v1.3.5

alpic-ai/skybridgev1.3.5Aug 7, 2026by harijoe

AI Summary

Fixes the DevTools OAuth flow for hosted authorization servers (WorkOS AuthKit, Auth0, Clerk, Stytch) by scoping forwarded headers.

Key Highlights

Fixes OAuth flow issues with hosted authorization servers
Scopes forwarded headers to the MCP server origin to prevent browser preflight failures

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)