1.13.1 (2026-09-25)

Bug Fixes

• Revert "feat(sources): connect sources on first use" (#4137) (7fdbef9)

1.13.0 (2026-09-24)

Features

• Add prebuilt config for bigtable (#4068) (576b9f7)
• Support --defer-source-connect flag to connecting sources on first use (#4076) (5700630)
• tool/conversational-analytics-list-accessible-data-agents: Return all data agents and support manual paging (#4066) (0131c39)
• tool/looker: Expose value_format and value_format_name in field metadata (#4094) (4b7a44d)

Bug Fixes

• config: Fix parseEnv inconsistent handling with YAML comments (#4039) (558c5a9)

1.12.0 (2026-09-17)

Features

• Added logic to serve /.well-known/openai-apps-challenge (#4038) (7ac00a2)
• tool/looker: Expose certification_metadata in looker dashboard and look tools (#4041) (ed42084)

Bug Fixes

• prebuilt/cloud-sql-postgres: Clarify execute_sql tool description (#3884) (ed4cfde)
• source/cockroachdb,source/redis: Release the handle when a connect attempt fails (#3933) (2d52f8a)
• tool/looker-generate-embed-url: Require embed parameters (#3913) (93520cf)
• tools/looker: Add additional annotations to support OpenAI plugins (#4035) (7b41e73)

1.11.0 (2026-09-10)

Features

• Add Toolbox version check on startup (#3837) (7d36de3)
• alloydb: Provide actionable error when read-only mode is used on pre-PG17 (#3902) (28ace11)
• MCP Apps: Add support for MCP Apps (#4008) (9cf3e95)
• MCPResources: Add support for MCP Resources (#3968) (fb227b0)
• mcp: Serve groups/list and groups/get as a Toolbox extension (#3914) (eaf2a9c)
• source/bigquery: Attach SQLCommenter attributes as BigQuery job labels (#3843) (bf0f1a5)
• sources: Add ConnectOnce, a helper for connecting on first use (#3905) (16c31fa)

Bug Fixes

• docs/cloudgda: Document context fields, fix PSV example and links (#3919) (ae47535)
• looker: Update want clause (#3962) (9593321)
• source/http: Block IETF protocol assignments range in default SSRF guard (#3909) (4302e86)
• sources: Release the handle when a source fails to connect (#3921) (0001190)
• test/alloydbainl: Use explicit SQL alias prompt in integration test (#3916) (596eaf9)

1.10.0 (2026-08-27)

Features

• falkordb: Add FalkorDB source and tools (#3692) (a94702c)
• mcp: Add Secure Parameters support as Toolbox experimental extension (#3394) (9750d2d)
• server/mcp: Support com.google.cloud/toolbox.v1 extension in v20260728 (#3801) (f4f7da6)
• skill: Add fix-failing-tests skill for mcp-toolbox (#3821) (168e69c)
• sources: Support native read-only mode and dynamic tool annotations (#3872) (c257022), refs #3615 #3816 #3618 #3851 #3619 #3617
• tools/firestore-mongodb: Add tools for execute mql and get schema (#3826) (4a85d75)
• tool/mongodb: Allow collection to be specified at runtime (#3715) (7626eaf)

Bug Fixes

• cloud-storage: Resolve symlinks when enforcing local path boundaries (#3810) (c2ada64)
• config: Compare env var offsets in rune space when skipping comments (#3856) (2e76934)
• Merge prebuilt tools when reloading custom config (#3864) (5a6d865)
• Normalize postgres UUIDs to strings (#3806) (3b02f1d)
• postgres: Filter background processes in postgres-list-active-queries (#3885) (3d9e62a)

1.9.0 (2026-08-14)

Features

• groups: Add ttlMs and cacheScope customization to config (#3805) (a5d4947)
• migrate: Convert toolset to group kind during migration (#3704) (0adeaa5)
• server/mcp: Introduce generic client extension registry (#3723) (016245c)
• skill: Add review-prs skill for mcp-toolbox (#3743) (5b7bacc)
• source/bigquery: Add apiEndpoint field to override BigQuery API host (#3437) (4da1600)
• source/databaseinsights: Add databaseinsights source (#3461) (3b9615d)
• sources/spanner: Rename execute_sql_dql to execute_sql_readonly (#3776) (cf5a0c8)
• tools/bigtable: Add admin lifecycle and listing tools (#3596) (801d589)
• tools/bigtable: Bigtable-list-schemas MCP tool (#3683) (9228c61)
• tools/databaseinsights: Add Advanced Query Insights tools for AlloyDB (#3722) (74d18ae)
• tools/looker: Add additional tools to allow dashboards to be modified, and their layouts altered. (#3597) (b2b80fb)
• tools: Add cloud-sql-connect-gce for pg, mysql, mssql (#3740) (ca58fa4)

Bug Fixes

• auth/mcp: Derive PRM URL from Toolbox URL (#3765) (aa30842)
• config: Ignore environment variables in YAML comments (#3807) (79aa732), refs #3793
• mcp: Return Tool execution error for invalid input param (#3799) (8120197)
• prebuilt/cloud-storage: Declare tool collections as groups (#3764) (7d468be)
• server/mcp: Disallow client overriding URL bound parameters (#3798) (f15a9c7)
• server: Avoid a nil-flusher panic in the SSE handler (#3520) (947f42f)
• tools/bigquery: Keep the provider error classification in bigquery-execute-sql (#3738) (42570b8)
• tools/looker: Scope the filters quoting rule to values in query description (#3788) (78eb0b8)
• util: Convert exponent-form JSON numbers in ConvertNumbers (#3730) (e9713ee)

1.8.0 (2026-07-28)

Features

• Add groups support (#3605) (e75ec3b)
• prebuilt: Migrate skills-repo toolsets to kind: group with descriptions (#3595) (b895b36)
• server: Add /healthz endpoint for container health checks (#3060) (d5aefbc)
• skills: Add --group flag to generate a skill from one group (#3585) (c1abd4f)
• skills: Default --name to --group, --toolset, or single --prebuilt name (#3586) (2b33b08)
• skills: Make description optional during skills gen (#3584) (d0a8f14)
• tool/looker: Add get_field_value_suggestions tool (#3696) (3debe81)
• tools/dataplex-update-data-product-aspects: Add dataplex-update-data-product-aspects tool (#3607) (f940937)
• Update draft specs to 2026-07-28 (#3699) (cf128ff)

Bug Fixes

• Re-add name validation to tools name (#3654) (944f6ce)
• Re-add tool validation during startup (#3705) (25ce953)
• server: Sort default toolset alphabetically for stable ordering (#3539) (e5da24c)
• source/cloud-sql-admin: Validate source instance for backup-run restore (#3555) (3ebe500)
• source/dataplex: Cleanup Dataplex Data Product resources that may have leaked due to previously aborted tests (#3627) (3fb5a3f)
• source/http: Block CGNAT 100.64.0.0/10 in default SSRF guard (#3625) (a0f36f4)
• tools/looker: Enhance looker-run-dashboard to handle result maker structures and merge queries (#3698) (7666bc0)
• tools/looker: Log request/response traces at debug, not error (#3552) (c3ad445)

1.7.0 (2026-07-16)

Features

• Add quotaProject support for BigQuery and Looker conversational analytics (#2610) (f3e7ca9)
• arcadedb: Add arcadedb source and tools (#2961) (351de00)
• cmd/internal,docs: Add warning log that prebuilt tools are for developer use (#3451) (8cffcef)
• source/postgres: Add optional connectTimeout (#3620) (b574b07)
• tool/clickhouse-sql: Add native vector embedding support (#3229) (6cbe1c2)
• tool/dataplex-update-data-product,tool/dataplex-create-data-asset,tool/dataplex-update-data-asset: Add update data product, create data asset, and update data asset tools for knowledge catalog source (#3574) (721c204)
• tools/dataplex-create-data-product: Add dataplex-create-data-product tool (#3504) (5cee0d2)
• tools/dataplex-get-data-asset: Add dataplex-get-data-asset tool (#3503) (1ddfbe9)

Bug Fixes

• parameters: Report the offending value in array/map type errors (#3512) (4034d6f)
• parameters: Return an error instead of panicking on a non-string type field (#3516) (66a0d53)
• source/looker: Dynamically resolve public host URL (#3603) (0428afd)
• tool/looker-run-dashboard: Add support for SQL Runner query tiles (#3594) (0975d0a)

1.6.0 (2026-06-30)

Features

• Support MCP 2026 draft specs (#3544) (d12eaa8)
• release: Add digital signature to Toolbox binaries (#3528) (3f0f0af)
• tool/cloud-storage: Configure object operation parameters (#3529) (d6dc5fe)
• tool/cloud-storage: Support configurable parameters (#3478) (bc2de2a)
• tools/dataplex-list-data-products: Add dataplex-list-data-products tool (#3337) (6dd669a)
• tools/dataplex-get-data-product: Add dataplex-get-data-product tool (#3499) (7ea7a09)
• tools/dataplex-list-data-assets: Add dataplex-list-data-assets tool (#3500) (182f933)
• tools/looker: Support complex filter_expression parameter in queries (#3494) (997fb8c)
• tools/looker: Support dynamic_fields parameter in queries (#3507) (cd22b89)

Bug Fixes

• tools/gda: Support mTLS and GOOGLE_API_USE_MTLS_ENDPOINT for GDA client (#3460) (cc2a61e)
• tools/looker-conversational-analytics: Validate explore_references shape instead of panicking (#3531) (b67419d)
• tool/looker-create-view-from-table: Correct Looker API payload structure (#3515) (18c539c)

1.5.0 (2026-06-18)

Features

• auth/google: Require audience or clientId for mcpEnabled (#3450) (59f7b6e)
• Enable per source level flags for sql commenter (#3465) (ecce6b7)
• mcp: Add URL parameter binding for HTTP transport (#3112) (0cc7b37)
• scylladb: Adding support for ScyllaDB source and tool (#3119) (2dada83)
• server: Add support for toolset filtering in prebuilt CLI flag (#3245) (7cc4f65)
• skills: Generate skills offline without live source connections (#3388) (4c860b6)
• skills: Tolerate missing env vars during offline skills-generate (#3399) (ea5d3e5)
• source/cloud-storage: Restrict bucket and local path access (#3454) (2c3ca5d)
• tools/bigquery: Add per tool query label in BigQuery jobs (#1975) (3f6a49f)
• tools/dataplex: Add tools to support metadata enrichment workflow (#3270) (05289aa)
• tools/mysql: Add show-query-stats and list-all-locks tools for MySQL and Cloud SQL MySQL source (#2954) (a9693bd)
• tools: Decouple tool initialization from sources (#3355) (32a24e3)

Bug Fixes

• auth/dataplex: Fix failing source with service account credentials (#3369) (ba4deef)
• bigquery: Wire maximumBytesBilled into prebuilt config (#3385) (4abbf6e)
• Bound MCP HTTP body size (#3216) (d4f4342)
• config: Add doc/line context to parse errors (#2957) (4b097da)
• Escape delimiter characters in applyEscape to prevent SQL injection (#2811) (932519a)
• npm: Source binary version from cmd/version.txt (#3417) (6ffbdec)
• prebuilt/alloydb-omni: Require password env var explicitly (#3398) (fcbe3e7)
• server: Fail if MCP auth is enabled together with enable-api (#3435) (a6ff910)
• server: Return errors instead of panicking in InitializeConfigs (#3397) (f48b01d)
• source/cloudhealthcare: Validate pageURL parameter to prevent SSRF (#3453) (9abf47d)
• source/dataplex,source/datalineage: Specify cloud-platform scope for default credentials (#3376) (13e8c36)
• source/http: Implement SSRF guard (#3448) (24d7d29)
• tool/bigquery-execute-sql: Prevent dataset restriction bypass (#3452) (ca6d5e3)
• tool/mysql-get-query-plan: Prevent query execution bypass and statement injection (#3235) (7ed1e7b)
• tool/spanner-sql,tool/spanner-execute-sql: Use read-only annotations when readOnly is set (#3338) (8bde0ec)