# MCP Identity Gateway 1.35.6086 release

Aembit has released [MCP Identity Gateway](/user-guide/deploy-install/mcp-identity-gateway/) version 1.35.6086, which relays change notifications to MCP clients and checks tool results against their output schemas.

For the latest available versions of these components, see the [Edge Components Supported Versions](/reference/edge-components/edge-component-supported-versions) page.

Key Updates:

* **Change notifications**: An MCP client using the 2026-07-28 revision of the MCP specification can send `subscriptions/listen` to learn when the tools, resources, or prompts it can reach change. MCP Identity Gateway relays these notifications from MCP servers using the 2026-07-28 revision. It also sends one when the client’s assigned Server Workloads or MCP Tool Access Control rules change, and when it reconnects to an MCP server. See [Change notifications](/user-guide/deploy-install/mcp-identity-gateway/reference-mcp-gateway/#change-notifications).
* **Tool output validation**: When a tool publishes an output schema, MCP Identity Gateway checks the tool’s completed results against it. The MCP client gets error `-32004` in place of a result that doesn’t match. For the results MCP Identity Gateway doesn’t check, see [Tool output validation](/user-guide/deploy-install/mcp-identity-gateway/reference-mcp-gateway/#tool-output-validation).
* **Subscription refresh interval**: `AEMBIT_MCP_GATEWAY_TIMEOUT` accepts the `subscriptions_workload_refresh_interval` [timeout name](/user-guide/deploy-install/mcp-identity-gateway/env-vars-mcp-gateway/#aembit_mcp_gateway_timeout), which sets how often MCP Identity Gateway checks for assignment and rule changes. The default is 30 seconds.

[Access token, credential, and error handling improvements](/changelog/entry/2026-10-14-improved-mcp-identity-gateway-token-credential-and-error-handling) and a [security update](/changelog/entry/2026-10-14-mcp-identity-gateway-1-35-6086-security-updates) also shipped in this build.