Upstash

Recently shipped language-aware code ranking in Context7 and closed anonymous access to its hosted /mcp endpoint.

Context7 ranks code examples in the language you write.

• query-docs takes an optional language argument (MCP 4.3.0), so an agent that knows the user's language gets examples in it first.
• ctx7 docs --language does the same from the CLI (ctx7 0.6.0).

The hosted /mcp endpoint now requires credentials by default. This is a breaking change for anyone relying on anonymous HTTP access. MCP_AUTH_ENFORCEMENT=observe keeps anonymous access while recording privacy-safe migration events; /mcp/oauth and Claude Code plugin requests still get their challenge in both modes.

OAuth failures now trigger refresh instead of tool errors. An expired or revoked access token gets HTTP 401 with a WWW-Authenticate: Bearer error="invalid_token" challenge, so clients re-authenticate. Clerk ID tokens and session JWTs are rejected outright. Audience enforcement defaults to observe and returns 401 when set to required.

Setup and cleanup got less destructive. ctx7 0.5.15 downloads the find-docs and context7-mcp skills straight from GitHub, dropping the deprecated Skill Hub API. ctx7 remove (0.5.16) leaves the rest of AGENTS.md / GEMINI.md untouched. The SDK (0.5.1) honors timeouts and cancellation while waiting on an async auth token provider.

Still proposed, not shipped. Immediate retry that bypasses backoff for a specific message or step, and a singleton workflow that rejects a second run for the same runId/flowControlKey.