MATRIX · MCP

LiteLLM fixes proxy startup failure when the cost map is offline

Sun, 25 Oct 2026 15:57:07 GMT

LiteLLM fixes proxy startup failure when the cost map is offline

Original story: LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Why read: A remote cost-map outage could stop the gateway from starting; the fix directly affects constrained-network reliability.

Recommendation: TRIAL

Sources: LiteLLM v1.106.4 release

LiteLLM 1.106.3 rotates its image-signing key and removes an old root CA

Sat, 24 Oct 2026 15:59:49 GMT

LiteLLM 1.106.3 rotates its image-signing key and removes an old root CA

Original story: LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Why read: The signing-key rotation breaks old supply-chain policy until CI and deployment admission migrate.

Recommendation: TRIAL

Sources: LiteLLM v1.106.3

MCP TypeScript SDK 2.4 adds experimental Skills and tighter protocol validation

Sat, 24 Oct 2026 15:59:49 GMT

MCP TypeScript SDK 2.4 adds experimental Skills and tighter protocol validation

Original story: MCP SDKs 2.3 tighten transport and OAuth boundaries

Why read: Skills entering the MCP path changes tool distribution, integrity checks and upgrade compatibility.

Recommendation: TRIAL

Sources: MCP TypeScript SDK v2.4.0

LiteLLM 1.107 expands agent gateways and Decisions routing

Wed, 21 Oct 2026 15:58:23 GMT

LiteLLM 1.107 expands agent gateways and Decisions routing

Original story: LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Recommendation: TRIAL

Sources: LiteLLM 1.107.0 release notes

LiteLLM 1.106 tightens MCP and gateway identity boundaries

Sun, 18 Oct 2026 15:58:14 GMT

LiteLLM 1.106 tightens MCP and gateway identity boundaries

Original story: LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Why read: Safer MCP defaults and credential boundaries can break deployments that rely on stdio.

Recommendation: TRIAL

Sources: LiteLLM 1.106.0 release

LiteLLM 1.105 expands agent gateway and MCP authorization boundaries

Sun, 11 Oct 2026 16:02:40 GMT

LiteLLM 1.105 expands agent gateway and MCP authorization boundaries

Original story: LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Why read: MCP discovery, execution authorization and retrieved-chunk guardrails now share one gateway regression surface.

Recommendation: TRIAL

Sources: LiteLLM v1.105.0

LiteLLM 1.104.2 stable adds the Decisions API

Thu, 08 Oct 2026 16:05:30 GMT

LiteLLM 1.104.2 stable adds the Decisions API

Original story: LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Recommendation: TRIAL

Sources: LiteLLM v1.104.2

LiteLLM 1.104 hardens gateway identity, MCP routing and spend accounting

Sun, 04 Oct 2026 16:02:19 GMT

LiteLLM 1.104 hardens gateway identity, MCP routing and spend accounting

Original story: LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Recommendation: TRIAL

Sources: LiteLLM 1.104.0

TypeScript and Python SDK 2.3 tighten transport, OAuth and payload boundaries

Sat, 03 Oct 2026 16:01:57 GMT

TypeScript and Python SDK 2.3 tighten transport, OAuth and payload boundaries.

Original story: MCP SDKs 2.3 tighten transport and OAuth boundaries

Why read: MCP SDK 2.3's safer defaults come with explicit transport compatibility risk.

Recommendation: TRIAL

Sources: MCP TypeScript SDK 2.3.0 · MCP Python SDK 2.3.0

MCP SDKs 2.3 tighten transport and OAuth boundaries

Tue, 29 Sep 2026 16:01:24 GMT

MCP TypeScript and Python SDK 2.3 releases tighten connection, OAuth and payload boundaries. TypeScript redirects stay same-origin by default, can validate token audiences and enforce tool-input element limits; server and transport objects now have a one-request lifecycle. Python rejects invalid MCP headers during registration and caps SSE events at 1 MiB by default.

Why read: OAuth issuer validation and auto-pagination change security and runtime behavior; regression-test the upgrade.

Recommendation: TRIAL

Sources: Model Context Protocol TypeScript SDK 2.2.0

LiteLLM 1.103 strengthens Claude Code gateway, MCP sessions and identity controls

Mon, 28 Sep 2026 16:03:45 GMT

LiteLLM 1.103 strengthens Claude Code gateway, MCP sessions and identity controls

Original story: LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Why read: MCP identity, session and revocation controls reach a stable gateway.

Recommendation: TRIAL

Sources: LiteLLM 1.103.0 on PyPI · LiteLLM v1.103.0 release

Google API Gateway exposes existing REST APIs as MCP tools

Fri, 25 Sep 2026 16:01:00 GMT

Google Cloud API Gateway can now accept MCP JSON-RPC on /mcp and map tools/call to existing REST operations. Teams opt in through an OpenAPI 3.0 or 3.1 extension and reuse the API's JWT or API-key authentication, quotas and logs. The public preview supports up to 1,000 tools, but not resources, prompts, response streaming or Model Armor inspection. Tool discovery is unauthenticated by default and requires explicit JWT protection in production; API keys cannot protect tools/list.

Recommendation: TRIAL

Sources: developers.googleblog.com · turn your rest apis into mcp tools with google cloud api gateway

UN Data Commons exposes official statistics to agents through MCP

Thu, 17 Sep 2026 23:58:56 GMT

The UN System Data Commons launches as an open-source, AI-ready knowledge graph built on Google Data Commons. It normalizes metrics, time series and geographic boundaries across UN datasets, supports natural-language exploration and exposes authoritative data to research agents through MCP. The public platform is live, with the UN targeting 80% coverage of its statistical datasets by 2027.

Recommendation: TRIAL

Sources: blog.google · google un data commons platform

GitHub adds adoption telemetry for Copilot agents, skills and MCP

Thu, 17 Sep 2026 23:58:56 GMT

GitHub's enterprise and organization reports now measure Copilot CLI skills, custom agents, MCP servers, slash commands and plugins. The impact dashboard and API also expose rolling 28-day engagement for code completion, agent edit, code review, cloud agent, CLI and app. Customer-defined names are privacy-grouped. MCP interaction counts measure connection attempts, including failures, rather than tool calls.

Recommendation: ADOPT

Sources: github.blog · 2026 09 17 agentic cli customizations now in the usage metrics api

LiteLLM 1.106 makes remote MCP identity safer and disables stdio by default

Sun, 13 Sep 2026 16:00:31 GMT

LiteLLM 1.107.0 expands the stable gateway with Microsoft 365 Copilot and per-user GitHub Copilot OAuth, additional Decisions providers, signed-container verification and request-failure analytics. It also hardens MCP bearer propagation, Bedrock tool calls, spend accounting and OpenAI SDK 3 compatibility. The large aggregated release still requires a production-shaped canary.

Recommendation: TRIAL

Sources: pypi.org · 1.102.0

Cloudflare One Gateway adds MCP traffic detection and enforcement

Sat, 15 Aug 2026 12:26:05 GMT

Cloudflare added first-class identification, monitoring, and control of MCP traffic to its Zero Trust Gateway, targeting shadow-MCP discovery and blocking of unapproved servers. Detection keys on the MCP-Protocol-Version HTTP header: the MCP 2025-11-25 spec requires it, and the 2026-07-28 stateless spec puts it on every POST while adding Mcp-Method/Mcp-Name. A new experimental.is_mcp boolean selector is available to all Zero Trust customers, with a dedicated MCP dashboard. Traffic Source selectors enable Portal-only enforcement, and MCP Portals support pre-registered OAuth clients. Agents SDK v0.20.0 supports the stateless 2026-07-28 spec as both client and server.

Recommendation: TRIAL

Sources: blog.cloudflare.com · mcp security updates