# MCP Identity Gateway 1.35.6263 release

Aembit has released [MCP Identity Gateway](/user-guide/deploy-install/mcp-identity-gateway/) version 1.35.6263, which reports its version in its protected resource metadata and returns MCP server errors more reliably.

For the latest available versions of these components, see the [Edge Components Supported Versions](/reference/edge-components/edge-component-supported-versions) page.

Key Updates:

* **Version in protected resource metadata** - The protected resource metadata document includes an `aembit_gateway_version` field, which you can read without an access token. See [Check the MCP Identity Gateway version](/user-guide/deploy-install/mcp-identity-gateway/reference-mcp-gateway/#check-the-mcp-identity-gateway-version).
* **Credential available after authorization** - After a user authorizes an MCP User-Based Access Token Credential Provider, MCP Identity Gateway uses the new credential on the user’s next request. Earlier versions returned errors for those requests until the cached credential expired.
* **MCP server errors with MCP Tool Access Control** - If an MCP server returns an error while MCP Tool Access Control filters its tool list, the MCP client receives that error.
* **Header parameters across specification revisions** - Some MCP servers on the 2026-07-28 MCP specification take a tool argument as a request header. MCP Identity Gateway sends that header for MCP clients on earlier revisions.
* **Credential injection failures in workload events** - MCP Identity Gateway sometimes cannot add a credential to a request as a header or query parameter. The workload event then records the credential injection as failed.

A [security update](/changelog/entry/2026-10-28-mcp-identity-gateway-1-35-6263-security-updates) also shipped in this build.