v1.3.5

macro-inc/macrov1.3.5Aug 7, 2026by harijoe

Upgrading?

AI Summary

This release fixes a critical OAuth flow issue in the DevTools where cross-origin requests were failing due to incorrect header forwarding, specifically impacting hosted authorization servers like WorkOS, Auth0, Clerk, and Stytch.

Key Highlights

  • Fixes DevTools OAuth flow against hosted authorization servers.
  • Scopes forwarded headers to the MCP server origin to prevent preflight failure.

New Features

  • OAuth header forwarding fix

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)

Related Repositories