Releases

Latest v2 release: v2.1.0 — native MCP over HTTP on /_mcp, with schema-aware read-only tools and auth/ACL integration (#977).

For stable v1 releases, see GitHub Releases.

v2.1.0 highlights

Area	Change
MCP over HTTP	Read-only /_mcp endpoint with JSON-RPC initialize, tools/list, and tools/call (#977)
Schema-aware tools	Per-table prest.select.{database}.{schema}.{table} tools with typed input schemas from catalog metadata
Safety	Read-only by design; inherits auth, ACL, and identifier validation from the existing HTTP stack

See v2.1.0 release notes, the MCP over HTTP guide, and AI and MCP (Cursor / Claude Desktop / adapter install) for usage and upgrade notes.

v2.0.0 highlights

Area	Change
Multi-database	[[databases]] registry, alias routing, /_ready (#973)
Config resilience	Graceful fallbacks; startup never blocked by bad config (#974)
JWT	Auto-disable when misconfigured; jwt.default defaults to false (#974)
Security	Template sanitization, credential redaction in logs (#972)
OR filtering	_or query parameter (#958)
Permissions	Per-user table permissions (#912)

See v2.0.0 release notes and Changes since rc6 for full details.

Release candidate history (rc1 – rc6)

The v2 release candidates shipped the following before v2.0.0 was tagged.

Features

Version	Change
rc1	Per-user table permissions via [[access.users]] (#912)
rc6	OR clause filtering with the _or query parameter (#958)
rc6	Structured JSON logging via Go slog (#950)
rc6	Docker images built with GoReleaser (#953)

Security

Version	Change
rc3	_returning parameter hardened against SQL injection (#935)
rc4	Unified identifier validation across templates, groupby, and path params (#938, GHSA-p46v-f2x8-qp98)
rc5	tsquery operator hardened against SQL injection (#940)
rc6	JWT auth bypass fixed when default enforcement runs without a key (#960, GHSA-fj7v-859r-2fm4)

Config and breaking changes

Version	Change
rc2	Deprecated PREST_SSL_* environment variables and [ssl] TOML block removed — use PREST_PG_SSL_* / [pg.ssl] (#919)
rc2	Default pg.ssl.mode is disable when no config file is found (v1 used require)
rc6	Server refuses to start when JWT is enabled without verification material (unless debug mode is on)

Fixes

Version	Change
rc2	Default cache storage path set when caching is disabled (#918)
rc6	_select field names are whitespace-trimmed after comma splitting (#941)
rc6	Identifier formatting fix (#955)

Upgrading

If you are moving from v1 to v2, see the Upgrading to v2 guide.