v2.7.2

mlabonne/llm-coursev2.7.2Jul 9, 2026by kausmeows

AI Summary

This release introduces OAuth support for the AgentOS MCP endpoint, enhances AG-UI client tools, and improves the `agno connect` command with new management features. It also includes security fixes, such as preventing path traversal in file system knowledge, and refactors scope mappings for better interface support.

Key Highlights

  • Added OAuth support for the AgentOS MCP Endpoint via `AgentOS(mcp_auth=...)`
  • Enhanced AG-UI with `client_tools` support for frontend tools
  • Improved `agno connect` with multi-target selection, disconnect, restart hints, and identity-named entries
  • Fixed security vulnerability preventing path traversal in `FileSystemKnowledge.get_file`
  • Added injected parameters (`run_context`, `agent`, `team`) to `@tool` decorated methods

Breaking Changes

  • Renamed `enable_mcp_server` to `mcp_server` and folded it into `mcp_config`

New Features

  • OAuth on the AgentOS MCP Endpoint
  • AG-UI Client Tools support
  • `agno connect` Enhancements (multi-target select, disconnect, restart hints, identity-named entries)

Full Release Notes

# Changelog

## **New Features**

- **OAuth on the AgentOS MCP Endpoint**: Added OAuth support for the AgentOS MCP endpoint via `AgentOS(mcp_auth=...)`. See [cookbook](https://github.com/agno-agi/agno/blob/main/cookbook/05_agent_os/mcp_demo/oauth_builtin_example.py).
- **AG-UI Client Tools**: Added `client_tools` support for AG-UI frontend tools.
- **`agno connect` Enhancements**: Multi-target select, `disconnect`, restart hints, and identity-named entries.

## **Improvements**

- **A2A Scope Mappings**: Moved A2A scope mappings to the interface and fixed custom prefix support.

## **Bug Fixes**

- **Remote Runs (Media)**: Serialize media for remote agent and team runs.
- **FileSystemKnowledge (Security)**: Prevent path traversal in `FileSystemKnowledge.get_file`.
- **`@tool` Methods**: Toolkit methods decorated with `@tool` now receive injected `run_context`, `agent`, and `team` parameters.
- **Google Calendar Tools**: Timezone-aware `start_date`/`end_date` are now honored across `list_events`, `create_event`, and `update_event`.

## What's Changed
* refactor: move A2A scope mappings to interface, fix custom prefix support by @Mustafa-Esoofally in https://github.com/agno-agi/agno/pull/8788
* cookbook: update MiniMax M3 cookbook metadata by @octo-patch in https://github.com/agno-agi/agno/pull/8813
* feat: add client_tools support for AG-UI frontend tools by @Mustafa-Esoofally in https://github.com/agno-agi/agno/pull/8565
* fix: serialize media for remote agent and team runs by @kausmeows in https://github.com/agno-agi/agno/pull/8832
* fix: prevent path traversal in FileSystemKnowledge.get_file (#8624) by @ProgrammerPlus1998 in https://github.com/agno-agi/agno/pull/8726
* feat: agno connect multi-target select, disconnect, restart hints, identity-named entries by @ashpreetbedi in https://github.com/agno-agi/agno/pull/8797
* feat: OAuth on the AgentOS MCP endpoint via AgentOS(mcp_auth=...) by @ashpreetbedi in https://github.com/agno-agi/agno/pull/8793
* feat: rename AgentOS enable_mcp_server to mcp_server, fold in mcp_config by @ashpreetbedi in https://github.com/agno-agi/agno/pull/8812
* fix: inject run_context into @tool-decorated Toolkit methods by @kausmeows in https://github.com/agno-agi/agno/pull/8830
* fix: normalize calendar list event start dates by @Success6666 in https://github.com/agno-agi/agno/pull/8700
* chore: Release v2.7.2 by @kausmeows in https://github.com/agno-agi/agno/pull/8844

## New Contributors
* @ProgrammerPlus1998 made their first contribution in https://github.com/agno-agi/agno/pull/8726

**Full Changelog**: https://github.com/agno-agi/agno/compare/v2.7.1...v2.7.2