v1.3.5

google/magikav1.3.5Aug 7, 2026by harijoe

Upgrading?

AI Summary

v1.3.5 resolves DevTools OAuth flow issues with hosted authorization servers (WorkOS, Auth0, Clerk, Stytch) by correcting the scope of forwarded headers during cross-origin requests.

Key Highlights

  • Fixed DevTools OAuth flow against hosted authorization servers.
  • Scoped forwarded headers to the MCP server origin to prevent browser preflight failures.

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)

Related Repositories