LoginSign Up
← Back to all sparks
A

Appsmith

DEVOPS
Velocity5.0

Open-source low-code platform for building custom internal applications.

www.appsmith.com ↗

Appsmith v2.5.1 locks down config loading and SMTP hosts around its MCP server.

mcp-serverai-agentsinternal-toolsopen-sourcesecurity-hardening
◆Current state
Appsmith AI is fully retired, so AI work runs through direct OpenAI, Anthropic and Google AI datasources, and the embedded MCP server is the main AI surface. v2.5.0 widened what MCP can edit; v2.5.1 is a hardening patch: docker.env is now loaded as data (shell expressions stop startup), self-serve signup is rate-limited per IP, SMTP datasources obey the restricted-host policy, and MCP-authenticated Git requests can no longer check out remote branches.
◆Where it's heading
Appsmith is shifting from bundling its own AI to being a governed target that external AI clients act on. Each minor widens agent editing; each patch then narrows what that access can reach. Self-hosters keep absorbing upgrade work, now including moving JVM options out of docker.env.
◆Prediction
The next minor will likely extend MCP tool coverage again, followed by another hardening patch; the entries don't give a date for dropping the MCP beta label.

◆Recent moves

  1. 8d ago

    v2.5.1 hardens docker.env loading, SMTP hosts and signup rate limits

    A patch with upgrade actions for self-hosters: docker.env must contain literal values, signup is capped at 20 requests per IP per day, and SMTP datasources pointing at blocked hosts stop working. It also limits MCP Git access to local branches, matching the pattern of hardening each widening of agent access.

    View source ↗
  2. 19d ago

    v2.5 widens MCP app-editing tools and tightens datasource credentials

    The first release after Appsmith AI's shutdown extends the MCP server to JS objects, more widget settings, function wiring and layout checks, and logs each tool call's outcome. It builds on v2.4's MCP pivot rather than redirecting it, while datasource credential checks and a one-way Git schema bump add upgrade work for self-hosters.

    View source ↗
  3. 28d ago

    v2.4.3: MCP sessions shared via Redis as Appsmith AI hits end of life

    Shipped on the day Appsmith AI shut off, v2.4.3 moves MCP sessions into Redis so they survive restarts and work across replicas, which matters for any HA deployment using the new agent endpoint. It also preserves real server error messages in action runs and adds a Rich Text font control.

    View source ↗
  4. 1mo ago

    Release v2.4.2 🌈

    A maintenance release: a Bouncy Castle patch, a memory fix when cloning action-heavy pages, and analytics clean-up. It repeats the Appsmith AI end-of-life warning ahead of the September 30 cutoff.

    View source ↗
  5. 1mo ago

    v2.4.1 hardens Databricks, UQI filters and AI provider plugins

    Security-heavy point release: Databricks JDBC URL validation, SQL-identifier validation in UQI filters and a netty CVE fix. It also fixes a dependency conflict that could take down the direct AI provider plugins, which matters because those plugins now replace Appsmith AI.

    View source ↗
  6. 1mo ago

    Appsmith 2.4: embedded MCP server (beta) for AI-driven app building

    ⚡ SPARK

    The pivot release. As Appsmith's own AI datasource winds down, v2.4 ships an opt-in embedded MCP server that lets external AI clients build and edit apps through a permissioned tool API.

    View source ↗