---
name: context7
slug: context7-releases
type: github
source_url: https://github.com/upstash/context7
organization: Upstash
organization_slug: upstash
total_releases: 125
latest_version: ctx7@0.5.15
latest_date: 2026-10-08
last_updated: 2026-10-08
tracking_since: 2025-04-20
canonical: https://releases.sh/upstash/context7-releases
organization_url: https://releases.sh/upstash
---

<Release version="ctx7@0.5.15" date="October 8, 2026" published="2026-10-08T11:42:40.000Z" url="https://github.com/upstash/context7/releases/tag/ctx7%400.5.15">
### Patch Changes

- c1e314b: `ctx7 setup` now downloads the find-docs and context7-mcp skills directly from GitHub instead of the deprecated Skill Hub API.
</Release>

<Release version="mcpb-v4.2.0" date="October 7, 2026" published="2026-10-07T13:24:00.000Z" url="https://github.com/upstash/context7/releases/tag/mcpb-v4.2.0">
## context7.mcpb 4.2.0

MCP Bundle for [@upstash/context7-mcp@4.2.0](https://github.com/upstash/context7/releases/tag/%40upstash%2Fcontext7-mcp%404.2.0)
</Release>

<Release version="@upstash/context7-mcp@4.2.0" date="October 7, 2026" published="2026-10-07T13:23:35.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-mcp%404.2.0">
### Minor Changes

- 48eb9f0: Require credentials on the HTTP `/mcp` endpoint by default. Set `MCP_AUTH_ENFORCEMENT=observe` to keep anonymous `/mcp` access and record privacy-safe authentication migration events; `/mcp/oauth` and Claude Code plugin requests keep their challenge in both modes. `/mcp/oauth` stays as a compatibility alias, each endpoint publishes its own OAuth protected-resource metadata, an empty or scheme-only `Authorization: Bearer` header counts as a missing credential, and CORS responses expose `WWW-Authenticate` and `MCP-Session-Id`.

### Patch Changes

- 126379b: Answer an expired or revoked OAuth access token (`oat_…`) on the hosted HTTP transport with an HTTP 401 and a `WWW-Authenticate: Bearer error="invalid_token"` challenge, so MCP clients refresh the token instead of showing a tool error. The server checks the token against the Context7 API before serving the request, caches the verdict in memory per token hash for about a minute on each replica, and fails open when the check is unavailable. Set `MCP_OAUTH_TOKEN_VALIDATION=off` to disable the check. When the Context7 API still rejects an OAuth token on a tool call, the tool text now says the sign-in expired instead of describing API keys.
</Release>

<Release version="mcpb-v4.1.3" date="October 7, 2026" published="2026-10-07T11:32:10.000Z" url="https://github.com/upstash/context7/releases/tag/mcpb-v4.1.3">
## context7.mcpb 4.1.3

MCP Bundle for [@upstash/context7-mcp@4.1.3](https://github.com/upstash/context7/releases/tag/%40upstash%2Fcontext7-mcp%404.1.3)
</Release>

<Release version="@upstash/context7-mcp@4.1.3" date="October 7, 2026" published="2026-10-07T11:31:44.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-mcp%404.1.3">
### Patch Changes

- afdd129: Over HTTP, answer `subscriptions/listen` with an acknowledgement and an immediate `complete` result instead of a "Subscription limit reached" error, and stop logging those refusals. Context7 has no change notifications, so the stream closes at once. Stdio subscriptions stay disabled. Removes the `MCP_MAX_SUBSCRIPTIONS` setting.
- 2b7c4f0: Update the undici dependency to 7.30.
</Release>

<Release version="mcpb-v4.1.2" date="October 7, 2026" published="2026-10-07T09:05:44.000Z" url="https://github.com/upstash/context7/releases/tag/mcpb-v4.1.2">
## context7.mcpb 4.1.2

MCP Bundle for [@upstash/context7-mcp@4.1.2](https://github.com/upstash/context7/releases/tag/%40upstash%2Fcontext7-mcp%404.1.2)
</Release>

<Release version="@upstash/context7-mcp@4.1.2" date="October 7, 2026" published="2026-10-07T09:05:16.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-mcp%404.1.2">
### Patch Changes

- 16095a9: Update CLI prompt, terminal display, and browser launch dependencies. The CLI now declares Node.js 22.13 or later, which its dependencies already need. Update the MCP server JWT and OpenTelemetry dependencies.
- 72181dd: Serve a SEP-2127 server card at `/mcp/server-card`.
</Release>

<Release version="ctx7@0.5.14" date="October 7, 2026" published="2026-10-07T09:05:13.000Z" url="https://github.com/upstash/context7/releases/tag/ctx7%400.5.14">
### Patch Changes

- 16095a9: Update CLI prompt, terminal display, and browser launch dependencies. The CLI now declares Node.js 22.13 or later, which its dependencies already need. Update the MCP server JWT and OpenTelemetry dependencies.
</Release>

<Release version="ctx7@0.5.13" date="October 5, 2026" published="2026-10-05T13:27:41.000Z" url="https://github.com/upstash/context7/releases/tag/ctx7%400.5.13">
### Patch Changes

- 9b6f702: Accept trailing commas in OpenCode JSONC config files during setup and removal.
</Release>

<Release version="@upstash/context7-opencode@0.2.0" date="October 2, 2026" published="2026-10-02T09:26:44.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-opencode%400.2.0">
### Minor Changes

- 635cfc8: Support OpenCode v2. The plugin now exports a v2 `setup` entrypoint next to the v1 `server` entrypoint, so `opencode plugin add @upstash/context7-opencode` registers the Context7 MCP server and the `context7-mcp` skill on v2 as well.
</Release>

<Release version="@upstash/context7-sdk@0.5.0" date="September 22, 2026" published="2026-09-22T21:04:48.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-sdk%400.5.0">
### Minor Changes

- 2c6c8e7: Add a typed `search` method that finds relevant documentation without a separate library resolution request.
</Release>

<Release version="ctx7@0.5.12" date="September 22, 2026" published="2026-09-22T21:04:45.000Z" url="https://github.com/upstash/context7/releases/tag/ctx7%400.5.12">
### Patch Changes

- 4416fb8: Use the shared API URL for login and explain how to sign in again when the server rejects a saved session.

  Recommend logout and login only when the server returns HTTP 401. Report other identity-check failures without asking users to discard saved credentials.
</Release>

<Release version="@upstash/context7-tools-ai-sdk@1.0.2" date="September 22, 2026" published="2026-09-22T21:04:42.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-tools-ai-sdk%401.0.2">
### Patch Changes

- Confirm compatibility with `@upstash/context7-sdk@0.5.0`. The tools package API is unchanged.
</Release>

<Release version="mcpb-v4.1.1" date="September 14, 2026" published="2026-09-14T14:51:06.000Z" url="https://github.com/upstash/context7/releases/tag/mcpb-v4.1.1">
## context7.mcpb 4.1.1

MCP Bundle for [@upstash/context7-mcp@4.1.1](https://github.com/upstash/context7/releases/tag/%40upstash%2Fcontext7-mcp%404.1.1)
</Release>

<Release version="@upstash/context7-mcp@4.1.1" date="September 14, 2026" published="2026-09-14T14:50:35.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-mcp%404.1.1">
### Patch Changes

- 5ed5e9a: Disable unused MCP notification subscriptions so clients do not hold open SSE streams for static tool, prompt, and resource collections.
</Release>

<Release version="mcpb-v4.1.0" date="September 11, 2026" published="2026-09-11T10:51:18.000Z" url="https://github.com/upstash/context7/releases/tag/mcpb-v4.1.0">
## context7.mcpb 4.1.0

MCP Bundle for [@upstash/context7-mcp@4.1.0](https://github.com/upstash/context7/releases/tag/%40upstash%2Fcontext7-mcp%404.1.0)
</Release>

<Release version="@upstash/context7-mcp@4.1.0" date="September 11, 2026" published="2026-09-11T10:50:17.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-mcp%404.1.0">
### Minor Changes

- 915abfe: Add bounded OpenTelemetry metrics for MCP requests, tools, authentication, and upstream API calls, exposed for Prometheus on the HTTP server's internal telemetry port.
</Release>

<Release version="mcpb-v4.0.7" date="September 9, 2026" published="2026-09-09T14:02:40.000Z" url="https://github.com/upstash/context7/releases/tag/mcpb-v4.0.7">
## context7.mcpb 4.0.7

MCP Bundle for [@upstash/context7-mcp@4.0.7](https://github.com/upstash/context7/releases/tag/%40upstash%2Fcontext7-mcp%404.0.7)
</Release>

<Release version="@upstash/context7-mcp@4.0.7" date="September 9, 2026" published="2026-09-09T14:02:08.000Z" url="https://github.com/upstash/context7/releases/tag/%40upstash/context7-mcp%404.0.7">
### Patch Changes

- 0087bab: Allow the Claude Code plugin to use anonymous access when its API key header is empty.
</Release>

<Release version="mcpb-v4.0.6" date="September 8, 2026" published="2026-09-08T16:35:01.000Z" url="https://github.com/upstash/context7/releases/tag/mcpb-v4.0.6">
## context7.mcpb 4.0.6

MCP Bundle for [@upstash/context7-mcp@4.0.6](https://github.com/upstash/context7/releases/tag/%40upstash%2Fcontext7-mcp%404.0.6)
</Release>

<Pagination cursor="2026-09-08T16:35:01.000Z|2026-09-08T20:26:41.502Z|rel_CyRV5EWpau4mOZ_Sla85r" next="https://releases.sh/upstash/context7-releases.md?cursor=2026-09-08T16%3A35%3A01.000Z%7C2026-09-08T20%3A26%3A41.502Z%7Crel_CyRV5EWpau4mOZ_Sla85r&limit=20" />