch v0.16.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.16.0

Adds the MCPServerEntry CRD for referencing remote MCP servers without spawning proxy pods.
Adds a new rateLimiting field on MCPServerSpec with per-tool token-bucket configurations backed by Redis.
Adds the thv skill builds subcommand to list locally-built OCI artifacts.
Validates --volume source paths at CLI invocation time to surface nonexistent paths immediately.

4 details in Everything

└──▷ BREAKING ON UPGRADE

!MCPOIDCConfig status condition type renamed from Ready to Valid.
!Eight CRD integer fields (e.g., VirtualMCPServerStatus.BackendCount) changed from int64 to int32.
!CRD slice fields now require unique keys for SSA merge; duplicate keys in GitOps manifests will be rejected.
!operator.env Helm value type changed from map to list of {name, value} objects.
!Proxy startup log is now structured JSON instead of plain text.

v0.15.0 Apr 3, 2026 · release notes

ToolHive v0.15.0 adds MCPOIDCConfig and MCPTelemetryConfig CRDs, expands Cedar policy coverage to optimizer meta-tools, and migrates secrets storage.

└──▷ GET THIS VERSION

$ git clone --branch v0.15.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.15.0

Adds MCPOIDCConfig CRD and controller for managing OIDC lifecycle at the platform level
Adds MCPTelemetryConfig CRD and controller for managing telemetry configuration
Enables Cedar policy enforcement for optimizer meta-tools (find_tool, call_tool) including filtering discovery results
Extends Cedar policy authorization to upstream Identity Provider token claims (e.g., GitHub login, Okta groups)
Introduces DataStorage interface with cleaner Upsert/Create semantics for secrets management

5 details in Everything

└──▷ BREAKING ON UPGRADE

!spec.port on MCPServer/MCPRemoteProxy must be renamed to spec.proxyPort
!spec.targetPort on MCPServer must be renamed to spec.mcpPort
!Inline spec.tools filter on MCPServer must be replaced with spec.toolConfigRef referencing an MCPToolConfig resource
!Inline spec.oidcConfig.inline.clientSecret must be moved to a Kubernetes Secret and referenced via spec.oidcConfig.inline.clientSecretRef
!status.referencingServers (plain string list) on MCPOIDCConfig, MCPToolConfig, MCPExternalAuthConfig, and MCPTelemetryConfig is replaced by status.referencingWorkloads (structured {kind, name} array)
!Inline spec.telemetry on MCPServer must be replaced with spec.telemetryConfigRef referencing an MCPTelemetryConfig resource

v0.14.1 Mar 30, 2026 · release notes

Adds scoped and user secret providers with system key isolation; fixes OTel config respect, token scope preservation, JSON-RPC error handling, PID 0 liveness, upstream CRD converter

└──▷ GET THIS VERSION

$ git clone --branch v0.14.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.14.1

Respect global config for OTel tracing and metrics enabled in toolhive
Preserve scopes in token refresh request for toolhive API calls
Return JSON-RPC errors for expired sessions via the toolhive CLI/API
Treat PID 0 as dead in supervisor liveness check for toolhive processes

4 details in Everything

v0.14.0 Mar 30, 2026 · release notes

ToolHive v0.14.0 adds upstream_inject auth strategy, unhidden skill CLI commands, and per-backend session IDs in transport metadata.

└──▷ GET THIS VERSION

$ git clone --branch v0.14.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.14.0

Implements the upstream_inject injection strategy for authentication flows
Unhides the previously hidden skill CLI commands, making them available in standard help output
Persists per-backend session IDs into transport metadata during session creation

3 details in Everything

v0.13.1 Mar 27, 2026 · release notes

ToolHive v0.13.1 adds authorizationEndpointBaseUrl override and blocks Docker gateway addresses in the egress proxy by default

└──▷ GET THIS VERSION

$ git clone --branch v0.13.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.13.1

thv serve no longer fails when an experimental MCP server initialization error occurs; it logs a warning and continues starting the rest of the service
Adds the authorizationEndpointBaseUrl config key to override the embedded auth server's authorization endpoint URL
Supports RFC 8414 path-based issuer discovery URLs for OAuth2/OIDC integration

3 details in Everything

v0.13.0 Mar 26, 2026 · release notes

ToolHive v0.13.0 adds forEach step, multi-upstream routing, and port publishing to thv run.

└──▷ GET THIS VERSION

$ git clone --branch v0.13.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.13.0

Add forEach step type for VMCP composite tool workflows.
Enable multi-upstream support for MCPServer, MCPRemoteProxy, and proxy runner.
Support publishing additional container ports in thv run.
Expose content array alongside structuredContent in workflow templates.
Add RegisterProviderFactory extension point to pkg/config.

5 details in Everything

v0.12.5 Mar 24, 2026 · release notes

ToolHive v0.12.5 adds Redis session storage, multi-upstream auth, non-interactive registry auth, and admin config fields

└──▷ GET THIS VERSION

$ git clone --branch v0.12.5 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.12.5

└──▷ USE IT

Initialize a session manager that persists state in Redis rather than memory, using a specific cache size for performance.

go

manager := sessions.NewManagerWithRedis(ctx, redisClient, 1000)

Configure a deployment to scale backend replicas and tune session caching via the RunConfig struct.

go

runCfg := config.RunConfig{
    BackendReplicas: 3,
    SessionCacheSize: 500,
}

Enable multi-upstream authorization where the proxy tries providers in sequence if the first fails.

go

authz := auth.MultiUpstreamSequential{
    Providers: []auth.Provider{oidcProvider, samlProvider},
}

Implements Redis storage backend for sessions via the NewManagerWithRedis constructor and configurable SessionCacheSize in RunConfig.
Wires non-interactive registry authentication for serve mode, allowing thv serve to authenticate with a registry without manual prompts.
Adds multi-upstream sequential authorization chain support, enabling a tool to consult multiple identity providers in order.
Maps BackendReplicas and SessionCacheSize into the RunConfig struct for programmatic control of stateful set scaling.
Supports overriding tool annotations directly within aggregation configuration files.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!The webhook.Principal type has been replaced by auth.Identity, requiring updates to any code referencing the old webhook principal interface.

v0.12.3 Mar 19, 2026 · release notes

ToolHive v0.12.3 adds skills provider methods, resource links, and default grouping for skills.

└──▷ GET THIS VERSION

$ git clone --branch v0.12.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.12.3

Adds skills provider methods to support the upstream MCP registry format
Adds ResourceLink content type support in the vmcp layer
Default-installs new skills to the default group instead of ungrouped

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Removes the non-spec progress/update method from the MCP parser

v0.12.2 Mar 17, 2026 · release notes

ToolHive v0.12.2 adds registry login and logout CLI commands, expands MCP parser support, and introduces Skills API client integration.

└──▷ GET THIS VERSION

$ git clone --branch v0.12.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.12.2

└──▷ USE IT

Authenticate the local ToolHive instance with a remote registry before launching agents.

shell

thv registry login --endpoint https://registry.example.com

Adds thv registry login and thv registry logout CLI commands for authenticating with remote registries
Expands the MCP parser to include support for notifications, elicitation, and complete messages
Preserves query parameters in remote MCP server URLs to maintain connection context across proxies
Adds a new Skills API client for registry extension development
Introduces the permissionMode configuration option for code-writing agents to control execution scope

5 details in Everything

└──▷ BREAKING ON UPGRADE

!The SessionManagementV2 feature flag has been removed; existing configurations referencing this flag will fail or be ignored

v0.12.1 Mar 13, 2026 · release notes

ToolHive v0.12.1 enables tool annotations in list filtering context.

└──▷ GET THIS VERSION

$ git clone --branch v0.12.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.12.1

v0.12.0 Mar 13, 2026 · release notes

ToolHive v0.12.0 adds TLS for Redis and enables session management v2 by default

└──▷ GET THIS VERSION

$ git clone --branch v0.12.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.12.0

└──▷ USE IT

Connect ToolHive to a Redis backend using TLS for encrypted data in transit

shell

toolhive run --storage redis --redis-tls-enabled=true

Adds tls support for Redis connections to secure tool storage backends
Enables session management v2 as the default mode, replacing the legacy session handler

2 details in Everything

v0.11.3 Mar 12, 2026 · release notes

ToolHive v0.11.3 adds OAuth/OIDC for MCP registries, git:// skill references, and configurable proxy timeouts.

└──▷ GET THIS VERSION

$ git clone --branch v0.11.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.11.3

thv client setup hides already registered clients to simplify re-registration workflows
Supports git:// skill URIs via the new gitresolver package for skill loading
Adds OAuth/OIDC authentication support for remote MCP server registries
Makes proxy response timeout configurable instead of using a hardcoded value
thv CLI returns RFC 6750 compliant JSON error responses from the auth middleware

5 details in Everything

v0.11.2 Mar 9, 2026 · release notes

ToolHive v0.11.2 adds tokenResponseMapping for non-standard OAuth and proxy_port support for remote servers

└──▷ GET THIS VERSION

$ git clone --branch v0.11.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.11.2

Adds tokenResponseMapping to handle non-standard OAuth providers' token responses
Supports fetching proxy_port from the registry configuration for remote servers

2 details in Everything

v0.11.1 Mar 6, 2026 · release notes

ToolHive v0.11.1 adds group support to the Skills API and HMAC-SHA256 token binding for sessions.

└──▷ GET THIS VERSION

$ git clone --branch v0.11.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.11.1

Add group support to skills API endpoints to associate skills with groups
Integrate existing skills with the groups system
Implement HMAC-SHA256 token binding for session security

3 details in Everything

v0.11.0 Mar 4, 2026 · release notes

ToolHive v0.11.0 adds skill lifecycle CLI commands and configurable session affinity for cyber toolchain stability.

└──▷ GET THIS VERSION

$ git clone --branch v0.11.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.11.0

└──▷ TRY IT

Discover and install a new cyber tool into your ToolHive instance via CLI.

$ thv skills list
thv skills install <skill-name>

Configure a deployment to maintain connection stability for stateful tools.

text

spec:
  sessionAffinity: ClientIP

Enable the new session handling backend for a specific tool instance.

$ thv run my-tool --sessionManagementV2

Adds skills install, skills list, skills info, and skills uninstall CLI subcommands to manage tools directly from the command line
Enables sticky sessions by setting spec.sessionAffinity in the MCPServer CRD and enables it via the --session-affinity flag on existing commands
Adds experimental session management capabilities behind the --sessionManagementV2 flag to decouple session state from the transport layer

3 details in Everything

v0.10.1 Mar 2, 2026 · release notes

ToolHive v0.10.1 adds OCI build/push/pull for skills, Redis operator storage, and semantic discovery via TEI.

└──▷ GET THIS VERSION

$ git clone --branch v0.10.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.10.1

Adds OCI Build and Push capability to the skill service for publishing tools
Adds OCI pull-based install flow for skills allowing installation from container registries
Adds operator controller and runner integration with Redis storage for state management
Adds real TEI embedding client enabling semantic tool discovery across available skills

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The toolhive-registry name is renamed to toolhive-catalog in internal packages

v0.10.0 Feb 18, 2026 · release notes

ToolHive v0.10.0 adds vector embedding and hybrid search to ToolStore, extensible container runtime registry, skill installer/extractor, and embeddable Server Handler

└──▷ GET THIS VERSION

$ git clone --branch v0.10.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.10.0

Add Handler(ctx) method to vmcp Server for embeddable use
Add skills to upstream registry types and schema
Add skill installer and extractor for OCI artifact extraction
Migrate pkg/logger from zap to slog via toolhive-core/logging

4 details in Everything

└──▷ BREAKING ON UPGRADE

!Replace non-functional webhooks with hybrid validation approach; existing webhook configurations are no longer used.

v0.9.4 Feb 16, 2026 · release notes

Adds AWS STS token exchange via OIDC, Redis storage backend for auth server, and SQLite ToolStore.

└──▷ GET THIS VERSION

$ git clone --branch v0.9.4 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.9.4

UseLegacyAttributes flag in telemetry config
SQLite foundation with connection, PRAGMAs, and goose migrations
AWS STS token exchange for OIDC-to-AWS credential conversion
Add client skill metadata for skill path resolution

4 details in Everything

v0.9.3 Feb 9, 2026 · release notes

ToolHive v0.9.3 adds SigV4 auth, HTTP PDP authorizer, SKILL.md parser, and configurable protocol build images

└──▷ GET THIS VERSION

$ git clone --branch v0.9.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.9.3

Accept ECDSA signing keys in JWKS token validation
Add structured status conditions for ToolConfigRef and ExternalAuthConfigRef validation
Exclude unhealthy backends from vMCP capability aggregation

3 details in Everything

v0.9.2 Feb 6, 2026 · release notes

ToolHive v0.9.2 adds private Git auth for MCPRegistry, bearer token support for remote auth proxies, and TOML config file parsing.

└──▷ GET THIS VERSION

$ git clone --branch v0.9.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.9.2

Add omitempty to UserinfoEndpoint JSON tag
Adopt env package from toolhive-core
Add circuit breaker pattern to vMCP health monitoring
add private Git repository authentication for MCPRegistry
Align authserver DCR client scopes with discovery scopes_supported

+16 more show less

Add shortNames to MCPServer CRD for consistency
Add TOML config file support with array-of-tables format
Add TOML nested tables format support
Upstream Token Swap Middleware
Add OIDC provider methods and ID token validation
Add lazy OIDC discovery with retry
Add CEL-based AWS STS role mapper for claim-based IAM role selection
Implement bearer token controller logic and environment variable management
Complete vMCP circuit breaker configuration and testing
Add MistralVibe and Codex client configurations
Standardize proxy port field in MCPRemoteProxy
Add skill domain types, service interface, and HTTP client stub
Add hidden skill CLI command stubs
Add skill REST API route stubs and ServerBuilder wiring
Add Clients field to InstalledSkill
Add publisher-provided extensions types and nested Kubernetes metadata

21 details in Everything

v0.9.1 Feb 4, 2026 · release notes

ToolHive v0.9.1 adds Google Gemini CLI support and OIDC provider upstream for the embedded auth server.

└──▷ GET THIS VERSION

$ git clone --branch v0.9.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.9.1

Adds Google Gemini CLI client support with dynamic URL field mapping
Adds inspector auto-cleanup on interrupt to prevent zombie processes

2 details in Everything

v0.9.0 Feb 2, 2026 · release notes

ToolHive v0.9.0 adds embedded OAuth server support and VirtualMCPServer tool filtering

└──▷ GET THIS VERSION

$ git clone --branch v0.9.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.9.0

Add core OAuth authorization server interface and implementation
Implement ExcludeAll feature for VirtualMCPServer tool filtering
Add Embedded Auth Server Configuration Support to Operator

3 details in Everything

v0.8.3 Jan 29, 2026 · release notes

ToolHive v0.8.3 adds configurable UserInfo mapping for OAuth authserver and header forwarding support in MCPRemoteProxy CRD and workloads API

└──▷ GET THIS VERSION

$ git clone --branch v0.8.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.8.3

Adds headerForward to the MCPRemoteProxy Custom Resource Definition (CRD)
Adds headerForward field to the workloads REST API for proxying HTTP headers
Adds configurable UserInfo field mapping and support in the authserver's OAuth provider

3 details in Everything

toolhive-operator-crds-0.0.106 Jan 29, 2026 · release notes

ToolHive Operator adds headerForward to workloads REST API

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.106 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.106

Adds the headerForward field to the workloads REST API for forwarding HTTP headers
Adds a VERSION file to support release process improvements

2 details in Everything

toolhive-operator-crds-0.0.105 Jan 28, 2026 · release notes

ToolHive Operator v0.0.105 adds configurable UserInfo mapping and headerForward to MCPRemoteProxy CRD

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.105 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.105

Adds userInfoFieldMapping configuration option to the authserver for custom OAuth provider claims.
Adds headerForward field to MCPRemoteProxy CRD to forward HTTP headers.

2 details in Everything

v0.8.2 Jan 27, 2026 · release notes

ToolHive v0.8.2 allows optional healthchecks for remote workloads via a new configuration option.

└──▷ GET THIS VERSION

$ git clone --branch v0.8.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.8.2

Bumps Helm chart version to 0.5.28 in ToolHive release

1 detail in Everything

v0.8.1 Jan 27, 2026 · release notes

ToolHive v0.8.1 adds header forwarding, EMBEDDING_SERVER CRD, POST /oauth/register endpoint, and token persistence

└──▷ GET THIS VERSION

$ git clone --branch v0.8.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.8.1

Add --header-forward CLI flags to configure header forward configuration for remote MCP servers
Add EmbeddingServer CRD for deploying HuggingFace embedding models in Kubernetes
Add POST /oauth/register endpoint handler for dynamic client registration in the authserver

3 details in Everything

toolhive-operator-crds-0.0.104 Jan 27, 2026 · release notes

Adds header forwarding middleware via new configuration and K8s status reporting capability

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.104 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.104

Adds forward_headers configuration option to wire a header forward middleware in the runner

1 detail in Everything

toolhive-operator-crds-0.0.103 Jan 23, 2026 · release notes

Adds EmbeddingServer CRD for deploying HuggingFace embedding models

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.103 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.103

Adds a token endpoint handler to the authentication server component
Adds a KeyManager for signing key lifecycle management to the authserver

2 details in Everything

toolhive-operator-0.5.27 Jan 23, 2026 · release notes

ToolHive operator adds EmbeddingServer CRD for deploying HuggingFace models and auth server signing key lifecycle management

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.27 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.27

EmbeddingServer CRD enables deployment of HuggingFace embedding models via the operator.
KeyManager handles signing key lifecycle for the authserver.
token endpoint handler is added to the operator.

3 details in Everything

toolhive-operator-crds-0.0.102 Jan 23, 2026 · release notes

Adds header forward middleware for remote MCP servers

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.102 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.102

toolhive-operator-crds-0.0.100 Jan 22, 2026 · release notes

Adds bearerToken field to MCPExternalAuthConfig CRD for external auth

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.100 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.100

toolhive-operator-crds-0.0.99 Jan 22, 2026 · release notes

Maps thvCABundle to OIDCConfig.CACertPath and updates token injection behavior.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.99 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.99

Adds OIDCConfig.CACertPath field in the CRD to map from thvCABundle for OIDC CA configuration
Changes operator logic to skip token injection when token exchange is active

2 details in Everything

v0.8.0 Jan 22, 2026 · release notes

ToolHive v0.8.0 adds thv status CLI command, OAuth userinfo fetching, and VMCP dynamic/static mode support

└──▷ GET THIS VERSION

$ git clone --branch v0.8.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.8.0

Adds the thv status subcommand to retrieve detailed information about running ToolHive workloads
Adds UserInfo fetching support to the authserver's upstream OAuth2 provider for identity enrichment
Enables dynamic and static mode configuration in the VirtualMCPServer operator via the mode setting

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Removes support for the none secrets provider; workloads using this provider must migrate to a different secret backend

toolhive-operator-crds-0.0.97 Jan 20, 2026 · release notes

Adds thv status CLI command for detailed workload info and OAuth handler infrastructure in ToolHive

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.97 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.97

Adds thv status CLI subcommand to retrieve detailed information about running ToolHive workloads
Adds new OAuth handler infrastructure including discovery endpoints for the authserver
Adds UserInfo fetching support within the authserver's upstream OAuth2 provider
Adds support for dynamic/static modes in the VirtualMCPServer operator

4 details in Everything

v0.7.2 Jan 19, 2026 · release notes

ToolHive v0.7.2 adds proxy_port support to the MCP server registry and initial OAuth 2.0 authorization server capabilities

└──▷ GET THIS VERSION

$ git clone --branch v0.7.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.7.2

proxy_port configuration key in MCP server registry settings
authserver component with base OAuth 2.0 provider implementation
config block for OAuth2 authorization server with JWKS utilities support

3 details in Everything

toolhive-operator-0.5.24 Jan 15, 2026 · release notes

Adds proxy_port configuration key to the MCP server registry in toolhive-operator v0.5.24

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.24 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.24

v0.7.0 Jan 15, 2026 · release notes

ToolHive v0.7.0 introduces vMCP dynamic backend discovery and OAuth authorization server capabilities.

└──▷ GET THIS VERSION

$ git clone --branch v0.7.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.7.0

Implements BackendReconciler for vMCP dynamic backend discovery to automatically discover and manage virtual MCP backends.
Adds OAuth session management for JWT claims and IDP linking in the authserver component.
Adds RFC 7591 Dynamic Client Registration validation support within the authserver.
Adds an OAuth client factory with RFC 8252 loopback support to the authserver.

4 details in Everything

toolhive-operator-crds-0.0.95 Jan 13, 2026 · release notes

ToolHive CRDs 0.0.95 adds OAuth loopback support and CRD config migration

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.95 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.95

Adds OAuth client factory with RFC 8252 loopback support to authserver
Migrates Remaining VirtualMCPServer Fields to spec.config

2 details in Everything

└──▷ BREAKING ON UPGRADE

!VirtualMCPServer fields are now nested under spec.config instead of the top level.

toolhive-operator-0.5.22 Jan 13, 2026 · release notes

toolhive-operator-0.5.22 adds a new Helm chart for deployment and OAuth auth server storage/interfaces

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.22 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.22

Add OAuth authorization server storage interfaces and types
authserver: Add OAuth session management for JWT claims and IDP linking

2 details in Everything

v0.6.17 Jan 8, 2026 · release notes

ToolHive v0.6.17 adds bearer token authentication flags and group control feature flags.

└──▷ GET THIS VERSION

$ git clone --branch v0.6.17 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.17

Enables control over controller groups via new feature flags

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!The rawConfig field is removed from the vMCP configuration structure in favor of camelCase keys

toolhive-operator-crds-0.0.91 Jan 8, 2026 · release notes

Adds X-Forwarded-Prefix support for SSE endpoint URL rewriting in the Helm chart

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.91 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.91

toolhive-operator-crds-0.0.89 Jan 7, 2026 · release notes

ToolHive adds bearer token authentication support with dynamic discovery and CLI flags.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.89 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.89

Adds --bearer-token and --bearer-token-file CLI flags for specifying credentials
Implements DynamicRegistry with version-based cache invalidation for backend discovery
Adds reactive 401 detection logic for bearer token authentication failures
Extends the Transport interface with remote server configuration methods

4 details in Everything

toolhive-operator-0.5.19 Jan 5, 2026 · release notes

Adds feature flags to enable/disable controller groups

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.19 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.19

--controller-groups flag added to allow users to enable or disable specific controller groups in the ToolHive Operator

1 detail in Everything

v0.6.16 Jan 5, 2026 · release notes

Adds /status HTTP endpoint to vMCP server and health monitoring infrastructure

└──▷ GET THIS VERSION

$ git clone --branch v0.6.16 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.16

└──▷ BREAKING ON UPGRADE

!The thv restart command is renamed to thv start, with restart kept only as an alias

toolhive-operator-0.5.18 Dec 23, 2025 · release notes

Adds core health monitoring infrastructure for vmcp backends

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.18 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.18

toolhive-operator-crds-0.0.88 Dec 18, 2025 · release notes

Adds CRD fields for vmcp audit config

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.88 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.88

toolhive-operator-0.5.17 Dec 18, 2025 · release notes

Adds CRD fields for vmcp audit config in the ToolHive Operator

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.17 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.17

Adds audit fields to the VMCP CRD spec to configure audit logging

1 detail in Everything

v0.6.15 Dec 17, 2025 · release notes

ToolHive v0.6.15 adds OAuth/OIDC auth config fields to the MCPRegistry CRD

└──▷ GET THIS VERSION

$ git clone --branch v0.6.15 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.15

toolhive-operator-crds-0.0.86 Dec 17, 2025 · release notes

ToolHive v0.0.86 adds OAuth/OIDC auth fields to MCPRegistry CRD

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.86 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.86

toolhive-operator-0.5.15 Dec 17, 2025 · release notes

Adds OAuth/OIDC auth config fields to the MCPRegistry CRD

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.15 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.15

Adds oauth and oidc configuration blocks to the MCPRegistry Custom Resource Definition for enabling authentication.

1 detail in Everything

v0.6.14 Dec 17, 2025 · release notes

ToolHive v0.6.14 adds CompositeTools fromJson function, pgpass support for MCPRegistry operator, and audit logging for composite workflows

└──▷ GET THIS VERSION

$ git clone --branch v0.6.14 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.14

└──▷ HOW TO FIND IT

Parse JSON text returned by a tool within a CompositeTool chain.

📍toolhive run ... --composite '[{"name": "get_data"}, {"fromJson": "{{.result}}"}]'

Configure pgpass credentials for the MCPRegistry operator to access PostgreSQL backends.

📍# Add .pgpass entries to the operator's service account volume # then set env: MCP_REGISTRY_PGPASS=/path/to/pgpass

fromJson function available in CompositeTools for manipulating text structures
MCPRegistry operator now supports PostgreSQL pgpass files for credential management
Audit logging enabled for composite workflow execution events

3 details in Everything

toolhive-operator-crds-0.0.85 Dec 15, 2025 · release notes

Adds PostgreSQL pgpass file support to the MCPRegistry operator

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.85 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.85

toolhive-operator-0.5.13 Dec 15, 2025 · release notes

ToolHive Operator adds PostgreSQL pgpass support via Helm chart

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.13 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.13

toolhive-operator-crds-0.0.84 Dec 15, 2025 · release notes

ToolHive operator CRDs v0.0.84 adds structured content support for composite tools

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.84 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.84

v0.6.12 Dec 12, 2025 · release notes

ToolHive v0.6.12 adds configurable scopes for auth, audit middleware to vMCP server, composite tool ref resolution, and reusable K8s secrets/configmaps.

└──▷ GET THIS VERSION

$ git clone --branch v0.6.12 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.12

Adds scopes field to VirtualMCPServer CRD for OIDC configuration
Adds unauthenticated and header-injection auth strategies to MCPExternalAuthConfig
Wires configurable scopes to the vMCP CLI via the auth info handler
Implements CompositeToolRefs resolution in VirtualMCPServer converter
Adds audit middleware to vMCP server with backend routing capture

+3 more show less

Adds reusable Kubernetes secrets functionality in Operator
Adds reusable Kubernetes configmap functionality in Operator for C/R/U actions
Enables MCPRemoteProxy discovery in MCPGroup and VirtualMCPServer

8 details in Everything

toolhive-operator-crds-0.0.82 Dec 11, 2025 · release notes

ToolHive operator adds reusable Kubernetes ConfigMap support and wires audit config through vMCP CLI.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.82 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.82

Adds reusable Kubernetes ConfigMap functionality in the operator for Create/Read/Update (C/R/U) actions

1 detail in Everything

toolhive-operator-crds-0.0.81 Dec 11, 2025 · release notes

Adds reusable Kubernetes secrets and scopes field for OIDC in ToolHive Operator CRDs

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.81 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.81

Adds a scopes field to the MCPServer CRD to configure OIDC settings
Enables reusable Kubernetes secrets functionality within the Operator

2 details in Everything

toolhive-operator-crds-0.0.80 Dec 10, 2025 · release notes

Adds crds.install.* feature flags and default keep policy for ToolHive Operator CRDs Helm chart

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.80 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.80

└──▷ TRY IT

Install only the server CRDs when deploying the operator via Helm.

$ helm install toolhive-operator-crds . --set crds.install.server=true --set crds.install.registry=false --set crds.install.virtualMcp=false

Ensure CRDs are retained when the release is uninstalled.

$ helm install toolhive-operator-crds . --set crds.keep=true

Adds crds.install.server, crds.install.registry, and crds.install.virtualMcp feature flags to selectively install CRD groups
Annotates CRDs with helm.sh/resource-policy: keep by default, controlled via the crds.keep config key

2 details in Everything

└──▷ BREAKING ON UPGRADE

!CRDs have moved from crds/ to templates/, meaning Helm will now upgrade them on subsequent releases instead of leaving stale versions after installation

toolhive-operator-crds-0.0.79 Dec 10, 2025 · release notes

ToolHive Operator CRDs add configurable scopes to auth info handler exposed via CLI

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.79 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.79

Add --auth-scope flag (and related scope configuration) to the ToolHive operator CRD CLI for filtering or specifying authentication contexts

1 detail in Everything

toolhive-operator-0.5.11 Dec 9, 2025 · release notes

ToolHive Operator 0.5.11 adds Helm chart support and workload warnings for secret changes

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.11 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.11

Warns users about affected workloads when updating or deleting secrets

1 detail in Everything

toolhive-operator-crds-0.0.77 Dec 9, 2025 · release notes

ToolHive v0.0.77 adds unauthenticated and header-injection auth strategies to MCPExternalAuthConfig

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.77 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.77

unauthenticated and headerinjection added as valid values for the auth_strategy field in MCPExternalAuthConfig

1 detail in Everything

toolhive-operator-crds-0.0.75 Dec 8, 2025 · release notes

ToolHive Operator CRDs v0.0.75 adds log level config, auth file injection, and CompositeToolRefs support

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.75 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.75

Adds logLevel configuration support to VirtualMCPServer resources for dynamic runtime logging control
Add build-time authentication file injection capability to protocol tool builds via new internal paths

2 details in Everything

v0.6.11 Dec 3, 2025 · release notes

ToolHive v0.6.11 adds --from-secret/--from-env to set-build-env and improves remote workload ping checks

└──▷ GET THIS VERSION

$ git clone --branch v0.6.11 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.11

Adds --from-secret flag to the set-build-env subcommand to inject secrets from the host's secrets manager into build environments
Adds --from-env flag to the set-build-env subcommand to pass host environment variables into build environments
Changes ping checks for remote workloads to verify connectivity

3 details in Everything

v0.6.10 Dec 2, 2025 · release notes

ToolHive v0.6.10 adds Zed client support, PVC source for MCPRegistry, and Output Schema Support to CompositeToolSpec CRD

└──▷ GET THIS VERSION

$ git clone --branch v0.6.10 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.10

└──▷ USE IT

Connect ToolHive to a Zed editor instance using the new supported client type.

shell

toolhive run --client zed

Adds client_secret_env optional field in vMCP OIDC config to allow omitting the secret for certain providers
Makes client_id optional in vMCP OIDC config, simplifying configuration for identity providers that do not require a client ID
Adds PVC source support for MCPRegistry via the PVCSource type in the registry server
Adds Output Schema Support to CompositeToolSpec CRD, enabling schema definitions for composite tool outputs
Adds Zed editor integration as a supported client type for ToolHive

5 details in Everything

toolhive-operator-crds-0.0.73 Dec 1, 2025 · release notes

ToolHive Operator adds PVC source for MCPRegistry and output schema support to CompositeToolSpec.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.73 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.73

Adds pvc as a supported source type for MCPRegistry, allowing tool definitions to be loaded from a PersistentVolumeClaim
Adds outputSchema field to the CompositeToolSpec CRD, enabling structured output validation for composed tools

2 details in Everything

v0.6.9 Nov 28, 2025 · release notes

ToolHive v0.6.9 adds RetryDelay to WorkflowStep CRDs and podTemplateSpec to MCPRegistry CRDs

└──▷ GET THIS VERSION

$ git clone --branch v0.6.9 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.9

MergePodTemplateSpecs utility added for cleaner pod template composition
Standard JSON Schema format now used for composite tool parameters
Added RetryDelay to error handling in WorkflowStep CRD for more resilient workflows

3 details in Everything

toolhive-operator-crds-0.0.71 Nov 28, 2025 · release notes

ToolHive Operator CRDs add database configuration for the registry server.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.71 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.71

└──▷ USE IT

Configure the ToolHive operator to connect to an external PostgreSQL instance for its registry.

shell

helm install toolhive-operator-crds ./toolhive-operator-crds --set registry.database.host=postgres.example.com --set registry.database.port=5432

Adds ability to configure database details for registry server

1 detail in Everything

toolhive-operator-crds-0.0.69 Nov 28, 2025 · release notes

Adds podTemplateSpec field to MCPRegistry CRD for customizing registry API deployment

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.69 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.69

toolhive-operator-crds-0.0.68 Nov 28, 2025 · release notes

ToolHive Operator CRDs v0.0.68 adds smart transport auto-detection for MCP and RetryDelay to WorkflowStep CRD

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.68 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.68

Adds th mcp commands with smart transport auto-detection
Adds RetryDelay field to WorkflowStep CRD for error handling configuration

2 details in Everything

toolhive-operator-crds-0.0.67 Nov 27, 2025 · release notes

Adds MergePodTemplateSpecs function and standard JSON Schema format for VMCP composite tool parameters

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.67 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.67

Introduces the MergePodTemplateSpecs function to merge podTemplateSpecs within the Helm chart logic

1 detail in Everything

v0.6.8 Nov 27, 2025 · release notes

ToolHive v0.6.8 adds OAuth server fallback, header injection auth, and multi-configmap registry support

└──▷ GET THIS VERSION

$ git clone --branch v0.6.8 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.8

Adds OAuth authorization server fallback for registration endpoint discovery to improve resilience when the issuer does not provide a well-known URI.
Adds header injection authentication support as a new strategy for authenticating upstream requests via custom HTTP headers.
Adds multi-configmap data source support for the registry, allowing tool definitions to be sourced from multiple ConfigMaps.
Implements discovered mode for vMCP authentication to automatically locate and validate credentials.

4 details in Everything

└──▷ BREAKING ON UPGRADE

!Removes the local incoming auth type from operator CRDs, requiring migration if currently in use.
!Removes the unimplemented pass_through auth strategy from the configuration.

toolhive-operator-crds-0.0.65 Nov 27, 2025 · release notes

ToolHive operator now supports multi-configmap registry data sources and discovered-mode vMCP authentication

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.65 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.65

Adds multi-configmap data source for registry to allow the operator to aggregate registry configuration across multiple ConfigMaps.
Implements discovered mode for vMCP (Vertex Model Context Protocol) authentication, enabling automatic endpoint discovery during the authentication flow.

2 details in Everything

v0.6.7 Nov 25, 2025 · release notes

Adds native OrbStack Docker socket support on macOS, composite tool output configuration, and --foreground with --from-config

└──▷ GET THIS VERSION

$ git clone --branch v0.6.7 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.7

Add output configuration support for composite tools
Allow --foreground flag with --from-config

2 details in Everything

toolhive-operator-crds-0.0.61 Nov 24, 2025 · release notes

ToolHive operator v0.0.61 adds native OrbStack Docker socket support on macOS and output configuration for composite tools

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.61 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.61

Adds --foreground flag compatibility with --from-config to allow foreground mode in configuration-driven deployments
Adds output configuration support for composite tools to control how multiple tool outputs are handled

2 details in Everything

v0.6.6 Nov 19, 2025 · release notes

ToolHive v0.6.6 adds MCP Tasks support, Google Antigravity IDE client integration, and environment variable injection for header_injection auth.

└──▷ GET THIS VERSION

$ git clone --branch v0.6.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.6

Add support for MCP Tasks (November 2025 spec)

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!The service_account authentication strategy is removed.

toolhive-operator-crds-0.0.59 Nov 18, 2025 · release notes

Adds MCP Tasks support (November 2025 spec) and per-user caching for vMCP discovery

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.59 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.59

toolhive-operator-0.5.2 Nov 17, 2025 · release notes

New Helm chart for deploying the ToolHive Operator into Kubernetes.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.2

└──▷ TRY IT

Deploy the ToolHive Operator to a Kubernetes cluster using the newly provided chart.

$ helm install toolhive-operator ./toolhive-operator-0.5.2/helm-chart

helm-chart directory added to release assets enables deployment of the ToolHive Operator via Helm

1 detail in Everything

toolhive-operator-crds-0.0.57 Nov 17, 2025 · release notes

ToolHive Operator CRDs v0.0.57 adds composite tool workflows and UpstreamRegistry support

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.57 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.57

UpstreamRegistry replaces the legacy ServerRegistry type in CRDs to define registry sources.
The toolhive-operator-crds Helm chart now creates a ConfigMap for registry server configuration via the new CRD definitions.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The ServerRegistry type in your CRDs must be renamed to UpstreamRegistry.

toolhive-operator-crds-0.0.56 Nov 14, 2025 · release notes

ToolHive CRDs add environment variable support to header_injection auth strategy.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.56 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.56

v0.6.4 Nov 13, 2025 · release notes

ToolHive v0.6.4 adds MCP elicitation support for vMCP composite workflows.

└──▷ GET THIS VERSION

$ git clone --branch v0.6.4 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.4

└──▷ BREAKING ON UPGRADE

!removes registry filtering from operator
!removes MCPRegistry datasources from Operator

v0.6.3 Nov 13, 2025 · release notes

ToolHive v0.6.3 adds Kiro and OpenCode clients, token exchange auth, MCP registry format converters, and well-known URI discovery

└──▷ GET THIS VERSION

$ git clone --branch v0.6.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.3

Adds Kiro to the list of supported MCP clients for proxying connections.
Adds OpenCode as a new supported MCP client.
Implements token-exchange authentication strategy for managing service identities.
Adds registry format converters to support importing from the Official MCP Registry.
Implements MCP well-known URI (/.well-known/mcp.json) authentication discovery per the MCP Spec.

5 details in Everything

toolhive-operator-crds-0.0.55 Nov 13, 2025 · release notes

Adds MCP registry support, OpenCode/Kiro clients, lazy capability discovery, and token exchange auth

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.55 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.55

Support for the Official MCP Registry via new registry format converters
Addition of OpenCode as a supported client
Addition of Kiro as a supported client
Implementation of lazy per-session capability discovery
New token exchange authentication strategy for OAuth/OIDC flows

5 details in Everything

toolhive-operator-0.5.0 Nov 10, 2025 · release notes

Adds Helm chart for deploying the ToolHive Operator into Kubernetes

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.5.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.5.0

└──▷ TRY IT

Deploy the operator using the standard Helm workflow after adding the repository.

$ helm repo add toolhive https://stacklok.github.io/toolhive
helm install toolhive-operator toolhive/toolhive-operator --version 0.5.0

v0.6.0 Nov 10, 2025 · release notes

ToolHive v0.6.0 adds vmcp serve --host/--port, Kubernetes storage and controller, streamable-http proxy default, and automatic auth monitoring

└──▷ GET THIS VERSION

$ git clone --branch v0.6.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.6.0

Add --host and --port flags to the vmcp serve command
Implement CRD-based group storage for Kubernetes in ToolHive
Implement VirtualMCPServer Kubernetes controller
Add automatic authentication monitoring with unauthenticated state detection for remote workloads
Change default proxy mode from SSE to streamable-http for thv CLI and operator

+1 more show less

Send resource indicator when authorizing to remote MCP server

6 details in Everything

└──▷ BREAKING ON UPGRADE

!The GetClaimsFromContext backward compatibility helper is removed

toolhive-operator-0.4.0 Nov 8, 2025 · release notes

toolhive-operator-0.4.0 introduces a Helm chart for Kubernetes deployment and changes the default proxy mode

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.4.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.4.0

└──▷ BREAKING ON UPGRADE

!The default proxy mode is now streamable-http; existing deployments relying on SSE as the default will need explicit configuration.

toolhive-operator-0.3.7 Nov 7, 2025 · release notes

ToolHive operator adds VMCP status collector, automatic authentication monitoring for remote workloads, and defaults to streamable-http proxy mode.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.3.7 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.3.7

statusCollector now tracks vmcp resources
New autoAuthMonitor feature detects unauthenticated states in remote workloads
Default proxy mode changed from sse to streamable-http

3 details in Everything

toolhive-operator-crds-0.0.51 Nov 6, 2025 · release notes

Adds host/port flags to vmcp serve, e2e test for remote MCP servers, and CRD-based group storage

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.51 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.51

└──▷ USE IT

Run the local vMCP server on a custom interface and port instead of the defaults.

shell

vmcp serve --host 0.0.0.0 --port 8090

└──▷ BREAKING ON UPGRADE

!Removes GetClaimsFromContext backward compatibility helper

toolhive-operator-0.3.6 Nov 6, 2025 · release notes

ToolHive operator 0.3.6 adds Helm chart, vMCP serve flags, VirtualMCP CRD, and composite tool engine

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.3.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.3.6

└──▷ USE IT

Run the vMCP server on a specific interface and port for remote access.

shell

vmcp serve --host 0.0.0.0 --port 8080

Add helm/chart-testing-action update to CI pipeline (v2.8.0)
Add constants for auth strategy types in pkg/auth
Add host and port flags to vmcp serve command
Add CRD-based group storage for Kubernetes
Add VirtualMCP Kubernetes controller (VirtualMCPServer CRD)

+4 more show less

Implement composite tools workflow engine for vMCP
Implement outgoing authentication strategies for vMCP
Process EnvFileDir in file-based config mode
Support MCP servers with partial capabilities in vmcp

9 details in Everything

└──▷ BREAKING ON UPGRADE

!The GetClaimsFromContext backward compatibility helper is removed

v0.5.2 Nov 3, 2025 · release notes

ToolHive v0.5.2 adds serve subcommand for Virtual MCP Servers, new tools_override API field, and VirtualMCPCompositeToolDefinition CRD

└──▷ GET THIS VERSION

$ git clone --branch v0.5.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.5.2

vMCP: Implement CLI serve command and session management
Return tools_override in workload GET endpoint
vMCP: Kubernetes - VirtualMCPCompositeToolDefinition CRD

3 details in Everything

toolhive-operator-crds-0.0.50 Nov 3, 2025 · release notes

Adds vMCP CLI serve command and session management for new Kubernetes CRDs

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.50 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.50

Implements serve subcommand on the vMCP CLI to start sessions.
Uses proxy-mode transport instead of the legacy transport field in VirtualMCP configurations.
Introduces VirtualMCPCompositeToolDefinition Custom Resource Definition for Kubernetes.

3 details in Everything

toolhive-operator-crds-0.0.49 Oct 31, 2025 · release notes

Introduces the VirtualMCPServer CRD for managing MCP server resources in Kubernetes.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.49 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.49

Design and implement the VirtualMCPServer CRD

1 detail in Everything

toolhive-operator-0.3.5 Oct 30, 2025 · release notes

ToolHive Operator 0.3.5 adds tool conflict resolution and tools_override in vMCP workload endpoint

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.3.5 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.3.5

Implements tool conflict resolution for Virtual MCP Server (vMCP)
Returns tools_override in the workload GET endpoint

2 details in Everything

v0.5.1 Oct 30, 2025 · release notes

ToolHive v0.5.1 adds vmcp validation command and new port attributes for MCPServer CRDs

└──▷ GET THIS VERSION

$ git clone --branch v0.5.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.5.1

└──▷ USE IT

Validate a Virtual MCP Server configuration before deployment

shell

toolhive vmcp validate <path-to-config.yaml>

Adds vmcp validate subcommand for validating Virtual MCP Server configurations
Introduces new port attributes to MCPServer Custom Resource Definitions (CRDs) for clarity
Implements capability discovery and querying interface for Virtual MCP Server

3 details in Everything

└──▷ BREAKING ON UPGRADE

!MCPServer CRD port attribute names are renamed; existing manifests using old names must update to the new names

toolhive-operator-crds-0.0.47 Oct 27, 2025 · release notes

Adds new port attributes to MCPServer CRD and renames existing ones for clarity.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.47 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.47

Rename MCPServer CRD Port Attributes for Clarity introduces renamed port fields in the MCPServer Custom Resource Definition
adds new port attributes to crds adds additional port configuration options to the MCPServer CRD

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The previous MCPServer CRD Port Attribute names are renamed; existing manifests using the old field names will fail validation.

v0.5.0 Oct 27, 2025 · release notes

ToolHive v0.5.0 adds /health endpoints, OIDC env vars, and GitHub OAuth provider

└──▷ GET THIS VERSION

$ git clone --branch v0.5.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.5.0

Adds GET /health endpoint to all proxy types for Kubernetes health probes
Adds environment variable support for the Oidc.clientSecret field in InlineOIDCConfig
Adds SecretKeyRef support within InlineOIDCConfig for enhanced secret management
Adds GitHub.com OAuth authentication provider for token introspection

4 details in Everything

toolhive-operator-crds-0.0.45 Oct 25, 2025 · release notes

Adds GitHub.com OAuth token introspection and new MCPServer CRD port values.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.45 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.45

toolhive-operator-crds-0.0.44 Oct 24, 2025 · release notes

Adds /health endpoint to proxies and env var support for OIDC client secret in toolhive-operator-crds v0.0.44

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.44 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.44

Adds /health endpoint to all proxy types for Kubernetes health probes
Add environment variable support for OIDC client secret
Add SecretKeyRef support to InlineOIDCConfig for enhanced secret management

3 details in Everything

v0.4.2 Oct 23, 2025 · release notes

ToolHive v0.4.2 adds insecure HTTP OIDC support for local dev and updates operator docs

└──▷ GET THIS VERSION

$ git clone --branch v0.4.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.4.2

└──▷ TRY IT

Enable an insecure HTTP endpoint for local OIDC provider during development when standard HTTPS is not available.

$ toolhive start --oidc.insecure=true

insecure mode added to allow HTTP-based OIDC discovery for local development workflows

1 detail in Everything

toolhive-operator-crds-0.0.42 Oct 23, 2025 · release notes

Adds --insecure-http-oidc flag for local development in Helm chart

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.42 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.42

v0.4.1 Oct 23, 2025 · release notes

ToolHive v0.4.1 adds --network CLI flag, OpenTelemetry attributes, registry API, and /check-contribution command

└──▷ GET THIS VERSION

$ git clone --branch v0.4.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.4.1

└──▷ USE IT

Configure specific network isolation or host networking for a ToolHive instance.

shell

toolhive start --network host

Adds --network CLI option for flexible network configuration.
Adds support for custom OpenTelemetry resource attributes to enrich trace metadata.
Adds a registry data source API endpoint for integration and data access.
Adds /check-contribution command to the Claude integration.

4 details in Everything

toolhive-operator-crds-0.0.40 Oct 22, 2025 · release notes

ToolHive operator CRDs v0.0.40 adds claude /check-contribution command and Registry API Data Source

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.40 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.40

Registry API Data Source feature introduced for fetching tool registry data.

1 detail in Everything

toolhive-operator-0.3.0 Oct 22, 2025 · release notes

Adds --network CLI flag to ToolHive operator and updates base image to v0.4.0

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.3.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.3.0

Adds --network CLI argument to the toolhive-operator command for network configuration
Bases container images on toolhive v0.4.0

2 details in Everything

v0.4.0 Oct 22, 2025 · release notes

ToolHive v0.4.0 adds MCP Remote Proxy CRD support and k8s-export for workloads

└──▷ GET THIS VERSION

$ git clone --branch v0.4.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.4.0

└──▷ USE IT

Export ToolHive workload definitions to Kubernetes manifests for deployment.

shell

toolhive export --format kubernetes

Adds the MCPRemoteProxy Custom Resource Definition (CRD) controller for proxying remote MCP servers in Kubernetes.
Adds the --kubernetes format option to the export command (toolhive export --kubernetes) to generate manifests.
Adds a /proxy-logs endpoint to view logs for managed workloads.

3 details in Everything

toolhive-operator-crds-0.0.38 Oct 22, 2025 · release notes

Adds MCPGroup CRD support and _meta field parsing for ToolHive Operator

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.38 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.38

Adds MCPGroup custom resource definition to manage Kubernetes deployments of Model Context Protocol groups
Adds _meta field parsing in the request parser to handle additional metadata in MCP messages

2 details in Everything

toolhive-operator-0.2.26 Oct 22, 2025 · release notes

Adds MCPGroup support in Kubernetes and MCP _meta field support to request parser.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.26 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.26

Adds MCPGroup support for deploying multiple MCP servers as a group within Kubernetes via the ToolHive Operator Helm chart
Adds _meta field support to the MCP request parser, allowing clients to pass metadata alongside standard requests

2 details in Everything

toolhive-operator-0.2.25 Oct 21, 2025 · release notes

ToolHive adds Kubernetes export format to thv export and remote MCP proxying via CRD controller

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.25 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.25

└──▷ TRY IT

Export current ToolHive tool definitions into Kubernetes manifests for deployment in your cluster.

$ thv export --format kubernetes

Adds kubernetes as a supported format to the thv export command for exporting tool configurations
Introduces MCPRemoteProxy CRD controller enabling remote MCP server proxying capabilities

2 details in Everything

toolhive-operator-0.2.24 Oct 21, 2025 · release notes

ToolHive Operator adds proxy-logs endpoint and client support for Trae IDE and Claude Code agents.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.24 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.24

Add proxy-logs workload endpoint
Add Claude Code skills for documentation and PR workflows
Add Claude Code agents for specialized development tasks

3 details in Everything

toolhive-operator-crds-0.0.36 Oct 17, 2025 · release notes

Adds MCPRemoteProxy CRD definition and schema to ToolHive Operator

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.36 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.36

MCPRemoteProxy Custom Resource Definition (CRD) added via pull #2240

1 detail in Everything

v0.3.9 Oct 16, 2025 · release notes

ToolHive v0.3.9 adds MCPExternalAuthConfig CRD and OIDC RunConfig for the Operator

└──▷ GET THIS VERSION

$ git clone --branch v0.3.9 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.3.9

Adds MCPExternalAuthConfig CRD to define external authentication for MCP resources
Enables OIDC RunConfig in the Kubernetes Operator mode

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Removes flag-driven configuration for oidc, authz, audit, toolsfilter, and OTel from the Operator
!Removes unused flag driven code for podTemplateSpec patch and permission profiles in the operator

toolhive-operator-crds-0.0.35 Oct 16, 2025 · release notes

Adds MCPGroup and MCPExternalAuthConfig CRDs; enforces runconfig via ConfigMap

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.35 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.35

MCPGroup proposal added as a new Custom Resource Definition for the Kubernetes operator.
MCPExternalAuthConfig CRD and its controller are introduced for handling external authentication.
Operator and ProxyRunner now force use of runconfig via ConfigMap, removing legacy flag-driven configuration.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Flag-driven configuration (oidc, authz, audit, toolsfilter, and OTel flags) is removed from the Operator; runconfig must now be provided via ConfigMap.

toolhive-operator-0.2.23 Oct 16, 2025 · release notes

ToolHive Operator adds MCPGroup and MCPExternalAuthConfig CRDs, standardizes on ConfigMap-driven RunConfig

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.23 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.23

Adds MCPGroup CRD proposal for Kubernetes operator to group MCP tools
Adds MCPExternalAuthConfig CRD and controller to manage external authentication for MCP resources
Forces use of runconfig via ConfigMap for Operator and ProxyRunner, removing flag-driven config

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Removes oidc, authz, audit, toolsfilter and OTel flag driven config from Operator
!Removes unused flag driven code for podTemplateSpec patch and permission profiles in operator
!Removes old unused flag driven OIDC functions in Operator

toolhive-operator-0.2.22 Oct 14, 2025 · release notes

Adds RunConfig ConfigMap operator mode and bumps ProxyRunner images to 0.3.8

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.22 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.22

Enables RunConfig ConfigMap in operator mode for externalizing agent configuration.
Bumps toolHive ProxyRunner images to version 0.3.8.

2 details in Everything

v0.3.8 Oct 13, 2025 · release notes

ToolHive v0.3.8 adds OAuth 2.0 token exchange (RFC 8693), configurable secrets via env vars for MCP, and pluggable session storage backends.

└──▷ GET THIS VERSION

$ git clone --branch v0.3.8 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.3.8

Adds support for OAuth 2.0 Token Exchange (RFC 8693) with middleware to automatically swap downstream tickets for upstream credentials
Allows client secrets for token exchange to be configured via environment variables instead of static configuration files
Promotes the MCPRegistry feature to stable status and enables secrets management within the ToolHive MCP server
Introduces a new pluggable storage backend system for session management

4 details in Everything

toolhive-operator-crds-0.0.34 Oct 10, 2025 · release notes

ToolHive Operator CRDs release promotes MCPRegistry feature to stable

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.34 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.34

Promote MCPRegistry feature stabilizes the MCPRegistry Custom Resource Definition (CRD) for production use in Kubernetes.

1 detail in Everything

toolhive-operator-0.2.21 Oct 10, 2025 · release notes

ToolHive operator v0.2.21 promotes the MCPRegistry feature and updates dependency modules.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.21 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.21

Promotes MCPRegistry feature to stable, enabling its use without a feature flag
Updates registry source from toolhive-registry release v2025.10.08 through v2025.10.10

2 details in Everything

toolhive-operator-crds-0.0.33 Oct 7, 2025 · release notes

Adds secrets management support to ToolHive MCP server and implements OAuth 2.0 Token Exchange (RFC 8693)

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.33 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.33

v0.3.7 Oct 6, 2025 · release notes

ToolHive v0.3.7 adds inbound network isolation via host config, OAuth scope array support, and accurate transport auditing.

└──▷ GET THIS VERSION

$ git clone --branch v0.3.7 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.3.7

Adds pkg/testkit package to improve testing infrastructure
Updated status collector with structured error handling for better diagnostics
Proxy mode is now returned in server type for stdio connections
Endpoint URLs now use X-Forwarded-* headers for more accurate construction
Improved Grafana dashboard UID length handling

5 details in Everything

toolhive-operator-crds-0.0.32 Oct 3, 2025 · release notes

ToolHive Operator CRDs 0.0.32 updates registry source and e2e testing infrastructure

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.32 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.32

Updates the embedded registry source to toolhive-registry release v2025.10.03

1 detail in Everything

v0.3.6 Sep 30, 2025 · release notes

ToolHive v0.3.6 adds --enforce flag to MCPRegistry and introduces Git Source Handler for registry content management

└──▷ GET THIS VERSION

$ git clone --branch v0.3.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.3.6

Adds --enforce flag to MCPRegistry to control strict enforcement behavior
Introduces Git Source Handler allowing the registry to pull content from Git repositories

2 details in Everything

toolhive-operator-crds-0.0.30 Sep 24, 2025 · release notes

toolhive-operator-crds 0.0.30 adds enforce flag to MCPRegistry

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.30 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.30

toolhive-operator-crds-0.0.27 Sep 19, 2025 · release notes

ToolHive CRDs v0.0.27 adds Git Source Handler for MCPRegistry

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.27 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.27

v0.3.3 Sep 18, 2025 · release notes

ToolHive v0.3.3 introduces thv group run command and file-based registry provider

└──▷ GET THIS VERSION

$ git clone --branch v0.3.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.3.3

Adds thv group run subcommand with full container and remote server support to manage multiple tools as a group
Introduces a file-based registry provider in thv-registry-api for defining tool sources via local files
Removes the ability to manage MCP servers using partial names; full names are now required

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Partial names can no longer be used to manage MCP servers; you must specify the full server name.

v0.3.2 Sep 17, 2025 · release notes

ToolHive v0.3.2 adds MCPServer restart annotation support and env file dir in configmap

└──▷ GET THIS VERSION

$ git clone --branch v0.3.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.3.2

feat(operator) now supports the MCPServer restart annotation to trigger pod restarts.

1 detail in Everything

v0.3.1 Sep 16, 2025 · release notes

ToolHive v0.3.1 adds OIDC auth, authorization, telemetry, and registry filtering via ConfigMap, plus a new thv-registry-api binary.

└──▷ GET THIS VERSION

$ git clone --branch v0.3.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.3.1

proxy port in workload APIs
Audit flags support
Registry filter
MCPRegistry sync policy

4 details in Everything

toolhive-operator-crds-0.0.25 Sep 15, 2025 · release notes

Adds telemetry propagation, authorization, OIDC auth, and audit flags to the ToolHive Operator ConfigMap CRDs.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.25 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.25

Adds telemetry field in the configmap to support propagating telemetry
Adds authorization field in the configmap to support access control settings
Adds oidc field in the configmap to enable OIDC authentication
Adds audit field in the configmap to configure audit logging flags

4 details in Everything

v0.3.0 Sep 15, 2025 · release notes

ToolHive v0.3.0 adds tool overrides via ToolConfig CRD, multi-workload thv rm/stop commands, and proxy_mode API field.

└──▷ GET THIS VERSION

$ git clone --branch v0.3.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.3.0

└──▷ TRY IT

Remove multiple stopped workloads in a single command.

$ thv rm workload1 workload2

Check the operational mode of a workload via the API.

$ curl -s http://localhost:8080/api/workloads | jq '.[].proxy_mode'

Adds thv rm support for multiple workloads
Adds thv stop support for multiple workloads
Adds ToolConfig CRD for tool filtering and renaming
Adds Tool Override support to CLI

4 details in Everything

toolhive-operator-crds-0.0.23 Sep 12, 2025 · release notes

ToolHive adds ToolConfig CRD for filtering/renaming and proxy_mode API field

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.23 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.23

Adds propagate configmap configuration to runconfig allowing ConfigMaps to drive workload settings via the operator

1 detail in Everything

toolhive-operator-0.2.12 Sep 12, 2025 · release notes

ToolHive operator now supports group registries and tool filtering via ToolConfig CRD.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.12 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.12

Adds a Helm chart for deploying the ToolHive Operator into Kubernetes
Adds ToolConfig CRD for filtering and renaming tools, controlled by the .spec.toolConfigs field

2 details in Everything

toolhive-operator-crds-0.0.22 Sep 10, 2025 · release notes

ToolHive operator adds configmap flag to proxy runner for external config reading.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.22 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.22

toolhive-operator-crds-0.0.21 Sep 9, 2025 · release notes

Adds Tool Middleware config to the HTTP API for the ToolHive Operator

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.21 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.21

toolhive-operator-0.2.11 Sep 9, 2025 · release notes

Adds a Helm chart for deploying the ToolHive Operator and exposes tool middleware configuration via the HTTP API.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.11 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.11

v0.2.17 Sep 9, 2025 · release notes

ToolHive v0.2.17 adds Google OAuth introspection, OpenTelemetry defaults, Kubernetes annotations for Vault, and structured JSON logging.

└──▷ GET THIS VERSION

$ git clone --branch v0.2.17 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.17

Support Google introspection endpoint
Allow setting annotations on the proxy runner pods, use them to set up Vault integration
Enforce structured JSON logging in Kubernetes environments
enables metrics and tracing by default for local CLI
OpenTelemetry Support for Tracing in ToolHive Operator

5 details in Everything

└──▷ BREAKING ON UPGRADE

!metrics and tracing are enabled by default for local CLI instead of disabled

toolhive-operator-0.2.8 Sep 5, 2025 · release notes

Adds a Helm chart for deploying the ToolHive Operator and introduces Streamable HTTP proxy session management with ID routing.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.8 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.8

toolhive-operator-crds-0.0.19 Sep 5, 2025 · release notes

Adds Google introspection support, remote server management APIs, and pod annotations for Vault integration

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.19 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.19

Allow setting annotations on the proxy runner pods to configure external integrations such as Vault.
Support running and managing remote server through APIs.
Support Google introspection endpoint.

3 details in Everything

v0.2.16 Sep 4, 2025 · release notes

ToolHive v0.2.16 adds Goose client support and thv secret get prefix removal.

└──▷ GET THIS VERSION

$ git clone --branch v0.2.16 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.16

thv secret get now returns the raw secret value without a prefix
Adds Goose client integration for remote workloads
Workload list output sorted by name (text and json)

3 details in Everything

v0.2.14 Sep 2, 2025 · release notes

ToolHive v0.2.14 adds LM Studio client support and telemetry for MCP servers in Kubernetes

└──▷ GET THIS VERSION

$ git clone --branch v0.2.14 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.14

Adds lm-studio client backend to enable local inference via LM Studio.
Enables telemetry data collection for ToolHive MCP Servers running in Kubernetes.

2 details in Everything

toolhive-operator-crds-0.0.17 Aug 29, 2025 · release notes

ToolHive operator v0.0.17 adds LM Studio client support, environment variable secrets fallback, and MCP server telemetry for Kubernetes.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.17 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.17

Adds feat(client): add LM Studio support enabling ToolHive to connect as a client to LM Studio instances
Adds Telemetry Support for ToolHive MCP Servers in Kubernetes to collect operational metrics from deployed servers

2 details in Everything

v0.2.12 Aug 26, 2025 · release notes

ToolHive v0.2.12 adds optional Keycloak deployment, remote server management, and upstream MCP registry support.

└──▷ GET THIS VERSION

$ git clone --branch v0.2.12 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.12

└──▷ USE IT

List all Kubernetes resources across all namespaces using the new flag.

shell

toolhive list --runtime kubernetes --all-namespaces

Manage workloads on a remote server, such as restarting a specific tool instance.

shell

toolhive restart <remote-server-id> <tool-id>

THOVERRIDE tool overrides now supported in RunConfig.
Added --all-namespaces flag to the Kubernetes runtime list command for broader visibility.
Optional Keycloak deployment available for local Kind cluster setup.
Support for upstream MCP registry format enables compatibility with standard MCP server listings.
Remote servers are now supported in workload management commands (stop, restart, rm).

5 details in Everything

toolhive-operator-crds-0.0.16 Aug 26, 2025 · release notes

ToolHive operator now supports upstream MCP registry format and allows tool overrides in RunConfig

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.16 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.16

Adds runSpec.toolOverrides support to the RunConfig CRD schema for overriding MCP server binaries/arguments at deploy time
Adds native parsing for the upstream MCP registry JSON format (index.json) alongside the legacy format in .toolhive/config.yaml

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Container runtime detection for Kubernetes deployments now requires the environment variable TOOLHIVE_RUNTIME=kubernetes to be explicitly set (previously optional or auto-detected).

v0.2.11 Aug 22, 2025 · release notes

ToolHive v0.2.11 adds a pluggable container runtime system and out-of-cluster Kubernetes support via TOOLHIVE_RUNTIME

└──▷ GET THIS VERSION

$ git clone --branch v0.2.11 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.11

Adds TOOLHIVE_RUNTIME environment variable to enable the pluggable container runtime system
Enables Kubernetes runtime to operate outside the target cluster for out-of-cluster management

2 details in Everything

v0.2.10 Aug 21, 2025 · release notes

ToolHive v0.2.10 adds an API server builder pattern with middleware support and a new GET Workload Status endpoint.

└──▷ GET THIS VERSION

$ git clone --branch v0.2.10 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.10

Adds an API server builder pattern with middleware support (Add API server builder pattern with middleware support) allowing custom HTTP middlewares to be inserted into the ToolHive server lifecycle
Adds a GET Workload Status API endpoint to retrieve the status of running workloads

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The --remote flag is removed from commands used to run a remote server

v0.2.9 Aug 20, 2025 · release notes

ToolHive v0.2.9 adds MCP server groups, --env-file support, and allows server names in thv mcp commands

└──▷ GET THIS VERSION

$ git clone --branch v0.2.9 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.9

└──▷ USE IT

Load secrets for a new MCP server from an .env file instead of CLI args.

shell

thv run --env-file ./server.env <server_name>

List servers using their registry name rather than a full URL.

shell

thv mcp list <server_name>

thv run --env-file <path> loads environment variables from a file for the spawned server
New groups feature to organize MCP servers into logical groups with client-side control
thv mcp list now accepts MCP server names in addition to URLs

3 details in Everything

toolhive-operator-0.2.6 Aug 19, 2025 · release notes

ToolHive Operator 0.2.6 adds server name support for MCP lists and SSE proxy default.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.6

└──▷ USE IT

Use a human-readable identifier instead of the full URL when listing MCP servers.

shell

thv mcp list my-server-name

thv mcp list now accepts server names in addition to URLs
API defaults to SSE proxy mode

2 details in Everything

toolhive-operator-0.2.5 Aug 19, 2025 · release notes

ToolHive Operator adds groups support and a new Workload API endpoint

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.5 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.5

Enables grouping workloads in ToolHive to organize and manage them as logical units.
Adds POST /workloads/edit REST API endpoint for editing existing workloads.

2 details in Everything

toolhive-operator-0.2.4 Aug 18, 2025 · release notes

ToolHive Operator v0.2.4 adds a Helm chart for Kubernetes deployment and normalizes registry schema tags.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.4 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.4

Normalizes tag values for server and remote_server in the Registry schema

1 detail in Everything

v0.2.8 Aug 18, 2025 · release notes

ToolHive v0.2.8 adds group support to CLI stop command and exposes resource-url via MCPServer CRD

└──▷ GET THIS VERSION

$ git clone --branch v0.2.8 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.8

└──▷ USE IT

Stop all workloads in a specific group without stopping others

shell

toolhive stop --group my-group

Add group flag to toolhive stop command to selectively stop workloads within a group
Expose resource-url parameter through MCPServer CRD for external resource targeting
Add ServiceAccount attribute to the MCPServer CRD

3 details in Everything

toolhive-operator-crds-0.0.15 Aug 18, 2025 · release notes

ToolHive Operator CRDs add ServiceAccount attribute to MCPServer CRD and group flag to stop command

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.15 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.15

└──▷ TRY IT

Stop all tools belonging to a specific group.

$ toolhive stop --group my-tools

Adds ServiceAccount field to the MCPServer CRD schema for specifying the service account to use when creating pods.
Adds --group flag to the toolhive stop CLI command to allow stopping tools by group.

2 details in Everything

toolhive-operator-0.2.2 Aug 15, 2025 · release notes

ToolHive Operator v0.2.2 adds OpenShift deployment support and returns registered groups via API.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.2

Supports deploying the ToolHive Operator into OpenShift
Returns registered groups from the API

2 details in Everything

toolhive-operator-crds-0.0.14 Aug 14, 2025 · release notes

ToolHive CRDs gain schemaVersion field in run config and expose resourceURL on MCPServer

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.14 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.14

└──▷ HOW TO FIND IT

Migrate your custom MCPServer manifests to use the new schema_version field.

📍spec: schema_version: 1 ...

Bind an MCP server to a specific resource endpoint via the CRD.

📍apiVersion: toolhive.stacklok.com/v1 kind: MCPServer spec: resourceUrl: https://api.example.com/mcp

Adds a schema_version field to the run configuration structure (PR #1424)
Exposes the resource-url parameter through the MCPServer CRD for direct mapping (PR #1426)

2 details in Everything

v0.2.7 Aug 13, 2025 · release notes

ToolHive v0.2.7 adds proxy stdio subcommand for Claude Desktop, privileged flag support, and Google Cloud Run MCP server.

└──▷ GET THIS VERSION

$ git clone --branch v0.2.7 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.7

└──▷ USE IT

Run an MCP proxy in stdio mode suitable for direct invocation by Claude Desktop or other LLM clients.

shell

toolhive proxy stdio <container_name>

Deploy an MCP container with elevated privileges for kernel-level operations.

shell

toolhive run --privileged <container_name>

Add proxy stdio subcommand to enable Claude Desktop integration
Add --privileged flag support for MCP containers
Add Google Cloud Run MCP server to the tool registry

3 details in Everything

v0.2.6 Aug 12, 2025 · release notes

ToolHive v0.2.6 adds thv tunnel proxy subcommand, auto-loading secrets from secret manager, and an experimental MCP workload lister.

└──▷ GET THIS VERSION

$ git clone --branch v0.2.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.6

└──▷ USE IT

Proxy a workload via ngrok with custom traffic policy and pooling

shell

thv tunnel <workload-id> --provider ngrok --url <your-url> --traffic-policy <policy> --pooling enabled

List workloads using the new thv ls alias

shell

thv ls

Adds thv tunnel command with options to configure url, traffic policy, and pooling for ngrok tunnels
Auto-loads required secrets from the secret manager when running container images pulled from a registry
Introduces thv ls as a new alias for the existing thv list command
Adds an experimental MCP server (thv mcp serve) to list available workloads in ToolHive

4 details in Everything

└──▷ BREAKING ON UPGRADE

!Container images are now pinned to specific version tags instead of using latest or mutable tags

v0.2.4 Aug 7, 2025 · release notes

ToolHive v0.2.4 adds thv build --dry-run, OCP ImageStream push targets, RFC-9728 discovery, and non-OIDC OAuth support

└──▷ GET THIS VERSION

$ git clone --branch v0.2.4 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.4

--dry-run flag added to thv build command to validate builds without producing artifacts
-o output path flag added to thv build command to specify the destination for generated images
New task targets added to push container images into OpenShift Container Platform (OCP) ImageStreams
Added RFC-9728 discovery endpoint support for enhanced client discovery capabilities
thv proxy now supports non-OIDC OAuth flows in addition to existing OIDC support

5 details in Everything

toolhive-operator-crds-0.0.13 Aug 7, 2025 · release notes

ToolHive Operator CRDs now allow setting the registry via API and configuring group selection for client registration.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.13 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.13

Adds registry configuration option to the ToolHive API endpoints, enabling dynamic registry specification.
Extends client registration logic with a group selection field for organizing tool clients.

2 details in Everything

v0.2.3 Aug 5, 2025 · release notes

ToolHive v0.2.3 adds thv build subcommand for container-only builds and integrates new MCP servers

└──▷ GET THIS VERSION

$ git clone --branch v0.2.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.3

Adds thv build subcommand for building containers without running them.
Adds falcon-mcp server to the registry with network profile support.
Adds plotting-mcp server to the registry.
Supports client configs with "." in JSON keys.
Ensures MCP servers from the registry match their expected provenance information.

5 details in Everything

v0.2.2 Aug 1, 2025 · release notes

ToolHive v0.2.2 adds local registry support via file path, --proxy flag for logs, and servers group APIs

└──▷ GET THIS VERSION

$ git clone --branch v0.2.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.2

└──▷ USE IT

Configure ToolHive to pull containers from a local registry using a file-based path.

shell

thv config set-registry --path /local/registry/config.yaml

View proxy logs for a running ToolHive instance to debug connectivity or request issues.

shell

thv logs --proxy

Adds thv config set-registry to configure a local container registry, supporting file paths for private registries
Adds --proxy flag to thv logs command to view proxy logs
Exposes new APIs for the servers group feature

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The thv config set-registry-url command is renamed to thv config set-registry

v0.2.1 Jul 29, 2025 · release notes

ToolHive v0.2.1 adds tool filtering, group management commands, runconfig export/import, Windsurf client support, and .thvignore volume hiding

└──▷ GET THIS VERSION

$ git clone --branch v0.2.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.1

└──▷ USE IT

Create a server and assign it to a group for organized management

shell

thv run --name myserver --group production

Create a .thvignore file in the mounted volume to hide specific files from the MCP server

shell

# Add 'secrets/' and '*.key' to <path>/.thvignore
cat > .thvignore <<EOF
secrets/
*.key
EOF

Adds --group flag to thv run to add an MCP server to a named group
Adds thv group list, thv group delete, and rm --group commands for workload grouping management
Adds tool filtering capabilities to the thv serve API and MCPServer CRD
Adds .thvignore file support to hide mounted volume files from MCP servers
Adds Windsurf IDE client configuration support for MCP connections

+2 more show less

Adds streamable HTTP transport with auto-detection to the MCP client via a new flag
Adds --github-output flag for e2e tests running in GitHub Actions

7 details in Everything

toolhive-operator-crds-0.0.12 Jul 25, 2025 · release notes

ToolHive operator adds MCPServer tool filtering and runconfig export/import.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.12 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.12

Adds tool filtering capability to the MCPServer CRD.
Implements runconfig export and import functionality.

2 details in Everything

toolhive-operator-0.2.1 Jul 25, 2025 · release notes

ToolHive Operator v0.2.1 adds tool filtering to MCPServer CRD and runconfig export/import.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.1

Adds tools field to MCPServer Custom Resource Definition for selective tool enablement

1 detail in Everything

toolhive-operator-0.2.0 Jul 25, 2025 · release notes

Adds --group flag to thv run, new runtime check command, streamable HTTP MCP support, and Helm chart for operator

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.2.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.2.0

└──▷ TRY IT

Launch a tool and assign it to a group for logical organization

$ thv run --group analytics your-tool

Verify that all required runtime dependencies are installed correctly before deployment

$ thv runtime check

Deploy the ToolHive Operator to your Kubernetes cluster using the new Helm chart

$ helm install toolhive-operator ./charts/toolhive-operator

--github-output flag added to e2e tests for GitHub Actions CI integration
File-based status tracking implementation for state persistence
--group flag added to thv run command for MCP server grouping
custom_metadata field added to the registry schema
New thv runtime check command for verifying runtime dependencies

+5 more show less

New thv list-groups command to display existing tool groups
Tool filtering capability added to the thv serve API endpoint
Streamable HTTP support enabled in MCP client with auto-detection and transport flag
Helm chart provided for deploying the ToolHive Operator into Kubernetes
Operator chart migrated to use proxyrunner image

10 details in Everything

└──▷ BREAKING ON UPGRADE

!The workload label group is removed; use --group on create or the new list-groups command instead

v0.2.0 Jul 23, 2025 · release notes

ToolHive v0.2.0 adds custom_metadata to MCP servers, VS Code mcp.json support, and proxy session management

└──▷ GET THIS VERSION

$ git clone --branch v0.2.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.2.0

Adds custom_metadata property to MCP server configuration for arbitrary key-value metadata on each server entry
Uses mcp.json as the standard location for generating VS Code client MCP configuration (requires VS Code 1.102+)
Enables proxy session management, allowing new flags or endpoints to control isolated proxy sessions

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The deprecated --port flag is removed; use --proxy-port instead

v0.1.9 Jul 17, 2025 · release notes

Adds --label / -l flags to thv run and thv list for workload tagging and filtering

└──▷ GET THIS VERSION

$ git clone --branch v0.1.9 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.1.9

└──▷ USE IT

Run a workload with specific labels for later filtering

shell

thv run --label env=prod --label team=backend <tool-name>

List only workloads matching specific labels

shell

thv list -l env=prod

Adds -l/--label flag to thv run and thv list commands to attach labels to workloads for filtering

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!--proxy-port conflict is now a fatal error instead of silently selecting a random port

v0.1.8 Jul 15, 2025 · release notes

ToolHive v0.1.8 adds operator CRD options for JWK CA bundles, proxy env vars, splits ProxyRunner binary, and moves client commands to thv client

└──▷ GET THIS VERSION

$ git clone --branch v0.1.8 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.1.8

thv client subcommand group now contains client configuration commands (moved from root)
Operator CRD supports spec.jwk.caBundle to specify a CA bundle for fetching JWKs
Operator CRD supports spec.jwk.auth to configure authentication when fetching JWKs
Operator allows setting environment variables for the proxy server via new spec fields
ProxyRunner Capability is split into a separate binary for Kubernetes deployments

+1 more show less

API middleware checks for updates on every API call using a new User Agent implementation

6 details in Everything

└──▷ BREAKING ON UPGRADE

!Client configuration commands are no longer available at the root thv level; they are now under the thv client subcommand group

toolhive-operator-crds-0.0.11 Jul 11, 2025 · release notes

ToolHive Operator adds environment variable support for the proxy server

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.11 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.11

Add proxy.env field to CRDs to inject environment variables into the proxy server

1 detail in Everything

toolhive-operator-crds-0.0.10 Jul 11, 2025 · release notes

Adds CA bundle and authentication options for JWK fetching in ToolHive Operator CRDs

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.10 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.10

Adds new caBundle and authentication configuration fields to the ToolHive Operator CRD to allow custom CA verification and authenticated JWK fetching.
Enables secure integration with private or corporate PKI setups by permitting TLS certificate authority bundles when querying JWK endpoints.

2 details in Everything

v0.1.6 Jul 10, 2025 · release notes

ToolHive v0.1.6 adds StreamableHTTP protocol for MCP servers in Kubernetes and support for private OCI registries

└──▷ GET THIS VERSION

$ git clone --branch v0.1.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.1.6

└──▷ BREAKING ON UPGRADE

!port CLI flag replaced by proxy-port

toolhive-operator-0.1.5 Jul 9, 2025 · release notes

Adds a Helm chart for deploying the ToolHive Operator into Kubernetes.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.1.5 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.1.5

└──▷ USE IT

Install or upgrade the ToolHive Operator via Helm.

shell

helm install toolhive-operator --namespace toolhive <path-to-chart>

v0.1.5 Jul 9, 2025 · release notes

ToolHive v0.1.5 adds experimental Rancher Desktop support on Mac.

└──▷ GET THIS VERSION

$ git clone --branch v0.1.5 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.1.5

v0.1.3 Jul 8, 2025 · release notes

ToolHive v0.1.3 adds streamable HTTP proxy for STDIO servers and tab-completion for MCP server names

└──▷ GET THIS VERSION

$ git clone --branch v0.1.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.1.3

Adds --transport streamable-http option to the th server run command to proxy STDIO MCP servers over Streamable HTTP.
Enables shell auto-completion for MCP server names registered in ToolHive when using the CLI.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Removed deprecated MCP servers from the registry; th server run will fail if referencing a removed server.

v0.1.2 Jul 2, 2025 · release notes

ToolHive v0.1.2 adds MCP debug commands (mcp/tools, mcp/resources, mcp/prompts), operator authz config, OpenTelemetry management, and random host port selection for Docker containers.

└──▷ GET THIS VERSION

$ git clone --branch v0.1.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.1.2

Adds mcp/tools, mcp/resources, and mcp/prompts subcommands to list available MCP tools, resources, and prompts
Introduces an authz configuration section in the operator settings for access control policy management
Adds OpenTelemetry configuration management capabilities for tracing and metrics

3 details in Everything

toolhive-operator-crds-0.0.9 Jul 2, 2025 · release notes

Adds readiness/liveness probes to proxy; logs Cedar diagnostics; updates MCP fetch dependency

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.9 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.9

Add readiness and liveness probes configuration for the proxy container in the Helm chart
Log the Cedar diagnostics policy output during operator startup
Replace the mcp/fetch dependency with stackloklabs/gofetch for tool MCP fetching

3 details in Everything

toolhive-operator-crds-0.0.8 Jul 1, 2025 · release notes

toolhive-operator-crds v0.0.8 adds authz config support to the operator

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.8 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.8

v0.1.1 Jun 30, 2025 · release notes

ToolHive v0.1.1 adds proxy log visibility and registry metadata schema

└──▷ GET THIS VERSION

$ git clone --branch v0.1.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.1.1

Adds redirect Squid access logs to stdout to expose ingress/egress proxy logs in the CLI output.
Adds JSON schema for the registry to validate registry data structures.
Adds new fields to registry info output via the thv registry list command update.

3 details in Everything

v0.1.0 Jun 26, 2025 · release notes

ToolHive v0.1.0 adds new CLI auto-discovery flow and a logs API endpoint

└──▷ GET THIS VERSION

$ git clone --branch v0.1.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.1.0

Added logs API endpoint to expose tool execution logs programmatically
New CLI-based client auto-discovery flow with bulk registration and unregistration operations

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The previous auto_discovery logic has been removed from the CLI, replaced by the new client registration setup; users must use the new bulk registration/unregistration workflow.

v0.0.48 Jun 24, 2025 · release notes

ToolHive v0.0.48 adds network isolation with ingress/egress proxies, Streamable HTTP support, and bulk API endpoints

└──▷ GET THIS VERSION

$ git clone --branch v0.0.48 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.48

Initial support for network isolation using ingress and egress proxies for MCP servers
Support for the Streamable HTTP protocol for MCP servers
New --server flag on the regup command to target specific server updates
Implemented API for unregistering clients
Implemented new bulk workload API endpoints

+4 more show less

Stop and restart operations are now asynchronous; added a new stop all operation
Workload deletion is now asynchronous
Allows tokens to expire and refresh automatically
Adds MongoDB, Playwright, and Notion MCP servers to the registry

9 details in Everything

toolhive-operator-crds-0.0.7 Jun 23, 2025 · release notes

ToolHive operator CRDs v0.0.7 adds unregistering clients API, async restart/stop/deletion, secret provider setup, and streamable HTTP client support

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.7 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.7

Implements an API for unregistering clients to remove them from the server's registry.
Adds a new explicit secret provider setup mechanism that forces its use for encrypted providers.
Makes workload deletion asynchronous via Make workload deletion asynchronous capability.
Makes stop operation async and adds a stop all operation for broader control.
Makes restart an async operation to improve responsiveness during client lifecycle management.

+3 more show less

Adds support for streamable HTTP clients, enabling new protocol handling in MCP servers.
Allows isolating container network only when desired via only isolate container network when desired logic.
Uses a different port for ingress proxy by default via the use different port for ingress proxy update.

8 details in Everything

└──▷ BREAKING ON UPGRADE

!Force OS keyring for encrypted provider changes the underlying storage mechanism for secrets, potentially requiring migration of existing secret data.

v0.0.47 Jun 12, 2025 · release notes

ToolHive v0.0.47 adds comprehensive OpenTelemetry integration for MCP proxies

└──▷ GET THIS VERSION

$ git clone --branch v0.0.47 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.47

v0.0.46 Jun 10, 2025 · release notes

Adds --remote-auth-callback-port flag to thv proxy, custom audit logging levels, and a common healthcheck format

└──▷ GET THIS VERSION

$ git clone --branch v0.0.46 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.46

└──▷ USE IT

Start the proxy and specify a non-standard port for the remote auth callback to fit network constraints.

shell

thv proxy --remote-auth-callback-port 8081

Adds --remote-auth-callback-port CLI flag to thv proxy for controlling the remote authentication callback port
Adds configurable custom audit levels for structured audit logging via tool configuration
Implements a common healthcheck format used by all proxy runners

3 details in Everything

v0.0.45 Jun 9, 2025 · release notes

ToolHive v0.0.45 adds parallel test support and configures K8s proxy runner pods

└──▷ GET THIS VERSION

$ git clone --branch v0.0.45 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.45

Implements parallel test support across the codebase
Sets TOOLHIVE_SECRETS_PROVIDER=none for K8s proxy runner pods

2 details in Everything

v0.0.44 Jun 9, 2025 · release notes

ToolHive v0.0.44 adds a None secrets provider for Kubernetes environments

└──▷ GET THIS VERSION

$ git clone --branch v0.0.44 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.44

└──▷ USE IT

Run ToolHive in a Kubernetes pod with external secret management, skipping internal secret storage.

shell

toolhive run --secrets-provider none

v0.0.43 Jun 9, 2025 · release notes

ToolHive v0.0.43 adds multi-namespace Helm support, TOOLHIVE_SECRETS_PROVIDER env var, and Workload API endpoints

└──▷ GET THIS VERSION

$ git clone --branch v0.0.43 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.43

TOOLHIVE_SECRETS_PROVIDER environment variable lets you specify the secrets provider without CLI flags
Operator Helm chart now supports Multi-Namespace configuration to deploy across namespaces

2 details in Everything

toolhive-operator-0.0.10 Jun 5, 2025 · release notes

Helm chart gains Multi-Namespace Support to scope operator watches across multiple namespaces.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.0.10 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.0.10

└──▷ TRY IT

Deploy the operator to watch a specific list of namespaces instead of just one or all.

$ helm install toolhive-operator oci://ghcr.io/stacklok/charts/toolhive-operator --set multiNamespace.enabled=true --set multiNamespace.namespaces='{ns1,ns2}'

Adds multiNamespace configuration option to the ToolHive Operator Helm chart to enable watching resources in multiple namespaces.

1 detail in Everything

v0.0.41 Jun 5, 2025 · release notes

Adds client discovery function and endpoint

└──▷ GET THIS VERSION

$ git clone --branch v0.0.41 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.41

└──▷ TRY IT

Discover the running client's address via HTTP.

$ curl http://localhost:8080/api/v1/discovery/client

v0.0.40 Jun 5, 2025 · release notes

ToolHive v0.0.40 adds OAuth 2.0/OIDC auth for proxy/management APIs, MCP audit logging, and registry API.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.40 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.40

toolhive mcp start proxy command now supports --oauth, --oidc-issuer-url, and related flags to enable OAuth 2.0/OIDC authentication
Management API server gains OIDC authentication support via --oidc-* flags
MCPServer CRD in the operator adds spec.auditLog and spec.auth fields for MCP audit logging and OIDC middleware configuration

3 details in Everything

toolhive-operator-crds-0.0.6 Jun 5, 2025 · release notes

ToolHive Operator CRDs add OIDC middleware config to MCPServer CRD and OAuth 2.0/OIDC support for the proxy command.

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.6

Adds OIDC fields to the MCPServer CRD spec to enable OIDC middleware configuration

1 detail in Everything

toolhive-operator-crds-0.0.5 Jun 3, 2025 · release notes

New audit log middleware for MCP servers and ability to override annotations/labels on operator resources

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.5 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.5

v0.0.39 Jun 2, 2025 · release notes

ToolHive v0.0.39 adds thv inspector, registry URL management, Windows support, and Cline auto-discovery.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.39 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.39

└──▷ USE IT

Debug an MCP server using the built-in inspector container

shell

thv inspector <server-name>

thv inspector subcommand spawns an MCP inspector container for debugging
set, get, and unset commands for managing registry URLs
Windows platform support added to the CLI tooling

3 details in Everything

toolhive-operator-crds-0.0.4 May 31, 2025 · release notes

Adds target-port support to the ToolHive Kubernetes Operator for precise port mapping

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.4 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.4

Adds target-port field to the ToolHive Operator CRD spec to specify the container port

1 detail in Everything

toolhive-operator-0.0.7 May 30, 2025 · release notes

ToolHive Operator 0.0.7 adds registry URL management, Cline auto-discovery, MCP inspector, OIDC validation, and log pruning

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.0.7 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.0.7

└──▷ TRY IT

Inspect the capabilities of a specific MCP server by spawning an isolated inspector container.

$ thv inspector <mcp_server_name>

Manage custom tool registries directly from the CLI.

$ thv registry add https://example.com/registry

Clean up orphaned log files to reclaim disk space.

$ thv logs prune

TOOLHIVE_DEV environment variable can now be set to enable developer mode in the root command.
New registry add, registry get, and registry unset commands manage tool registry URLs.
Cline auto-discovery support allows automatic detection of Cline tools.
New thv inspector subcommand spawns an MCP/inspector container for a specified MCP server.
thv logs prune subcommand cleans up orphaned log files.

+1 more show less

OIDC discovery support is added for JWT validation.

6 details in Everything

v0.0.38 May 29, 2025 · release notes

ToolHive v0.0.38 adds Terraform MCP server, CA cert support, and local path handling in go:// protocol

└──▷ GET THIS VERSION

$ git clone --branch v0.0.38 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.38

└──▷ USE IT

Reference a tool located on the local filesystem rather than a remote registry using the new go:// URI scheme.

shell

toolhive run go:///home/user/my-tools/custom-tool

Configure ToolHive to trust internal corporate CA certificates when connecting to restricted MCP servers.

shell

TOOLHIVE_CA_CERT_FILE=/etc/ssl/certs/internal-ca.pem toolhive start

insecure_allow_all set to true in the newly added Terraform MCP server entry
Adds go:// protocol support for resolving tools via local file paths
New CA certificate configuration options for corporate proxy environments

3 details in Everything

toolhive-operator-0.0.6 May 28, 2025 · release notes

Adds CA certificate support and anonymous/local auth middleware to the ToolHive Operator

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.0.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.0.6

Adds insecure_allow_all config option to control the Terraform MCP server's authentication settings
Adds CA certificate support for corporate environments via new configuration paths
Implements anonymous/local authentication middleware and authorization-based filtering for MCP list operations

3 details in Everything

v0.0.37 May 27, 2025 · release notes

ToolHive v0.0.37 adds remote registry loading and operator-spawned proxy pod binding to 0.0.0.0

└──▷ GET THIS VERSION

$ git clone --branch v0.0.37 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.37

Adds --remote-registry-url flag to load tool definitions from a remote registry.
Makes operator-spawned proxy pods bind to 0.0.0.0 instead of localhost.
Removes the target_port field from k8s, osv, and oci MCP server entries in the registry.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The target_port field is no longer supported in registry entries for k8s, osv, and oci MCP servers.

toolhive-operator-0.0.5 May 27, 2025 · release notes

ToolHive Operator v0.0.5 adds Helm chart for deployment, remote registry loading, and host binding for proxy pods

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.0.5 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.0.5

Adds logic and configuration keys for loading tools from a remote registry via pull request #423
Makes operator-spawned proxy pods bind to host 0.0.0.0 for external access

2 details in Everything

v0.0.35 May 22, 2025 · release notes

ToolHive v0.0.35 adds UNIX socket binding, Sigstore provenance verification, and the ocireg-mcp registry.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.35 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.35

└──▷ USE IT

Run the ToolHive server so that it listens on a local Unix socket instead of TCP, bypassing port conflicts.

shell

thv serve --socket-path /tmp/toolhive.sock

Adds support for binding the thv server to a UNIX socket via the --socket-path flag, enabling Unix-domain communication without TCP ports
Introduces provenance verification using Sigstore and Attestations, with visual indicators in security logs during installation or update operations
Adds the ocireg-mcp tool to the registry, allowing cyber tooling to interface with OCI container registries

3 details in Everything

v0.0.34 May 20, 2025 · release notes

ToolHive v0.0.34 adds an API server with endpoints to start, restart, list, get, and delete MCP servers.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.34 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.34

└──▷ TRY IT

Bind the ToolHive API server to a public interface (e.g., for remote access or tunneling)

$ toolhive run --host 0.0.0.0

Manage an MCP server via the new API endpoints

$ # Start a new server
curl -X POST http://localhost:8080/api/v1/mcp/servers

# List running servers
curl http://localhost:8080/api/v1/mcp/servers

# Stop a specific server
curl -X DELETE http://localhost:8080/api/v1/mcp/servers/<server-id>

Install the ToolHive Operator in a Kubernetes cluster using the new Helm charts

$ # Add the Helm repository
helm repo add toolhive https://stacklok.github.io/toolhive/

# Install the operator
curl -L -o toolhive-operator.tar.gz https://github.com/stacklok/toolhive/releases/download/v0.0.34/toolhive-operator-v0.0.34.tgz
tar -xzf toolhive-operator.tar.gz
cd toolhive-operator
helm install toolhive . 
# Note: The release notes mention the chart exists; verify specific repo URL/chart name in docs

--host flag for the CLI and API server to bind to a specific network interface
Initial API server implementation exposing lifecycle endpoints for MCP servers
Support for custom container socket paths via the Docker client
Operator Helm chart (toolhive-operator) and CRD chart added to the distribution

4 details in Everything

toolhive-operator-crds-0.0.3 May 20, 2025 · release notes

Adds ToolHive Operator CRD Helm chart and initial API server endpoints for managing MCP servers

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-crds-0.0.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-crds-0.0.3

Add Helm chart for installing the ToolHive Operator CRDs into Kubernetes (toolhive-operator-crds)
Add support for --host flag to bind the CLI/API to a specific interface
Implement REST API endpoints for starting MCP servers, listing, getting, deleting, and stopping them

3 details in Everything

toolhive-operator-0.0.3 May 20, 2025 · release notes

ToolHive Operator adds Helm chart deployment and API endpoints for MCP server lifecycle management

└──▷ GET THIS VERSION

$ git clone --branch toolhive-operator-0.0.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout toolhive-operator-0.0.3

Adds the toolhive-operator Helm chart for deploying the operator into Kubernetes
Introduces a new API server with endpoints for listing, getting, stopping, deleting, and restarting tools
Supports specifying custom container socket paths via the Docker client
Adds the --host flag to control the bind address

4 details in Everything

v0.0.32 May 9, 2025 · release notes

ToolHive v0.0.32 adds a --tail flag to the logs subcommand for streaming output.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.32 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.32

└──▷ USE IT

Monitor logs from a running ToolHive instance as they are generated.

shell

toolhive logs --tail

v0.0.31 May 6, 2025 · release notes

ToolHive v0.0.31 adds custom CA cert support for container builds and 1Password secret integration

└──▷ GET THIS VERSION

$ git clone --branch v0.0.31 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.31

feat adds --ca-cert flag (and associated environment variable) to allow passing custom CA certificates for container image builds, enabling use behind air-gapped or corporate proxy environments.
feat adds 1Password (op) secret integration, allowing ToolHive to fetch secrets directly from a 1Password vault during container build workflows without writing them to local files.

2 details in Everything

v0.0.28 May 6, 2025 · release notes

ToolHive v0.0.28 introduces JWT middleware for token validation to secure tool endpoints

└──▷ GET THIS VERSION

$ git clone --branch v0.0.28 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.28

v0.0.27 May 2, 2025 · release notes

Adds Claude Code Client support to ToolHive for managing Claude-based tasks

└──▷ GET THIS VERSION

$ git clone --branch v0.0.27 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.27

Adds claude_code client type to enable Claude Code integration

1 detail in Everything

v0.0.26 May 1, 2025 · release notes

ToolHive v0.0.26 adds pod template spec to MCPServer CRD for Kubernetes customization

└──▷ GET THIS VERSION

$ git clone --branch v0.0.26 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.26

Adds podTemplateSpec field to the MCPServer Custom Resource Definition (CRD) to allow configuring the underlying Kubernetes Pod.
Adds documentation for setting up ToolHive with Kind.

2 details in Everything

v0.0.23 Apr 28, 2025 · release notes

Adds debug flag to control logger output for troubleshooting.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.23 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.23

Connects the logger to the --debug flag to enable or disable debug logging

1 detail in Everything

v0.0.19 Apr 24, 2025 · release notes

ToolHive v0.0.19 adds a Kubernetes Operator, pod template patching, go:// transport, and packaged MKP MCP server.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.19 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.19

└──▷ TRY IT

Use the new Go transport protocol in a client or configuration.

$ go get github.com/stacklok/toolhive/protocol/go
# Use go:// transport URL for container communication
container_url := 'go://localhost:8080'

Adds the Kubernetes Operator for cluster-wide deployment
Add Kubernetes pod template patching support (podTemplate field in CRs)
Add go:// transport protocol for golang containers

3 details in Everything

v0.0.16 Apr 19, 2025 · release notes

ToolHive v0.0.16 introduces the regup utility and changes the default permission profile to network

└──▷ GET THIS VERSION

$ git clone --branch v0.0.16 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.16

Adds regup, a standalone utility for updating the ToolHive registry data
Changes the default permission profile for tools from the previous default to network

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The default permission profile for tools is now network, changing behavior if you relied on the previous implicit or explicit non-network default.

v0.0.15 Apr 16, 2025 · release notes

ToolHive v0.0.15 adds YAML support for CedarConfig authorization and a new formatted logging API

└──▷ GET THIS VERSION

$ git clone --branch v0.0.15 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.15

Adds CedarConfig format support for YAML alongside existing formats in the authorization framework
Adds dedicated formatted logging functions to the server package

2 details in Everything

v0.0.13 Apr 14, 2025 · release notes

ToolHive v0.0.13 adds Kubernetes RBAC resources support and improves MCP client registration.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.13 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.13

Adds Kubernetes RBAC resource manifests for managing ToolHive permissions
New registered clients automatically receive the current list of MCPs

2 details in Everything

v0.0.10 Apr 11, 2025 · release notes

ToolHive v0.0.10 adds dynamic npm/uv MCP server support.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.10 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.10

none permission profile (renamed from stdio) now disables all tool access for MCP servers
Dynamic execution of npm and uv-based MCP servers without pre-installed binaries

2 details in Everything

└──▷ BREAKING ON UPGRADE

!stdio permission profile renamed to none; existing configurations using stdio will break until updated.

v0.0.6 Apr 9, 2025 · release notes

Adds --auto-remove flag to run, restart policy unless-stopped, and auto-mgmt of MCP servers in client config.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.6 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.6

Removes MCP servers from client config if autodiscovery is enabled with registered clients

1 detail in Everything

v0.0.5 Apr 7, 2025 · release notes

ToolHive v0.0.5 allows secret set to read secrets from stdin

└──▷ GET THIS VERSION

$ git clone --branch v0.0.5 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.5

└──▷ USE IT

Pipe a secret value directly into ToolHive without creating an intermediate file.

shell

echo "my-secret-value" | toolhive secret set MY_KEY -

Adds stdin input support for the secret set subcommand

1 detail in Everything

v0.0.4 Apr 7, 2025 · release notes

ToolHive v0.0.4 adds Semgrep MCP and Grafana OSS to the registry with structured logging.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.4 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.4

Adds Semgrep MCP server to the tool registry
Adds Grafana OSS instance type to the registry
Introduces structured and unstructured logging output

3 details in Everything

v0.0.3 Apr 7, 2025 · release notes

ToolHive v0.0.3 adds vt run kubernetes support, config subcommand, encrypted secrets, and new editor integrations.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.3

Adds basic stdio vt run for kubernetes to launch tools in a cluster
Adds config subcommand to vibetool for managing configuration file structure
Supports encrypted secrets with AES-GCM, reading new secrets from stdin instead of arguments
Adds OS keyring integration for encryption password storage
Adds list-registered-clients subcommand to view registered autoconfiguration clients

+1 more show less

Adds support for VSCode Insider and Visual Studio (non Insider) as client integrations

6 details in Everything

└──▷ BREAKING ON UPGRADE

!The project has been renamed from vibetool to ToolHive, so the vt CLI binary name may have changed in installation artifacts
!Removed unsupported configuration integration options

v0.0.2 Mar 27, 2025 · release notes

ToolHive v0.0.2 adds --secrets-provider keychain flag and new MCP server support.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.2

Adds --secrets-provider CLI flag with keychain value to specify the secrets backend
Adds Firecrawl MCP server to the list of supported servers
Adds Pushover MCP server to the list of supported servers
Adds hass-mcp (Home Assistant) to the list of supported MCP servers

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The formula release label is renamed from formula to vt as SLSA support is disabled.

v0.0.1 Mar 27, 2025 · release notes

ToolHive v0.0.1 adds vt run for MCP servers with directory mounting, secrets management, and a vt ls alias.

└──▷ GET THIS VERSION

$ git clone --branch v0.0.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:
$ git checkout v0.0.1

└──▷ USE IT

Run an MCP server with a local directory mounted for persistent data.

shell

vt run --mount /host/path:/container/path <server-image>

Search for a specific MCP server using the new short subcommand.

shell

vt search <query>

Adds directory mounting capabilities to the vt run command for containerized tools
Adds directory mounting capabilities to the vt registry run command for containerized tools
Adds Cedar-based authorization framework support for MCP Servers
Adds basis for Kubernetes runtime execution via internal refactors
Introduces the vt search subcommand to shorten the previous search invocation

+2 more show less

Adds the ls alias for the existing vt registry list command
Changes the released binary name from vibetool to vt and excludes Windows builds

7 details in Everything

└──▷ BREAKING ON UPGRADE

!The main CLI binary is now named vt instead of vibetool; scripts calling vibetool must be updated.
!Windows builds are no longer provided; users on Windows must use WSL or another method to run the cyber tool.

ToolHive

Summary

How ToolHive helps

Languages

Features

What ToolHive offers you

release 68 total

docs

example 11 total

release 32 total

example

release 94 total

example 9 total

release 107 total

docs

example 12 total

release 9 total

release 23 total

example

release 43 total

example

release 32 total

command line

example 9 total

release 32 total

example

release 32 total

example

release 29 total

release 23 total

command line

example

release 17 total

example

release 14 total

example

release 11 total

example

release 10 total

example

release 10 total

release 7 total

command line

example

release 9 total

release 7 total

release 7 total

release

release

release

example

release

example

release

example

release

example

release

release

command line

release

release

release

example

release

release

release

release

release

release

release

release

release

Command line

Score card

Trajectory

Release-note detail over time

Coverage

Other 2

Releases