Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-09-05 · high
The flag drops server-initiated notifications and SSE stream resumability, and it ships off by default.
Why now: The 3.0.6 release notes went up on September 4, giving AgentOS operators a new scaling option to weigh.
Agno's 3.0.6 release adds a stateless option for the MCP server built into AgentOS, published September 4. Set MCPConfig(stateless=True) and the /mcp endpoint stops tracking sessions. Any replica behind a load balancer can then answer any request without sticky routing.
That solves a real deployment problem. Teams running AgentOS across multiple replicas have had to route MCP traffic back to whichever instance opened the session. That limits how far you can scale an agent that serves tools over MCP.
The tradeoff is real too. Turning stateless mode on drops server-initiated notifications and SSE stream resumability, which is why Agno leaves it off by default.
The release also changes how MCPTools picks a protocol. A new protocol_mode setting chooses which MCP protocol era to negotiate, defaulting to "legacy," with "auto" reaching the sessionless era dated July 28. Agno's MCP clients are now built on fastmcp.Client.
AgentOS gets a Server Card too, at GET /mcp/server-card, listing every tool a deployment serves. That's useful for auditing what an agent can call.
Separately, 3.0.6 fixes a bug where Anthropic assistant turns got replayed non-verbatim, which had been causing thinking blocks to get rejected.
Each link below shares sources, entities, or timing with this story.
MCPConfig.tools now takes Agent, Team, and Workflow objects directly, so a caller sees a tool named chief instead of one dispatcher function.
The mismatch let a faked tool name slip past every human approval, allow-list, and audit log built to stop it.
MCPConfig(stateless=True) serves /mcp with no session tracking, so any replica answers any request. The cost is server-initiated notifications and SSE resumability, which is why it's off by default. MCPTools(protocol_mode=...) picks the protocol era to negotiate, defaulting to...
The GitHub advisory says the checker inspects the executable name only, ignoring every argument passed alongside it.
OpenBot reached 3,364 stars and 412 forks since its 2026-08-17 creation, MIT-licensed and pushed 2026-08-28.
The nightly enforces OAuth issuer checks, isolates the sandbox, and strips a hardcoded Google API key from chrome-devtools-mcp.
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.