v2.5.17
April 14, 2026
Authenticate MCP sessions correctly from the first request
We fixed an issue where headers supplied by header_provider were not being applied during MCP session initialization, only during subsequent requests. Sessions now open with the correct headers from the start, preventing authentication and routing failures on first contact.
