v1.6.0

Changelog

• 573cb46 Merge pull request #13 from Codestz/docs/upgrade-troubleshooting
• 3389ef4 Merge pull request #15 from Codestz/v1.6-agentic-supremacy
• ec90b7c fix: dashboard URL is on-demand, never auto-printed
• db13a77 fix: dashboard banner fires only on real tool calls
• 7a0d64e fix: remove result cache — correctness over speed
• 305c2b9 fix: result cache must invalidate when underlying file changes
• 51c50d6 release: v1.6.0 — agentic supremacy

v1.5.0

mcpx v1.5.0

mcpx is now the secure gateway for MCP servers — the missing control plane between AI agents and MCP servers.

What's new

• Security policy engine — tool allow/deny, argument inspection, content regex (SQL mutations, path traversal). Global + per-server cascading. Three modes: read-only, editing, custom.
• Audit logging — JSONL audit trail for every tool call with secret redaction.
• Scoped daemons — each project gets its own daemon process, preventing cross-session races.
• Allowed/blocked tool lists — per-server whitelist/blacklist with glob patterns.
• Content matching — deny_pattern, require_pattern, when clause for deep argument inspection.
• Website redesigned — new landing page, Security (5 pages), Integrations (5 pages).
• Auto version detection — mcpx version reads from Go build info automatically.

Install

brew install codestz/tap/mcpx
# or
go install github.com/codestz/mcpx/cmd/mcpx@v1.5.0

Full changelog: https://github.com/Codestz/mcpx/blob/main/CHANGELOG.md
Documentation: https://codestz.github.io/mcpx
Examples: https://github.com/codestz/mcpx-examples

v1.4.1

Changelog

• d1559af Merge pull request #9 from Codestz/release/v2.0.0
• 3209d6e feat: v2.0.0 — secure gateway for MCP servers
• 771ea31 fix: add /v2 module path suffix for Go major version convention
• 128a0a5 fix: auto-detect version from Go module build info
• dcd311d fix: use v1.4.0 versioning (Go module compatibility)

v1.4.0

mcpx v1.4.0

mcpx is now the secure gateway for MCP servers — the missing control plane between AI agents and MCP servers.

What's new

• Security policy engine — tool allow/deny, argument inspection, content regex (SQL mutations, path traversal). Global + per-server cascading. Three modes: read-only, editing, custom.
• Audit logging — JSONL audit trail for every tool call with secret redaction.
• Lifecycle hooks — automatic project activation on connect (Serena, etc). Clear errors with actionable hints.
• Monorepo workspaces — auto-detect workspace from cwd, per-workspace lifecycle + security.
• Auto version detection — mcpx version now reads the correct version from Go build info. No ldflags needed.
• Website redesigned — new landing page, Security (5 pages), Workspaces (3 pages), Integrations (5 pages).

Install

# Homebrew
brew install codestz/tap/mcpx

# Go
go install github.com/codestz/mcpx/cmd/mcpx@latest

Verify

mcpx version
# mcpx v1.4.0

Stats

• 244 tests passing across 9 packages
• 13 new documentation pages

Full changelog: https://github.com/Codestz/mcpx/blob/main/CHANGELOG.md
Documentation: https://codestz.github.io/mcpx

v1.3.0

Full MCP Coverage: Prompts, Resources, Server Info

mcpx now supports all three MCP primitives — tools, prompts, and resources — completing full spec coverage.

New Commands

Command	Description
mcpx <server> info	Server name, version, protocol, capability checklist
mcpx <server> prompt list	List available prompts
mcpx <server> prompt <name> [--arg val]	Get a prompt with arguments
mcpx <server> prompt <name> --help	Show prompt arguments
mcpx <server> resource list	List resources and URI templates
mcpx <server> resource read <uri>	Read a resource by URI

Highlights

• Prompts — full prompts/list and prompts/get with pagination and required argument validation
• Resources — full resources/list, resources/templates/list, and resources/read with pagination
• Server info — mcpx <server> info shows capabilities at a glance
• Daemon capability forwarding — daemon caches InitializeResult and replays it to clients, so info, --help, and capability-based features work in daemon mode
• Enhanced server help — --help now shows prompts and resources alongside tools
• Updated docs generation — configure and generate include prompts/resources sections
• Shell completions — info, prompt, resource added to tab-completion

Example

$ mcpx everything info
everything

Server:   mcp-servers/everything 2.0.0
Protocol: 2025-11-25

Capabilities:
  [x] Tools
  [x] Prompts
  [x] Resources
  [x] Logging

$ mcpx everything prompt args-prompt --city "Tokyo"
[user]: What's weather in Tokyo?

$ mcpx everything resource list
everything (7 resources)
  demo://resource/static/document/architecture.md  architecture.md  ...

everything (2 resource templates)
  demo://resource/dynamic/text/{resourceId}  Dynamic Text Resource  ...

Full Changelog: v1.2.0...v1.3.0

v1.2.0

Changelog

• 729d331 Merge pull request #5 from Codestz/feat/mcp-spec-compliance
• 15d057b deps: bump Go minimum to 1.26.1 to fix stdlib vulnerabilities
• a451c42 feat: add MCP 2025-11-25 spec compliance with HTTP and SSE transports

v1.1.0

What's New

@file / @- syntax for flag values

Any string flag now accepts @/path to read from a file or @-/- to read from stdin. No more shell escaping for large content:

mcpx serena replace_symbol_body --body @/tmp/code.go --name_path Foo --relative_path src/main.go

--pick — lightweight JSON field extraction

Extract a field from tool results without piping through jq:

mcpx serena find_symbol --name_path_pattern Foo --pick body
mcpx serena find_symbol --name_path_pattern Foo --pick items.0.name

--timeout — per-call timeout override

Override the default timeout for a single invocation:

mcpx serena find_symbol --name_path_pattern Foo --timeout 60s

Stdin merge with flags

--stdin can now be combined with CLI flags. Flags win on conflict:

echo '{"body":"content"}' | mcpx serena replace_symbol_body --stdin --name_path Foo --relative_path f.go

Updated mcpx configure output

Generated MCPX.md now documents all new features including tips for AI agents.

Other changes since v1.0.0

• fix: use withBase for landing page links to respect base path
• docs: add public roadmap (v1.1–v1.5)
• deps: bump Go minimum to 1.24, fixes GO-2025-3956 and GO-2025-3750
• ci: add dependabot, govulncheck, and CodeQL workflows
• fix: set base path for GitHub Pages deployment

Full Changelog: v1.0.0...v1.1.0

v1.0.0

Changelog

• cf361b0 fix: cross-platform daemon support for Windows builds
• 36c038f fix: include cmd/mcpx in repo
• 666f83f v1.0.0 — initial release