🌟 Release Highlights
This release completes the Agent ID rename, introduces a live DIFC diagnostic endpoint, delivers a middleware performance improvement, and fixes a proxy liveness probe regression.
⚠️ Breaking Changes
API key surface fully renamed to Agent ID (#7114, #7159, #7150)
The gateway's "API key" configuration and header have been fully replaced by Agent ID to align with MCP spec terminology:
api_key / apiKey config fields → use agent_id / agentId
- Session routing header → use
X-Agent-ID (previously X-MCP-Agent-ID or API-key variants)
Deprecated compat aliases have been removed. Update config files and client integrations accordingly. See the Configuration Guide for current field names.
✨ What's New
Live DIFC label snapshot via /reflect (#7168)
A new unauthenticated /reflect endpoint is available in both gateway and proxy modes. It returns a real-time snapshot of active DIFC (Decentralized Information Flow Control) labels, enabling quick diagnostics of security label propagation without requiring credentials. See the Guard Response Labeling docs.
⚡ Performance
Middleware fast path for small responses (#7094)
The jq middleware now skips json.Marshal when handling small text responses, reducing CPU overhead and latency for high-frequency lightweight tool calls.
🐛 Bug Fixes
Proxy /rate_limit passthrough restored (#7187)
The /rate_limit endpoint is now correctly forwarded in CLI proxy mode, restoring liveness probe behavior that had been inadvertently blocked.
📚 Documentation
Documentation accuracy improvements (#7102, #7157):
- Corrected
${VAR} expansion scope description
- Added missing internal packages to architecture reference
- Fixed port field description, MCP method names, and tracing variable expansion details
🐳 Docker Image
The Docker image for this release is available at:
docker pull ghcr.io/github/gh-aw-mcpg:v0.3.24
# or
docker pull ghcr.io/github/gh-aw-mcpg:latest
Supported platforms: linux/amd64, linux/arm64
For complete details, see the full release notes.
Generated by Release · sonnet46 749.8K · ◷
🌟 Release Highlights
This release completes the Agent ID rename, introduces a live DIFC diagnostic endpoint, delivers a middleware performance improvement, and fixes a proxy liveness probe regression.
API key surface fully renamed to Agent ID (#7114, #7159, #7150)
The gateway's "API key" configuration and header have been fully replaced by Agent ID to align with MCP spec terminology:
api_key/apiKeyconfig fields → useagent_id/agentIdX-Agent-ID(previouslyX-MCP-Agent-IDor API-key variants)Deprecated compat aliases have been removed. Update config files and client integrations accordingly. See the Configuration Guide for current field names.
✨ What's New
Live DIFC label snapshot via
/reflect(#7168)A new unauthenticated
/reflectendpoint is available in both gateway and proxy modes. It returns a real-time snapshot of active DIFC (Decentralized Information Flow Control) labels, enabling quick diagnostics of security label propagation without requiring credentials. See the Guard Response Labeling docs.⚡ Performance
Middleware fast path for small responses (#7094)
The jq middleware now skips
json.Marshalwhen handling small text responses, reducing CPU overhead and latency for high-frequency lightweight tool calls.🐛 Bug Fixes
Proxy
/rate_limitpassthrough restored (#7187)The
/rate_limitendpoint is now correctly forwarded in CLI proxy mode, restoring liveness probe behavior that had been inadvertently blocked.📚 Documentation
Documentation accuracy improvements (#7102, #7157):
${VAR}expansion scope description🐳 Docker Image
The Docker image for this release is available at:
docker pull ghcr.io/github/gh-aw-mcpg:v0.3.24 # or docker pull ghcr.io/github/gh-aw-mcpg:latestSupported platforms:
linux/amd64,linux/arm64For complete details, see the full release notes.