npm / @toolbox-sdk/server
@toolbox-sdk/server
What changed in @toolbox-sdk/server 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-11-04.
3 breaking1 security8 new APIs and options5 behavior and defaults2 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@toolbox-sdk/server 119 changes
Breaking changes 3
Removed Authorized() from the Tool interface so authRequired checks are centralized; integrations implementing Tool may need adjustment.
GetClaimsFromHeader now validates the issuer claim.
Reverts connecting sources on first use, changing when sources connect.
Security 1
Read errors no longer expose unsanitized server filesystem paths.
New APIs and options 8
Added tools to create, update, and delete data agents.
Added MCP Apps UI support across protocol versions v20241105 through v20251125.
The toolbox playground now supports MCP Apps.
The Looker query tool now supports running saved queries by query_id.
BigQuery supports authorized views with dataset restrictions.
The tool now supports Bigtable and Firestore references.
A Looker tool for getting an explore is now available.
Spanner Omni is now supported as a source.
Behavior and default changes 5
Allowed datasets are sorted to make BigQuery tool manifests deterministic.
Self-tracing is disabled on GCP telemetry exporters.
Timeouts for datalineage have been increased.
The Looker tool now includes LookML dashboards in its results.
Firestore collection listing for get_schema now propagates the requester header.
Fixes and other changes 2
Lexically referenced datasets are checked before a BigQuery dry run.
Resource-template URI schemes are normalized to lowercase.