2026.10.20261015170211

2026.10.20261015170211

What's Changed

• feat(redshift-mcp-server): opt-in read-write mode and named transactions by @grayhemp in #4627
• feat(billing-cost-management-mcp-server): normalize Cost Optimization… by @pputra in #4767
• fix(billing-cost-management-mcp-server): commit schema_info registration before awaiting in SQL offload by @anniewn in #4769
• feat(billing-cost-management-mcp-server): add retry_strategy and hint to tool error responses by @finklen-amazon in #4771
• chore(ecs-mcp-server): remove unregistered delete_ecs_infrastructure tool by @matthewgoodman13 in #4773
• fix(billing-cost-management-mcp-server): reject getDimensionValues dimension=TAG in COST_AND_USAGE by @somsubhro in #4777
• fix(billing-cost-management-mcp-server): verify empty cost-explore results before reporting $0 by @wangyuhere in #4774
• fix(billing-cost-management-mcp-server): complete the error envelope and fix retry classification gaps by @finklen-amazon in #4781
• fix(billing-cost-management-mcp-server): accept structured metrics, group_by, and filter in cost-explorer by @idhanth in #4775
• chore: release/2026.10.20261015170211 by @awslabs-mcp in #4782

New Contributors

• @idhanth made their first contribution in #4775

Full Changelog: 2026.10.20261012173232...2026.10.20261015170211

2026.10.20261012173232

2026.10.20261012173232

What's Changed

• feat(billing-cost-management-mcp-server): add COH list_enrollment_sta… by @pputra in #4698
• feat(billing-cost-management-mcp-server): offload large sp-explorer offering results to session SQL by @Comusus in #4713
• fix(iam-mcp-server): treat NotAction/NotResource as broad and reject named IAM privesc actions on broad resources by @tildemit in #4701
• fix(billing-cost-management): add structured error_type to bcm-pricing-calc, cost-anomaly, and cost-explorer failures by @bhatia-di in #4716
• fix(billing-cost-management): classify invoicing list_invoice_summaries validation failures by @nvvijayatwork in #4731
• fix(aws-healthomics): write WDL and CWL lint input as UTF-8 by @PerryLink in #4728
• feat(billing-cost-management-mcp-server): offload large sp-explorer plan and plan-rate results to session SQL by @Comusus in #4732
• fix(billing-cost-management-mcp-server): treat empty pagination token as last page by @Comusus in #4714
• fix(billing-cost-management): classify compute-optimizer-automation validation and multi-region failures by @mattkelsey in #4733
• fix(billing-cost-management): classify remaining local validation failures in aws-pricing, bcm-pricing-calc, cost-explorer, cost-anomaly, cost-allocation-tags, and cost-category by @bhatia-di in #4740
• feat(billing-cost-management-mcp-server): add Compute Optimizer resou… by @pputra in #4741
• fix(aws-transform-mcp-server): stop hard-coding planVersion='1' in plan reads by @youtuyy in #4736
• feat(billing-cost-management-mcp-server): add cpu_vendor_architecture… by @pputra in #4742
• feat(billing-cost-management): add get-billing-transfer-preference tool by @zcjoss in #4686
• fix(billing-cost-management-mcp-server): call GetRDSDatabaseRecommendations in rec-details by @finklen-amazon in #4755
• feat(aws-healthomics-mcp-server): support tags on StartAHORun by @markjschreiber in #4751
• fix(billing-cost-management-mcp-server): accept a trailing Z in compute-optimizer-automation datetimes by @finklen-amazon in #4756
• feat(aws-healthomics-mcp-server): support session policies on StartAHORun and StartAHORunBatch by @markjschreiber in #4758
• fix(billing-cost-management-mcp-server): one timestamp formatter for datetime, epoch seconds and epoch ms by @finklen-amazon in #4757
• fix(billing-cost-management-mcp-server): read paginated tag values from Tags by @finklen-amazon in #4754
• fix(aws-healthomics-mcp-server): make SearchGenomicsFiles continuation tokens advance and reject unparseable ones by @markjschreiber in #4667
• fix(aws-documentation-mcp-server): raise ToolError so read-path failures reach the model by @alexisareyn in #4748
• chore(aws-healthomics-mcp-server): add release-aware CHANGELOG script and backfill versions by @markjschreiber in #4759
• chore: release/2026.10.20261012173232 by @awslabs-mcp in #4764

New Contributors

• @PerryLink made their first contribution in #4728
• @youtuyy made their first contribution in #4736
• @zcjoss made their first contribution in #4686
• @finklen-amazon made their first contribution in #4755

Full Changelog: 2026.10.20261002180809...2026.10.20261012173232

2026.10.20261002180809

2026.10.20261002180809

What's Changed

• feat(oracle-mcp-server): support Oracle Database@AWS, multi-tenant RDS Oracle, and ODB Autonomous with operator-controlled TLS by @pranayk in #4542
• fix(billing-cost-management): ES allocation needs contract details by @frankolas in #4699
• feat(documentdb-mcp-server)!: harden connection handling; configure the cluster at startup by @laithalsaadoon in #4708
• fix(billing-cost-management-mcp-server)!: rename COH summaries field … by @pputra in #4709
• fix(billing-cost-management): rename enterprise_support to enterprise-support by @frankolas in #4712
• chore: release/2026.10.20261002180809 by @awslabs-mcp in #4710

New Contributors

• @pranayk made their first contribution in #4542

Full Changelog: 2026.09.20260930084625...2026.10.20261002180809

2026.09.20260930084625

2026.09.20260930084625

What's Changed

• fix(aws-healthomics-mcp-server): report truthful pagination state for date-filtered ListRuns by @markjschreiber in #4639
• fix(aws-documentation-mcp-server)!: correct read-path output and make failures raise by @alexisareyn in #4650
• fix(billing-cost-management): route aws-pricing errors through handle_aws_error by @bhatia-di in #4676
• feat(billing-cost-management): add list-billing-view-segments tool by @anatoliivasilev in #4663
• fix(billing-cost-management): add structured error_type to session-sql failures by @bhatia-di in #4680
• fix(billing-cost-management-mcp-server): normalize ResourceType casin… by @pputra in #4682
• chore: add @ChristianBusch as codeowner for aws-pricing-mcp-server by @aytech-in in #4678
• fix(aws-api-mcp): service name interpretation in policy by @arnewouters in #4693
• chore: release/2026.09.20260930084625 by @awslabs-mcp in #4695

New Contributors

• @anatoliivasilev made their first contribution in #4663

Full Changelog: 2026.09.20260922000649...2026.09.20260930084625

2026.09.20260922000649

2026.09.20260922000649

What's Changed

• feat(aws-healthomics): add vended metrics tools and metrics-backed run performance analysis by @MaisiLi in #4576
• feat(aws-healthomics-mcp-server): expose logLevel on StartAHORun by @steditt in #4504
• fix(billing-cost-management-mcp-server): expose bcm-pricing-calc arg … by @anniewn in #4608
• docs(aurora-dsql): update numeric precision and scale guidance by @mchenjh in #4543
• feat: Implement parser based sql policy by @kennthhz in #4575
• fix(mysql-mcp-server): reject statement-leading mutating verbs in read-only mode by @happycupofjava in #4615
• docs: add fx to the client setup guides by @suarezesteban in #4532
• chore(aws-documentation-mcp-server): add @riaagnes to CODEOWNERS by @alexisareyn in #4616
• chore(aws-healthomics-mcp-server): Add MaisiLi as a codeowner by @alxawan in #4610
• chore(deps): update github-actions: bump the github-actions-version-updates group across 1 directory with 6 updates by @dependabot[bot] in #4613
• docs(aurora-dsql): update SELECT FOR UPDATE Kiro guidance by @mchenjh in #4607
• fix(roda-mcp-server): rank search_datasets by relevance, drop stop words by @ariharrisonlab in #4463
• chore(aws-dataprocessing-mcp-server): Fix Athena Stop Query operation for valid perm by @naikvaib in #4630
• chore: add ankdav-amazon to bedrock-kb-retrieval codeowners by @ankdav-amazon in #4631
• fix(bedrock-kb-retrieval-mcp-server): support managed knowledge bases and add agentic retrieval by @ankdav-amazon in #4574
• fix(cloudwatch-mcp-server): validate region in PromQL client to prevent SSRF credential disclosure by @gcacace in #4635
• fix(timestream-influxdb-mcp): gate writes on operator ALLOW_WRITE env by @rajeiyer in #4582
• feat(aws-healthomics-mcp-server): add pagination continuation hints by @markjschreiber in #4632
• feat(billing-cost-management-mcp-server): add Cost Optimization Hub l… by @pputra in #4612
• chore(timestream-for-influxdb-mcp-server): restore ruff formatting by @grayhemp in #4647
• fix(aws-dataprocessing-mcp-server): apply --allow-sensitive-data-access per field on read operations by @DDD-Joo in #4640
• feat(billing-cost-management-mcp-server): report actual material-spen… by @pputra in #4652
• fix(ecs-mcp-server): apply sensitive data redaction consistently by @matthewgoodman13 in #4623
• feat(billing-cost-management-mcp-server): upgrade to FastMCP 4 and MCP SDK v2 by @Comusus in #4655
• test(document-loader-mcp-server): add write-path CI-env sandbox regression test by @andywidjaja in #4611
• fix(aurora-dsql): use parser-based SQL policy guard by @spencercorwin in #4653
• chore: release/2026.09.20260922000649 by @awslabs-mcp in #4660

New Contributors

• @MaisiLi made their first contribution in #4576
• @anniewn made their first contribution in #4608
• @mchenjh made their first contribution in #4543
• @suarezesteban made their first contribution in #4532
• @ariharrisonlab made their first contribution in #4463
• @ankdav-amazon made their first contribution in #4631
• @rajeiyer made their first contribution in #4582
• @DDD-Joo made their first contribution in #4640

Full Changelog: 2026.09.20260908143235...2026.09.20260922000649

2026.09.20260908143235

2026.09.20260908143235

What's Changed

• fix(billing-cost-management): Fixes 3 RI/SP related tools by @johnwangwyx in #4580
• fix(aws-transform): trim unavailable operations from vendored service… by @eswarjal in #4583
• feat(redshift-mcp-server): long poll the Data API for statement status by @grayhemp in #4560
• chore(deps): update npm: bump fast-uri from 3.1.5 to 3.1.7 in /docusaurus in the npm-security-updates group across 1 directory by @dependabot[bot] in #4578
• fix(aws-api-mcp-server): Pin mcp version by @arnewouters in #4593
• chore(deps): update docker images: bump amazonlinux/amazonlinux in /src/amazon-bedrock-agentcore-mcp-server by @dependabot[bot] in #4577
• chore: release/2026.09.20260908143235 by @awslabs-mcp in #4594

Full Changelog: 2026.09.20260901224839...2026.09.20260908143235

2026.09.20260901224839

2026.09.20260901224839

What's Changed

• feat(aurora-dsql-mcp-server): native DSQL foreign key support by @davidrz15 in #4565
• fix(aws-iac-mcp-server): cap fastmcp<4 to prevent 4.0 startup crash by @scottschreckengaust in #4568
• chore: release/2026.09.20260901224839 by @awslabs-mcp in #4570

New Contributors

• @davidrz15 made their first contribution in #4565

Full Changelog: 2026.08.20260831234710...2026.09.20260901224839

2026.08.20260831234710

2026.08.20260831234710

What's Changed

• fix(mysql-mcp-server): add host validation during connect to DB API by @manaswini1920 in #4515
• fix(aws-api-mcp-server): pass allowed hosts and origins to the FastMCP HTTP guard by @Om-singhaI in #4523
• feat(billing-cost-management): add get-billing-preferences tool by @johnwangwyx in #4537
• feat(billing-cost-management): add Compute Optimizer get_idle_recomme… by @pputra in #4551
• fix(mysql-mcp-server): enforce TLS on the Secrets Manager credential path by @manaswini1920 in #4547
• feat(healthomics): remote transport & multi-tenant credentials by @markjschreiber in #4269
• docs(aurora-dsql-mcp-server): deprecate standalone DSQL skill by @anwesham-lab in #4562
• fix(document-loader-mcp-server): remove CI/test env bypass of DOCUMENT_BASE_DIR sandbox by @andywidjaja in #4561
• chore: release/2026.08.20260831234710 by @awslabs-mcp in #4563

New Contributors

• @Om-singhaI made their first contribution in #4523

Full Changelog: 2026.08.20260827142639...2026.08.20260831234710

2026.08.20260827142639

2026.08.20260827142639

What's Changed

• chore(deps): update github-actions: bump the github-actions-version-updates group across 1 directory with 6 updates by @dependabot[bot] in #4519
• chore(ecs-mcp-server): update CODEOWNERS by @matthewgoodman13 in #4502
• chore(deps): update npm: bump baseline-browser-mapping in /docusaurus by @dependabot[bot] in #4518
• fix(aws-transform): increase artifact transfer timeouts by @eswarjal in #4539
• feat(billing-cost-management-mcp-server): add AWS Enterprise Support tool and operations by @frankolas in #4481
• chore: add manaswini1920 as code owner for mysql-mcp-server by @manaswini1920 in #4520
• fix: add missing api calls for s3 to static customizations map by @arnewouters in #4548
• chore: release/2026.08.20260827142639 by @awslabs-mcp in #4549

New Contributors

• @manaswini1920 made their first contribution in #4520

Full Changelog: 2026.08.20260826125954...2026.08.20260827142639

2026.08.20260826125954

2026.08.20260826125954

What's Changed

• feat(security-agent-mcp-server): Add custom User-Agent by @ljainiaz in #4482
• fix(security-agent-mcp-server): enforce S3 bucket ownership to prevent bucket-squatting code leak by @ljainiaz in #4490
• fix(billing-cost-management-mcp-server): block ATTACH DATABASE in session-sql by @callnmm in #4497
• feat(billing-cost-management): add budget-actions and budget-notifications operations by @lbragile-amzn in #4489
• chore(ecs-mcp-server): stop tracking generated test template by @matthewgoodman13 in #4501
• feat(timestream-for-influxdb-mcp-server): Add InfluxDB v2 write mode by @trevorbonas in #4471
• feat(billing-cost-management-mcp-server): encode invoicing time-filter rules in guidance and validation by @malpani in #4509
• feat(postgres-mcp-server): add least-privilege startup/connect guardrail by @kennthhz in #4299
• chore(codeowners): add @jzgithub28 and @awsbyron as owners of security-agent-mcp-server by @jzgithub28 in #4511
• chore(deps): update docker images: bump amazonlinux/amazonlinux in /src/amazon-bedrock-agentcore-mcp-server by @dependabot[bot] in #4517
• fix(security-agent-mcp-server): validate base_ref in start_diff_scan by @jzgithub28 in #4508
• feat(billing-cost-management): add Savings Plans management tools by @imasam in #4510
• fix(browser): handle non-2xx HTTP responses in browser_navigate by @EA-b13 in #2747
• fix(amazon-sns-sqs-mcp-server): add tag validation to permission mutator tools by @hashimsharkh in #4478
• feat: migrate the server fleet to mcp SDK v2 and remove the <2.0.0 cap (43 servers) by @scottschreckengaust in #4452
• chore(deps): update uv: bump the uv-security-updates group across 30 directories with 5 updates by @dependabot[bot] in #4503
• fix(aws-documentation-mcp-server): stop returning Highly Rated recommendations by @mc5672 in #4527
• fix(deps): repair uv.lock parse failure from pyjwt 2.13.0 bump (11 servers) by @scottschreckengaust in #4536
• chore: release/2026.08.20260826125954 by @awslabs-mcp in #4538

New Contributors

• @callnmm made their first contribution in #4497
• @lbragile-amzn made their first contribution in #4489
• @trevorbonas made their first contribution in #4471
• @jzgithub28 made their first contribution in #4511
• @imasam made their first contribution in #4510

Full Changelog: 2026.08.20260813230114...2026.08.20260826125954