- `0.1.4.0` initial public release
- `0.1.4.1` `inspect` command, reworked output
- `0.1.4.2` added SSE support
- `0.1.4.3` added VSCode MCP support, better support for non-MacOS, improved error handling, better output formatting
- `0.1.4.4-5` fixes
- `0.1.4.6` whitelisting of tools
- `0.1.4.7` automatically rebalance command args
- `0.1.4.8-10` fixes
- `0.1.4.11` support for prompts and resources
- `0.1.5` semver compatible naming, npm release
- `0.1.6` updated help text
- `0.1.7` stability improvements (CI, pre-commit hooks, testing), --json, logging & error printing, bug fixes, server improvements
- `0.1.8-9` fixes
- `0.1.10-12` automatic releases, updated to newer mcp client
- `0.1.13-14` Bug fix for printing. Now consider full signature when analyzing a tool.
- `0.1.15` Added local-only mode for scanning.
- `0.1.16` Fix when handling tools or args that contain dots.
- `0.1.17` Fix single server would throw an error.
- `0.2.1` `mcp-scan proxy` for live MCP call scanning, [MCP guardrails](https://explorer.invariantlabs.ai/docs/mcp-scan/guardrails/); removed NPM support
- `0.2.2` Fix bug with non-serializable exceptions. Move cross reference analysis to server-side. Now supports fuzzy similarity. Support `streamable-http` as transport.
- `0.2.3` Bug fix. A broken MCP server would compromise the output for all the other servers within the same client.
- `0.3.0` Add Toxic Flow analysis.
- `0.3.1` Add cosmetics. Now defaults to `scan` also with `--` parameters.
- `0.3.2` Add user IDs, --control-server for managed use and --opt-out to disable tracking.
- `0.3.3` Fix `inspect` mode, bug fixes.
- `0.3.4` Various fixes. Scanning of built-in IDE tools.
- `0.3.5` Improving description of some built-in IDE tools.
- `0.3.6` Bug fix: tools without description were not working.
- `0.3.7` Added (experimental) feature to run mcp-scan as a mcp-server.
- `0.3.8` Argument Handling fix
- `0.3.9` Fixed bug in `entity_to_tool`, function exposed only when `mcp-scan` is used as a library
- `0.3.10` Remove Trio dependency.
- `0.3.11` Binary builds.
- `0.3.12` Improved SSL handling; ability to pass headers for API interaction.
- `0.3.13` Get TFA labels from api. Bug fixes
- `0.3.14` Added new VS Code paths
- `0.3.15-19` Signed macos releases
- `0.3.20` Direct scanning, improved URL handling for other endpoints
- `0.3.21` Fix: handle paths with spaces; updated mcp library dependency
- `0.3.22` Fix: support more than 100 tools; allow specifying a version when scanning a package
- `0.3.23` Maintainace to ensure continued server compatability
- `0.3.24` Handle custom SSL certificates (via System/Truststore)
- `0.3.25` Improved error handling for control servers
- `0.3.26` Now pushing agent configurations once for the full machine, not once per agent
- `0.3.27` Comability updated for new server version and new python version
- `0.3.28` Support unknown MCP configurations
- `0.3.29` Add `evo` command to push scan results to Snyk Evo
- `0.3.30` Add `--skip-ssl-verify` flag to skip SSL cert verification
- `0.3.31` Add metadata on push and more detailed error logging
- `0.3.32` Adaptivly support sse urls.
- `0.3.33` Support server-level issues. Retry on analysis api timing out.
- `0.3.34` Error categories & server args. Enhanced redaction and traffic capturing.
- `0.3.35` Fixes. Send push-key to analysis server. This guarantees authentication for enterprise users. Empty config causing erros. Redacting secrets before pushing to analysis server.
- `0.3.36` Add fallback to check command in well known directories to reduce path not found errors.
- `0.3.37` Add possibility to use authentication tokens to scan authenticated mcp servers.
- `0.3.38` Fix `--json` functionality. Default to HTTP for servers with unknown types.
- `0.3.39` Add support to scan skills and clients without MCP servers.
- `0.4` Fix dependency issue, 0.4 version bump, include uv.lock
- `0.4.1` Add more agent support and rebalance command args earlier.
- `0.4.2` Add support for HTTP_PROXY and HTTPS_PROXY configuration.
- `0.4.3` Rename to agent-scan.
- `0.4.4` Use Snyk API Key for analysis.
- `0.4.5` Add possibility to scan agent on multiple users.
- `0.4.6` Add Snyk CLI support.
- `0.4.7` Bug fixes.
- `0.4.8` Bug fixes.
- `0.4.9` Bug fixes and improvements.
- `0.4.10` Add --ci flag and better support multi-user machines.
- `0.4.11` Bug fixes, Amazon Q support.
- `0.4.12` Add Amazon Q path.
- `0.4.13` Minor fixes.
- `0.4.14` 'guard' hook installation flow for Claude Code and Cursor.
- `0.4.15` Support Windows and x86 builds
- `0.4.16` Bug fixes and improvements.
- `0.4.17` WSL support for well known client paths.
- `0.4.18` Add support for --ignore-issues-codes with --ci.
- `0.5.0` Add user consent flow for interactive commands and deprecate mcp-server and install-mcp-server options.
- `0.5.1` Dependency upgrades.
- `0.5.2` Dependency upgrades and enable skill scanning by default.
- `0.5.3` Improve redaction of args and env vars.
- `0.5.4` Fix bug in parsing of skills. Cosmetic improvements to the CLI. Security fixes. Added agent-guard support for codex.
- `0.5.5` Introduce bootstrap API and recursive check for mcp_config_globs and skills_dir_globs.
- `0.5.6` Per-agent discovery refactor with Claude Code support. Bundle all detect_secrets plugins in PyInstaller binary. Starlette security update.
- `0.5.8` Reverting changes.
- `0.5.9` Don't handshake (launch) stdio MCP servers by default. Add VSCode family discoverers (VSCode, Cursor, Windsurf, Kiro, Antigravity); only scan installed extensions and plugins. Upgrade aiohttp to fix CVEs.
- `0.5.10` Add Codex discoverer for MCP servers and skills. Add Claude Desktop support. Attach config-file path to each MCP server on upload. Fix remote URL handling. Stop probing host tool versions and enumerating home directories during bootstrap.
- `0.5.11` Discover Cursor's built-in/managed skills. Redact secrets from skill file contents. Extend guard hook change detection. Remove commands discovery from the Claude Code discoverer.
- `0.5.12` Start CLI binary uploads to S3.
- `0.5.13` Add Cursor Plugins and Opencode support. Bug fix in skill serialization. Agent guard installer detects unauthorized modifications of the hooks script. Agent guard installer installs hooks only if requested agents are already installed on the machine.
- `0.5.14` Fix --insecure usage with the Snyk CLI. Remove unused API calls.
- `0.5.15` Fix false error triggering on skipping guard installations on missing agents.