## [1.5.0](https://github.com/googleapis/mcp-toolbox/compare/v1.4.0...v1.5.0) (2026-06-18)
Features

auth/google: Require audience or clientId for mcpEnabled (#3450) (59f7b6e)
Enable per source level flags for sql commenter (#3465) (ecce6b7)
mcp: Add URL parameter binding for HTTP transport (#3112) (0cc7b37)
scylladb: Adding support for ScyllaDB source and tool (#3119) (2dada83)
server: Add support for toolset filtering in prebuilt CLI flag (#3245) (7cc4f65)
skills: Generate skills offline without live source connections (#3388) (4c860b6)
skills: Tolerate missing env vars during offline skills-generate (#3399) (ea5d3e5)
source/cloud-storage: Restrict bucket and local path access (#3454) (2c3ca5d)
tools/bigquery: Add per tool query label in BigQuery jobs (#1975) (3f6a49f)
tools/dataplex: Add tools to support metadata enrichment workflow (#3270) (05289aa)
tools/mysql: Add show-query-stats and list-all-locks tools for MySQL and Cloud SQL MySQL source (#2954) (a9693bd)
tools: Decouple tool initialization from sources (#3355) (32a24e3)

Bug Fixes

auth/dataplex: Fix failing source with service account credentials (#3369) (ba4deef)
bigquery: Wire maximumBytesBilled into prebuilt config (#3385) (4abbf6e)
Bound MCP HTTP body size (#3216) (d4f4342)
config: Add doc/line context to parse errors (#2957) (4b097da)
Escape delimiter characters in applyEscape to prevent SQL injection (#2811) (932519a)
npm: Source binary version from cmd/version.txt (#3417) (6ffbdec)
prebuilt/alloydb-omni: Require password env var explicitly (#3398) (fcbe3e7)
server: Fail if MCP auth is enabled together with enable-api (#3435) (a6ff910)
server: Return errors instead of panicking in InitializeConfigs (#3397) (f48b01d)
source/cloudhealthcare: Validate pageURL parameter to prevent SSRF (#3453) (9abf47d)
source/dataplex,source/datalineage: Specify cloud-platform scope for default credentials (#3376) (13e8c36)
source/http: Implement SSRF guard (#3448) (24d7d29)
tool/bigquery-execute-sql: Prevent dataset restriction bypass (#3452) (ca6d5e3)
tool/mysql-get-query-plan: Prevent query execution bypass and statement injection (#3235) (7ed1e7b)
tool/spanner-sql,tool/spanner-execute-sql: Use read-only annotations when readOnly is set (#3338) (8bde0ec)

View the full release notes at https://github.com/googleapis/mcp-toolbox/releases/tag/v1.5.0.