# peta-core

> The Control Plane for MCP — secure vault, managed runtime, audit trail, and policy-based approvals.

- **URL**: https://www.freshcrate.ai/projects/peta-core
- **Author**: dunialabs
- **Category**: MCP Servers
- **Latest version**: `v1.2.1` (2026-04-28)
- **License**: NOASSERTION
- **Source**: https://github.com/dunialabs/peta-core
- **Homepage**: https://peta.io
- **Language**: TypeScript
- **GitHub**: 43 stars, 9 forks
- **Registry**: github
- **Tags**: `aiagent`, `authentication-middleware`, `developer-tools`, `function-calling`, `gateway`, `jwt`, `mcp`, `mcp-client`, `mcp-server`, `typescript`

## Description

The Control Plane for MCP — secure vault, managed runtime, audit trail, and policy-based approvals.

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v1.2.1` | 2026-04-28 | High | ## Highlights - Improved MCP Streamable HTTP resumability by wiring persisted event replay into the upstream transport. SSE reconnects can now use `Last-Event-ID` within the same session, with replay scoped to that session to prevent cross-client event leakage. - Hardened session reconnect behavior after explicit `DELETE /mcp` termination. Peta Core now allows one short grace-period reuse of a server-issued session ID only for the same authenticated identity and token fingerprint, while continui |
| `v1.2.0` | 2026-04-21 | High | ## Highlights - Added first-class OAuth support for HubSpot, Intercom, and Slack template servers, covering authorization-code exchange, persisted provider metadata, and runtime credential injection for downstream launches. - Added owner-side OAuth reauthorization for existing template servers, so Peta Console and related control-plane clients can refresh stored connector credentials without recreating the server configuration.  ## Fixes and Improvements - Hardened Intercom OAuth handling by val |
| `v1.1.9` | 2026-04-07 | High | ## Highlights - Added optional Peta Progressive Disclosure (PPD) for the MCP gateway. Deployments can now keep the existing flat tool list, expose a hybrid catalog-assisted flow, or switch to a strict catalog-first mode without changing the default behavior for existing clients. - Introduced gateway-native discovery tools: `peta.catalog.search`, `peta.catalog.describe`, and `peta.catalog.execute`, along with admin APIs for discovery config, profile management, preview, reindexing, and catalog st |
| `v1.1.8` | 2026-03-30 | Medium | ## Highlights  - Added configurable result caching with admission control, multiple store backends, namespace versioning, structured `cache.*` request logs, exact purge semantics, and approval-aware cache safety protections. - Added content-aware policy enforcement with an asynchronous HITL approval queue, approval audit metadata and pagination, execution result replay, synchronous wait polling, and multiple lifecycle hardening fixes across the proxy and admin surfaces. - Expanded MCP runtime ca |
| `v1.1.7` | 2026-03-17 | Low | ## Overview  This release includes all changes from `v1.1.6` to `HEAD` (`d89f4c1`), covering improvements to `CustomStdio` runtime support, startup diagnostics, lazy-start recovery, OAuth configuration handling, documentation, and test coverage.  Compare: https://github.com/dunialabs/peta-core/compare/v1.1.6...d89f4c1  ## Highlights  ### CustomStdio runtime improvements  - Added Docker runner support for `ServerCategory.CustomStdio`. - When `PETA_CORE_IN_DOCKER=true`, non-`docker` std |
| `v1.1.6` | 2026-03-13 | Low | ## Release Summary  This release updates Peta Core from `v1.1.4` to `v1.1.6`, focused on public anonymous MCP access, stdio-based custom server support, and follow-up fixes for server configuration and reconnect flows.  ## What's Changed  ### Added - Added anonymous access for public MCP servers through the `/mcp/public` endpoint. - Added per-server `anonymousAccess` and `anonymousRateLimit` configuration support. - Added database schema support for anonymous MCP access. - Added stdio |
| `v1.1.4` | 2026-03-09 | Low | ### Overview This release introduces content-aware tool policy control and a durable human-in-the-loop approval workflow, with follow-up improvements for approval reliability, replayability, auditability, and documentation clarity.  ### Highlights - Added content-aware tool policies with DSL-based evaluation and server/global policy resolution. - Added persistent async HITL approval queue to replace the previous synchronous timeout-based approval flow. - Added approval execution result rep |
| `v1.1.2` | 2026-03-02 | Low | ### Release Scope - Compare: https://github.com/dunialabs/peta-core/compare/v1.1.0...dd2eb74 - Commit range: `v1.1.0` (2026-02-09) to `dd2eb74` (2026-03-02) - Total commits: 31 - Changed files: 41 - Diff stats: +1362 / -247 - Contributors: bc-dunia, Miles-YF, Asher367, bc, yufei, Miles-ZF, Miles  ### Highlights - Added OAuth Token Introspection support (`POST /introspect`, RFC 7662), with aligned token model and documentation updates. - Added Canva OAuth provider support and token refr |
| `v1.1.0` | 2026-02-09 | Low | ## ✨ Highlights - New OAuth capabilities: Peta OAuth init flow, server creation via authorization‑code token exchange, Peta Console / Peta Desk submit code to exchange and start MCP servers, plus automatic startup and optional deployment of `peta-auth`. - Added support for GitHub MCP server and Google Calendar MCP server. - Skills and server capabilities: added Skills upload management APIs (10040–10043).  ## ⚙️ Improvements - Enhanced multi-auth server configuration; updated configuration |
| `v1.0.2` | 2026-01-13 | Low | 🎯 New Features  Server Access Control Enhancement  Added publicAccess field to provide granular control over default server access policies.  Key Changes: - Database Schema: New publicAccess boolean field in Server table (defaults to false) - Permission Logic: When users have no explicit permissions, access is now determined by the publicAccess field instead of defaulting to true - API Support: Full CRUD support for publicAccess in server management endpoints (create/query/update) - S |

## Citation

- HTML: https://www.freshcrate.ai/projects/peta-core
- Markdown: https://www.freshcrate.ai/projects/peta-core.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/peta-core/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._