---
scope: org
organization: upstash
release_count: 27
last_release: 2026-10-07
generated: 2026-04-21
updated: 2026-10-11
canonical: https://releases.sh/upstash/overview.md
---

Recently shipped language-aware code ranking in Context7 and closed anonymous access to its hosted `/mcp` endpoint.

**Context7 ranks code examples in the language you write.**
- `query-docs` takes an optional `language` argument (MCP 4.3.0), so an agent that knows the user's language gets examples in it first.
- `ctx7 docs --language` does the same from the CLI (ctx7 0.6.0).

**The hosted `/mcp` endpoint now requires credentials by default.** This is a breaking change for anyone relying on anonymous HTTP access. `MCP_AUTH_ENFORCEMENT=observe` keeps anonymous access while recording privacy-safe migration events; `/mcp/oauth` and Claude Code plugin requests still get their challenge in both modes.

**OAuth failures now trigger refresh instead of tool errors.** An expired or revoked access token gets HTTP 401 with a `WWW-Authenticate: Bearer error="invalid_token"` challenge, so clients re-authenticate. Clerk ID tokens and session JWTs are rejected outright. Audience enforcement defaults to `observe` and returns 401 when set to `required`.

**Setup and cleanup got less destructive.** ctx7 0.5.15 downloads the find-docs and context7-mcp skills straight from GitHub, dropping the deprecated Skill Hub API. `ctx7 remove` (0.5.16) leaves the rest of AGENTS.md / GEMINI.md untouched. The SDK (0.5.1) honors timeouts and cancellation while waiting on an async auth token provider.

**Still proposed, not shipped.** Immediate retry that bypasses backoff for a specific message or step, and a singleton workflow that rejects a second run for the same `runId`/`flowControlKey`.