You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.260,
What probably matters to youSection of the release
The shared URL schema used for MCP server URLs and similar fields now rejects URLs containing embedded userinfo (user:pass@host), reporting a dedicated CREDENTIALED_URL_MESSAGE error. A new allowHttp option can be set on the schema to permit plain-http URLs beyond the existing loopback-http allowance.
