MCP Identity Gateway releases

Download

Product

MCP Identity Gateway

• Aembit CLI
• Agent Controller
• Agent Proxy
• MCP Identity Gateway

1. Choose a release

   Version

   1.30.4530

   • 1.34.5733latest
   • 1.33.56542026-08-07
   • 1.33.55472026-07-28
   • 1.32.50982026-06-29
   • 1.32.50062026-06-04
   • 1.31.49552026-05-19
   • 1.30.45492026-04-03
   • 1.30.45422026-03-26
   • 1.30.45302026-03-25
   • 1.29.44192026-03-19
   • 1.28.41362026-01-27

   Older releaseReleased 2026-03-25

2. Choose a platform

   PlatformLinux

   Architectureamd64arm64

3. Download and verify

   aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gzLinux · amd64 · 10.5 MB.sha256.sha256.sig

   Download

   Verify this downloadsha256 + gpg

   1. Fetch the artifact and its sidecars

      Every release ships a bare-hash checksum and a detached GPG signature over that checksum.

      curl -O https://releases.aembit.io/mcp_gateway/1.30.4530/linux/amd64/aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gz
      curl -O https://releases.aembit.io/mcp_gateway/1.30.4530/linux/amd64/aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gz.sha256
      curl -O https://releases.aembit.io/mcp_gateway/1.30.4530/linux/amd64/aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gz.sha256.sig

   2. Import Aembit’s signing key

      One time per machine.

      curl -sS https://keybase.io/aembit/pgp_keys.asc | gpg --import

   3. Check the signature on the checksum

      This proves the checksum came from Aembit and was not altered in transit.

      gpg --verify aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gz.sha256.sig aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gz.sha256
      gpg: Signature made …
      gpg: Good signature from "Aembit, Inc. <keybase@aembit.io>" [unknown]
      Primary key fingerprint: EA3D 8D2F DAC6 BD81 3716  3D00 D655 E647 29BC 67D7

   4. Compare the artifact against the checksum

      These files hold a bare hash with no filename, so shasum -c needs the two-column form rebuilt first.

      echo "$(cat aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gz.sha256)  aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gz" | shasum -a 256 -c -
      aembit_mcp_gateway_linux_amd64_1.30.4530.tar.gz: OK

   Expected digest

   bd5b133fd991a94ec19bd3409d649ce367ee8852cd71613d3ac5420ee9454107

All releases

11 MCP Identity Gateway releases in total. Select a version to update the steps above.

Version	Released	Notes	Linux amd64	Linux arm64
1.34.5733latest	2026-08-18	Configurable fanout timeouts and nine new Prometheus metrics	✓	✓
1.33.5654	2026-08-07	Broader Content Security inspection coverage and a single workload event per inspection decision	✓	✓
1.33.5547	2026-07-28	Separate liveness and readiness health endpoints and upstream reconnection improvements	✓	✓
1.32.5098	2026-06-29	Workload event correlation with Client Workload and Server Workload identity in events, session IDs bound to the authenticated user, and optional session persistence across restarts	✓	✓
1.32.5006	2026-06-04	MCP protocol ping support and full authorization chain in workload events	✓	✓
1.31.4955	2026-05-19	Session deletion, MCP-level error metrics, and application-specific Prometheus metrics	✓	✓
1.30.4549	2026-04-03	Auth-first enforcement, tool annotations, metrics endpoint, session management improvements, and Claude compatibility fixes	✓	✓
1.30.4542	2026-03-26	Route tools/call after a gateway restart for clients that reuse a cached tool list	✓	✓
1.30.4530	2026-03-25	Skip resource fanout for MCP servers that do not support resources; omit null _meta values in tool responses for Claude compatibility; add a WWW-Authenticate header with the resource metadata URL to 401 responses	✓	✓
1.29.4419	2026-03-19	Add MCP resource support (resources/list and resources/read)	✓	✓
1.28.4136	2026-01-27	Initial limited beta release	✓	✓

Related resources

New to MCP Identity Gateway? View the install and deploy guide.

Configuring MCP Identity Gateway? View the environment variable reference.

Looking for what changed? View MCP Identity Gateway in the changelog.