Changelog

Added#

• Added library access control: restrict which libraries each user can query over the MCP server and the REST API, scoped to their single sign-on groups or to individual users, with a workspace-wide allow-by-default or restrict-by-default posture.
• Added namespace access rules that govern every library under a path, with rules on an individual library taking precedence over the longest matching namespace.
• Added an access audit log that records access-rule changes and blocked access attempts.
• Added support for running the on-premise image as multiple replicas behind a load balancer, backed by a shared PostgreSQL database and a shared vector store.

Changed#

• Improved reranking for queries with several requirements, and reduced duplicate snippets in responses.

Added#

• Added the option to create a Confluence source by pasting page URLs, optionally including their sub-pages, instead of browsing the page tree of an entire space.

Added#

• Added the option to configure the Other Git SSH deploy key and its known hosts from the dashboard, instead of mounting a key into the container.

Added#

• Added an Other Git integration for ingesting private repositories from self-managed Git hosts such as Gerrit, Gitea, and self-hosted Bitbucket, over HTTPS with stored credentials or over SSH with a deploy key.

Added#

• Improved the relevance of responses from the MCP server and API through new reranking capabilities.
• Added support for GitOps-based routing for Confluence and other on-premise data parsers.

Changed#

• Improved compatibility with OpenID Connect (OIDC) providers adhering to RFC 9207.

Security#

• Enhanced the security of the enterprise OpenID Connect (OIDC) Single Sign-On (SSO) flow.

Added#

• Added a REST API for programmatic library import.

Added#

• Added support for ingesting content from Confluence Cloud and Data Center.
• Added full end-to-end integration with GitHub Enterprise Server.
• Added support for ingesting content from llms.txt files.

Fixed#

• Improved parsing robustness by preventing process hangs and cleaning up orphaned staging data.

Fixed#

• Fixed the path used for GitHub Apps on GitHub Enterprise Server.

Fixed#

• Fixed the GitHub App client to correctly target the on-premise GitHub Enterprise Server API.

Added#

• GitOps declarative repository management: define the repositories to index in a Git manifest (repos.yaml) and have Context7 reconcile them on startup, on a schedule, on manual trigger, and on GitHub push webhooks. Supports per-repo branch, folder, and file filters, plus pruning of repositories removed from the manifest.
• Generic OIDC single sign-on for the on-premise dashboard.
• Configure a GitHub Enterprise Server host from the dashboard so the GitHub App and tokens target your own server instead of github.com.

Added#

• Initial tracked release of the Context7 On-Premise image.