← Package directory
Available on winget

Install thv

ToolHive is a lightweight, secure, and fast manager for MCP (Model Context Protocol) servers

Install with winget 
winget install --id stacklok.thv
Upgrade 
winget upgrade --id stacklok.thv
Uninstall 
winget uninstall --id stacklok.thv

About thv

ToolHive is a lightweight, secure, and fast manager for MCP (Model Context Protocol) servers

What's new in 0.28.1

## Changelog * 9a5d0c26e2134889ab1b29cb7b9de40b36028659: Add CIMD document fetch/validate and extend SSRF protections (#5320) (@amirejaz) * 79c08bd10f788d357a6b5e9e094d57b8c533f0b8: Add default OBO handler hooks and vMCP/proxy converter stubs (#5338) (@tgrunnagle) * a3fb4ee34b8fa67105ce1f3606014cf351c809a4: Bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#5330) (@dependabot[bot]) * 8d22ac5e30e0528b583a9bb5f42c5e30ff8961fd: Factor thv-operator main into app.Run; add proxyrunner Run helper (#5332) (@tgrunnagle) * 2894982180949e03f9504d176605433e705a84b1: Inject spawn seam in RunWorkloadDetached to stop orphan test processes (#5346) (@tgrunnagle) * e5670eaea1970b32e05eed6d79f13893c62d7046: Preserve fresh per-request identity in vMCP backend transports (#5335) (@tgrunnagle) * 91cb56fdc144ab93c5272188e2f99537bac2139d: Release v0.28.1 (#5352) (@toolhive-release-app[bot]) * e46f8c11947cd413e2038367c4aef5b693bb1e59: Update dependency kyverno/chainsaw to v0.2.15 (#5297) (@renovate[bot]) * 36ca38cc79cd5ccfb3b5da13b6e7c58ee0d6e35b: Update kyverno/action-install-chainsaw action to v0.2.15 (#5298) (@renovate[bot]) * f6d48051a5f014d74e955c0120133ee6af4b2b04: Update module github.com/pelletier/go-toml/v2 to v2.3.1 (#5311) (@renovate[bot]) * d3d9a02aa6b08a69e93682d8a90bd8f803356f5e: Use `events.k8s.io` in registry-api Role (#5340) (@rdimitrov) * a13e5ea6ffc2f3681f67a2fd937da41d9e7865b1: Use shared toolhive-core redis client for session storage (#5324) (@reyortiz3) * 6d81df825d68b7e0b1bfc7753adc813cc43b724c: fix(operator): inject THV_SESSION_REDIS_PASSWORD for MCPServer (#5286) (@da...

Version history

Version Updated Notes
0.28.1 ## Changelog * 9a5d0c26e2134889ab1b29cb7b9de40b36028659: Add CIMD document fetch/validate and extend SSRF protections (#5320) (@amirejaz) * 79c08bd10f788d357a6b5e9e094d57b8c533f0b8: Add default OBO handler hooks and vMCP...
0.28.0 Unknown ## Changelog * 51db3c6aa12390cf36c3a8bbf9c6c2d09753d860: Add --session-ttl flag and fix three session timeout bugs (#5117) (@JAORMX) * 42048580d19f7f19bee8db6ed9cff8dc270b470f: Add API endpoint to refresh the registry ca...
0.27.2 Unknown ## Changelog * 952c9ef966f687a120d263908a7689bacf38bd09: Allow operators to inject baseline scopes into DCR registrations (#5233) (@jhrozek) * 3240eeba03997a5f20414d8f126be248a186ab9e: Apply OTEL config to workloads crea...
0.27.1 Unknown ## Changelog * 6733a546fdb845ce601b40c73277439e26d2f5e1: Add CRD-runtime drift detection test framework (#5209) (@ChrisJBurns) * 03def4040c505e1563d00e14a775c18c3841e68c: Add Redis backend for DCRCredentialStore (#5195)...
0.27.0 Unknown ## Changelog * 655de227d074cecea6d0607873817768e3390f9d: Add --anthropic-path-prefix flag and auto-probe for Envoy AI Gateway (#5174) (@yrobla) * 2743b285d3cf1af6a5e205dc41c56d027e728d1e: Add --client flag to thv llm set...
0.26.1 Unknown ## Changelog * b094f754c959d2784dcf5209f358195e6c40552e: Add --tls-skip-verify flag to thv llm setup, config set, and proxy start (#5136) (@yrobla) * d3922ceafe35df1f19a6971c12ad2ad5f41a227d: Add authserver DCR discovery...
0.26.0 Unknown ## Changelog * fc76559d97a37bb86eb75e35662fe519e5b33a1d: Add awsSts auth type support to vMCP (#5019) (@tgrunnagle) * e396150da149db37c39842af6d65141e3655c141: Add explicit imagePullSecrets field to MCPRegistry (#5106) (...
0.25.0 Unknown ## Changelog * 7c9f6b98798ba7ba4a4c9d6a41d03e171163e1f2: Add `thv registry convert` command (#5071) (@rdimitrov) * d8d58ca5e8a26bf156eef58772ca2ac3631dedc2: Add localhost reverse proxy for LLM gateway (#5035) (@yrobla) *...
0.24.1 Unknown ## Changelog * 129ee05fa2650be1fd03f6e3caaf094189fc6ff2: Add JWT/OIDC and Redis session storage vMCP CLI e2e tests (#4998) (@yrobla) * bc5b9a35479f7c9e658f264a5eb2fc66f6967b1e: Add shared OAuth constants and expose Excha...
0.24.0 Unknown ## Changelog * a543b35e7e98840478fb1d177883aed5b16fd245: Add no-op companion for API Compatibility required check (#4995) (@ChrisJBurns) * 3b2b4a1fdd682844c5830becdb57739443ee1f70: Compare CRDs against the last release t...
0.23.1 Unknown ## Changelog * 69fb2b7beca713d462ff38578f6c950859048d2b: Add advisory CRD schema compatibility CI check (#4980) (@ChrisJBurns) * 63ee62aacfac84c90a005da3e6708a3b86ed499b: Propagate auth errors through stale cache fallbac...
0.23.0 Unknown ## Changelog * 117be0406a99c0e9d31574b4b40a761822b9a37f: Default redirectUri on upstream providers as documented in CRD (#4905) (@tgrunnagle) * 3dbbf5ae696c0f61796a5128811996037099f5cb: Graduate CRDs from v1alpha1 to v1b...
0.22.0 Unknown ## Changelog * 109815bf98fc0035dfdb966d270a63ff2dbb2e02: Account for embedded auth env in deployment drift checks (#4878) (@JAORMX) * c17cb40c7b0a3ce9db386e014579e4fe618f3519: Add --system flag to secret list and delete...
0.21.0 Unknown ## Changelog * 2fd2d3bf5f9f840af530d864589f68dc1095a0e7: Add GetContent API for on-the-fly SKILL.md retrieval from OCI and git sources (#4810) (@samuv) * 9d5982de47d6fed7fbf2dc74727aab0fbb9a5381: Add RoleClaimName to Ced...
0.20.0 Unknown ## Changelog * b250b9065384d294261616631fbc7020b18301d6: Add --remote-auth-scope-param-name for non-standard OAuth scope parameters (#4712) (@gmogmzGithub) * 36886940229c81f7b416516ab0316feba5c9cb10: Add Cline, Roo Code,...
0.19.0 Unknown ## Changelog * e2927e42cdf00283f4361330e7a58fb2f49c29d3: Add Cursor as a skill-supporting client (#4762) (@samuv) * 6cac96a92a5858f639882637951f0d8217614d44: Add LRU capacity to ValidatingCache, remove sentinel pattern,...
0.18.0 Unknown ## Changelog * 1a6287bb75bcc8991aa2526da9a10e81a35c243e: Add LRU capacity to ValidatingCache, remove sentinel pattern, add storage Update (#4669) (@yrobla) * 65a78f49d74bff3b41e23c07e1c0782a02df3eac: Add per-user rate li...
0.17.0 Unknown ## Changelog * 97051d8c4a8bd8b715c9bfba0133759ef5742ffa: Add MCPServerEntry backend discovery to VirtualMCPServer (#4698) (@JAORMX) * 563ab06577c519d1414c3aa8d567ed7dc2512def: Add MCPServerEntry documentation and example...
0.16.0 Unknown ## Changelog * 213b0dd00af7d8b9f8df5ca005271ac5b4f00b7c: Add +listType annotations to all CRD slice fields (#4586) (@ChrisJBurns) * 1db9dd08a7fc15aa28035bc921bf795e12b2bddf: Add ApplyServerExtensions hook to serve comman...
0.15.0 Unknown ## Changelog * 1bcf16bd2b84a24f8697d408bcf7c3a7216fe696: Add DataStorage interface and implementations (#4458) (@yrobla) * 28370f62f0d23607285eeea284c01432fb802fb4: Add MCPOIDCConfig CRD types and MCPServer reference fie...