Release / 19 Oct 2026 / with [email protected], @upstash/[email protected], @upstash/[email protected], @upstash/[email protected], @upstash/[email protected], mcpb-v4.4.0, @upstash/[email protected], mcpb-v4.4.1, @upstash/[email protected], mcpb-v4.4.2, [email protected], [email protected], @upstash/[email protected], mcpb-v4.4.3, [email protected], @upstash/[email protected]

Context7 mcpb-v4.4.4

All of Context7

Before you upgrade to mcpb-v4.4.4

2 to fix

CLI 0.7.0 clears rejected refresh credentials and offers sign-in again in terminals. Piped output and `--json` receive a stderr notice and continue anonymously; transient failures retain credentials.

Behavior changedSign in, inspect the active identity and sign out through the CLI.Affects: CLI users with stored OAuth sessions that can no longer be refreshed.

Read the evidence

upstash/context7/blob/[email protected]/packages/cli/CHANGELOG.md

MCP 4.4.0 adds `MCP_OAUTH_AUDIENCE_ENFORCEMENT=foreign`: reject another server's audience with 401 while admitting missing audiences. Allowed-host audience query strings are ignored; `observe` remains the default.

Behavior changedSign in to a Context7 MCP connection using OAuth.Affects: HTTP server operators choosing audience enforcement and OAuth clients using configured URLs with query strings.

Read the evidence

upstash/context7/blob/@upstash/[email protected]/packages/mcp/CHANGELOG.md

Use standard Microsoft RS256 access tokens with `tid` matching the issuer and configured tenant. Custom signing keys, including claims-mapping or `?appid=` key sets, are unsupported by the new shared-key verification.

Action requiredAuthenticate MCP documentation access through an enterprise identity provider.Affects: Microsoft Entra deployments using custom signing keys or tokens with inconsistent tenant claims.Inferred

Read the evidence

upstash/context7/blob/@upstash/[email protected]/packages/mcp/src/lib/jwt.ts

For MCP 4.4.4, supply an integer `--port` from 0 to 65535 only with HTTP. Remove `--port=<n>` from stdio commands; replace HTTP `--api-key=<key>` with header-based authentication.

Action requiredConnect coding clients to a locally run documentation server over stdio or HTTP.Affects: Local MCP launch commands using invalid ports or transport-incompatible equals-form arguments.

Read the evidence

MCP 4.4.3 advertises `ttlMs: 3600000` and `cacheScope: public` on tool, prompt, resource and resource-template lists and server discovery, allowing clients to reuse them for one hour.

Behavior changedAffects: MCP clients using protocol 2026-07-28.

Read the evidence

upstash/context7/blob/@upstash/[email protected]/packages/mcp/CHANGELOG.md

Bundled guidance now includes documentation lookup when porting code between libraries, platforms or SQL dialects, and narrows exclusions to work independent of library or platform APIs.

Behavior changedAffects: Coding agents using MCP 4.4.4 or CLI 0.8.1 guidance.

Read the evidence

What changed in mcpb-v4.4.4

CLI 0.7.0 adds session-expiry recovery; 0.8.0 removes deprecated skill management and generation; 0.8.1 preserves OpenCode JSONC and replaces inline API-key arguments. MCP 4.4.0–4.4.4 add optional foreign-audience rejection, correct error flags and HTTP request completion, advertise list-cache hints, and reject invalid ports and incompatible transport arguments.

Also: Skill Hub commands are removed; setup preserves configuration; HTTP cancellation and shutdown complete requests; MCP ports and transport flags are validated.

Install `[email protected]` with Node.js 22.13.0+ or `@upstash/[email protected]` with Node.js 20.18.1+. The matching MCP bundle is tagged `mcpb-v4.4.4`.

New things you can do

The 4.4.0 repository snapshot supplies Cursor marketplace and plugin manifests and corrects the MCP definition format.

AddedInstall documentation tools, rules, skills and a research agent through the Cursor plugin.Inferred

Read the evidence

Fixed and improved

CLI 0.8.1 preserves OpenCode JSONC comments and trailing commas during setup, and strips old `--api-key=<value>` arguments when rotating keys or switching stdio entries to OAuth.

Now worksConfigure Context7 documentation access and rules for coding agents.

Read the evidence

upstash/context7/blob/[email protected]/packages/cli/CHANGELOG.md

CLI 0.8.1 preserves OpenCode configuration comments and trailing commas when `ctx7 remove` edits the file.

Now worksRemove Context7-generated agent configuration while preserving unrelated MCP entries.

Read the evidence

upstash/context7/blob/[email protected]/packages/cli/CHANGELOG.md

MCP 4.4.1 closes legacy HTTP responses for batches containing a request and its cancellation. MCP 4.4.3 drains in-flight HTTP requests on SIGTERM instead of failing them with 499 or 500.

Now worksConnect coding clients to a locally run documentation server over stdio or HTTP.

Read the evidence

MCP 4.4.3 marks `resolve-library-id` search failures with `isError: true`; a successful search with no matches remains a normal result.

Now worksRetrieve library documentation and code examples in an MCP coding client.

Read the evidence

upstash/context7/blob/@upstash/[email protected]/packages/mcp/CHANGELOG.md

Going away

CLI 0.8.0 removes `ctx7 skills` and its aliases. No general replacement is stated; `ctx7 setup` still installs the bundled documentation skills.

RemovedFind, install, list and remove skills for coding agents.

Read the evidence

upstash/context7/blob/[email protected]/packages/cli/CHANGELOG.md

CLI 0.8.0 removes `ctx7 generate` and the deprecated Skill Hub commands. No replacement for generating custom skills is stated.

RemovedGenerate a coding-agent skill from a description and selected library sources.

Read the evidence

upstash/context7/blob/[email protected]/packages/cli/CHANGELOG.md

Seeded by @iluxav with Codex, from the release's public sources. Each change links to its evidence.