2443 V1013 Ce9d8c5b

Release v1.0.13 - Federated Registry, Agent Skills & Audit Logging

February 2026

Major Features

Federated Registry

Connect multiple MCP Gateway registries together with bi-directional synchronization:

• Peer Registry Management: Add, configure, and manage peer registries through the UI or CLI
• Automatic Sync: Servers and agents sync between registries with configurable filters (whitelist, tag-based)
• Chain Prevention: Prevents A->B->C sync loops for clean federation topology
• Orphan Detection: Identifies and manages orphaned items when peer registries are removed
• Security Scan Sync: Security scan results propagate across federated registries
• Visibility Control: Configure which servers/agents are exported to peers (public, internal, private)

PR #422 | Federation Guide

Agent Skills Registry

Register, discover, and manage agent skills with health monitoring and ratings:

• Skill Registration: Register individual agent skills with metadata and SKILL.md documentation
• Health Checks: Automatic health monitoring for registered skills
• Skill Ratings: Community-driven 5-star rating system for skills
• Semantic Search: Skills are indexed for semantic search alongside servers and agents
• UI Integration: Browse, rate, and view skill documentation from the registry UI

PR #451 | Multiple skill-related commits

Audit Logging & Compliance

Comprehensive audit logging for API and MCP access tracking:

• MongoDB Storage: All audit events stored in MongoDB for scalability
• API & MCP Logging: Track both REST API calls and MCP tool invocations
• Admin UI: View, filter, and sort audit logs from the Settings menu
• Compliance Ready: Designed for enterprise compliance requirements

PR #449

MCP Server Version Routing

Route requests to specific server versions using HTTP headers:

• Header-Based Routing: Use X-MCP-Server-Version header to target specific versions
• Version Management: Register multiple versions of the same server
• Seamless Upgrades: Test new versions without affecting production traffic

PR #407

What's New

Federation & Sync

• Federated Registry with peer management and bi-directional sync (#422)
• Federation export API with visibility controls (#422)
• Sync metadata for tracking federated items (#422)
• Chain prevention for multi-hop federation scenarios (#422)
• Orphan detection and cleanup when peers are deleted (#422)
• Security scan sync across federated registries (#422)

Agent Skills

• Agent Skills registry entity with backend implementation
• Skill health checks and monitoring
• Skill ratings with 5-star widget
• Skills included in semantic search
• SKILL.md viewer in UI

Audit & Compliance

• Audit logging with MongoDB storage (#449)
• API and MCP access tracking
• Admin-only Audit Logs viewer in Settings
• Clickable sort toggles for log filtering

Security Improvements

• SSRF protection for redirect validation (CWE-918) (#453)
• SQL injection prevention in metrics-service retention subsystem (#451)
• Information exposure fix for exceptions (#453)
• Static token auth for Registry API (#420)

Authentication & Authorization

• Microsoft Entra ID support in Helm charts (#458)
• Bearer token support for /api/auth/me endpoint (#454, #431)
• Check mcp-registry-admin in both groups and scopes (#456)
• Registry client implementation for skill API (#455)

Infrastructure

• Docker build workflows with release tagging (#464, #432)
• High availability Pod scaling in Kubernetes (#437)
• Lexical fallback search when embedding model unavailable (#415)
• Docker Hardened Images (DHI) support as optional overlay (#414)
• Lightweight Dockerfile improvements

UI/UX Improvements

• Federated registry UI with collapsible sections
• Delete functionality for servers and agents in UI (#439)
• Settings navigation improvements (#444)
• Ratings popup fix for card cutoff (#422)
• Dashboard UX improvements

Configuration Changes

Federation Environment Variables

New environment variables for federation support:

FEDERATION_ENABLED=true
FEDERATION_SYNC_INTERVAL_SECONDS=300
FEDERATION_TOKEN_ENCRYPTION_KEY=your-32-byte-key

Audit Logging

Enable audit logging with:

AUDIT_LOGGING_ENABLED=true
AUDIT_LOG_RETENTION_DAYS=90

Upgrade Instructions

For Docker Compose Deployments

1. Pull the latest changes:

cd mcp-gateway-registry
git pull origin main
git checkout v1.0.13

2. Rebuild and restart:

./build_and_run.sh

For Kubernetes/Helm Deployments

1. Update chart values for Entra ID and federation if needed
2. Apply changes:

helm upgrade mcp-gateway ./charts/mcp-gateway -f your-values.yaml

Bug Fixes

• Fix MongoDB replica set initialization race condition (#440)
• Fix token masking behavior in tests (#444)
• Fix MCP URL format in tests (#449)
• Fix security group rules limit in AWS ECS
• Fix ratings popup cutoff in server/agent cards
• Fix hybrid search scoring and HNSW recall (#415)
• Fix auth server returning 500 instead of 401 (#423)

Pull Requests Included

Contributors

Thank you to our amazing contributors for this release:

• Amit Arora (@aarora79)
• Omri Shiv (@omrishiv)
• Dheeraj Oruganty (@dheerajoruganty)
• Bren Whyte (@brenwhyte)
• Andreas Feldmann (@ndrsfel)
• Abhishek Singh
• Gaurav Rele
• kanghengliu

Resources

Documentation

• Federation Guide - Federated registry setup and operations
• Audit Logging - Compliance and audit trail documentation
• Agent Skills - Skills registry documentation
• Server Versioning - MCP server version routing

Support

• GitHub Issues
• GitHub Discussions
• Documentation

Full Changelog: v1.0.12...v1.0.13