7.4.5

DreamFactory v7.4.5 introduces a dedicated aggregate data tool for MCP-connected AI agents, adds server-side aggregate expression support in the SQL fields parameter, improves MCP server stability with request timeout guards and crash prevention, fixes OAuth connectivity for Cursor IDE and desktop MCP clients, and resolves admin UI issues for non-sysadmin users.

New Features

MCP Aggregate Data Tool

• New aggregate_data MCP tool — AI agents can now compute SUM, COUNT, AVG, MIN, and MAX directly on the database server through a single MCP tool call, eliminating the need to fetch and manually aggregate raw rows
• Supports groupBy for efficient server-side grouping (e.g., total revenue by country, average order value by status, row count by category)
• Supports filter to narrow rows before aggregation using the same filter syntax as get_table_data
• Improved MCP tool descriptions to guide AI agents toward using aggregate_data instead of attempting aggregation through get_table_data

Server-Side Aggregate Expressions in Fields Parameter

• SQL database services now support aggregate expressions directly in the fields query parameter (e.g., SUM(amount), COUNT(*), AVG(price))
• Updated GROUP and FIELDS option descriptions across the API to document aggregate expression support
• Applies to all SQL database connectors (MySQL, PostgreSQL, SQL Server, Oracle, Snowflake, etc.)

MCP Desktop OAuth Success Page

• Added a post-redirect success page for desktop MCP OAuth flows — after completing authentication, users now see a confirmation page instead of a blank browser tab
• Improves the onboarding experience for Claude Desktop, Cursor, and other MCP desktop clients

MCP Server

Stability & Reliability

• Request timeout guards — Added timeout guards to MCP daemon requests to prevent PHP worker lockups when external requests fail or hang
• Global error handlers — Added process-level error handlers to prevent unhandled exceptions from crashing the MCP daemon
• Custom tool auth injection — DreamFactory authentication headers are now automatically injected into custom tool API requests, so custom tools can call DreamFactory-hosted services without manual auth configuration

OAuth & Authentication Fixes

• Fixed OAuth connection issue for Cursor IDE — Resolved compatibility problems when connecting Cursor to the DreamFactory MCP server
• Fixed duplicate scope keys in OAuth createCode calls that could cause authentication failures
• Fixed general MCP OAuth connection issue affecting desktop clients
• Fixed MCP tools disabling — Resolved an issue where toggling tools off in the admin UI was not being correctly persisted

Query Hints

• Added filter syntax hint for field names containing spaces — MCP tool descriptions now instruct AI agents not to quote or escape field names with spaces in filter expressions

Admin UI

Non-Sysadmin Database Filtering

• Enhanced logic for non-sysadmin users' database filtering by role — Resolved edge cases where certain database services were incorrectly shown or hidden based on the user's assigned role

OAuth Redirect Fix

• Fixed an issue where a stale redirect URL caused the login screen to become stuck between states, returning an empty response after OAuth redirect — the admin UI now properly detects and cleans up stale redirect URLs

Logging

Monolog v3 Compatibility

• Fixed log level conversion for Monolog v3 — Log levels are now properly converted to integers, resolving compatibility issues with the Monolog v3 API that expects integer severity levels instead of strings

Upgrade Notes

• MCP server users: The new aggregate_data tool is automatically available on all database services connected to your MCP server. No configuration changes are required.
• The server-side aggregate expression support in the fields parameter is backward-compatible — existing queries are unaffected.
• Standard upgrade process applies for all other changes.

7.4.4

DreamFactory v7.4.4 delivers an AI-optimized data model endpoint for LLM and MCP integrations, adds custom tool support to the MCP server, introduces granular MCP tool management in the admin UI, and includes fixes for Google OAuth group mapping, Azure AD role-per-app fields, and MCP OAuth redirect handling.

New Features

AI-Optimized Data Model Endpoint

• New _spec endpoint on database services — Returns a condensed ~14KB data model payload containing all tables, columns, types, primary keys, foreign keys, row counts, and structural patterns in a single response
• Automatic relationship pattern detection — Identifies self-referencing hierarchies (tree structures) and junction tables (many-to-many relationships) so AI agents can navigate complex schemas correctly
• ?model=true parameter for LLM-optimized compact output; ?stock=true toggle for enriched metadata including query templates, field semantic hints, and sample data
• spec_url added to the service listing response for programmatic discoverability

MCP Server Custom Tools

• Custom tool definitions — Admins can now define custom MCP tools that make HTTP requests to external REST APIs, with configurable parameters, HTTP methods, static headers, and auto-generated Zod schemas
• Custom tools management UI — New table view and inline add/edit form in the MCP service configuration page for creating and managing custom tool definitions
• 30-second request timeout and case-insensitive Content-Type handling for robust external API integration

MCP Server Tool Management

• Per-service and per-tool toggle controls — Enable or disable individual built-in MCP tools (database and file operations) directly from the admin UI
• New disabled_tools column in MCP server configuration for persistent tool state
• Role-based service discovery — MCP tool listing now respects DreamFactory role permissions, only exposing services and tools the authenticated user is authorized to access

Google OAuth Group-to-Role Mapping

• Switched from Google Admin SDK to Google Identity Provider for the group-to-role mapping workflow, improving compatibility and reducing configuration complexity
• Enhanced OAuth flow logging with appropriate log levels (info, warning, debug) for easier troubleshooting

Bug Fixes

Azure AD / Entra ID

• Fixed get and set inheritance for role-per-app fields in the Azure AD connector

MCP Server

• Fixed OAuth redirect passthrough — Changed from localStorage to sessionStorage for redirect auth URLs, resolving stale redirect issues
• Fixed N+1 query in syncToolsForService by bulk-fetching with keyBy
• Fixed text double-serialization in non-JSON custom tool responses
• Used forceDelete to avoid soft-delete and unique constraint conflicts when removing tools

Upgrade Notes

• MCP server users: A new database migration adds the disabled_tools column to the MCP server configuration table and a custom_tools table. Run php artisan migrate after upgrading.
• Google OAuth users: If you are using the map-group-to-role feature with Google, this release switches from the Google Admin SDK to Google Identity Provider. Verify your Google OAuth configuration after upgrading.
• Standard upgrade process applies for all other changes.

7.4.3

New Features

MCP Server Integration

• df-mcp-server v1.2.0 — Introduces ability to toggle on/off MCP tools from the MCP Server configuration page.

7.4.2

DreamFactory v7.4.2 delivers a new Data Explorer for visual database browsing, expands MCP server capabilities with multi-API and file support, introduces Google Workspace group-to-role mapping, and improves PostgreSQL stored procedure handling.

New Features

Data Explorer

• New admin UI feature — Browse database tables, view schema details, filter and search data, navigate foreign key relationships, and inspect row details directly from the API Connections section of the admin panel
• Schema tree navigation with table and column visibility
• Built-in filtering and foreign key link navigation for exploring related data

MCP Server Multi-API & File Support

• Multi-API connector support — MCP server is no longer limited to a single API; connect AI agents to multiple DreamFactory services simultaneously
• File API tools — AI agents can now interact with DreamFactory's file management services through MCP
• OAuth discovery — Added RFC 8414 .well-known URI support for standard OAuth server metadata discovery
• Claude Desktop fix — Resolved OAuth Dynamic Client Registration (DCR) compatibility issue for Claude Desktop MCP integration

Google Workspace Group-to-Role Mapping

• Map Google Workspace groups directly to DreamFactory roles using the Google Admin SDK
• New map_group_to_role toggle in OAuth configuration for Google providers
• Automatic group resolution and role assignment during SSO login
• New role_google database table for managing group-to-role mappings

OAuth & Authentication Fixes

• Fixed Azure AD / Entra ID UI page being incorrectly overwritten by the generic OAuth UI
• Resolved incorrect field population for OAuth providers on the Authentication configuration page

Database Connectors

PostgreSQL

• Stored procedure & function fixes — Improved compatibility with PostgreSQL v12+ when invoking stored procedures and functions
• Added SELECT * fallback when field resolution fails during procedure execution

SQL Database (General)

• Virtual relationship transactions — Virtual relationship operations are now wrapped in proper database transactions via RelationTransactionContext, ensuring data consistency across related table operations
• Updated df-database dependency across all database connector packages for improved compatibility

Upgrade Notes

• MCP server users: The api_name column has been removed from the MCP server configuration table in favor of the new multi-API architecture. Existing MCP configurations will need to be reconfigured to specify connected APIs through the updated interface.
• Google OAuth users: A new database migration adds the map_group_to_role column and role_google table. Run php artisan migrate after upgrading.
• Standard upgrade process applies for all other changes.

7.4.1

Fix Swagger and df-apidoc versions

7.4.0

DreamFactory v7.4.0 delivers significant security hardening, introduces MCP (Model Context Protocol) server support, and enhances Azure AD/Entra ID integration with group-to-role mapping capabilities.

New Features

MCP Server Integration

• New Package: df-mcp-server v1.0.0 — Introduces Model Context Protocol (MCP) server capabilities, enabling AI-powered applications to interact with DreamFactory APIs
• Custom login page support for MCP Services

Azure AD / Entra ID Group-to-Role Mapping

• Map Entra ID groups directly to DreamFactory roles for seamless permission management
• Automatic permission synchronization when users log in — group membership changes are now detected and applied
• Enhanced service configuration UI with role-per-app settings display

OAuth & Authentication Enhancements

• Active Directory / Entra Client Credentials Flow — Full support for service account authentication
• Session token support for client credentials authentication
• New toggle in OAuth configuration to allow/deny new user creation during SSO login
• PostgreSQL system database compatibility improvements for NOT NULL constraints

API Documentation & Filtering

• Filter services by roles and permissions in API Docs UI — Users now only see services they have access to
• IIS compatibility fix for parameter key handling as HTTP verbs

Security Fixes

• PTT-2025-032 — Security vulnerability patched across df-core and df-system packages
• SQL Injection Fix (RBAC) — Replaced string concatenation with parameterized queries in role-based service filtering; added input validation for service IDs
• XSS Prevention — Server-side input validation for service labels (max 80 characters) and descriptions (max 255 characters); HTML tag stripping implemented
• Private Key File Validation — Added validation checks for private key files to prevent misconfigurations

Database Connectors

Oracle Database

• New toggle in database creation/edit screens to enable full decimal type for null or unassigned integer types, matching Oracle's native defaults

AWS (DynamoDB/S3)

• Added support for virtual relationships, enabling cross-table relationship definitions without foreign keys

Schema Management

• Fixed virtual foreign key slider in schema tab when creating new virtual fields

Infrastructure & Connectors

HTTP/RWS Connector

• Cleaned up HTTP/Remote Web Service connector with improved curl support
• Better error handling and connection management

Logging

• Refactored GelfLogger class to support Stringable message objects for modern PHP compatibility

Upgrade Notes

• No breaking changes; standard upgrade process applies
• Users leveraging Azure AD/Entra ID should review the new group-to-role mapping feature to simplify permission management

7.3.3

New Features

• Integrated an Intercom support widget that helps users get assistance more efficiently. This widget can be toggled on or off via the admin interface, offering customization for different user needs.

Improvements

• Username validation has been adjusted to require a minimum length of 6 characters, making it easier for users to create their accounts.
• Refined form handling for better management of user roles and access, providing clearer validation feedback and improving overall user experience.

Bug Fixes

• Resolved issues with role-based access to ensure smoother operation.

Performance Enhancements

• Optimized the initialization process for the Intercom widget, ensuring quicker loading times and reliable performance.

We encourage you to explore these exciting updates and see how they can enhance your experience!

7.3.2

DreamFactory 7.3.2 Release

What's Changed

• Add NPX installer to installation options
• Improved Scripted API Experience and Interface Enhancements
• Excel Service Enhancements to manage various file formats (XLS, XLSX, CSV), which now includes storage service integration

Performance Enhancements

Optimized loading processes to enhance the speed of operations within the application.

Full Changelog: 7.3.1...7.3.2

7.3.1

Bug Fixes

• Patch event scripts issue when attached to stored functions and procedures.

Full Changelog: 7.3...7.3.1

7.3.0

Introducing Enhanced Dashboard Features

• Experience improved management capabilities with our redesigned dashboard. You can now duplicate APIs, roles, services, and applications seamlessly. The latest dashboard cards provide a modern look, making it easier to navigate and manage your data effectively.

New Features

• Enjoy conditional prompts and alerts on the Quick Stats card, which now actively engages you with notifications for non-configured services and roles, ensuring a more interactive experience.
• New celebration dialog animations enhance the first-time API creation experience, making it memorable with dynamic content and user guidance tailored for new users.
• Take advantage of the HTTPS enforcement feature, which ensures your application generates secure links automatically based on your configuration, enhancing security during user interactions.
• MongoDB users can now filter on nested binary data with ease.
• Updated support for Postgres 12+ Functions and Procedures.

Improvements

• UI components have undergone significant enhancements, including improved styling and readability, providing a cleaner and more engaging user experience.
• Streamlined API creation flow and better handling of service definitions have been implemented, promoting clarity and ease of use.

Bug Fixes

• Fixed issues related to the SOAP service creation formats to ensure correct initialization and handling of data.
• Resolved visibility issues for system APIs in the DreamFactory Platform APIs tab, making it easier to locate and manage your APIs.
• Performance Enhancements
• Optimized various components for faster loading and improved interaction speeds, contributing to a smoother user experience.

We invite you to explore these exciting updates and discover how they can enhance your workflow!