OpenAI Agents SDK 0.19.2 runs a credential-redaction sweep across every MCP error path
The August 1 release lands five separate MCP redaction fixes — URL credentials stripped from SDK errors, from tracing and tool metadata, and transport errors redacted for prompts/resources, direct cleanup, and nested cleanup — closing a class of leaks where an MCP server URL containing a token would surface in traces or exception text. It also fixes MCP servers not being cleaned up before reconnect, reports input guardrail results when a tripwire aborts a run, and corrects session item counting across SQLAlchemy, MongoDB, Redis, Dapr, and AdvancedSQLiteSession backends when a positive limit is set. For anyone piping agent traces to an observability backend, the redaction work alone is worth the upgrade.
↳ Follow the thread