Connexion v26 strengthens management permissions and authentication while improving operational visibility and MCP workflows.

• Server-enforced permissions. Queue operations, message access, package management and certificate actions enforce permissions at service boundaries, including Gateway paths.

• Authentication consistency. Improvements cover mutual-TLS identity checks, OIDC identity matching, local-password group membership and propagation of shared-user changes across active servers.

• Configuration secret protection. Protected configuration values remain encrypted across service and client settings paths, with improved credential redaction in diagnostics.

• Authenticated cluster peers. Application-server peers authenticate using a shared cluster secret.

• Certificate lifecycle. Managed certificates can be replaced while preserving references, with consistent UTC validity dates and improved setup checks.

• Activity history. Queue repositories retain up to 31 days of collected per-device message history. Dashboard inactivity filters help identify channels that have not queued or processed messages recently.

• Linux monitoring. More accurate CPU, memory, disk and process information, reboot checks, journal diagnostics and low-disk alerts improve operational visibility.

• MCP workflows. Gateway MCP adds Remote Agent queue and throughput inspection. Connexion MCP improves Tier 2 detail and processing-history reads, message copies, paging keys, channel creation and export, validation after plugin changes, activity-history queries and UTC date handling.

• v16 migration inspection bridge. A bounded v16 MCP bridge supports inspection and migration tooling. v16 uses WCF and v26 uses gRPC; the bridge does not make their service transports directly interoperable.

See Modern Authentication, Authorization, and Certificates, Observability, Metrics, and Structured Logging, AI-Assisted Connexion with MCP.

Return to Additional Items.