# Release v1.0.18 - Auth0 Provider, ANS Trust Verification, Telemetry, and Federation Metadata

**April 2026**

---

## Upgrading from v1.0.17

This section covers everything you need to know to upgrade from v1.0.17 to v1.0.18.

### Breaking Changes

There are no breaking changes in this release.

### New Environment Variables

| Variable | Default | Description |
|----------|---------|-------------|
| `AUTH0_DOMAIN` | - | Auth0 tenant domain (e.g., your-tenant.auth0.com) |
| `AUTH0_CLIENT_ID` | - | Auth0 OAuth2 application client ID |
| `AUTH0_CLIENT_SECRET` | - | Auth0 OAuth2 application client secret |
| `AUTH0_AUDIENCE` | - | Optional: API audience for M2M token validation |
| `AUTH0_GROUPS_CLAIM` | `https://mcp-gateway/groups` | Custom namespaced claim for group memberships |
| `AUTH0_ENABLED` | `false` | Enable Auth0 as OAuth2 provider |
| `AUTH0_M2M_CLIENT_ID` | - | Optional: M2M client ID for IAM management |
| `AUTH0_M2M_CLIENT_SECRET` | - | Optional: M2M client secret for IAM management |
| `AUTH0_MANAGEMENT_API_TOKEN` | - | Optional: Static management API token (alternative to M2M credentials) |
| `ANS_INTEGRATION_ENABLED` | `false` | Enable Agent Name Service (ANS) trust verification |
| `ANS_API_ENDPOINT` | `https://api.godaddy.com` | ANS API base URL |
| `ANS_API_KEY` | - | GoDaddy API key (required when ANS enabled) |
| `ANS_API_SECRET` | - | GoDaddy API secret (required when ANS enabled) |
| `ANS_API_TIMEOUT_SECONDS` | `30` | HTTP request timeout for ANS API calls |
| `ANS_SYNC_INTERVAL_HOURS` | `6` | Background re-verification interval |
| `ANS_VERIFICATION_CACHE_TTL_SECONDS` | `3600` | Cache TTL for verification results |
| `MCP_TELEMETRY_DISABLED` | `false` | Set to true to disable all telemetry |
| `MCP_TELEMETRY_OPT_IN` | `false` | Set to true to enable daily heartbeat with aggregate counts |
| `MCP_TELEMETRY_DEBUG` | `false` | Set to true to log payloads instead of sending |
| `REGISTRY_NAME` | (auto-generated) | Human-readable registry name for federation |
| `REGISTRY_ORGANIZATION_NAME` | `ACME Inc.` | Organization operating this registry |
| `REGISTRY_DESCRIPTION` | - | Optional: Registry description for federation |
| `REGISTRY_CONTACT_EMAIL` | - | Optional: Contact email for registry administrators |
| `REGISTRY_CONTACT_URL` | - | Optional: Documentation or support URL |

### Upgrade Instructions

#### Docker Compose

```bash
cd mcp-gateway-registry
git pull origin main
git checkout v1.0.18

# Review new env vars in .env.example and update your .env if needed
# Then rebuild and restart:
./build_and_run.sh
```

#### Kubernetes / Helm (EKS)

```bash
cd mcp-gateway-registry
git pull origin main
git checkout v1.0.18

# Update values.yaml with Auth0/ANS/telemetry/registry card settings if needed
cd charts/mcp-gateway-registry-stack
helm upgrade mcp-gateway . -f your-values.yaml
```

#### Terraform / ECS

```bash
cd mcp-gateway-registry
git pull origin main
git checkout v1.0.18

# Update your .tfvars with any new variables
cd terraform/aws-ecs
terraform plan
terraform apply
```

#### DockerHub Images

Pre-built images are available:

```bash
docker pull mcpgateway/registry:v1.0.18
docker pull mcpgateway/auth-server:v1.0.18
docker pull mcpgateway/currenttime-server:v1.0.18
docker pull mcpgateway/realserverfaketools-server:v1.0.18
docker pull mcpgateway/fininfo-server:v1.0.18
docker pull mcpgateway/mcpgw-server:v1.0.18
docker pull mcpgateway/metrics-service:v1.0.18
```

---

## Major Features

### Auth0 Identity Provider Support

Full Auth0 integration as a fourth identity provider alongside Keycloak, Entra ID, and Okta. Includes OAuth2 login, M2M client credentials flow, group enrichment via custom claims, IAM management through Auth0 Management API, and Helm chart support.

[PR #708](https://github.com/agentic-community/mcp-gateway-registry/pull/708)

### Agent Name Service (ANS) Integration

PKI-based trust verification for AI agents via GoDaddy ANS. Agents can link an ANS identity and receive a verified trust badge in the UI. Features include read-only "Bring Your Own ANS ID" model, background re-verification every 6 hours, circuit breaker resilience (5 failures, 1 hour cooldown), clickable badge with full certificate details, and Helm chart configuration.

[PR #693](https://github.com/agentic-community/mcp-gateway-registry/pull/693)

### Server-Side Telemetry Collector

Anonymous usage telemetry infrastructure with opt-out support. Collects aggregate registry metrics (asset counts, feature usage) for project health insights. Includes configurable opt-in daily heartbeat, debug mode for payload inspection, and deployment-specific configuration for Kubernetes/ECS/Docker Compose.

[PR #674](https://github.com/agentic-community/mcp-gateway-registry/pull/674)

### Token Refresher and A2A Tags

Automatic OAuth token refresh for MCP server connections, A2A agent tagging support, agent edit with skills management, and streamlined documentation structure.

[PR #628](https://github.com/agentic-community/mcp-gateway-registry/pull/628)

### Discover Tab

New Discover tab in the frontend with expandable list rows, search functionality, and asset counts across servers, agents, and skills.

[PR #745](https://github.com/agentic-community/mcp-gateway-registry/pull/745)

### UUID Fields and Federation Metadata

UUID identifiers and enhanced federation metadata for servers, agents, and skills. Enables cross-registry asset tracking and federation discovery with registry card configuration.

[PR #676](https://github.com/agentic-community/mcp-gateway-registry/pull/676)

---

## What's New

### Authentication and IAM
- Auth0 identity provider with OAuth2, M2M, and group enrichment (#708)
- Okta M2M sync dual-write to `idp_m2m_clients` for group enrichment parity with Auth0 (#759)
- Decouple `is_admin` from server wildcard access (#717)
- Add KEYCLOAK_EXTERNAL_URL to registry service (#681)

### Agent Trust and Discovery
- ANS integration with trust badges, UI components, and infrastructure config (#693)
- Agent registration with Amazon Bedrock AgentCore security schemes and field pass-through (#728)
- Add `supported_protocol` field, update `trust_level`/`visibility` defaults (#737)
- Normalize visibility values across agents, servers, and skills (#740)

### Telemetry and Observability
- Server-side telemetry collector infrastructure (#674)
- Telemetry end-to-end reliability and enhancements (#702)
- Fix telemetry `registry_id` being None on first startup (#714)
- Usage-report Claude Code skill for telemetry reporting (#715)
- Enhance usage-report skill with chart generation and styling (#727)
- Add telemetry analysis script to usage-report skill (#729)

### Frontend Improvements
- Discover tab with expandable list rows, search, and counts (#745)
- Fix edit server blank page, add metadata to search and skill UI (#746)
- Tag filtering and searching support (#668)
- Fix tag filtering losing focus (#673)

### Infrastructure and Deployment
- Packaging as a Python package (#669)
- Helm values support for registry card (#692)
- Make Nginx DNS resolver configurable via environment variable (#683)
- Restore SETUID/SETGID capabilities for MongoDB after `cap_drop ALL` (#688)
- MCP bug with CloudFront mode (#749)
- Format KMS key policy and add role pattern comments (#754)

### Documentation
- FAQ section with Entra ID group visibility and API token guides (#756)
- Add QR code for repository (#757)
- ANS demo video link in design doc and README (#693)
- Update roadmap to April 2026 milestones (#741)

---

## Bug Fixes

- Fix edit server blank page, add metadata to search and skill UI (#746)
- Preserve `ans_metadata` and other fields on agent edit (#752)
- MCP bug with CloudFront mode (#749)
- Normalize visibility values across agents, servers, and skills (#740)
- Agent registration with Amazon Bedrock AgentCore security schemes and field pass-through (#728)
- Decouple `is_admin` from server wildcard access (#717)
- Fix telemetry `registry_id` being None on first startup (#714)
- Intelligent tool finder `top_n` parameter ignored (#703)
- Telemetry end-to-end reliability and enhancements (#702)
- Resolve test regressions introduced in PR #676 (#690)
- Restore SETUID/SETGID capabilities for MongoDB after `cap_drop ALL` (#688)
- Pin litellm to 1.82.4 to avoid compromised 1.82.8 release (#687)
- Make Nginx DNS resolver configurable via environment variable (#683)
- Add KEYCLOAK_EXTERNAL_URL to registry service (#681)
- Fix tag filtering losing focus (#673)
- Okta M2M sync dual-write to `idp_m2m_clients` collection (#759)

---

## Pull Requests Included

| PR | Title |
|----|-------|
| #759 | fix: Okta M2M sync dual-write to idp_m2m_clients collection |
| #757 | docs: add QR code for repository and qrcode dev dependency |
| #756 | docs: add FAQ section with Entra ID group visibility and API token guides |
| #754 | fix: format KMS key policy and add role pattern comments |
| #752 | fix: preserve ans_metadata and other fields on agent edit |
| #749 | MCP bug with CloudFront mode |
| #746 | Fix edit server blank page, add metadata to search and skill UI |
| #745 | feat: Discover tab with expandable list rows, search, and counts |
| #741 | chore: update roadmap to April 2026 milestones |
| #740 | fix: normalize visibility values across agents, servers, and skills |
| #737 | feat: add supported_protocol field, update trust_level/visibility defaults |
| #732 | chore(deps): bump lodash from 4.17.23 to 4.18.1 in /frontend |
| #733 | chore(deps): bump pygments from 2.19.2 to 2.20.0 in /servers/mcpgw |
| #730 | chore(deps): bump litellm from 1.82.4 to 1.83.0 |
| #729 | feat: add telemetry analysis script to usage-report skill |
| #728 | fix: agent registration with Bedrock AgentCore security schemes and field pass-through |
| #727 | feat: enhance usage-report skill with chart generation and styling |
| #725 | chore(deps): bump aiohttp from 3.13.3 to 3.13.4 in /agents/a2a |
| #724 | chore(deps): bump aiohttp from 3.13.3 to 3.13.4 |
| #721 | chore(deps): bump fastmcp from 3.1.0 to 3.2.0 in /servers/currenttime |
| #720 | chore(deps): bump fastmcp from 3.1.0 to 3.2.0 in /servers/mcpgw |
| #717 | fix: decouple is_admin from server wildcard access |
| #715 | Add usage-report Claude Code skill for telemetry reporting |
| #714 | Fix telemetry registry_id being None on first startup |
| #713 | chore(deps): bump pygments from 2.19.2 to 2.20.0 in /servers/currenttime |
| #712 | chore(deps): bump pygments from 2.19.2 to 2.20.0 in /metrics-service |
| #711 | chore(deps): bump pygments from 2.19.2 to 2.20.0 |
| #710 | chore(deps): bump pygments from 2.19.2 to 2.20.0 in /agents/a2a |
| #709 | chore(deps): bump pygments from 2.19.2 to 2.20.0 in /agents/a2a |
| #708 | Add Auth0 provider support to MCP Gateway Registry |
| #707 | chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /frontend |
| #706 | chore(deps): bump cryptography from 46.0.5 to 46.0.6 in /servers/mcpgw |
| #705 | chore(deps): bump langchain-core from 1.2.11 to 1.2.22 |
| #703 | fix: intelligent_tool_finder top_n parameter ignored |
| #702 | fix: telemetry end-to-end reliability and enhancements |
| #701 | chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /frontend |
| #700 | chore(deps): bump node-forge from 1.3.2 to 1.4.0 in /frontend |
| #699 | chore(deps): bump yaml in /frontend |
| #698 | chore(deps): bump requests from 2.32.5 to 2.33.0 in /metrics-service |
| #697 | chore(deps): bump requests from 2.32.5 to 2.33.0 |
| #696 | chore(deps): bump requests from 2.32.5 to 2.33.0 in /agents/a2a |
| #694 | chore(deps): bump picomatch in /frontend |
| #693 | feat: ANS integration with UI fixes and infrastructure config |
| #692 | update helm values to support registry card |
| #690 | fix: resolve test regressions introduced in PR #676 |
| #688 | fix: restore SETUID/SETGID capabilities for MongoDB after cap_drop ALL |
| #687 | fix: pin litellm to 1.82.4 to avoid compromised 1.82.8 release |
| #683 | fix: make Nginx DNS resolver configurable via environment variable |
| #681 | fix: Add KEYCLOAK_EXTERNAL_URL to registry service |
| #680 | chore(deps): bump fast-xml-parser and @aws-sdk/xml-builder in /cli |
| #679 | chore(deps): bump pyjwt from 2.10.1 to 2.12.0 |
| #676 | Add UUID fields and enhanced federation metadata for servers, agents, and skills |
| #675 | chore(deps): bump jsonpath from 1.2.1 to 1.3.0 in /frontend |
| #673 | fix: tag filtering losing focus |
| #672 | chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend |
| #671 | chore(deps): bump pyjwt from 2.11.0 to 2.12.0 in /servers/mcpgw |
| #669 | Packaging as a python package |
| #668 | support tag filtering and searching |
| #664 | bump image tag |
| #662 | chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 |
| #661 | chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 in /agents/a2a |
| #652 | chore(deps): bump pyjwt from 2.10.1 to 2.12.0 in /agents/a2a |
| #649 | chore(deps): bump pillow from 11.3.0 to 12.1.1 |
| #628 | feat: token refresher, A2A tags, agent edit with skills, streamlined docs |

---

## Security Dependency Updates

| Package | Previous | Updated | Scope |
|---------|----------|---------|-------|
| litellm | 1.82.4 | 1.83.0 | registry |
| pyjwt | 2.10.1 / 2.11.0 | 2.12.0 | registry, agents/a2a, servers/mcpgw |
| requests | 2.32.5 | 2.33.0 | registry, agents/a2a, metrics-service |
| aiohttp | 3.13.3 | 3.13.4 | registry, agents/a2a |
| pygments | 2.19.2 | 2.20.0 | registry, agents/a2a, servers/mcpgw, servers/currenttime, metrics-service |
| cryptography | 46.0.5 | 46.0.6 | servers/mcpgw |
| pillow | 11.3.0 | 12.1.1 | registry |
| fastmcp | 3.1.0 | 3.2.0 | servers/mcpgw, servers/currenttime |
| langchain-core | 1.2.11 | 1.2.22 | registry |
| lodash | 4.17.23 | 4.18.1 | frontend |
| node-forge | 1.3.2 | 1.4.0 | frontend |
| pyasn1 | 0.6.2 | 0.6.3 | registry, agents/a2a |
| path-to-regexp | 0.1.12 | 0.1.13 | frontend |
| brace-expansion | 1.1.12 | 1.1.13 | frontend |
| jsonpath | 1.2.1 | 1.3.0 | frontend |
| flatted | 3.4.1 | 3.4.2 | frontend |

---

## Contributors

Thank you to all contributors for this release:

- **Amit Arora** ([@aarora79](https://github.com/aarora79))
- **Omri Shiv** ([@omrishiv](https://github.com/omrishiv))
- **Prateek Sinha** ([@prateek-sinha-godaddy](https://github.com/prateek-sinha-godaddy))
- **Abhishek Singh** ([@singhabhishek4u](https://github.com/singhabhishek4u))
- **Gaurav Rele** ([@gauravrele87](https://github.com/gauravrele87))
- **Benjamin Hsu** ([@BenjaminHsu](https://github.com/BenjaminHsu))
- **Alejandro Nunez Cabello** ([@alnu79](https://github.com/alnu79))

---

## Support

- [GitHub Issues](https://github.com/agentic-community/mcp-gateway-registry/issues)
- [GitHub Discussions](https://github.com/agentic-community/mcp-gateway-registry/discussions)
- [Documentation](https://github.com/agentic-community/mcp-gateway-registry/tree/main/docs)

---

**Full Changelog:** [v1.0.17...v1.0.18](https://github.com/agentic-community/mcp-gateway-registry/compare/v1.0.17...v1.0.18)
