πΊοΈ Roadmap β what AnythingMCP is shipping next #147
Replies: 28 comments
π v0.1.23 β silence MCP duplicate-registration warnings is outPublished 2026-05-10 β see the full release notes. Silences The internal See #152 for details. Update with |
π v0.1.24 β OpenAPI 3.1, healthcheck UX, SSRF allowlist, re-import preserve, MCP coercion is outPublished 2026-05-12 β see the full release notes. Six customer-driven fixes from the FastAPI / koch-filesystem-bridge integration: Connector import / parsing
Tool runtime
Test / debug UX
Security / on-prem
DB migrations (both additive, nullable, no backfill)
Update with |
π v0.1.25 β Sorare adapter, LOGIN_TOKEN auth, GraphQL schema-slicing for every connector is outPublished 2026-05-18 β see the full release notes. First release that ships a full GraphQL story end-to-end. The Sorare Fantasy Football adapter lands, the new `LOGIN_TOKEN` AuthType lets adapters describe any bcrypt-style sign-in handshake declaratively, and every GraphQL connector β catalog or user-created β now gets a server-side schema-slicing proxy baked in so agents can drive APIs whose introspection is disabled or whose SDL is too large for the context window. New: Sorare Fantasy Football adapter (18 tools)Built-in adapter for Sorare's GraphQL API. Bcrypt-salted login, JWT cached for ~30 days, automatic re-issue 24 h before expiry and on any 401. Featured on the homepage with `priority: 100`. Tools (live-audited against api.sorare.com with real credentials, 17/19 happy-path pass, the two remaining are deliberate NOT_FOUND probes against fake IDs):
Five multilingual MDX guides for the marketing site (en/de/it Γ ChatGPT/Claude/OpenClaw/generic MCP) plus five SEO-targeted Markdown guides under `docs/guides/` so GitHub Search surfaces `sorare-to-mcp`, `connect-sorare-to-claude`, `connect-sorare-to-chatgpt`, `connect-sorare-to-openclaw`, `connect-sorare-to-cloud`. New: `LOGIN_TOKEN` AuthTypeA declarative spec for APIs that POST credentials β receive a long-lived bearer, optionally with client-side bcrypt against a salt fetched from the upstream. Adapter authors describe the entire flow in JSON; no per-provider code. The shared `LoginTokenService` handles salt fetch β bcrypt β `signIn` β token cache (in-memory + AES-256-GCM-encrypted DB row in the new `connector_auth_cache` table) β proactive refresh β₯ 24 h before expiry β forced re-login on 401, all behind a per-key mutex. Wired into both the REST and GraphQL engines (`injectAuth` + 401-retry path). Field-by-field reference: `docs/connectors/login-token-auth.md`. New: GraphQL schema-slicing proxy β every GraphQL connector, automaticallyUpdate with |
π v0.1.26 β License activation handoff is outPublished 2026-05-19 β see the full release notes. HighlightsEnd-to-end license auto-activation between the cloud instance and
Companion PRs
Update with |
π v0.1.27 β Tenant-scoped license lookup is outPublished 2026-05-19 β see the full release notes. HighlightsSecurity/billing fix: cross-tenant license entitlement leak in cloud mode. Pre-fix, an org with zero licenses could see another org's key as "License verified successfully" because
Self-hosted single-tenant behavior is unchanged β the Companion PR
Update with |
π v0.1.28 β LicenseWall covers cloud no-license + MCP runtime check is org-scoped is outPublished 2026-05-19 β see the full release notes. Follow-ups to v0.1.27 β see #221. LicenseWall now blocks the cloud UI when an org has no license (was silently allowed through after the per-org isolation fix). dynamic-mcp-tools now passes organizationId through to checkLicenseActive so MCP tool calls work in cloud. Update with |
π API Auth Update is outPublished 2026-05-20 β see the full release notes. What's Changed
New Contributors
Full Changelog: v0.1.28...v0.1.29 Update with |
π v0.1.30 β DATEV + SAP + Playtomic + GA4 (9 PRs) is outPublished 2026-05-23 β see the full release notes. What's Changed
New Contributors
Full Changelog: v0.1.29...v0.1.30 Update with |
π v0.1.31 β Etsy OAuth2 + Deutsche Bahn rewrite + 7 reverse-engineered SaaS adapters is outPublished 2026-05-28 β see the full release notes. Adapters
Fixes
DiffUpdate with |
π v0.1.32 β Proxy / Web-Unblocker + Onboarding + Help Scout OAuth2 is outPublished 2026-05-31 β see the full release notes. β¨ HighlightsProxy / Web-Unblocker (#280, #281, #282)Route a tool's outbound request through a proxy or web-unblocker (e.g. Zyte API proxy mode) to reach anti-bot / geo / rate-limited APIs. Fixes the Deutsche Bahn connector that 403'd on Akamai-protected endpoints.
Onboarding (#272, #273, #276)
Connectors
Fixes
DiffUpdate with |
π v0.1.33 is outPublished 2026-06-10 β see the full release notes. Fixes
Connectors
NotesNo breaking changes. Tenant isolation remains fail-closed and was verified against production data. Update with |
π v0.1.34 is outPublished 2026-06-11 β see the full release notes. Maintenance release: a server-stability fix plus self-hosting and packaging improvements. Fixed
Self-hosting
Packaging / license
Upgradedocker compose pull && docker compose up -dNo configuration changes required. Update with |
π v0.2.0 β Knowledge Graph, AI skills, analytics & security hardening is outPublished 2026-06-28 β see the full release notes. v0.2.0 β Knowledge Graph, AI skills, usage analytics & security hardeningA "smart, AI-empowered gateway" release. All AI features are opt-in and inert by default.
Update with |
π v0.2.2 is outPublished 2026-06-28 β see the full release notes. v0.2.2Knowledge Graph + AI skills + usage analytics + security hardening, with the Features (since 0.1.x):
Stability fixes (0.2.1 β 0.2.2):
All migrations are additive and auto-applied on container start. Update with |
π v0.2.3 is outPublished 2026-06-29 β see the full release notes. Fixes
Full changelog: v0.2.2...v0.2.3 Update with |
π v0.2.4 β MCP OAuth/OIDC discovery for third-party clients is outPublished 2026-06-30 β see the full release notes. Fixed
Update with |
π v0.2.5 β OAuth /authorize idempotency fix is outPublished 2026-06-30 β see the full release notes. Fixed
Update with |
π v0.2.6 β Copilot Studio Streamable MCP compatibility is outPublished 2026-06-30 β see the full release notes. Fixed
Update with |
π v0.3.0 β Redesign (sidebar app shell), cloud onboarding/conversion & KG improvements is outPublished 2026-06-30 β see the full release notes. HighlightsRedesign β sidebar app shell
Cloud onboarding & trialβpaid conversion (cloud-only)
Knowledge graph
All cloud-only features are gated and inert in self-hosted; no new recurring AI cost. Builds on the recent Copilot-Studio MCP transport/OAuth compatibility work. Update with |
π v0.3.4 β MCP OAuth consent screen & CSRF hardening is outPublished 2026-07-14 β see the full release notes. Security
Features
Fixes
NotesThis release also folds in the previously-unreleased 0.3.1β0.3.3 changes since v0.3.0, plus 21 dependency updates. Verification: backend typecheck clean; Update with |
π v0.3.5 β DATEV OAuth token exchange (client_secret_basic) is outPublished 2026-07-17 β see the full release notes. Fixes
Verification: confirmed read-only against DATEV's sandbox token endpoint (correct per DATEV's own OIDC discovery); backend typecheck + lint clean; connector OAuth tests 22/22 (3 new). Note: a valid DATEV client secret is still required end-to-end β this release fixes the authentication method that was blocking all DATEV token exchanges. Update with |
π v0.3.6 β DATEV sandbox connector & OAuth refresh hardening is outPublished 2026-07-20 β see the full release notes. Features
Fixes
Verification: backend typecheck + lint clean; Update with |
π v0.3.7 β MCP tool annotations & caller-context variables is outPublished 2026-07-29 β see the full release notes. Features
Fixes
UpgradingAdds one additive, nullable column ( Verification: backend 3460 tests green, typecheck clean; frontend typecheck + build clean; annotation derivation verified inside the running container against real production tool definitions. Docs: Update with |
π v0.3.8 β OAuth2 token-endpoint authentication method is outPublished 2026-07-29 β see the full release notes. Features
Fixes
MaintenanceDependency updates across the Prisma, Sentry, Radix UI, Playwright, ESLint/Prettier and Jest groups, plus UpgradingUpdate with |
π v0.3.9 β bodyTemplate interpolation & connector editor fixes is outPublished 2026-07-29 β see the full release notes. Fixes
UpgradingNo schema changes and no configuration changes. If you worked around the Verification: backend 3475 tests green, typecheck clean; frontend typecheck + build + e2e clean. Docs: Thanks to Dominik Muhlke (pikoworks) for a precise report that pinpointed the exact call path for each of these. Update with |
π v0.4.0 β per-tool response mapping is outPublished 2026-08-02 β see the full release notes. New: Response MappingTools can now shape the API response before it reaches the AI client. Optional, per tool, and off by default β a tool without a mapping behaves exactly as before. Upstream endpoints routinely return far more than a tool needs. A Datto RMM device carries up to 300 UDF fields, IPs and remote-control URLs when the tool only wants hostname, site, OS and status. Every extra byte is billed to the agent's context window and exposed to a third-party model. A response mapping declares what a tool actually publishes, separately from what the API returns. {
"responseMapping": {
"transform": {
"select": {
"page": { "count": "$.pageDetails.count", "totalCount": "$.pageDetails.totalCount" },
"devices": {
"$from": "$.devices[*]",
"$select": {
"id": "id",
"hostname": "hostname",
"category": "deviceType.category",
"antivirusStatus": "antivirus.antivirusStatus"
}
},
"source": "= datto-rmm"
},
"exclude": ["devices[*].udf"]
}
---
Update with `docker compose pull && docker compose up -d` (self-hosted) or wait for the Cloud rollout (~24h after this comment).
β Star · π Watch β Releases · π‘ [Vote on the next adapter](https://github.com/HelpCode-ai/anythingmcp/discussions/148) |
π v0.4.1 β Playtomic API migration & Lite connector is outPublished 2026-08-07 β see the full release notes. FixesPlaytomic connectors restored. Playtomic moved its API to
Notes
Verification: backend lint/typecheck/test/build green (PR #468); Playtomic conformance specs 10/10. Update with |
π v0.4.2 β Georgian Railway connector is outPublished 2026-08-14 β see the full release notes. New connector: Georgian RailwayRead-only access to Georgian Railway (α‘αα₯αα αααααα‘ α ααααααα) β station lookup, journey search with live seat availability and fares in GEL, and the operator's service notices. No account and no API key, so it works from the moment it is installed.
Covers the TbilisiβBatumi and TbilisiβZugdidi main lines and every regional stop. Built on response mappinggr.com.ge repeats each station in five near-identical objects per train and wraps outbound and return legs in a nested array. The connector ships a JMESPath transform that flattens it to one row per train: { "train": 803, "from": "BATUMI(pass)", "to": "TBILISI(pass)",
"departure": "08:00:00", "arrival": "12:12:00", "onSale": true,
"classes": [ { "class": "II Class", "seatsLeft": 17, "price": 35, "currency": "GEL" } ] }Measured on a real four-train response: 12,172 B β 1,072 B (β91%). Station search is mapped the same way (β78%) and cached for a day. Notes for agentsUpdate with |
Uh oh!
There was an error while loading. Please reload this page.
πΊοΈ AnythingMCP β public roadmap
This thread tracks where AnythingMCP is heading. The full document lives in ROADMAP.md β this discussion is where you can comment, push back, and propose changes.
Now (in active development)
Next
Want to influence priorities?
β Star and π Watch the repo to be notified when items ship.
All reactions