MCP Inspector releases 2.8.0 fixing authentication bypass
Start here
MCP Inspector released v2.8.0, fixing the issue where previously setting DANGEROUSLY_OMIT_AUTH to any value other than true/1 could also affect /api authentication; now only true/1 disables that authentication. This version also adds the MCP_INSPECTOR_SECRET_KEY_FILE configuration option and supplements key storage documentation for each runtime, adds a security advisory skill, adds the Mcp-Method marker to modern notification POSTs, and adjusts the request body release logic for the OIDC compatibility path.
Generated by AI from reports · Updated 5 days ago
Progress timeline
- MCP InspectorMCP Inspector v2.8.0 released: fixes /api authentication bypass and adds key file configuration
MCP Inspector released v2.8.0, fixing a previous issue where setting DANGEROUSLY_OMIT_AUTH to values other than true/1 could also affect /api authentication; now only true/1 disables that authentication. The release also adds the MCP_INSPECTOR_SECRET_KEY_FILE configuration option and key storage documentation for each runtime, adds a security advisory skill, adds the Mcp-Method marker to modern notification POSTs, and adjusts the request body release logic for the OIDC compatibility path.
Related discussion
Attention trend
New sources per day
- Oct 1: 1 new sources (1 outlets, 0 accounts)
- Oct 2: 0 new sources (0 outlets, 0 accounts)
- Oct 3: 0 new sources (0 outlets, 0 accounts)
- Oct 4: 0 new sources (0 outlets, 0 accounts)
- Oct 5: 0 new sources (0 outlets, 0 accounts)
- Oct 6: 0 new sources (0 outlets, 0 accounts)
- Oct 7: 0 new sources (0 outlets, 0 accounts)
- Oct 8: 0 new sources (0 outlets, 0 accounts)
- Oct 9: 0 new sources (0 outlets, 0 accounts)
- Oct 10: 0 new sources (0 outlets, 0 accounts)
- Oct 11: 0 new sources (0 outlets, 0 accounts)
- Oct 12: 0 new sources (0 outlets, 0 accounts)
- Oct 13: 0 new sources (0 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)