MCP Identity Gateway 1.35.6263 release
Aembit has released MCP Identity Gateway version 1.35.6263, which reports its version in its protected resource metadata and returns MCP server errors more reliably.
For the latest available versions of these components, see the Edge Components Supported Versions page.
Key Updates:
- Version in protected resource metadata - The protected resource metadata document includes an
aembit_gateway_versionfield, which you can read without an access token. See Check the MCP Identity Gateway version. - Credential available after authorization - After a user authorizes an MCP User-Based Access Token Credential Provider, MCP Identity Gateway uses the new credential on the user’s next request. Earlier versions returned errors for those requests until the cached credential expired.
- MCP server errors with MCP Tool Access Control - If an MCP server returns an error while MCP Tool Access Control filters its tool list, the MCP client receives that error.
- Header parameters across specification revisions - Some MCP servers on the 2026-07-28 MCP specification take a tool argument as a request header. MCP Identity Gateway sends that header for MCP clients on earlier revisions.
- Credential injection failures in workload events - MCP Identity Gateway sometimes cannot add a credential to a request as a header or query parameter. The workload event then records the credential injection as failed.
A security update also shipped in this build.