Release / 18 Jun 2026

MCP Toolbox for Databases v1.5.0

Generate agent skills without connecting to live databases.

Before you upgrade to v1.5.0

4 to fix

Set `audience` or `clientId` for Google auth with `mcpEnabled`; disable `--enable-api` when MCP authentication is enabled.

Action requiredAuthenticate MCP access with a generic authorization service and Protected Resource Metadata.Affects: Deployments enabling MCP authentication.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Set `ALLOYDB_OMNI_PASSWORD` explicitly; the prebuilt configuration no longer defaults it to an empty value.

Action requiredRun prebuilt database tools against AlloyDB Omni.Affects: Users of the AlloyDB Omni prebuilt configuration.Inferred

Read the evidence

googleapis/mcp-toolbox/blob/v1.5.0/internal/prebuiltconfigs/tools/alloydb-omni.yaml

Explicitly allow required internal destinations with `allowedIpRanges` or `allowPrivateNetworks`; private, loopback, and link-local requests are blocked by default.

Action requiredCall HTTP APIs through configured tools.Affects: HTTP sources calling internal network services.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Build with Go 1.25.8 or newer; the module requests toolchain Go 1.26.4.

Action requiredAffects: Users compiling Toolbox from source.Inferred

Read the evidence

googleapis/mcp-toolbox/blob/v1.5.0/go.mod

What changed in v1.5.0

Enables offline skill generation, source-level access restrictions, and selected prebuilt toolsets.

Also: MCP auth, internal HTTP destinations, and AlloyDB Omni password configuration may require changes.

v1.5.0; use the release binaries or container image and configure the required source credentials.

New things you can do

Run configured tools against ScyllaDB.

Added

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Fixed and improved

Generate skills offline, tolerating missing source environment variables and avoiding live source connections.

ImprovedGenerate Agent Skills from configured toolsets.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Select a prebuilt toolset with `--prebuilt=database/toolset` and bind parameters through HTTP URLs.

ImprovedDefine parameterized database tools in YAML and share them with agents through MCP or Toolbox SDKs.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Restrict operations with `allowedBuckets` and local transfers with `allowedLocalRoots`.

ImprovedList and read Cloud Storage objects, and create, copy, move, or delete objects and manage buckets.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Inspect query statistics and all locks in MySQL or Cloud SQL MySQL.

ImprovedRun configured MySQL queries and inspect tables and active queries.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Use tools for metadata enrichment workflows.

ImprovedDiscover data assets through Dataplex catalog tools.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Enable SQLCommenter per source and attach per-tool query labels to BigQuery jobs.

ImprovedExport tool traces and metrics using OpenTelemetry.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Enforce dataset restrictions in execute-SQL and honor prebuilt `maximumBytesBilled`.

Now worksQuery BigQuery data and inspect dataset and table metadata.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Prevent query-plan requests from bypassing query execution restrictions.

Now worksRun configured MySQL queries and inspect tables and active queries.

Read the evidence

googleapis/mcp-toolbox/releases/tag/v1.5.0

Seeded by @iluxav with Codex, from the release's public sources. Each change links to its evidence.