Nacos 3.2.1 is a patch release focused on critical bug fixes and feature enhancements for issues discovered in 3.2.0. This release delivers significant improvements to AI Registry functionality, database compatibility, security, and console user experience.

Key highlights include:

• AI Registry Maturity: Complete Prompt lifecycle management with UI, A2A AgentCard v1 protocol support, skill bizTag filtering, and resource spec storage for MCP servers
• Security Enhancements: Fixed LDAP authentication bypass vulnerability, added OIDC/OAuth2 SSO login support for both consoles
• Database Compatibility: Comprehensive PostgreSQL, Oracle, MySQL, and Derby fixes including deterministic pagination and schema timestamp issues
• Dependency Upgrades: Spring Boot 3.5.13, MCP SDK 0.17.0, and log4j-core 2.25.4
• Concurrency & Reliability: Eliminated race conditions in AI publish pipeline, naming module, client failover, and config export operations
• Console UX: Fixed configuration editing errors, namespace ID validation, batch import, token expiry handling, and UI bugs in both legacy and next consoles

Feature

• [#14621] A2A Registry 1.0 adapter with unified and normalized supported interfaces in agent card handling
• [#14796] Add MCP server resource specification support
• [#14807] Add Prompt lifecycle management UI for both legacy and next consoles
• [#14809] Enhance AI resource list APIs with filters and ordering support
• [#14847] Support AI resource subtype parsing in authentication plugin
• [#14895] Support filtering skills by bizTag in list API and console UI
• [#14794] Support force-publish skills for admin user

Enhancement/Refactor

• [#14743] Close CallableStatement in DerbySnapshotOperation to prevent JDBC resource leak
• [#14750] Fix check-then-act race condition in FailoverReactor.isFailoverSwitch
• [#14751] Fix check-then-act race conditions on ConcurrentHashMap in naming module
• [#14784] Validate input parameters in ops controller forms for better security
• [#14806] Improve cluster metrics aggregation completeness signal in v3 API
• [#14818] Improve cluster metrics aggregation completeness signal in v3 API
• [#14822] Extract duplicated logic from SkillOperationServiceImpl and AgentSpecOperationServiceImpl into AiResourceManager and VersionUtils
• [#14834] Upgrade UI dependencies for both legacy and next consoles
• [#14873] Add config option to enable or disable visibility plugin
• [#14883] Add default scope resolution for new resource creation in visibility plugin
• [#14884] Standardize pipeline API and fix legacy console UI bugs
• [#14893] Add copilot feature toggle and redesign plugin management layout
• [#14927] Fix TOCTOU race condition and thread leak in ClientWorker.ensureSyncExecutor()
• [#14928] Fix TOCTOU race condition in removeSubscriberIndexes causing data loss

BugFix

• [#14046] Fix ConfigInfoMapperByMySql.findConfigInfoLike4PageFetchRows result accuracy on MySQL
• [#14741] Add ORDER BY to findConfigInfoLike4PageFetchRows for deterministic pagination
• [#14742] Add ORDER BY to findConfigInfo4PageFetchRows for deterministic pagination
• [#14746] Add ORDER BY to remaining MySQL pagination queries for deterministic results
• [#14747] Add ORDER BY to Oracle pagination queries for deterministic results
• [#14748] Add ORDER BY to Derby pagination queries for deterministic results
• [#14764] Fix namespace ID validation issue in new UI when adding custom namespace
• [#14765] Fix configuration file editing error in 3.2 console
• [#14768] Fix /v3/console/ai/mcp/importToolsFromMcp failure due to json-schema-validator dependency conflict
• [#14771] Fix batch import failure in legacy console UI
• [#14775] Add missing OIDC-related configurations to application.properties template
• [#14778] Fix clusterName forced to DEFAULT in v3 HTTP API
• [#14783] Remove downloadSkillZip from AiClientProxy interface and route skill download directly to HTTP client
• [#14786] Eliminate race condition in AI publish pipeline by pre-generating executionId
• [#14810] Fix PostgreSQL schema default timestamp issues causing startup failures
• [#14812] Set default timestamps to current time in Oracle and PostgreSQL schemas
• [#14828] Fix cross-type version contamination when querying ai_resource_version by name
• [#14832] Fix PostgreSQL compatibility issues for AI resource persistence and capacity modules
• [#14836] Fix cross-type version contamination in ai_resource_version queries
• [#14837] Enforce type isolation for ai_resource_version queries
• [#14843] Fix ActionTypes.WRITE to ActionTypes.READ for getting instance detail in InstanceControllerV3
• [#14849] Fix instance detail permission check in InstanceControllerV3
• [#14852] Fix prompt bizTags handling in both legacy and next UIs
• [#14853] Fix login page loop and header when auth is disabled in next console
• [#14856] Redirect to login page on token invalid/expired responses
• [#14862] Fix LDAP authentication bypass via hardcoded credentials in proxy user synchronization
• [#14875] Fix misleading error messages in maintainer-client ParamUtil
• [#14886] Fix legacy console UI bugs and improve robustness
• [#14892] Fix misleading value reporting in maintainer-client when timeout/retry properties are invalid
• [#14908] Fix skill content loss in SkillRemoteHandler#createDraft when passing skillCard as targetVersion
• [#14910] Add null check for optional ids parameter in exportConfigV2
• [#14915] Add null check for metaDataItem in config import
• [#14917] Reject login with LDAP-prefixed usernames to prevent auth bypass
• [#14947] Fix exception when adding Prompt page in console

Dependencies

• [#14782] Upgrade MCP SDK to 0.17.0 to resolve json-schema-validator conflict
• [#14834] Upgrade UI dependencies (both legacy and next consoles)
• [#14910] Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4
• [#14955] Upgrade Spring Boot from 3.4.10 to 3.5.13

⚠️ Breaking Changes & Migration Notes

Database Schema Updates (Critical)

Action Required: This release includes critical fixes for PostgreSQL, Oracle, MySQL, and Derby schemas, particularly around default timestamp values and ORDER BY clauses for deterministic pagination.

Before upgrading:

1. Backup your existing database
2. Apply the updated schema script: conf/schema.sql (for your database type)
3. Restart Nacos server after schema migration

Affected databases:

• PostgreSQL: Default timestamp fixes, AI resource persistence compatibility
• Oracle: Default timestamp fixes
• MySQL: Pagination query accuracy improvements
• Derby: ORDER BY clause additions, JDBC resource leak fixes

Failure to apply schema changes may result in:

• Database startup failures (PostgreSQL)
• Inconsistent pagination results
• JDBC resource leaks
• AI resource version contamination

OIDC/OAuth2 SSO Configuration

This release adds OIDC/OAuth2 SSO login support for both legacy and next consoles. To enable:

# OIDC Configuration
nacos.auth.oidc.enabled=true
nacos.auth.oidc.issuer-uri=<your-oidc-issuer-uri>
nacos.auth.oidc.client-id=<your-client-id>
nacos.auth.oidc.client-secret=<your-client-secret>
nacos.auth.oidc.redirect-uri=${domain}/v3/console/login

Java Version Requirements

📚 What's New in AI Registry

A2A Registry 1.0

• AgentCard v1 Protocol: Full support for A2A AgentCard v1 protocol with extended capabilities
• Unified Interfaces: Normalized and validated supported interfaces in agent card handling
• Version Meta API: New API to query agent spec metadata without loading full content

New Contributors

• @CHEN666333-SVG made their first contribution in #14818
• @Sunwenzhi58 made their first contribution in #14866
• @LiyunZhang10 made their first contribution in #14928
• @FatOnionLee made their first contribution in #14946

Full Changelog: 3.2.0...3.2.1

Nacos 3.2.1-2026.04.03 is a snapshot release focused on critical bug fixes and feature enhancements for issues discovered in 3.2.0, particularly around AI module stability, database compatibility, and console UI improvements.

Key highlights include:

• AI Registry Enhancements: Complete Prompt lifecycle management UI, AI resource trace logging, and enhanced list APIs with filters
• Database Compatibility: PostgreSQL and Oracle schema fixes, deterministic pagination with ORDER BY clauses
• Dependency Resolution: Upgraded MCP SDK to 0.17.0 to resolve json-schema-validator conflicts
• Concurrency Fixes: Eliminated race conditions in AI publish pipeline, naming module, and client failover
• Console UI: Fixed configuration editing errors, namespace ID validation, and batch import issues

Feature

• [#14807] Add Prompt lifecycle management UI for both legacy and next consoles
• [#14809] Enhance AI resource list APIs with filters and ordering support
• [#14794] Support force-publish skills for admin user

Enhancement/Refactor

• [#14743] Close CallableStatement in DerbySnapshotOperation to prevent JDBC resource leak
• [#14750] Fix check-then-act race condition in FailoverReactor.isFailoverSwitch
• [#14751] Fix check-then-act race conditions on ConcurrentHashMap in naming module
• [#14784] Validate input parameters in ops controller forms for better security
• [#14806] Improve cluster metrics aggregation completeness signal in v3 API
• [#14818] Improve cluster metrics aggregation completeness signal in v3 API
• [#14822] Extract duplicated logic from SkillOperationServiceImpl and AgentSpecOperationServiceImpl into AiResourceManager and VersionUtils
• [#14834] Upgrade UI dependencies for both legacy and next consoles

BugFix

• [#14046] Fix ConfigInfoMapperByMySql.findConfigInfoLike4PageFetchRows result accuracy on MySQL
• [#14741] Add ORDER BY to findConfigInfoLike4PageFetchRows for deterministic pagination
• [#14742] Add ORDER BY to findConfigInfoLike4PageFetchRows for deterministic pagination
• [#14746] Add ORDER BY to remaining MySQL pagination queries for deterministic results
• [#14747] Add ORDER BY to Oracle pagination queries for deterministic results
• [#14748] Add ORDER BY to Derby pagination queries for deterministic results
• [#14764] Fix namespace ID validation issue in new UI when adding custom namespace
• [#14765] Fix configuration file editing error in 3.2 console
• [#14768] Fix /v3/console/ai/mcp/importToolsFromMcp failure due to json-schema-validator dependency conflict
• [#14771] Fix batch import failure in legacy console UI
• [#14775] Add missing OIDC-related configurations to application.properties template
• [#14783] Remove downloadSkillZip from AiClientProxy interface and route skill download directly to HTTP client
• [#14786] Eliminate race condition in AI publish pipeline by pre-generating executionId
• [#14810] Fix PostgreSQL schema default timestamp issues causing startup failures
• [#14812] Set default timestamps to current time in Oracle and PostgreSQL schemas
• [#14828] Fix cross-type version contamination when querying ai_resource_version by name
• [#14832] Fix PostgreSQL compatibility issues for AI resource persistence and capacity modules
• [#14836] Fix cross-type version contamination in ai_resource_version queries
• [#14837] Enforce type isolation for ai_resource_version queries
• [#14843] Fix ActionTypes.WRITE to ActionTypes.READ for getting instance detail in InstanceControllerV3
• [#14849] Fix instance detail permission check in InstanceControllerV3
• [#14852] Fix prompt bizTags handling in both legacy and next UIs

Dependencies

• [#14782] Upgrade MCP SDK to 0.17.0 to resolve json-schema-validator conflict
• [#14834] Upgrade UI dependencies (both legacy and next consoles)

⚠️ Migration Notes

Database Schema Updates

Action Required: This release includes critical fixes for PostgreSQL and Oracle schemas, particularly around default timestamp values and ORDER BY clauses for deterministic pagination.

Before upgrading:

1. Backup your existing database
2. Apply the updated schema script: conf/schema.sql (for your database type)
3. Restart Nacos server after schema migration

Affected databases:

• PostgreSQL: Default timestamp fixes
• Oracle: Default timestamp fixes
• MySQL: Pagination query accuracy improvements
• Derby: ORDER BY clause additions

New Contributors

• @CHEN666333-SVG made their first contribution in #14818

Full Changelog: 3.2.0...3.2.1-2026.04.03

Nacos 3.2.1-2026.03.30 is a snapshot release focused on critical bug fixes for issues discovered in 3.2.0, particularly around AI module dependency conflicts, console UI bugs, and race conditions in the skill publish pipeline.

Key highlights include:

• Dependency Resolution: Upgraded MCP SDK to 0.17.0 to resolve json-schema-validator conflicts affecting AI module functionality
• AI Module Stability: Fixed race condition in skill publish pipeline and streamlined skill download routing
• Console UI Fixes: Addressed configuration file editing errors and namespace ID validation issues in the new UI
• Input Validation: Enhanced parameter validation in ops controller forms for better security

Feature

• [#14794] Support force-publish skills for admin user

Enhancement/Refactor

• [#14784] Validate input parameters in ops controller forms for better security

BugFix

• [#14765] Fix configuration file editing error in 3.2 console
• [#14768] Fix /v3/console/ai/mcp/importToolsFromMcp failure due to json-schema-validator dependency conflict
• [#14771] Fix batch import failure in legacy console UI
• [#14775] Add missing OIDC-related configurations to application.properties template
• [#14783] Remove downloadSkillZip from AiClientProxy interface and route skill download directly to HTTP client
• [#14786] Eliminate race condition in AI publish pipeline by pre-generating executionId
• [#14794] Fix namespace ID validation issue in new UI when adding custom namespace

Dependencies

• [#14782] Upgrade MCP SDK to 0.17.0 to resolve json-schema-validator conflict

Full Changelog: 3.2.0...3.2.1-2026.03.30

Nacos 3.2.0 is a major release focused on plugin architecture enhancement, AI Registry expansion, API modernization, and code quality improvements. Key highlights include:

• AI Registry Completes the "AI Triad": Skill Registry and Prompt Registry join existing MCP/Agent Registry, with Nacos Copilot integration for AI-assisted management
• Plugin Architecture Modernization: Comprehensive SPI-based plugin management with console UI, cluster-wide synchronization, and PostgreSQL enhancements
• API Cleanup: Legacy UDP PUSH support removed, /v1 and /v2 HTTP APIs extracted to submodules for future removal
• Security & Code Quality: OIDC/OAuth2 authentication plugin, multiple FindBugs fixes, dead code removal, and JDK 17+ compatibility enhancements
• Console Modernization: Dual UI support for new/legacy console switching with improved user experience

Feature

• [#13699] Support outputSchema for MCP tools
• [#14041] Merge nacos-plugin PostgreSQL & Base Implementation into main repository
• [#14056] Refactor datasource plugins structure and enhance PostgreSQL capabilities
• [#14077] Implement SPI-based plugin discovery and management API
• [#14078] Implement cluster-wide state synchronization for plugins
• [#14079] Add plugin management console UI and API
• [#14084] Support MCP Tool _meta and annotations fields
• [#14085] Enhance MCP tool metadata with annotations support
• [#14101] Implement cluster-wide state synchronization
• [#14109] Introduce Prompt Registry as core component of Nacos AI Registry
• [#14110] Introduce Skills Registry to complement Nacos AI Registry vision
• [#14117] Add plugin management console UI and API
• [#14120] Add version parameter support to Maintainer SDK Get Agent Card method
• [#14527] Add OIDC/OAuth2 Authentication Plugin (Server)
• [#14534] Add find-skill-from-nacos capability for intelligent skill discovery
• [#14623] Add skill-scanner integration for AI Skill security scanning
• [#14641] Update Nacos console UI with modern design
• [#14653] Support dual UI switching between new and legacy console with contextPath adaptation
• [#14672] Skill support for data level access and visibility Phase 2
• [#14677] Skill support for data level access and visibility Phase 3

Enhancement/Refactor

• [#14048] Refactor datasource plugins structure and enhance PostgreSQL capabilities
• [#14050] Extract /v1 and /v2 HTTP APIs to submodules for future removal
• [#14052] Remove UDP PUSH support for naming module
• [#14057] Refactor CreateTool and support output scheme
• [#14074] Remove legacy UDP PUSH support from naming module
• [#14122] Add JVM --add-opens options for JDK 17+ compatibility in startup scripts
• [#14125] Activate dev profile by default for plugin dependencies
• [#14441] Refactor version comparison and JSON field handling with constants
• [#14461] Remove obsolete p3c-pmd plugin and cleanup annotations
• [#14463] Unify component scanning with custom package exclusion
• [#14468] Unify component scanning with custom package exclusion
• [#14546] Remove unused common.cache package (dead code from Guava removal attempt)
• [#14585] Refactor admin API input from JSON body to form params
• [#14640] Refactor database plugins and update CI report paths

BugFix

• [#13770] Fix missing context path in importToolsFromMcp and other AI-related APIs
• [#14009] Fix UUID passing issue in configuration fuzzy listening causing initialization events to be filtered
• [#14016] Fix Console automatic server member synchronization in distributed deployment
• [#14020] Fix missing '?' placeholder in database query
• [#14024] Fix MCP cache index inconsistency when recreating MCP server with same name
• [#14028] Fix remote server selection to use healthy nodes during import/export operations
• [#14063] Fix control plugin bug
• [#14104] Fix AI API context path errors in console
• [#14114] Fix incorrect grayRule detection in ConfigMigrateService
• [#14121] Fix console-ui pagination reset to 0 instead of 1 on API error
• [#14210] Fix MainLayout to handle language changes and fetch notices on update
• [#14307] Add JVM --add-opens options for JDK 17+ compatibility in startup scripts
• [#14401] Fix incorrect created field returned by ConfigRowMapperInjector
• [#14402] Fix MySQL LIKE query escaping to prevent underscore and hyphen confusion
• [#14442] Fix Derby and MySQL LIKE query with proper escape handling
• [#14450] Fix console remote server context-path for maintainer-client
• [#14454] Throw proper exception when form parameters exceed size limit
• [#14471] Replace Long.valueOf() with Long.parseLong() to avoid unnecessary boxing
• [#14479] Fix typo, incorrect Javadoc and improve resource management in health check processors
• [#14484] Add 'type' and 'md5' fields to findConfigInfoLike4PageFetchRows for plugin development
• [#14486] Remove unnecessary equals() override in enum classes
• [#14491] Fix DumpChangeGrayConfigWorker NPE
• [#14509] Fix non-short-circuit operator in for-loop condition
• [#14510] Fix clone() not calling super.clone() in ConfigForm
• [#14515] Fix unnecessary equals() override in enum classes
• [#14527] Add OIDC/OAuth2 Authentication Plugin (Server)
• [#14533] Fix DM_DEFAULT_ENCODING: add explicit charset to avoid platform-dependent encoding
• [#14538] Fix DMI_RANDOM_USED_ONLY_ONCE: replace new Random() with ThreadLocalRandom
• [#14545] Remove unused common.cache package
• [#14547] Fix HE_EQUALS_USE_HASHCODE: add missing hashCode() to Config model classes
• [#14548] Fix NP_PARAMETER_MUST_BE_NONNULL_BUT_MARKED_AS_NULLABLE: add null check in GrpcConnection callback
• [#14567] Fix console-ui TypeError in MainLayout and improve copilot module loading
• [#14616] Fix naming module pagination parameter validation
• [#14622] Exclude json-schema-validator 3.0.0 from agentscope-core to resolve NoClassDefFoundError
• [#14625] Fix NoClassDefFoundError by excluding conflicting json-schema-validator dependency
• [#14635] Fix health status update method to correctly handle persistent instances
• [#14712] Fix Skill ZIP upload losing SKILL.md content

Dependencies

• [#11180] Upgrade jraft-core version to 1.4.0
• [#14006] Upgrade Spring Boot to 3.4.10 to address CVE-2025-55752
• [#14055] Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.3
• [#14625] Exclude json-schema-validator 3.0.0 from agentscope-core
• [#14714] Upgrade gRPC version to 1.78.0

⚠️ Breaking Changes & Migration Notes

Database Schema Changes (Important)

Action Required: This release introduces significant database schema changes with multiple new tables added for plugin management, AI Registry (Skill/Prompt), and enhanced audit capabilities.

Before upgrading, you must apply the new schema:

1. Backup your existing database
2. Apply the schema upgrade script: conf/schema.sql (for MySQL) or corresponding script for your database type
3. Restart Nacos server after schema migration

Failure to apply the schema changes may result in plugin management, AI Registry, and other new features not functioning correctly.

API Legacy Adapter Plugin

The api-legacy-adapter plugin and the legacy /v1 and /v2 HTTP APIs have been removed from this release to reduce footprint.

If your deployment still depends on the legacy /v1 or /v2 APIs, you can manually introduce the compatibility plugin from:

https://github.com/nacos-group/nacos-api-legacy-adapter

Please download and place the plugin into your plugins directory to restore legacy API compatibility.

Naming Module: UDP PUSH Support Removed

The naming module has removed legacy UDP PUSH support, moving to a cleaner HTTP API architecture. Clients relying on UDP-based service discovery updates must migrate to HTTP-based mechanisms.

Java Version Requirements

📚 What's New in AI Registry

Skill Registry

• Centralized Management: Create, update, and version skills via UI or API with changelogs
• Skill Composition: Chain multiple MCP tools into business-meaningful capabilities (e.g., "user_onboarding" = verify_email + create_profile + send_welcome_email)
• MCP Integration: Skills explicitly declare dependencies on registered MCP tools with integrity validation
• Folder-based Organization: Skills displayed in multi-level folder structure for better organization
• Agent-Friendly APIs: REST/gRPC APIs for agent frameworks (LangChain, CrewAI, etc.) to discover and subscribe to skills
• Upload Support: Upload skill packages (zip format, max 10MB) with authentication
• Security Scanning: Integrated skill-scanner for AI Skill security validation
• Data Level Access: Fine-grained visibility and access control (Phase 2 & 3)

Prompt Registry

• First-Class Configuration: Store prompts with metadata (agentId, modelId, version, tags) as versioned config artifacts
• Multi-Version Management: Support parallel multi-version management with template and commit message tracking
• Tag-Based Subscription: Subscribe to prompts by tags for dynamic updates
• Interactive Debugging: Test and compare prompt outputs across versions directly in console
• AI Client Proxy: Unified HTTP/gRPC client interface for prompt operations

Nacos Copilot

• AI-Powered Assistant: Integrated AI assistant to help optimize and create Prompts and Skills
• Intelligent Discovery: Automatically find relevant existing skills from the registry
• Console Integration: Accessible directly from Nacos console for seamless workflow

New Contributors

• @INotWant made their first contribution in #14009
• @QingYuanQ made their first contribut...

Nacos 3.1.2 is a patch release focused on stability improvements, security fixes, and AI module enhancements. Key highlights include:

• Security: Upgraded Spring Boot to 3.4.10 to address CVE-2025-55752, plus log4j and gRPC dependency updates
• AI/MCP: Fixed MCP cache inconsistency issues and added version parameter support for Agent Card queries
• Console: Improved distributed deployment experience with automatic server member sync and fixed multiple context path issues
• Client: Eliminated class unloading memory leak during config reload and fixed UUID passing issue in fuzzy listening
• Config: Enhanced config metadata publishing with audit logging and notifications

Feature

• [#13996] Add event publishing for agent and MCP endpoint operations
• [#13999] Add audit logging and notifications for config metadata publishing
• [#14120] Add version parameter support to Maintainer SDK Get Agent Card method

Enhancement/Refactor

• [#14000] Eliminate class unloading memory leak during configuration reload using Configuration.initialize()
• [#14062] Prevent potential data modification risk in client ServiceInfoHolder
• [#14099] Add validation for serviceName and groupName in SubscribeServiceRequestHandler
• [#14449] Remove ineffective ThreadLocal in MD5Utils
• [#14454] Throw proper exception when form parameters exceed size limit

BugFix

• [#13770] Fix missing context path in importToolsFromMcp and other AI-related APIs
• [#14009] Fix UUID passing issue in configuration fuzzy listening causing initialization events to be filtered
• [#14016] Fix Console automatic server member synchronization in distributed deployment
• [#14020] Fix missing '?' placeholder in database query
• [#14024] Fix MCP cache index inconsistency when recreating MCP server with same name
• [#14028] Fix remote server selection to use healthy nodes during import/export operations
• [#14063] Fix control plugin bug
• [#14104] Fix AI API context path errors in console
• [#14114] Fix incorrect grayRule detection in ConfigMigrateService
• [#14121] Fix console-ui pagination reset to 0 instead of 1 on API error
• [#14210] Fix MainLayout to handle language changes and fetch notices on update
• [#14401] Fix incorrect created field returned by ConfigRowMapperInjector
• [#14402] Fix MySQL LIKE query escaping to prevent underscore and hyphen confusion
• [#14442] Fix Derby and MySQL LIKE query with proper escape handling
• [#14450] Fix console remote server context-path for maintainer-client
• [#14635] Fix health status update method to correctly handle persistent instances

Dependencies

• [#14006] Upgrade Spring Boot to 3.4.10 to address CVE-2025-55752
• [#14055] Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.3
• [#14714] Upgrade gRPC version to 1.78.0

Deployment Required

Contributors

Thanks to all contributors: @KomachiSion, @chunhai1127, @INotWant, @chlch, and the Nacos community.

Full Changelog: 3.1.1...3.1.2

Nacos 3.2.0 Release Notes

This version focuses on plugin architecture enhancement, API modernization, AI Registry expansion, and code quality improvements.

🎯 Major Highlights

AI Registry Completes the "AI Triad"

Nacos 3.2.0 introduces Skill Registry and Prompt Registry, completing the AI control plane vision alongside existing MCP Registry and Agent Registry:

• Skill Registry: Centralized management for reusable, business-aligned capabilities composed of MCP tools with versioning, tags, and folder-based organization
• Prompt Registry: First-class prompt management with multi-version support, tag-based subscription, template management, and A/B testing capabilities
• Nacos Copilot: AI-powered assistant integrated into Nacos console, helping users optimize/create Prompts and Skills, and intelligently find existing skills from the registry

Plugin Architecture Modernization

Comprehensive plugin management system with SPI-based plugin discovery, management console UI, and cluster-wide state synchronization. PostgreSQL datasource plugin receives significant enhancements with merged implementations from nacos-plugin repository.

API Cleanup

The naming module removes legacy UDP PUSH support, moving to a cleaner HTTP API architecture with /v1 and /v2 APIs extracted to submodules for future removal.

MCP Enhancements

MCP (Model Context Protocol) support is expanded with tool _meta, annotations fields, and output scheme support.

Code Quality & Compatibility

Multiple FindBugs/SpotBugs fixes, dead code removal, and JDK 17+ compatibility enhancements.

⚠️ Breaking Changes & Migration Notes

API Legacy Adapter Plugin (Important)

Action Required: In this version, the plugins directory includes the api-legacy-adapter plugin by default to maintain compatibility with extracted /v1 and /v2 HTTP APIs. This plugin will be removed in future versions.

If you have confirmed that your deployment no longer uses the legacy /v1 or /v2 APIs, you can safely remove the api-legacy-adapter plugin from the plugins directory immediately to reduce footprint.

Feature

[#14050] Extract /v1 and /v2 HTTP APIs to submodules for future removal.
[#14052] Remove UDP PUSH support for naming module.
[#14077] Implement SPI-based plugin discovery and management API.
[#14078] Implement cluster-wide state synchronization.
[#14079] Add plugin management console UI and API.
[#14084] Support MCP Tool _meta and annotations fields.
[#14109] Introduce Prompt Registry as a core component of Nacos AI Registry.
[#14110] Introduce Skills Registry to complement Nacos AI Registry vision.
[#14122] Add JVM --add-opens options for JDK 17+ compatibility in startup scripts.
[#14245] Integrate Nacos Copilot for AI-assisted Prompt and Skill management.
[#14440] Add Prompt Registry with multi-version management support.
[#14453] Support tag-based subscription and management for Prompts.
[#14484] Add 'type' and 'md5' fields to findConfigInfoLike4PageFetchRows for plugin development.
[#14505] Refactor Prompt Registry to support parallel multi-version management.
[#14525] Add AI client proxy interface supporting HTTP and gRPC transport.
[#14534] Add find-skill-from-nacos capability for intelligent skill discovery.

Enhancement/Refactor

[#13699] Support outputSchema for MCP tools.
[#14048] Refactor datasource plugins structure and enhance PostgreSQL capabilities.
[#14056] Support output scheme and refactor the CreateTool.
[#14057] Refactor CreateTool and support output scheme.
[#14441] Refactor version comparison and JSON field handling with constants.
[#14461] Remove obsolete p3c-pmd plugin and cleanup annotations.
[#14463] Unify component scanning with custom package exclusion.
[#14468] Unify component scanning with custom package exclusion.
[#14479] Fix typo, incorrect Javadoc and improve resource management in health check processors.
[#14486] Remove unnecessary equals() override in enum classes.
[#14489] Align PostgreSQL trusted function enum and enrich tag queries.
[#14537] Normalize escaped YAML parsing and stabilize skill export/import roundtrips.
[#14545] Remove unused common.cache package (dead code from Guava removal attempt).
[#14565] Extract common RemoteServerConnector for AI services.

BugFix

[#14084] Support meta and annotation in mcp tools.
[#14117] Add plugin management console UI and API.
[#14471] Replace Long.valueOf() with Long.parseLong() to avoid unnecessary boxing.
[#14484] Add 'type' and 'md5' fields to findConfigInfoLike4PageFetchRows for plugin development.
[#14491] Fix DumpChangeGrayConfigWorker NPE.
[#14509] Fix non-short-circuit operator in for-loop condition.
[#14510] Fix clone() not calling super.clone() in ConfigForm.
[#14527] Add OIDC/OAuth2 Authentication Plugin (Server).
[#14533] Fix DM_DEFAULT_ENCODING: add explicit charset to avoid platform-dependent encoding.
[#14538] Fix DMI_RANDOM_USED_ONLY_ONCE: replace new Random() with ThreadLocalRandom.
[#14547] Fix HE_EQUALS_USE_HASHCODE: add missing hashCode() to Config model classes.
[#14548] Fix NP_PARAMETER_MUST_BE_NONNULL_BUT_MARKED_AS_NULLABLE: add null check in GrpcConnection callback.
[#14567] Fix console-ui TypeError in MainLayout and improve copilot module loading.

Dependencies

[#11180] Upgrade jraft-core version to 1.4.0.

Deployment Required

📚 What's New in AI Registry

Skill Registry

• Centralized Management: Create, update, and version skills via UI or API with changelogs
• Skill Composition: Chain multiple MCP tools into business-meaningful capabilities (e.g., "user_onboarding" = verify_email + create_profile + send_welcome_email)
• MCP Integration: Skills explicitly declare dependencies on registered MCP tools with integrity validation
• Folder-based Organization: Skills displayed in multi-level folder structure for better organization
• Agent-Friendly APIs: REST/gRPC APIs for agent frameworks (LangChain, CrewAI, etc.) to discover and subscribe to skills
• Upload Support: Upload skill packages (zip format, max 10MB) with authentication

Prompt Registry

• First-Class Configuration: Store prompts with metadata (agentId, modelId, version, tags) as versioned config artifacts
• Multi-Version Management: Support parallel multi-version management with template and commit message tracking
• Tag-Based Subscription: Subscribe to prompts by tags for dynamic updates
• Interactive Debugging: Test and compare prompt outputs across versions directly in console
• AI Client Proxy: Unified HTTP/gRPC client interface for prompt operations

Nacos Copilot

• AI-Powered Assistant: Integrated AI assistant to help optimize and create Prompts and Skills
• Intelligent Discovery: Automatically find relevant existing skills from the registry
• Console Integration: Accessible directly from Nacos console for seamless workflow

New Contributors

• @INotWant made their first contribution in #14009
• @QingYuanQ made their first contribution in #14020
• @echooymxq made their first contribution in #14100
• @shichaoyuan made their first contribution in #14099
• @chlch made their first contribution in #14104
• @lvren1485 made their first contribution in #14210
• @slightsharp made their first contribution in #14263
• @Cholesterol12138 made their first contribution in #14357
• @codezkk made their first contribution in #14401
• @1lck made their first contribution in #14449
• @Zjianru made their first contribution in #14461
• @qiacheng7 made their first contribution in #14465
• @aMetric made their first contribution in #14477
• @DocJlm made their first contribution in #14480
• @java-acc made their first contribution in #14485
• @FrioSea made their first contribution in #14476
• @saynoword made their first contribution in #14534

Full Changelog: 3.1.1...3.2.0-BETA

This release focuses on enhancing the MCP and A2A (Agent-to-Agent) capabilities of Nacos, improving system stability, and refining security and configuration management. Key additions include support for batch registration of agent endpoints, merging versions during MCP server import, and enhanced flexibility in updating MCP servers with an overrideExisting option. The release also introduces default security configuration support for both inbound and outbound communication, laying the foundation for secure AI agent interactions.

Detail changes in this version are listed below:

Feature

[#13867] Support override existing configuration when updating MCP server.
[#13922] Add thread pool configuration to allow core thread timeout.
[#13946] Refactor AgentEndpoint model and add new fields to support advanced protocol and queries.
[#13953] Add support for default security configurations, including selection and setup for inbound and outbound security schemes.
[#13957] Support batch registration of agent endpoints.
[#13951] Add configurable CORS filter for console module.

Enhancement/Refactor

[#13822] Separate responsibilities between client executor and login scheduled executor to prevent thread pool exhaustion.
[#13863] Optimize shutdown.sh script to combine multiple PIDs into a single line for cleaner process termination.
[#13911] Enhance importToolsFromMcp API to support streamable protocol servers.
[#13914] Upgrade checkStyle plugin version to improve code linting and maintainability.
[#13945] Support merging versions when importing MCP server specifications.
[#13963] Refactor List config apis to support return configTags and desc.

BugFix

[#13140] Fix consistent namespace handling for ConfigChangeNotifyRequest when client namespace is empty.
[#13860] Fix potential null pointer exception risk in ConfigMigrateService.
[#13866] Fix inability to edit imported MCP servers in the console.
[#13869] Fix error creating bean 'consoleHealthController' due to missing dependency injection.
[#13877] Fix namespaceId issue in McpRemoteHandler causing incorrect context propagation.
[#13882] Fix synchronization lock and add volatile keyword for TpsControlManager to ensure thread safety.
[#13884] Fix JSON parsing error in MCP server validation API during import.
[#13902] Fix deprecated Log4j2 package scanning warnings by updating logger initialization logic.
[#13948] Fix failure when updating agent card through the console interface.
[#13959] Fix Password update fails when deployed with independent console/server.
[#13964] Fix when nacos.extension.ai.enabled is false, nacos start failed.

Dependencies

[#13879] Add unit tests for AI-related components.
[#13881] Add utility APIs for development and testing purposes.

Deployment Required

New Contributors

• @bee0511 made their first contribution in #13858
• @Alioth4J made their first contribution in #13864
• @five111 made their first contribution in #13861
• @herodotus-ecosystem made their first contribution in #13872
• @wanna280 made their first contribution in #13882
• @zhan7236 made their first contribution in #13966
• @aihai made their first contribution in #13965

Full Changelog: 3.1.0-bugfix...3.1.1

This version is mainly do some enhancement and fix some bugs from 2.5.1.

Please see the details of the changes below:

Change details

Enhancement&Refactor

[#12102] Fix deprecated Log4j2 package scanning warnings.
[#13183] Add grpc client request metrics switch.
[#13234] Make the IP input box in Listening Query be required.
[#13297] Add build-helper-maven-plugin to support IDEA auto-recognize generated sources.

BugFix

[#12484] Fix ConfigController.stopBeta srcUser param is null.
[#13171] Fix the full regular dump for gray configuration.
[#13193] Fix Configuration database health check sql for mysql and derby plugin.
[#13218] Fix naming v1 catalog page service api return all datum when pageSize is large.
[#13223] Fix the permission problem of ip dimension query configuration monitoring.
[#13229] Fix the config tag being lost during configuration export.
[#13249] Fix configuration change plugin return incompatibility.
[#13273] Fix create cluster client don't effect fpr nacos.remote.client.grpc config problem.
[#13400] Fix naming subscriber get appName is - problem.
[#13614] Fix namespace conversion bug for default namespaceId from `` to public.
[#13629] Fix NPE problem when update instance metadata with null value.
[#13716] Fix namespaceId has no default value in the oracle database plugin.
[#13744] Fix CONFIG_INFO_GRAY_WRAPPER_ROW_MAPPER not registered to database plugin.

Dependency

[#13183] Bump tomcat-embed-core to 9.0.99.
[#13454] Upgrade nacos-logback-adapter to 1.1.4.

New Contributors

• @psxjoy made their first contribution in #13204
• @linwumingshi made their first contribution in #13222
• @chunhai1127 made their first contribution in #13235
• @zhilu-tang made their first contribution in #13298
• @kuchikij made their first contribution in #13716

Full Changelog: 2.5.1...2.5.2

During the release of Nacos 3.1.0, the MCP official team published a new version of the registry protocol (2025-09-16). Nacos 3.1.0 has swiftly completed adaptation to this protocol. To utilize this feature, please download the latest Nacos 3.1.0 release package and Docker images.

This version is a new millstone version and fix some bugs from 3.1.0-BETA.

In 3.1.0, Nacos follow the new MCP official registry protocol. All users can use Nacos as the MCP official registry private deployment to build their own private market or registry for MCP servers.
Nacos also support to import MCP server by MCP server spec json and support auto get tools by mcp url, These two new feature will improve usage for users to create MCP server into Nacos.
And also, this version support user enabled/disabled MCP server in console and support encrypt mcp tools schemes for storage with configuration encrypt plugin.

What's more, in this version Nacos support A2A registry which can allow users or agent framework like Spring AI Alibaba to publish and discovery AgentCard and agent endpoint. Current only support discovery by name of agent. Nacos will support discovery by skills, tags or descriptions in future.

Other Changes are to fix many bugs found before versions and do some dependencies upgrading.

There is one block change from 3.1.0-BETA. If you upgrade version from 3.1.0-BETA, Please delete all AgentCards before upgrading, or delete all configuration group with agent and agent-version after upgraded. And do re-publish for AgentCards. If Upgrade from other versions can ignore it.

Detail Changes in 3.1.0 see:

Feature

[#12191] Add namespace existence check.
[#13322] Support A2A registry.
[#13423] Support enabled or disabled MCP server in console.
[#13543] Add MCP server import functionality with registry support.
[#13783] Add config metadata update admin api.
[#13808] Add Support official mcp registry protocol.
[#13814] Support prompt encrypt for mcp tools.

Enhancement/Refactor

[#13777] Enhance namespace exist check logic to improve code quality.
[#13829] Enhance the hint when publish duplicate name of agent.

BugFix

[#13744] Fix omitted CONFIG_INFO_GRAY_WRAPPER_ROW_MAPPER for config datasource plugin.
[#13752] Fix NPE and ignore InterruptedException stack log.
[#13761] Fix add validation when deleting roles to prevent issues like mistakenly deleting ROLE_ADMIN.
[#13767] Fix service NullPointerException when K8S getSpec().
[#13773] Fix preserve protocol slashes when building MCP OpenAPI-derived URLs.
[#13779] Fix Mcp tool description edit limitation.
[#13787] Fix bug where the Nacos Mcp console cannot correctly parse OpenApi files.
[#13801] Fix bug that sometimes garbled characters appear when parsing OpenAPI file URL in MCP console.
[#13810] Fix bug that caused inconsistent performance between Derby and MySQL databases when publishing configurations.
[#13824][#13826] Fix AI gRPC resource parser and leak auth login for MCP/A2A request in nacos-client.
[#13830] Fix agentCard subscribe judgement problem.
[#13832] Fix blur search may contain unexpected results.

Dependencies

[#13385] Upgrade os-maven-plugin version to 1.7.1.
[#13711] Upgrade spring boot version to 3.4.9.
[#13753] Upgrade grpc version to 1.75.0.
[#13825] Upgrade jraft version to 1.3.15.bugfix.

Deployment Required

New Contributors

• @Melod-YI made their first contribution in #13754
• @Similarityoung made their first contribution in #13774
• @iggzq made their first contribution in #13782
• @WangzJi made their first contribution in #13667
• @nihongye made their first contribution in #13827

Full Changelog: 3.0.3...3.1.0

This version is A beta version for 3.1.0.

In 3.1.0, Nacos follow the new MCP official registry protocol. All users can use Nacos as the MCP official registry private deployment to build their own private market or registry for MCP servers.
Nacos also support to import MCP server by MCP server spec json and support auto get tools by mcp url, These two new feature will improve usage for users to create MCP server into Nacos.
And also, this version support user enabled/disabled MCP server in console and support encrypt mcp tools schemes for storage with configuration encrypt plugin.

What's more, in this version Nacos support A2A registry which can allow users or agent framework like Spring AI Alibaba to publish and discovery AgentCard and agent endpoint. Current only support discovery by name of agent. Nacos will support discovery by skills, tags or descriptions in future.

Other Changes are to fix many bugs found before versions and do some dependencies upgrading.

Detail Changes in 3.1.0 see:

Feature

[#12191] Add namespace existence check.
[#13322] Support A2A registry.
[#13423] Support enabled or disabled MCP server in console.
[#13543] Add MCP server import functionality with registry support.
[#13783] Add config metadata update admin api.
[#13808] Add Support official mcp registry protocol.
[#13814] Support prompt encrypt for mcp tools.

Enhancement/Refactor

[#13777] Enhance namespace exist check logic to improve code quality.

BugFix

[#13744] Fix omitted CONFIG_INFO_GRAY_WRAPPER_ROW_MAPPER for config datasource plugin.
[#13752] Fix NPE and ignore InterruptedException stack log.
[#13761] Fix add validation when deleting roles to prevent issues like mistakenly deleting ROLE_ADMIN.
[#13767] Fix service NullPointerException when K8S getSpec().
[#13773] Fix preserve protocol slashes when building MCP OpenAPI-derived URLs.
[#13779] Fix Mcp tool description edit limitation.
[#13787] Fix bug where the Nacos Mcp console cannot correctly parse OpenApi files.
[#13801] Fix bug that sometimes garbled characters appear when parsing OpenAPI file URL in MCP console.
[#13810] Fix bug that caused inconsistent performance between Derby and MySQL databases when publishing configurations.

Dependencies

[#13385] Upgrade os-maven-plugin version to 1.7.1.
[#13711] Upgrade spring boot version to 3.4.9.
[#13753] Upgrade grpc version to 1.75.0.

Deployment Required

New Contributors

• @Melod-YI made their first contribution in #13754
• @Similarityoung made their first contribution in #13774
• @iggzq made their first contribution in #13782
• @WangzJi made their first contribution in #13667

Full Changelog: 3.0.3...3.1.0-BETA