Skip to main content
v2.0.0-prerelease1

Changelog

Release on OSS v2.0.0-prerelease1 (based on OSS v1.6.3). Introduces Bifrost Edge: a cross-platform device agent (macOS, Linux, Windows) that routes device AI traffic through Bifrost, an MCP stdio interception shim for per-tool policy enforcement on enrolled devices, and Edge control management (devices, MCP, and edge config) in the enterprise dashboard, backed by binary-based license management and server-driven config sync.

✨ Features

  • Bifrost Edge Device Agent - New macOS, Linux, and Windows device agent with a system tray UI showing usage stats, an IPC-based daemon that keeps the agent running, an independent health probe, a rotated logs flow, and env-specific agent builds.
  • MCP Shim - stdio interception shim that wraps discovered MCP servers on enrolled devices, routing tool calls through the Bifrost agent for policy enforcement, per-tool blocking, and tool catalog reporting.
  • Edge Control Management - Device, MCP, and edge config management from the enterprise dashboard, including a kill switch and an updated CA flow UI.
  • App Attribution Classifier - The agent detects which AI app generated traffic (including Conductor-owned embedded Claude runtimes) and stamps runtime-app attribution on request headers.
  • Tunnel Performance - Certificate and tunnel caching, Nagle disabled on netstack, multiple compression algorithm support, process attribution and async syslog writes moved off the hot path, plus overhead logging and metrics.
  • License Management via Binary - License validation for the Edge product managed through the binary; LicensePublicKey is enforcement-only with keyless dev support.
  • Virtual Key Mode - The Edge agent can authenticate with a virtual key as an alternative to IdP-managed auth.
  • Server Config Sync - Agents sync their configuration from the server.
  • Edge Onboarding Documentation Generator - Generates per-environment onboarding documentation for Edge rollout.

🌎 Open Source Features

  • ChatGPT Passthrough - ChatGPT passthrough route on the OpenAI integration with dedicated request handling.
  • User-Agent Tracking - User agents are tracked on LLM and MCP logs, with custom user-agent mapping and dashboard dimension rankings.
  • Edge MCP Log Ingestion - MCP tool logs observed by the Bifrost Edge agent can be ingested with device, app key, decision, and source attribution.
  • Edge Control Fallback Pages - Fallback pages for Bifrost Edge control views (config, devices, inventory) backed by governance resolver support.
  • Agent Handover Page - Agent handover page with seeded end-to-end data support.

🐞 Fixed

  • /api/devices Auth Bypass - Stopped /api/devices bypassing auth via the /api/dev prefix.
  • Bedrock Error Type - The AWS exception type (X-Amzn-Errortype) is surfaced on non-streaming Bedrock error responses instead of being dropped.
  • Agent-Server Connection - Agent failure handling fixed when the server connection drops.
  • No-IdP Setup - No-IdP setups are handled and proper errors are shown on the agent.
  • License Public Key - Fixed license public key injection and the public key check.
  • Windows Installer - Windows MSI installer fixes.
  • Linux Agent - Linux TUN offset and tray fixes.
  • Tray Concurrency - Fixed tray animation concurrency.
  • Missing config.json - Missing config.json is handled gracefully.
  • Edge APIs on Postgres - Fixed Edge APIs when running on Postgres.
  • Pangea Removal - Removed the Pangea integration.

📀 Base OSS version

github.com/maximhq/bifrost/transports v1.6.4-0.20260707051148-814c55d5f8a0

🔌 If you are compiling plugin against this release - use following deps

The enterprise repo is now a multi-module workspace; the github.com/maximhq/bifrost-enterprise/* modules at v0.0.0 resolve via the replace directives to the release source checkout.