Login refuses a mix-up: passmcp login now checks the RFC 9207 issuer on the redirect, so a code relayed from another authorization server is refused instead of stored.
Stateless tool calls that strict servers accept: under 2026-07-28, arguments annotated with x-mcp-header are mirrored into Mcp-Param-* headers, so a server that requires them is no longer reported as failing for passmcp's omission.
No endless paging: a server whose list cursors loop, or never end, now fails with a clear error instead of keeping passmcp busy until the call times out.
The family table tells the truth: passmcp-lsp and passmcp-census are listed as released, as they have been since 0.0.2.