CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

4.5.0 (2026-03-03)

Features

• SMI-1564: tree-based tool browsing with required connection arg (#684) (7562772)

Bug Fixes

• disable minification for shttp bundles to improve debuggability (#685) (64de162)
• restore whoami behavior, metadata filtering, and flat pagination (#687) (c9ed674)
• show error message when tool list gets invalid connection name (#681) (50ecb00)

Refactors

• auth: remove whoami token mint/server flow (#686) (b8a9805)

4.4.0 (2026-02-27)

Features

• surface tool annotations in tool list output (#679) (b949eb2)

Chores

• SMI-1567: add prefix filtering to tool list and event topics (#678) (cdb28e8)
• update dev bootstrap for SDK v4.1.0 (#676) (7a105de)

4.3.0 (2026-02-26)

Features

• improve auth token --policy UX with JSON schema and repeatable constraints (#675) (b95bd6f)

Bug Fixes

• list event topics without requiring MCP handshake (#671) (760bd8a)
• warn on auth-required connections instead of silently failing (#673) (4fe8a8c)

4.2.1 (2026-02-25)

Chores

• SMI-1552: add events poll command and update SDK to 0.52.0 (#670) (cfe076d)
• use positional args for secret set command (#665) (79c310e)

4.2.0 (2026-02-25)

Features

• add search param and register mcp logs command (#663) (a5406fa)

4.1.8 (2026-02-24)

Bug Fixes

• use async exec for lazy install so spinner animates (#660) (82617d4)

4.1.7 (2026-02-24)

Bug Fixes

• use --save-prod for lazy install to prevent silent no-op (#658) (f4c6614)

4.1.6 (2026-02-24)

Chores

• SMI-1539: add event command for MCP event subscriptions (#652) (6da0b63)
• SMI-1540: scan event topics during publish (#654) (54b8ef0)

4.1.5 (2026-02-24)

Bug Fixes

• bypass ESM resolution cache in lazy import retry (#655) (27e3ac4)

Chores

• add hidden mcp secrets subcommands (#650) (35c9b0a)

4.1.4 (2026-02-23)

Refactors

• replace jsonc-parser with bundlable comment-json (#648) (2877d18)

4.1.3 (2026-02-23)

Bug Fixes

• prevent platform mismatch in lazy dependency install (#643) (96ea3bf)
• remove explicit biome linux binary from CI (#645) (51e872d)

Performance Improvements

• zero runtime dependencies (#646) (9d0a636)

4.1.2 (2026-02-22)

Bug Fixes

• make setup command non-interactive by default (#640) (7a92c51)

4.1.1 (2026-02-22)

Performance Improvements

• lazy-install keytar to eliminate native build (#638) (3e445ef)

4.1.0 (2026-02-22)

Features

• optimize skill trigger description [SMI-1493] (#636) (3e55dde)
• SMI-1512: Add --unstableWebhookUrl option to smithery mcp add (#634) (944034e)

Performance Improvements

• optimize CLI startup, install size, and deps [SMI-1535] (#637) (4a333dc)

4.0.2 (2026-02-17)

Bug Fixes

• add CTA for permission denied errors (#632) (e18c52d)

4.0.1 (2026-02-16)

Bug Fixes

• SMI-1470: improve auth error messages for expired tokens (#630) (45c6fc8)

Chores

• ignore macOS AppleDouble files (._*) (#627) (7bb82c6)

4.0.0 (2026-02-14)

⚠ BREAKING CHANGES

• decouple build from publish, simplify auth and deploy UX (#623)
• CLI v4.0.0 — unified mcp noun, agent-friendly output, global flags [SMI-1372] (#613)

Features

• CLI v4.0.0 — unified mcp noun, agent-friendly output, global flags [SMI-1372] (#613) (56e0e7b)
• decouple build from publish, simplify auth and deploy UX (#623) (36a6944)

Bug Fixes

• resolve biome lint error and add pre-push hook (#625) (588ccf0)

Refactors

• rename "deployment" to "release" in CLI output (#624) (a3da821)

3.19.0 (2026-02-09)

Features

• add smithery setup command (#616) (d78e8d0)

Refactors

• improve Smithery skill metadata; ref SMI-1404 (#614) (f36b4ba)

3.18.0 (2026-02-08)

Features

• add skills view command (#609) (e0d3e65)
• detect createAuthAdapter export and write to manifest [SMI-1160] (#604) (f5f6b74)

Bug Fixes

• keep skill required, only make agent optional (#611) (714b7f8)

3.17.0 (2026-02-06)

Features

• improve search and connect UX for agents (#605) (11c8ef7)

3.16.0 (2026-02-05)

Features

• show welcome message when CLI runs without arguments (e2a7cc6)

3.15.1 (2026-02-05)

Bug Fixes

• add registry-url to setup-node for npm OIDC auth (7855d98)
• add workflow_dispatch to allow manual publish trigger (bcc31c1)
• use Node 24 for npm OIDC publishing support (7d7b4e2)
• use stderr for postinstall message to bypass npm suppression (df5f6c4)

3.15.0 (2026-02-05)

Features

• improve postinstall message for agents (#601) (92726b5)

Bug Fixes

• inline npm publish into release-please workflow (#599) (d4c64ef)

3.14.0 (2026-02-05)

Features

• add post-install message and servers search command (#598) (874d8c2)

3.13.2 (2026-02-05)

Bug Fixes

• add explicit permissions for publish workflow OIDC (a0962ec)
• move OIDC permissions to workflow-level in publish.yml (b9056f3)

3.13.1 (2026-02-05)

Bug Fixes

• add id-token permission for npm publish OIDC (#593) (3f61a2d)
• use GitHub App token for release-please to trigger CI (#592) (832fe51)

Chores

• trigger release-please workflow (cfa5be4)
• verify release-please workflow (0b1c416)

3.13.0 (2026-02-05)

Features

• enhance connect commands with get, pagination, error handling, and shorthand URLs (#589) (04293a7)

Bug Fixes

• read SMITHERY_BASE_URL at runtime instead of bake-in at build (#587) (b618c33)

Documentation

• add value prop about connecting agents to Smithery registry (#591) (090f299)
• improve README clarity and accuracy (#590) (d41e65c)

3.12.1 (2026-02-05)

Bug Fixes

• update skills commands for @smithery/api 0.38.0 (#585) (a049fa0)

3.12.0 (2026-02-05)

Features

• add --headers option to connect add/set commands (#581) (da2856d)

Bug Fixes

• remove unused --print-link option from login command (#583) (9a5b830)

3.11.0 (2026-02-05)

Features

• improve review add UX with GitHub-style syntax (#580) (52aeb1d)

3.10.0 (2026-02-04)

Features

• add comprehensive Smithery CLI skill [SMI-1367] (#562) (04ace79)
• add logout command to remove all local credentials (#574) (1d6db88)
• add skills review and vote commands (#568) (9251cfd)
• redesign skills review and vote CLI with gh-style commands (#572) (6463e37)

Refactors

• use @smithery/api client for skills reviews (#570) (38957aa)

3.9.1 (2026-02-05)

Changed

• refactor skills review commands to use @smithery/api client instead of raw fetch (#570)
• update @smithery/api from 0.36.0 to 0.37.0

3.9.0 (2026-02-04)

Features

• add skills search and install commands (#550) (2b1c2db)
  • smithery skills search [query] - interactive skill search and browsing
  • smithery skills install <skill> --agent <name> - install skills via Vercel Labs skills CLI
  • smithery skills agents - list available agents for installation
  • smithery namespace search [query] - search public namespaces
  • Options: --json, --limit, --namespace, -g/--global
• add skills review commands
  • smithery skills reviews <skill> - list reviews for a skill
  • smithery skills review <skill> - submit a text review (requires login)
  • smithery skills review <skill> --delete - delete your review
  • smithery skills vote <skill> <review-id> --up|--down - upvote/downvote a review
  • Options: --json, --limit, --page, -t/--text, -m/--model
• add --page option to smithery skills search for pagination
• add --print-link option to smithery login for agent-friendly authentication (prints URL without spinners/browser)
• add custom ID and metadata support to connect command (#558) (11c1484)

Bug Fixes

• use MCP client for listing tools instead of raw HTTP; ref SMI-1260 (#563) (79cb44d)
• upgrade @smithery/api and use new createConnection API (#561) (9241b59)
• allow SDK client to work without API key (#556) (d883dbe)
• publish to npm in release-please workflow (#565) (94b3cdc)

Performance Improvements

• lazy load command implementations to improve CLI startup (#560) (1f4a0e4)

Tests

• add tests for public API patterns (skills and registry) (#566) (e394217)

[3.5.0] - 2026-01-28

Added

• --config-schema flag for publish command to specify JSON Schema for external URL servers (inline JSON or path to .json file)
• Post-publish tip suggesting --config-schema for external URL publishes without configuration

Changed

• Renamed deploy command to publish (deploy remains as deprecated alias with warning)
• Consolidated CLI utilities into cli-utils.ts (qualified-name parsing, config masking, JSON parsing)

[3.4.0] - 2025-01-27

Added

• Asset bundling support for stdio deploys via build.assets field in smithery.yaml - allows including non-code files (data files, templates, configs) in MCPB bundles using glob patterns (#524)

[3.3.3] - 2025-01-26

Fixed

• Fixed qualified name parsing - simple names like linear now consistently resolve with namespace="linear" instead of empty namespace

Changed

• Refactored resolveServer() to accept { namespace, serverName } instead of qualified name string - callers now use centralized parseQualifiedName() utility

Added

• New parseQualifiedName() utility in src/utils/qualified-name.ts for consistent qualified name parsing across the codebase
• Unit tests for qualified name parsing

[2.0.0] - 2025-12-21

Changed

• BREAKING: Store server configurations in OS keychain instead of remote storage for local servers. Configurations are now stored securely on the user's local machine using the system keychain (macOS Keychain, Windows Credential Manager, Linux Secret Service)
• BREAKING: Remote server configuration handling - OAuth-capable clients now use direct HTTP URLs without API keys. Configuration is handled through OAuth flow instead of CLI prompts
• For clients that don't support OAuth but need HTTP servers, use mcp-remote as a fallback transport
• Simplified server resolution API - removed ResolveServerSource enum and apiKey parameter from resolveServer() function
• Refactored configuration handling - split session-config.ts into focused modules: user-config.ts for config resolution and server-config.ts for server configuration formatting
• Updated run command to load configurations from keychain instead of remote storage

Added

• OS keychain integration using keytar library for secure local configuration storage
• New keychain.ts module with saveConfig(), getConfig(), and deleteConfig() functions
• mcp-remote integration for non-OAuth clients connecting to HTTP servers
• Test coverage for user configuration resolution, server configuration formatting, and client configuration I/O operations
• Support for HTTP URL key customization (httpUrlKey), HTTP type overrides (httpType), and format descriptor support for client-specific configuration formats

Removed

• Remote configuration storage for local servers
• session-config.ts module (functionality moved to user-config.ts and server-config.ts)
• Widget-related code (widget-bundler.ts, widget-discovery.ts, widget-validation.ts)
• Old test files (install.test.ts, installation-flow.test.ts, registry.test.ts, config-to-args.test.ts)
• config-to-args.ts utility (functionality integrated into other modules)

[1.5.2] - 2025-10-14

Fixed

• Fixed integration tests to use actual resolution functions instead of custom mocks in prepare-stdio-connection.test.ts
• Replaced subprocess calls to npx @anthropic-ai/mcpb unpack with direct imports from @anthropic-ai/mcpb library for better reliability and performance
• Improved stdio command creation for bundles to properly resolve environment variables and arguments from manifest.json using actual template resolution functions

Added

• Tests for bundle manager covering template resolution, manifest parsing, and error conditions

[1.5.0] - 2025-10-13

Added

• Configuration validation flow during server installation with saved config detection
• Profile support across all configuration endpoints
• New tests covering installation flows and registry API calls

Changed

• Updated configuration validation endpoint from /config/:id/validate to /config/status/:id for better semantics
• Improved configuration prompting: required fields first, then optional fields
• Enhanced installation UX with better messaging and visual indicators

Fixed

• Fixed URL encoding bug for server names
• Fixed route pattern conflict in registry validation endpoint
• Fixed profile parameter not being passed to config operations

[1.4.1] - 2025-09-27

Added

• Integration tests for stateful/stateless server behavior validation

Fixed

• Fixed config schema not being passed into server bundle

[1.4.0] - TBD

Added

• OAuth support

[1.3.0] - 2025-09-12

Added

• Created shared cleanupChildProcess utility for consistent process cleanup across commands
• Added bun bundler support in addition to esbuild - detected automatically at runtime with optional override with --tool option (note: only when using bun runtime for esbuild bundle; node doesn't allow bun api)

Changed

• Updated Biome from v1.5.3 to v2.2.4 for better cross-platform binary support
• Updated biome.jsonc configuration for v2 compatibility
• Updated Node.js requirement from >=18.0.0 to >=20.0.0 to match dependency requirements
• Updated GitHub Actions to use Node.js 20
• Refactored dev, playground, and uplink commands to use shared child process cleanup utility
• Changed default output format from CommonJS to ESM modules
• Removed npm cache configuration from GitHub Actions workflows to resolve build issues

Fixed

• Resolved Cannot find module '@biomejs/cli-linux-x64/biome' CI error
• Improve error handling in child process cleanup
• Improve race condition handling in process exit
• Fixed CI/CD build issues by removing npm cache configuration from workflow

[1.2.29] - 2025-09-12

Changed

• Refactored CLI command prompts by extracting prompt utilities from main index file to src/utils/command-prompts.ts
• Cleaned up unused dependencies: removed @types/uuid and bufferutil optional dependency
• Improved code organization and maintainability of CLI interface
• Added short form -c option as alias for --client across all commands (install, uninstall, list)

[1.2.26] - 2025-09-11

Added

• Interactive CLI commands: smithery install, smithery uninstall, and smithery list now support interactive client selection when no --client flag is provided
• New search [term] command for interactive server discovery in the Smithery registry
• Support for Codex client with TOML configuration format
• Comprehensive installation test suite covering Target × Transport matrix (json, yaml, toml, command × stdio, http)

Changed

• Improved client configuration pattern with better structure and validation
• Updated command documentation and help text to reflect interactive capabilities

[1.2.12] - 2025-01-05

Changed

• Idle timeout (30 minutes) now only logs instead of closing connection
• Heartbeat stops on idle, resumes on activity
• Refactored idle manager to use callbacks

[1.1.89] - 2025-05-01

Changed

• Updated registry endpoint access to use smithery/sdk
• Added proper process exit handling during installation

[1.1.81] - 2025-04-29

Added

• Added new API key prompt during installation of remote servers

[1.1.80] - 2025-04-26

Added

• Added support for profiles to allow multiple configurations per server

[1.1.79] - 2025-04-26

Changed

• Improved Streamable HTTP transport initisation by ensuring heartbeats only start after connection is established

[1.1.78] - 2025-04-26

Changed

• Removed API key requirement for local server installation
• Removed deprecated fetchConfigWithApiKey function
• Updated config collection flow to skip configuration prompts when API key is provided

[1.1.75] - 2025-04-25

Added

• Added session termination on transport close for Streamable HTTP runner

[1.1.74] - 2025-04-25

Added

• New Streamable HTTP runner as the primary connection method
• Refactored common connection utilities into runner-utils for better code organization

Deprecated

• WebSocket transport is now deprecated in favor of Streamable HTTP transport

[1.1.71] - 2025-04-18

Changed

• Refactored config handling to treat empty strings ("") as undefined values
• Added stricter validation for required fields in configuration
• Improved process exit handling with proper exit code 0 on transport close
• Removed redundant config validation in and index.ts
• Streamlined config validation flow in config.ts

[1.1.70] - 2025-04-17

Changed

• Renamed roo-code to roocode for consistency

[1.1.69] - 2025-04-17

Changed

• Updated Roo Code (previously Roo Cline) configuration path

[1.1.68] - 2025-04-12

Changed

• Enhanced stdio and WS runners with more gracious error handling
• Improved logging in stdio runner with timestamps

[1.1.67] - 2025-04-11

Changed

• Unified error handling between WebSocket and STDIO runners by centralizing common error handling logic
• Improved error handling flow by letting parent handle process exits during protocol errors
• Enhanced verbose logging in inspect command to track server resolution, connection selection, and runtime environment setup
• Improved security by logging only configuration structure instead of sensitive values

[1.1.66] - 2025-04-03

Changed

• Modified runtime config validation to allow empty strings for required fields
• Added separate config validation for run vs install commands
• Improved error handling for missing required fields during runtime

[1.1.65] - 2025-04-02

Added

• Added WebSocket heartbeat mechanism that pings every 30 seconds to maintain connection
• Added 15-minute idle timeout with automatic connection shutdown

[1.1.64] - 2025-04-01

Fixed

• Fixed config parsing on Windows command prompt where single quotes were being passed literally instead of being interpreted

[1.1.63] - 2025-04-01

Added

• Added support for VS Code and VS Code Insiders

[1.1.62] - 2025-03-31

Added

• Added list servers command to display installed servers for a specific client

[1.1.61] - 2025-03-30

Changed

• Use API key for calling track

[1.1.60] - 2025-03-30

Changed

• Added random jitter (0-1000ms) to WebSocket reconnection backoff
• Refactored WebSocket runner and improved console logs

[1.1.59] - 2025-03-30

Changed

• Enhanced WebSocket runner cleanup process with improved handling of connection termination
• Added safety timeout for WebSocket transport cleanup operations
• Added better state management for clean vs unexpected shutdowns in WebSocket connections

[1.1.58] - 2025-03-30

Changed

• Enhanced cleanup process in stdio-runner with better handling of client disconnections and process termination
• Added safety timeout for transport cleanup operations to ensure process termination

[1.1.57]

Changed

• Updated @modelcontextprotocol/sdk to v1.8.0 which fixes Windows spawn issues (modelcontextprotocol/typescript-sdk#101, modelcontextprotocol/typescript-sdk#198)

[1.1.56]

Added

• Added API key support to WebSocket runner for using saved configurations

[1.1.55] - 2025-03-27

Changed

• Silenced WebSocket error logging for non-critical errors to improve UX in clients that surface console errors

[1.1.54] - 2025-03-25

Added

• Enhanced WebSocket error handling with specific handlers for connection errors (code -32000) and protocol errors (codes -32602, -32600)
• Added automatic reconnection attempt for server-initiated connection closures

[1.1.53] - 2025-03-24

Changed

• Updated server configuration handling to skip the --config flag when configuration is empty, for cleaner commands

[1.1.52] - 2025-03-24

Fixed

• Fixed destructuring issue in collectConfigValues() that was causing parsing error with inspect command

[1.1.51] - 2025-03-25

Changed

• Refactored the install command for better code organization and maintainability
• Enhanced API key handling to improve backward compatibility and isolate functions when API key is provided
• Optimized registry to reduce database calls by returning both server details and saved configuration in a single request

[1.1.50] - 2025-03-22

Fixed

• Updated inspectServer function to properly handle changes in configuration collection

[1.1.49] - 2025-03-21

Added

• Initial support for --key flag to authenticate and use servers through smithery (preparatory work, not yet functional)

Changed

• Enhanced server configuration with improved validation

[1.1.48] - 2025-03-17

Fixed

• Replaced normalizeServerId with getServerName to prevent issues in Cursor due to long server names

[1.1.47] - 2025-03-17

Added

• Support server installation for Cursor since latest update (0.47.x) supports global mcp configuration (see Cursor Changelog)

[1.1.46] - 2025-03-11

Added

• Test suites for WebSocket runner (ws-runner.ts)

Changed

• Removed npx resolution utility functions in favor of direct handling in stdio-runner.ts with Windows-specific workaround using cmd /c

[1.1.45] - 2025-03-10

Changed

• Refactored command organization by moving command files to dedicated src/commands/ directory
• Updated import paths and documentation
• Logging runtime environment details in verbose mode