Summary

The release adds support for pre-registered MCP OAuth clients and bearer-token authentication for exec-server WebSocket connections. It also strengthens approval behaviour and fixes Windows, Linux and macOS sandbox and path-handling issues.

Why it matters

Coding agents increasingly need secure, inspectable connections to tools and local execution environments.

Sources