{"id":14211910,"name":"github.com/googleapis/mcp-toolbox","ecosystem":"go","description":"","homepage":"https://github.com/googleapis/mcp-toolbox","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/googleapis/mcp-toolbox","keywords_array":[],"namespace":"github.com/googleapis","versions_count":48,"first_release_published_at":"2026-04-09T08:35:25.557Z","latest_release_published_at":"2026-08-14T01:15:58.000Z","latest_release_number":"v1.9.0","last_synced_at":"2026-08-19T10:28:59.598Z","created_at":"2026-04-09T08:33:52.366Z","updated_at":"2026-08-19T20:14:23.986Z","registry_url":"https://pkg.go.dev/github.com/googleapis/mcp-toolbox","install_command":"go get github.com/googleapis/mcp-toolbox","documentation_url":"https://pkg.go.dev/github.com/googleapis/mcp-toolbox#section-documentation","metadata":{},"repo_metadata":{"id":276068304,"uuid":"812044182","full_name":"googleapis/mcp-toolbox","owner":"googleapis","description":"MCP Toolbox for Databases is an open source MCP server for databases.","archived":false,"fork":false,"pushed_at":"2026-08-10T21:19:19.000Z","size":1383622,"stargazers_count":16146,"open_issues_count":259,"forks_count":1671,"subscribers_count":88,"default_branch":"main","last_synced_at":"2026-08-10T21:23:27.912Z","etag":null,"topics":["agent","agents","ai","bigquery","clickhouse","cockroachdb","database","elasticsearch","firestore","genai","llm","mcp","mongodb","mysql","oracle","postgresql","redis","server","spanner","tidb"],"latest_commit_sha":null,"homepage":"https://mcp-toolbox.dev/documentation/introduction/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null,"disclosure":null}},"created_at":"2024-06-07T20:52:54.000Z","updated_at":"2026-08-10T17:49:51.000Z","dependencies_parsed_at":"2025-02-06T05:32:26.742Z","dependency_job_id":"32433122-8a1c-42e1-b877-44f99c12ed14","html_url":"https://github.com/googleapis/mcp-toolbox","commit_stats":null,"previous_names":["googleapis/genai-toolbox","googleapis/mcp-toolbox"],"tags_count":48,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/mcp-toolbox","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36782157,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"googleapis","name":"Google APIs","uuid":"16785467","kind":"organization","description":"Clients for Google APIs and tools that help produce them.","email":null,"website":"https://googleapis.github.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16785467?v=4","repositories_count":781,"last_synced_at":"2023-04-09T04:55:29.167Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/googleapis","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:18.651Z","updated_at":"2023-04-09T04:55:29.452Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis/repositories"},"tags":[{"name":"v1.8.0","sha":"44d1a05016165d53aeb24217182348dcef96664d","kind":"commit","published_at":"2026-07-28T01:25:29.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.8.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"fbe2b211d75694b0c1bdec05d1289b138dfee666","kind":"commit","published_at":"2026-07-16T18:48:09.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.7.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"35c13adbbeae34089ce2a6f33232f51c1b512ceb","kind":"commit","published_at":"2026-07-01T00:27:59.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.6.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"45c0f86ce0199a8aed9c980370dd2c03f2684f5a","kind":"commit","published_at":"2026-06-18T23:34:12.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.5.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"d67cfbe8ddca5a50c9577ea11feaf5c94d0acace","kind":"commit","published_at":"2026-06-04T21:59:25.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.4.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"b0010060a939455d91e4f8ba62dc3e72b1892469","kind":"commit","published_at":"2026-05-21T21:49:43.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.3.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"48f00000b630d40e048a1a41496449c9f2b04d9d","kind":"commit","published_at":"2026-05-07T19:14:55.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.2.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"da6f5f8a15400d8b14e54c01a23f51601a584b7f","kind":"commit","published_at":"2026-04-13T21:24:07.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.1.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"8b07b2d3be308cca1b878929dc96a6d54004cafd","kind":"commit","published_at":"2026-04-10T01:17:47.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v1.0.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v1.0.0/manifests"},{"name":"v0.32.0","sha":"b9ae1c6616417d28fff5630b9aa46e6c6914e27e","kind":"commit","published_at":"2026-04-08T22:46:39.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.32.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.32.0/manifests"},{"name":"v0.31.0","sha":"c6b811c4f4d9e599b076563cd4fb5f3e47a04290","kind":"commit","published_at":"2026-03-27T00:00:15.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.31.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.31.0/manifests"},{"name":"v0.30.0","sha":"5ef1c0ddda3dcb6cf3ce26915ecf62ac49570549","kind":"commit","published_at":"2026-03-20T00:53:52.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.30.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.30.0/manifests"},{"name":"v0.29.0","sha":"39832a0faa6e967734f4cf2283ec270aa17fc363","kind":"commit","published_at":"2026-03-13T22:55:27.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.29.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"81253a0bd7049a2e2681ef13631a768cb402040e","kind":"commit","published_at":"2026-03-02T23:36:26.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.28.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.28.0/manifests"},{"name":"v0.27.0","sha":"c5524d32f580fed81c8b90448e2f17e719710ff9","kind":"commit","published_at":"2026-02-13T02:03:05.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.27.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.27.0/manifests"},{"name":"v0.26.0","sha":"86bf7bf8d068f00adccd7223dd113743aed83ab5","kind":"commit","published_at":"2026-01-23T00:22:50.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.26.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"41b518b955af8710c5b9b1aacddcfab63ff505bd","kind":"commit","published_at":"2026-01-08T22:56:45.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.25.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.25.0/manifests"},{"name":"v0.24.0","sha":"f520b4ed8aedc28147777bdb673a576092a53513","kind":"commit","published_at":"2025-12-19T02:07:06.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.24.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"466aef024f3fb54223fa3bbdae84021188117f8f","kind":"commit","published_at":"2025-12-11T22:26:26.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.23.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"cb4529cbaaa1c1c47fd66bd32fe2b9740a28adce","kind":"commit","published_at":"2025-12-05T00:10:51.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.22.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"e81dfeaff52b5286a88bd00c9386ddc659f21c11","kind":"commit","published_at":"2025-11-19T21:38:09.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.21.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"5156db26213db09ab89ec99958790de7c72126d0","kind":"commit","published_at":"2025-11-14T01:37:01.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.20.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"cd8d68d464815ee9eb1bad2d0ec4bf861ec4af07","kind":"commit","published_at":"2025-11-07T20:41:52.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.19.1","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"78c4a8537e5a7d2e36ddd8b2e31ea5f6707baca3","kind":"commit","published_at":"2025-11-07T17:28:19.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.19.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"3ca58b13497e35d3e58ea58c2b5065419b4810c2","kind":"commit","published_at":"2025-10-23T18:14:44.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.18.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"de19d520add8e1470c093436b783738535f7f914","kind":"commit","published_at":"2025-10-10T20:34:23.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.17.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.17.0/manifests"},{"name":"v0.16.0","sha":"964a82eb084797f3e6e13ce445f2db495dfe77d3","kind":"commit","published_at":"2025-09-26T01:05:14.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.16.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.16.0/manifests"},{"name":"v0.15.0","sha":"c934d7adfd4d012dab3f1707dc0adbdc7cb328cb","kind":"commit","published_at":"2025-09-19T00:31:00.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.15.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4f022b670095c299cc50f137d7440d24640a08b1","kind":"commit","published_at":"2025-09-05T16:04:59.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.14.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1a6dfe8d37d0f42fb3fd3f75c50988534dbc1b85","kind":"commit","published_at":"2025-08-27T01:07:04.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.13.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.13.0/manifests"},{"name":"v0.12.0","sha":"d19cfc1e7ec2e20214ec118548dd8435966933f1","kind":"commit","published_at":"2025-08-14T23:41:28.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.12.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"8d0fa6783ac317fd86259f83ce191e396fa2a3dd","kind":"commit","published_at":"2025-08-05T02:11:17.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.11.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"c45390e6f78a553135ace0e3d03bfaf75c769c68","kind":"commit","published_at":"2025-07-25T00:58:37.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.10.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"2b69700c5e40ad37eafd94f378a2e1174879402b","kind":"commit","published_at":"2025-07-11T00:46:05.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.9.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"f13e9635ba64425b57805c8d64a5968ba569292c","kind":"commit","published_at":"2025-07-02T15:30:33.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.8.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.8.0/manifests"},{"name":"v0.7.0","sha":"714d990c34ee990e268fac1aa6b89c4883ae5023","kind":"commit","published_at":"2025-06-10T00:15:26.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.7.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"3180830403a62438003d2dbee5f709a98c99228e","kind":"commit","published_at":"2025-05-28T22:08:44.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.6.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.6.0/manifests"},{"name":"v0.5.0","sha":"9a5d76e2dc66eaf0d2d0acf9f202a17539879ffe","kind":"commit","published_at":"2025-05-06T22:32:01.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.5.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.5.0/manifests"},{"name":"v0.4.0","sha":"4ed16ccd18768ac02402356f9660526b3452418b","kind":"commit","published_at":"2025-04-23T17:22:25.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.4.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"12222fe27ae070f2689a0632d60fda45412d1f97","kind":"commit","published_at":"2025-04-04T18:51:23.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.3.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"58c1203f77bef31858dc3844af65b147533d83d7","kind":"commit","published_at":"2025-03-20T21:43:12.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.2.1","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"0872f1ceaba51576c4c81463fdb8012e89023312","kind":"commit","published_at":"2025-03-03T18:01:38.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.2.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"53158b07f21cae1a3a7196cc8dbf707e651eec71","kind":"commit","published_at":"2025-02-06T02:46:38.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.1.0","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.1.0/manifests"},{"name":"v0.0.5","sha":"afb24d322f2d0da60d76eebad574aa98b48e0dab","kind":"commit","published_at":"2025-01-14T17:52:22.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.0.5","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.5/manifests"},{"name":"v0.0.4","sha":"21a9146404cbd8f03f005db3cb81512aca304d7f","kind":"commit","published_at":"2024-12-18T23:48:13.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.0.4","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.4/manifests"},{"name":"v0.0.3","sha":"504fbf508b7b01e21bd9beb1d2e564d51dfb7728","kind":"commit","published_at":"2024-12-10T00:39:11.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.0.3","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"8a6ec6042c62acb45fee46683fb7e84480770619","kind":"commit","published_at":"2024-11-12T21:04:09.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.0.2","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"7e8b870d351937038d209e9df37c512a9e72df93","kind":"commit","published_at":"2024-10-28T16:31:23.000Z","download_url":"https://codeload.github.com/googleapis/mcp-toolbox/tar.gz/v0.0.1","html_url":"https://github.com/googleapis/mcp-toolbox/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/googleapis/mcp-toolbox@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T12:22:41.282Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.179348613755824,"dependent_packages_count":4.853181954503123,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.0162652841294735},"purl":"pkg:golang/github.com/googleapis/mcp-toolbox","advisories":[{"uuid":"GSA_kwCzR0hTQS01Z2Y2LWdjMzUteGpwY84ABZGZ","url":"https://github.com/advisories/GHSA-5gf6-gc35-xjpc","title":"MCP Toolbox for Databases: authenticated authorization bypass","description":"An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers.\n\nWhile the 2025-11-25 protocol version handler correctly enforces per-tool restrictions defined by scopesRequired, older supported protocol versions (2025-06-18, 2025-03-26, and 2024-11-05) omit this check. An authenticated client with low-privilege tokens (e.g., read) can bypass the intended per-tool scope restrictions and execute high-privilege tools (e.g., admin) simply by specifying an older protocol version in the MCP-Protocol-Version header, or by omitting the header entirely (which causes the server to default to the vulnerable 2024-11-05 handler).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-06-18T15:32:02.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.6,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-11719","https://github.com/googleapis/mcp-toolbox/pull/3049","https://github.com/googleapis/mcp-toolbox/pull/3335","https://github.com/advisories/GHSA-5gf6-gc35-xjpc"],"source_kind":"github","identifiers":["GHSA-5gf6-gc35-xjpc","CVE-2026-11719"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-19T17:00:08.335Z","updated_at":"2026-08-19T19:01:15.942Z","epss_percentage":0.00145,"epss_percentile":0.04291,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01Z2Y2LWdjMzUteGpwY84ABZGZ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01Z2Y2LWdjMzUteGpwY84ABZGZ","packages":[{"ecosystem":"go","package_name":"github.com/googleapis/mcp-toolbox","versions":[{"first_patched_version":"1.4.0","vulnerable_version_range":"\u003c 1.4.0"}],"purl":"pkg:go/github.com%2Fgoogleapis%2Fmcp-toolbox"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01Z2Y2LWdjMzUteGpwY84ABZGZ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13Y3ByLTZnN3gtcDQ0cs4ABZGf","url":"https://github.com/advisories/GHSA-wcpr-6g7x-p44r","title":"googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)","description":"An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.\n\nWhen the toolbox validates an opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), it decodes the response into an introspectResp struct. However, the subsequent claim-checking logic (validateClaims) evaluates the issuer condition as if a.issuer != \"\" \u0026\u0026 iss != \"\". If the external OAuth provider's introspection response omits the optional iss (issuer) field completely, the variable iss defaults to an empty string. This causes the conditional block to evaluate to false and be skipped silently. Consequently, the application accepts tokens issued by unauthorized or unintended third-party identity providers.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-06-18T15:32:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-11718","https://github.com/googleapis/mcp-toolbox/pull/3360","https://github.com/advisories/GHSA-wcpr-6g7x-p44r"],"source_kind":"github","identifiers":["GHSA-wcpr-6g7x-p44r","CVE-2026-11718"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-19T17:00:08.335Z","updated_at":"2026-08-19T19:01:15.942Z","epss_percentage":0.00185,"epss_percentile":0.08349,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13Y3ByLTZnN3gtcDQ0cs4ABZGf","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13Y3ByLTZnN3gtcDQ0cs4ABZGf","packages":[{"ecosystem":"go","package_name":"github.com/googleapis/mcp-toolbox","versions":[{"first_patched_version":"1.4.0","vulnerable_version_range":"\u003c 1.4.0"}],"purl":"pkg:go/github.com%2Fgoogleapis%2Fmcp-toolbox"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13Y3ByLTZnN3gtcDQ0cs4ABZGf/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04ZmNjLXc1aHYtNGd4ds4ABZGS","url":"https://github.com/advisories/GHSA-8fcc-w5hv-4gxv","title":"googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)","description":"An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.\n\nWhen verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), the toolbox decodes the response into an introspectResp struct where the Active field is declared as a pointer to a boolean (*bool). The code only explicitly rejects a token if the response contains a populated active field set to false (if introspectResp.Active != nil \u0026\u0026 !*introspectResp.Active). If an introspection endpoint responds with a payload that completely omits the mandatory active key, the internal variable remains nil, causing the conditional check to short-circuit. As a result, Toolbox accepts authorization tokens missing the \"active\" field, granting access to protected tools and underlying data sources.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-06-18T15:32:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-11717","https://github.com/googleapis/mcp-toolbox/pull/3341","https://github.com/advisories/GHSA-8fcc-w5hv-4gxv"],"source_kind":"github","identifiers":["GHSA-8fcc-w5hv-4gxv","CVE-2026-11717"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-19T17:00:08.335Z","updated_at":"2026-08-19T19:01:15.942Z","epss_percentage":0.00176,"epss_percentile":0.07458,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04ZmNjLXc1aHYtNGd4ds4ABZGS","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04ZmNjLXc1aHYtNGd4ds4ABZGS","packages":[{"ecosystem":"go","package_name":"github.com/googleapis/mcp-toolbox","versions":[{"first_patched_version":"1.4.0","vulnerable_version_range":"\u003c 1.4.0"}],"purl":"pkg:go/github.com%2Fgoogleapis%2Fmcp-toolbox"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04ZmNjLXc1aHYtNGd4ds4ABZGS/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03cGYzLTh4eDctcnZoZs4ABXlc","url":"https://github.com/advisories/GHSA-7pf3-8xx7-rvhf","title":"MCP Toolbox for Databases vulnerable to DNS rebinding attacks","description":"Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to align with MCP security guidelines. However, the hardcoded `Access-Control-Allow-Origin: *` header in the SSE initialization handler was inadvertently retained. This vulnerability specifically impacts users connecting via Toolbox using SSE under specification v2024-11-05.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-05-28T00:30:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.4,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-9739","https://github.com/googleapis/mcp-toolbox/issues/3053","https://github.com/googleapis/mcp-toolbox/pull/3054","https://github.com/googleapis/mcp-toolbox/commit/c4c7bd917e686de68e2be866cfe3872c3439efae","https://github.com/advisories/GHSA-7pf3-8xx7-rvhf"],"source_kind":"github","identifiers":["GHSA-7pf3-8xx7-rvhf","CVE-2026-9739"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-01T21:00:09.299Z","updated_at":"2026-08-15T18:01:32.451Z","epss_percentage":0.00279,"epss_percentile":0.19527,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cGYzLTh4eDctcnZoZs4ABXlc","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03cGYzLTh4eDctcnZoZs4ABXlc","packages":[{"ecosystem":"go","package_name":"github.com/googleapis/mcp-toolbox","versions":[{"first_patched_version":"1.2.0","vulnerable_version_range":"\u003c 1.2.0"}],"purl":"pkg:go/github.com%2Fgoogleapis%2Fmcp-toolbox"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cGYzLTh4eDctcnZoZs4ABXlc/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/googleapis/mcp-toolbox","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/googleapis/mcp-toolbox","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/googleapis/mcp-toolbox/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-18T19:00:57.266Z","issues_count":56,"pull_requests_count":146,"avg_time_to_close_issue":3490187.1739130435,"avg_time_to_close_pull_request":1224469.8358208956,"issues_closed_count":23,"pull_requests_closed_count":67,"pull_request_authors_count":49,"issue_authors_count":29,"avg_comments_per_issue":2.107142857142857,"avg_comments_per_pull_request":2.5616438356164384,"merged_pull_requests_count":51,"bot_issues_count":18,"bot_pull_requests_count":17,"past_year_issues_count":55,"past_year_pull_requests_count":146,"past_year_avg_time_to_close_issue":2310187.227272727,"past_year_avg_time_to_close_pull_request":1224469.8358208956,"past_year_issues_closed_count":22,"past_year_pull_requests_closed_count":67,"past_year_pull_request_authors_count":49,"past_year_issue_authors_count":28,"past_year_avg_comments_per_issue":1.8181818181818181,"past_year_avg_comments_per_pull_request":2.5616438356164384,"past_year_bot_issues_count":18,"past_year_bot_pull_requests_count":17,"past_year_merged_pull_requests_count":51,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fmcp-toolbox/issues","maintainers":[{"login":"kurtisvg","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kurtisvg"},{"login":"camposperez-hub","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/camposperez-hub"},{"login":"emagda97","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/emagda97"}],"active_maintainers":[{"login":"camposperez-hub","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/camposperez-hub"},{"login":"kurtisvg","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kurtisvg"},{"login":"emagda97","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/emagda97"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogleapis%2Fmcp-toolbox/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogleapis%2Fmcp-toolbox/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogleapis%2Fmcp-toolbox/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogleapis%2Fmcp-toolbox/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogleapis%2Fmcp-toolbox/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogleapis%2Fmcp-toolbox/codemeta","maintainers":[]}