GeezerVison

v0.73.0-rc.1

Release candidate from main at 2d12411: scoped scanner registry view (smart-mcp-proxy#1812),
per-server capture lock (smart-mcp-proxy#1813), OAuth refresh-response recovery (smart-mcp-proxy#1828),
retrieve_tools upstream filter (smart-mcp-proxy#1836), scanner/CLI/Web UI fixes (smart-mcp-proxy#1830).

v0.72.0: scan is the default trust mode with a structural change gate…

… (spec 119/120); per-token rate limits; ${file:} secret references and MCPPROXY_API_KEY_FILE; TLS extra_sans/cert_file/key_file; signed TPA bundle format and refresh; mcp_reject_query_apikey; log and span credential masking

v0.72.0-rc.1: scan is the default trust mode with a structural change…

… gate (spec 119/120), per-token rate limits, ${file:} secret references, TLS extra_sans/cert_file

Release v0.70.0

Highlights: profiles v3, per-client credentials and a reworked navigation,
with upgrade-safe quarantine and agents that know where their tools are.

- Profiles v3 (Spec 108): per-profile tool policy (max_tier, allow/deny
  rules, unannotated handling), client and token bindings, anonymous_profile,
  and an access explainer on Web UI, macOS app, CLI and the MCP `profiles`
  tool. Connect now writes a per-client `mcp_cli_` credential instead of the
  admin key.
- UX consistency (Spec 109): one needs-attention list, informed Review
  queue, Clients hub, catalog-first Add Server, grouped navigation and
  command palette, scope filters with deep links.
- Agents see what they can reach: initialize instructions and the
  retrieve_tools description name the caller's reachable servers and allowed
  operations, filtered by profile and agent-token scope
  (advertise_upstream_servers to opt out); `mcpproxy agent-instructions`
  prints a CLAUDE.md / AGENTS.md snippet. /mcp, /mcp/call and /mcp/code now
  send initialize instructions at all.
- Security: a server v0.69 held in quarantine stays held on upgrade (v0.69
  restarts could overwrite its recorded quarantine); implicit quarantine
  survives restarts and config writes; a stated quarantine value on add or
  import is persisted.
- Reliability: a stdio upstream whose process dies is detected and respawned
  instead of staying falsely healthy; a malformed import no longer bricks
  startup; /mcp/all keeps upstream additionalProperties/$defs.
- Client header forwarding (Spec 112), catalog popularity signal (Spec 110),
  versioned search index with automatic migration.

Upgrade note: vetted servers with no approved tools (zero-tool servers,
servers never connected since v0.21) are held for review once; approve them
or set "quarantined": false before upgrading. Downgrading to v0.69 with
require_mcp_auth off lets v0.69 accept rc-issued mcp_cli_ credentials as
unconfined.

QA: v0.70.0-rc.5 passed the release QA gate and an independent codex RC
test (42 pass, 0 fail; Gatekeeper verified separately).

v0.70.0-rc.5: dead stdio transport recovery (smart-mcp-proxy#1489), i…

…mport validation (smart-mcp-proxy#1490), /mcp/all schema fidelity (smart-mcp-proxy#1438), agent-instructions follow-ups (smart-mcp-proxy#1487)