v1.4.0 v1.4.1

medium risk

LukeSmithxyz/emailwizJul 27, 2026 → Jul 29, 20262 days between releases

What's New

Adds MCP Tasks support and fixes OAuth token exchange behavior

Breaking Changes

  • Top-level standalone `llm` and `mcp` listeners may no longer share a port.
  • OAuth token-exchange configurations must explicitly select `jwt.rawToken.unredacted()`.
  • Catalog entries keyed under generic `custom` provider name may need updating.

New Features

  • MCP Tasks support including retrieval, updates, cancellation, and RBAC enforcement.
  • Prompt guard improvements for Anthropic tool-use and tool-result content.
  • Configuration storage and request logging can use separate databases.
  • Full connection-handshake timeout for HTTP/2 connections.

Improvements

  • OAuth token exchange now fails closed instead of using an implicit fallback.
  • Model catalogs now hot reload consistently when changed through configuration or UI.

Bug Fixes

  • Fixed Amazon Bedrock requests containing tool-call history.

Upgrade Notes

Top-level standalone `llm` and `mcp` listeners cannot share a port; attach them to the same configured gateway instead. Catalog entries keyed under the generic `custom` provider name may need updating to use the specific provider name. OAuth token-exchange configurations must explicitly select `jwt.rawToken.unredacted()` as the subject-token source.

The Two Releases

v1.4.0

v1.4.0

Jul 27, 2026· 3 months ago

This major release introduces full support for the MCP 2026-07-28 protocol and Enterprise-Managed Authorization. It adds OAuth token exchange backend authentication, standalone database storage, and a new `AgentgatewayModel` API for Kubernetes.

Full release notes
v1.4.1

v1.4.1

Jul 29, 2026· 3 months ago

This patch release focuses on bug fixes and compatibility improvements for the MCP 2026-07-28 specification. It introduces MCP Tasks support, improves prompt guard behavior, and fixes issues related to OAuth token exchange and logging.

Full release notes