Skip to content

Release Notes v0.4.0

Streamable-HTTP transport secured by ID-JAG (Enterprise-Managed Authorization) resource-server verification, alongside a service-account auth fix and skill versioning.

Highlights

  • HTTP Transport: mcp-google can now serve MCP over streamable HTTP as a pure OAuth resource server
  • ID-JAG Authorization: bearer tokens are verified against an external authorization server (enterprise IdP or ID-JAG delegation chain), not a built-in one
  • Scope-Gated Tools: docs:read, sheets:read, and slides:read scopes gate the matching tool set when present on the token
  • Audit Logging: every tool call in HTTP mode logs the verified subject, RFC 8693 actor chain, client ID, and scope

New Features

HTTP Transport

stdio remains the default. Opt into HTTP with a flag or environment variable:

mcp-google serve \
  --http :8080 \
  --idjag-issuer https://idp.example.com \
  --idjag-audience https://mcp-google.example.com
Flag Environment variable Description
--http MCP_GOOGLE_HTTP_ADDR Serve over HTTP on this address instead of stdio
--idjag-issuer MCP_GOOGLE_IDJAG_ISSUER Authorization server issuer URL (required for HTTP mode)
--idjag-audience MCP_GOOGLE_IDJAG_AUDIENCE Expected token audience / resource identifier
--idjag-jwks-url MCP_GOOGLE_IDJAG_JWKS_URL Pin the issuer JWKS endpoint, skipping discovery

See HTTP Transport & ID-JAG for the full guide, including scope gating and audit log format.

Skill Versioning

docs, sheets, and slides skills now implement Version() (all at v0.5.0), matching omniskill's pre-1.0 Skill interface.

Bug Fixes

  • Auth: fixed a panic in service-account token manager initialization caused by omnitoken.NewFromCredentials(name, nil) in omnitoken v0.1.0. The manager is now built from an empty in-memory vault before loading credentials from the service account file.

Dependencies

Dependency Version Change
github.com/plexusone/omniskill v0.12.0 Updated from v0.10.0 (adds external resource-server auth support)
google.golang.org/api v0.292.0 Updated from v0.282.0
github.com/modelcontextprotocol/go-sdk v1.7.0 Updated
Go 1.26.4 Updated from 1.26.0

Tool Count

Service Tools Total
Google Docs 4
Google Sheets 5
Google Slides 5
Total 14