# What changed in @toolbox-sdk/server

> 19 changes in @toolbox-sdk/server 1 from its official release notes, upgrade guides and advisories: 3 breaking, 1 security, 8 new APIs and options. Each one cited. Sources checked 2026-11-04. HTML: https://unstale.sh/npm/@toolbox-sdk/server/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @toolbox-sdk/server 1

### Breaking changes

- Removed Authorized() from the Tool interface so authRequired checks are centralized; integrations implementing Tool may need adjustment. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)
- GetClaimsFromHeader now validates the issuer claim. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)
- Reverts connecting sources on first use, changing when sources connect. (1.13.1) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.13.1)

### Security

- Read errors no longer expose unsanitized server filesystem paths. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)

### New APIs and options

- Added tools to create, update, and delete data agents. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)
- Added MCP Apps UI support across protocol versions v20241105 through v20251125. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)
- The toolbox playground now supports MCP Apps. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)
- The Looker query tool now supports running saved queries by query_id. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)
- BigQuery supports authorized views with dataset restrictions. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)
- The tool now supports Bigtable and Firestore references. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)
- A Looker tool for getting an explore is now available. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)
- Spanner Omni is now supported as a source. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)

### Behavior and default changes

- Allowed datasets are sorted to make BigQuery tool manifests deterministic. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)
- Self-tracing is disabled on GCP telemetry exporters. (1.15.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.15.0)
- Timeouts for datalineage have been increased. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)
- The Looker tool now includes LookML dashboards in its results. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)
- Firestore collection listing for get_schema now propagates the requester header. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)

### Fixes and other changes

- Lexically referenced datasets are checked before a BigQuery dry run. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)
- Resource-template URI schemes are normalized to lowercase. (1.14.0) — [release notes](https://github.com/googleapis/mcp-toolbox/releases/tag/v1.14.0)