# MCP Identity Gateway 1.35.6263 security updates

MCP Identity Gateway version 1.35.6263 includes security updates.

A self-hosted MCP Identity Gateway can limit the MCP servers it connects to with the `AEMBIT_NETWORK_ACCESS_POLICY` environment variable. The default, `any`, allows MCP servers at any address. `public` allows only MCP servers at publicly reachable addresses. With `public`, MCP Identity Gateway does not use a proxy set in the host’s environment. If MCP Identity Gateway reaches MCP servers through a proxy, use `any`. See [`AEMBIT_NETWORK_ACCESS_POLICY`](/user-guide/deploy-install/mcp-identity-gateway/env-vars-mcp-gateway/#aembit_network_access_policy).

This version also updates dependencies to address published security advisories.

For the latest available versions of these components, see the [Edge Components Supported Versions](/reference/edge-components/edge-component-supported-versions) page.

[Other improvements](/changelog/entry/2026-10-28-mcp-identity-gateway-1-35-6263-release) also shipped in this build.