@upstash/context7-mcp@3.1.0
upstash/context7@upstash/context7-mcp@3.1.0Jun 1, 2026by github-actions[bot]
AI Summary
A minor release that adds multi-tenant Microsoft Entra ID (Azure AD) validation for incoming MCP tokens.
Key Highlights
- Validates Microsoft Entra ID (Azure AD) v2 tokens.
- Fetches per-tenant configuration and verifies against JWKS.
- Enforces required scope claims and caches config for performance.
New Features
- Multi-tenant Microsoft Entra ID validation
Full Release Notes
### Minor Changes - 1fb2d42: Add multi-tenant Microsoft Entra ID validation for MCP tokens. The server now detects inbound Entra v2 tokens by issuer pattern, fetches per-teamspace configuration (`tenantId`, `audience`, `requiredScope`) from the Context7 app, and verifies the token against the matching tenant's JWKS, enforcing the required scope claim when configured. User resolution happens downstream in the Context7 app against a pre-provisioned user mapping table — the MCP server only validates. Per-tenant JWKS cache and a 5-minute in-memory config cache keyed by JWT audience reduce overhead under load.