Release / 17 Sep 2026 / with v1.11.0

MCP Toolbox for Databases v1.12.0

Expose files and text as MCP resources.

Before you upgrade to v1.12.0

2 to fix

Toolbox checks its version at startup.

Behavior changedDefine parameterized database tools in YAML and share them with agents through MCP or Toolbox SDKs.Affects: Users starting the Toolbox server.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.11.0

Allow intended internal endpoints explicitly if they use IETF protocol-assignment addresses; the default SSRF guard now blocks that range.

Action requiredCall HTTP APIs through configured tools.Affects: HTTP sources using protocol-assignment address ranges.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.11.0

Provide non-empty `type` and `id` when generating a Looker embed URL.

Action requiredExplore Looker data using configured API tools.Affects: Callers of the Looker embed-URL tool.Inferred

Read the evidence

googleapis/mcp-toolbox/blob/v1.12.0/internal/tools/looker/lookergenerateembedurl/lookerge…

AlloyDB reports an actionable error when session read-only mode is requested on PostgreSQL versions before 17.

Behavior changedEnable source-level read-only execution and suppress write-capable tools on supported database integrations.

Read the evidence

What changed in v1.12.0

Adds MCP resources and interactive tool interfaces, and exposes group discovery. Adds a configurable app-verification endpoint and stricter Looker embed-URL inputs.

Also: Also adds MCP Apps, app verification, and stricter Looker embed-URL inputs.

v1.12.0; use the release binaries or container image and configure the required source credentials.