🗺️ Roadmap — what AnythingMCP is shipping next #147
Replies: 28 comments
🚀 v0.1.23 — silence MCP duplicate-registration warnings is outPublished 2026-05-10 — see the full release notes. Silences The internal See #152 for details. Update with |
🚀 v0.1.24 — OpenAPI 3.1, healthcheck UX, SSRF allowlist, re-import preserve, MCP coercion is outPublished 2026-05-12 — see the full release notes. Six customer-driven fixes from the FastAPI / koch-filesystem-bridge integration: Connector import / parsing
Tool runtime
Test / debug UX
Security / on-prem
DB migrations (both additive, nullable, no backfill)
Update with |
🚀 v0.1.25 — Sorare adapter, LOGIN_TOKEN auth, GraphQL schema-slicing for every connector is outPublished 2026-05-18 — see the full release notes. First release that ships a full GraphQL story end-to-end. The Sorare Fantasy Football adapter lands, the new `LOGIN_TOKEN` AuthType lets adapters describe any bcrypt-style sign-in handshake declaratively, and every GraphQL connector — catalog or user-created — now gets a server-side schema-slicing proxy baked in so agents can drive APIs whose introspection is disabled or whose SDL is too large for the context window. New: Sorare Fantasy Football adapter (18 tools)Built-in adapter for Sorare's GraphQL API. Bcrypt-salted login, JWT cached for ~30 days, automatic re-issue 24 h before expiry and on any 401. Featured on the homepage with `priority: 100`. Tools (live-audited against api.sorare.com with real credentials, 17/19 happy-path pass, the two remaining are deliberate NOT_FOUND probes against fake IDs):
Five multilingual MDX guides for the marketing site (en/de/it × ChatGPT/Claude/OpenClaw/generic MCP) plus five SEO-targeted Markdown guides under `docs/guides/` so GitHub Search surfaces `sorare-to-mcp`, `connect-sorare-to-claude`, `connect-sorare-to-chatgpt`, `connect-sorare-to-openclaw`, `connect-sorare-to-cloud`. New: `LOGIN_TOKEN` AuthTypeA declarative spec for APIs that POST credentials → receive a long-lived bearer, optionally with client-side bcrypt against a salt fetched from the upstream. Adapter authors describe the entire flow in JSON; no per-provider code. The shared `LoginTokenService` handles salt fetch → bcrypt → `signIn` → token cache (in-memory + AES-256-GCM-encrypted DB row in the new `connector_auth_cache` table) → proactive refresh ≥ 24 h before expiry → forced re-login on 401, all behind a per-key mutex. Wired into both the REST and GraphQL engines (`injectAuth` + 401-retry path). Field-by-field reference: `docs/connectors/login-token-auth.md`. New: GraphQL schema-slicing proxy — every GraphQL connector, automaticallyUpdate with |
🚀 v0.1.26 — License activation handoff is outPublished 2026-05-19 — see the full release notes. HighlightsEnd-to-end license auto-activation between the cloud instance and
Companion PRs
Update with |
🚀 v0.1.27 — Tenant-scoped license lookup is outPublished 2026-05-19 — see the full release notes. HighlightsSecurity/billing fix: cross-tenant license entitlement leak in cloud mode. Pre-fix, an org with zero licenses could see another org's key as "License verified successfully" because
Self-hosted single-tenant behavior is unchanged — the Companion PR
Update with |
🚀 v0.1.28 — LicenseWall covers cloud no-license + MCP runtime check is org-scoped is outPublished 2026-05-19 — see the full release notes. Follow-ups to v0.1.27 — see #221. LicenseWall now blocks the cloud UI when an org has no license (was silently allowed through after the per-org isolation fix). dynamic-mcp-tools now passes organizationId through to checkLicenseActive so MCP tool calls work in cloud. Update with |
🚀 API Auth Update is outPublished 2026-05-20 — see the full release notes. What's Changed
New Contributors
Full Changelog: v0.1.28...v0.1.29 Update with |
🚀 v0.1.30 — DATEV + SAP + Playtomic + GA4 (9 PRs) is outPublished 2026-05-23 — see the full release notes. What's Changed
New Contributors
Full Changelog: v0.1.29...v0.1.30 Update with |
🚀 v0.1.31 — Etsy OAuth2 + Deutsche Bahn rewrite + 7 reverse-engineered SaaS adapters is outPublished 2026-05-28 — see the full release notes. Adapters
Fixes
DiffUpdate with |
🚀 v0.1.32 — Proxy / Web-Unblocker + Onboarding + Help Scout OAuth2 is outPublished 2026-05-31 — see the full release notes. ✨ HighlightsProxy / Web-Unblocker (#280, #281, #282)Route a tool's outbound request through a proxy or web-unblocker (e.g. Zyte API proxy mode) to reach anti-bot / geo / rate-limited APIs. Fixes the Deutsche Bahn connector that 403'd on Akamai-protected endpoints.
Onboarding (#272, #273, #276)
Connectors
Fixes
DiffUpdate with |
🚀 v0.1.33 is outPublished 2026-06-10 — see the full release notes. Fixes
Connectors
NotesNo breaking changes. Tenant isolation remains fail-closed and was verified against production data. Update with |
🚀 v0.1.34 is outPublished 2026-06-11 — see the full release notes. Maintenance release: a server-stability fix plus self-hosting and packaging improvements. Fixed
Self-hosting
Packaging / license
Upgradedocker compose pull && docker compose up -dNo configuration changes required. Update with |
🚀 v0.2.0 — Knowledge Graph, AI skills, analytics & security hardening is outPublished 2026-06-28 — see the full release notes. v0.2.0 — Knowledge Graph, AI skills, usage analytics & security hardeningA "smart, AI-empowered gateway" release. All AI features are opt-in and inert by default.
Update with |
🚀 v0.2.2 is outPublished 2026-06-28 — see the full release notes. v0.2.2Knowledge Graph + AI skills + usage analytics + security hardening, with the Features (since 0.1.x):
Stability fixes (0.2.1 → 0.2.2):
All migrations are additive and auto-applied on container start. Update with |
🚀 v0.2.3 is outPublished 2026-06-29 — see the full release notes. Fixes
Full changelog: v0.2.2...v0.2.3 Update with |
🚀 v0.2.4 — MCP OAuth/OIDC discovery for third-party clients is outPublished 2026-06-30 — see the full release notes. Fixed
Update with |
🚀 v0.2.5 — OAuth /authorize idempotency fix is outPublished 2026-06-30 — see the full release notes. Fixed
Update with |
🚀 v0.2.6 — Copilot Studio Streamable MCP compatibility is outPublished 2026-06-30 — see the full release notes. Fixed
Update with |
🚀 v0.3.0 — Redesign (sidebar app shell), cloud onboarding/conversion & KG improvements is outPublished 2026-06-30 — see the full release notes. HighlightsRedesign — sidebar app shell
Cloud onboarding & trial→paid conversion (cloud-only)
Knowledge graph
All cloud-only features are gated and inert in self-hosted; no new recurring AI cost. Builds on the recent Copilot-Studio MCP transport/OAuth compatibility work. Update with |
🚀 v0.3.4 — MCP OAuth consent screen & CSRF hardening is outPublished 2026-07-14 — see the full release notes. Security
Features
Fixes
NotesThis release also folds in the previously-unreleased 0.3.1–0.3.3 changes since v0.3.0, plus 21 dependency updates. Verification: backend typecheck clean; Update with |
🚀 v0.3.5 — DATEV OAuth token exchange (client_secret_basic) is outPublished 2026-07-17 — see the full release notes. Fixes
Verification: confirmed read-only against DATEV's sandbox token endpoint (correct per DATEV's own OIDC discovery); backend typecheck + lint clean; connector OAuth tests 22/22 (3 new). Note: a valid DATEV client secret is still required end-to-end — this release fixes the authentication method that was blocking all DATEV token exchanges. Update with |
🚀 v0.3.6 — DATEV sandbox connector & OAuth refresh hardening is outPublished 2026-07-20 — see the full release notes. Features
Fixes
Verification: backend typecheck + lint clean; Update with |
🚀 v0.3.7 — MCP tool annotations & caller-context variables is outPublished 2026-07-29 — see the full release notes. Features
Fixes
UpgradingAdds one additive, nullable column ( Verification: backend 3460 tests green, typecheck clean; frontend typecheck + build clean; annotation derivation verified inside the running container against real production tool definitions. Docs: Update with |
🚀 v0.3.8 — OAuth2 token-endpoint authentication method is outPublished 2026-07-29 — see the full release notes. Features
Fixes
MaintenanceDependency updates across the Prisma, Sentry, Radix UI, Playwright, ESLint/Prettier and Jest groups, plus UpgradingUpdate with |
🚀 v0.3.9 — bodyTemplate interpolation & connector editor fixes is outPublished 2026-07-29 — see the full release notes. Fixes
UpgradingNo schema changes and no configuration changes. If you worked around the Verification: backend 3475 tests green, typecheck clean; frontend typecheck + build + e2e clean. Docs: Thanks to Dominik Muhlke (pikoworks) for a precise report that pinpointed the exact call path for each of these. Update with |
🚀 v0.4.0 — per-tool response mapping is outPublished 2026-08-02 — see the full release notes. New: Response MappingTools can now shape the API response before it reaches the AI client. Optional, per tool, and off by default — a tool without a mapping behaves exactly as before. Upstream endpoints routinely return far more than a tool needs. A Datto RMM device carries up to 300 UDF fields, IPs and remote-control URLs when the tool only wants hostname, site, OS and status. Every extra byte is billed to the agent's context window and exposed to a third-party model. A response mapping declares what a tool actually publishes, separately from what the API returns. {
"responseMapping": {
"transform": {
"select": {
"page": { "count": "$.pageDetails.count", "totalCount": "$.pageDetails.totalCount" },
"devices": {
"$from": "$.devices[*]",
"$select": {
"id": "id",
"hostname": "hostname",
"category": "deviceType.category",
"antivirusStatus": "antivirus.antivirusStatus"
}
},
"source": "= datto-rmm"
},
"exclude": ["devices[*].udf"]
}
---
Update with `docker compose pull && docker compose up -d` (self-hosted) or wait for the Cloud rollout (~24h after this comment).
⭐ Star · 👀 Watch → Releases · 💡 [Vote on the next adapter](https://github.com/HelpCode-ai/anythingmcp/discussions/148) |
🚀 v0.4.1 — Playtomic API migration & Lite connector is outPublished 2026-08-07 — see the full release notes. FixesPlaytomic connectors restored. Playtomic moved its API to
Notes
Verification: backend lint/typecheck/test/build green (PR #468); Playtomic conformance specs 10/10. Update with |
Uh oh!
There was an error while loading. Please reload this page.
🗺️ AnythingMCP — public roadmap
This thread tracks where AnythingMCP is heading. The full document lives in ROADMAP.md — this discussion is where you can comment, push back, and propose changes.
Now (in active development)
Next
Want to influence priorities?
⭐ Star and 👀 Watch the repo to be notified when items ship.
All reactions