From 88b0aa1cd93b6292b244a939e6a0a5fe78fd9d23 Mon Sep 17 00:00:00 2001 From: Dan Barr <6922515+danbarr@users.noreply.github.com> Date: Thu, 30 Jul 2026 15:21:49 -0400 Subject: [PATCH 1/4] Replace acme.com with example.com in examples acme.com is a real, registered domain. example.com is reserved by IANA (RFC 2606) so it never resolves, making it the correct choice for documentation examples. Fixes #1070 --- docs/platform/enterprise-manager/policies/registry.mdx | 10 +++++----- .../platform/enterprise-manager/policies/telemetry.mdx | 8 ++++---- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/docs/platform/enterprise-manager/policies/registry.mdx b/docs/platform/enterprise-manager/policies/registry.mdx index e6631c0d..b19d887a 100644 --- a/docs/platform/enterprise-manager/policies/registry.mdx +++ b/docs/platform/enterprise-manager/policies/registry.mdx @@ -10,8 +10,8 @@ registry can be a self-hosted [Registry Server](../../../toolhive/guides-registry/index.mdx), the upstream MCP registry, or any MCP-compatible registry. -You'll need your registry's URL (for example, `https://registry.acme.com`) and -the Enterprise Manager already [deployed](../configure.mdx) and reachable by +You'll need your registry's URL (for example, `https://registry.example.com`) +and the Enterprise Manager already [deployed](../configure.mdx) and reachable by clients. ## Configure the registry directive @@ -25,7 +25,7 @@ enterpriseConfig: registry: value: # The registry API URL all clients connect to - api_url: 'https://registry.acme.com' + api_url: 'https://registry.example.com' # "enforced" blocks local overrides; "default" lets users override locally enforcement: 'enforced' ``` @@ -48,7 +48,7 @@ Suggest the registry URL as an org-wide default while allowing local overrides: enterpriseConfig: registry: value: - api_url: 'https://registry.acme.com' + api_url: 'https://registry.example.com' enforcement: 'default' ``` @@ -62,7 +62,7 @@ responses: enterpriseConfig: registry: value: - api_url: 'https://registry.internal.acme.com' + api_url: 'https://registry.internal.example.com' allow_private_ip: true enforcement: 'enforced' ``` diff --git a/docs/platform/enterprise-manager/policies/telemetry.mdx b/docs/platform/enterprise-manager/policies/telemetry.mdx index 977e5586..8200baef 100644 --- a/docs/platform/enterprise-manager/policies/telemetry.mdx +++ b/docs/platform/enterprise-manager/policies/telemetry.mdx @@ -11,7 +11,7 @@ ToolHive's OpenTelemetry support, see the guide. You'll need the OTLP HTTP endpoint for your collector (for example, -`https://otel.acme.com`) and the Enterprise Manager already +`https://otel.example.com`) and the Enterprise Manager already [deployed](../configure.mdx) and reachable by clients. ## Configure the telemetry directive @@ -25,7 +25,7 @@ enterpriseConfig: telemetry: value: # Required: OTLP HTTP endpoint for your OpenTelemetry collector - otel_endpoint: 'https://otel.acme.com' + otel_endpoint: 'https://otel.example.com' # Fraction of traces to sample: 0.0 = none, 1.0 = all sampling_rate: 0.1 tracing_enabled: true @@ -66,7 +66,7 @@ override them: enterpriseConfig: telemetry: value: - otel_endpoint: 'https://otel.acme.com' + otel_endpoint: 'https://otel.example.com' sampling_rate: 0.1 tracing_enabled: true metrics_enabled: true @@ -82,7 +82,7 @@ set `insecure: true`: enterpriseConfig: telemetry: value: - otel_endpoint: 'http://otel.internal.acme.com:4318' + otel_endpoint: 'http://otel.internal.example.com:4318' insecure: true tracing_enabled: true metrics_enabled: true From 767473f571eb2704b131e142301e783fbc2da7bb Mon Sep 17 00:00:00 2001 From: Dan Barr <6922515+danbarr@users.noreply.github.com> Date: Thu, 30 Jul 2026 15:22:04 -0400 Subject: [PATCH 2/4] Remove stale auto-discovery removal note The note described one-time migration behavior for users upgrading across the v0.1.0 boundary, which shipped over a year and 40 releases ago. The remaining guidance is already covered by the surrounding page content. Fixes #1071 --- docs/toolhive/guides-cli/client-configuration.mdx | 13 ------------- 1 file changed, 13 deletions(-) diff --git a/docs/toolhive/guides-cli/client-configuration.mdx b/docs/toolhive/guides-cli/client-configuration.mdx index 427db24f..a9a6e6f4 100644 --- a/docs/toolhive/guides-cli/client-configuration.mdx +++ b/docs/toolhive/guides-cli/client-configuration.mdx @@ -30,19 +30,6 @@ To view the current status of detected and configured clients, run: thv client status ``` -:::note - -ToolHive previously included an "auto-discovery" mode. We removed this mode in -v0.1.0 to simplify client configuration and ensure consistent control and -behavior. If you previously enabled client auto-discovery, ToolHive will -explicitly register all detected clients the first time you run v0.1.0 and -higher. - -Going forward, use the `thv client setup` command to manage your client -configurations. - -::: - ## Alternative client registration If you prefer to register clients manually or in an automated script, use the From ed89d659e1a1d52506a70b252c9220b31bd9ca5b Mon Sep 17 00:00:00 2001 From: Dan Barr <6922515+danbarr@users.noreply.github.com> Date: Thu, 30 Jul 2026 15:22:30 -0400 Subject: [PATCH 3/4] Trim v0.40.0 changelog admonition in network isolation guide The admonition mostly duplicated the behavior table directly above it, and the old behavior it described was a bug (silently broken DNS for host-networked workloads), so the audience relying on previous behavior is near zero. Also reword body prose that leaked version framing into a plain statement of current behavior. Fixes #1072 --- docs/toolhive/guides-cli/network-isolation.mdx | 15 +-------------- 1 file changed, 1 insertion(+), 14 deletions(-) diff --git a/docs/toolhive/guides-cli/network-isolation.mdx b/docs/toolhive/guides-cli/network-isolation.mdx index 677c101a..5f16a8cd 100644 --- a/docs/toolhive/guides-cli/network-isolation.mdx +++ b/docs/toolhive/guides-cli/network-isolation.mdx @@ -211,8 +211,7 @@ Network isolation is a bridge-network construct: the egress, DNS, and ingress sidecars only work when the MCP container lives on a container-runtime bridge. When you pass `--network host` or `--network none`, the container shares the host network namespace or has no network at all, so the isolation sidecars have -no way to intercept traffic. In v0.40.0 and later, ToolHive reconciles the two -flags automatically: +no way to intercept traffic. ToolHive reconciles the two flags automatically: | `--network` mode | `--isolate-network` source | Behavior | | -------------------------- | --------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -221,18 +220,6 @@ flags automatically: | `host` or custom | explicit `--isolate-network=true` | `thv run` fails fast with an error naming both flags. Drop `--network host` to keep enforced isolation, or set `--isolate-network=false` to keep host networking. | | `none` | any | Isolation is silently dropped (`none` is already maximally confined; isolation would be redundant). | -:::info[Changed in v0.40.0] - -Before v0.40.0, `thv run --network host` silently built the isolation sidecars -against an internal-only network, breaking outbound DNS and connectivity. -Isolation is now dropped for `host`/`none` modes so host-networked workloads -keep working. If you rely on host networking, no change is needed. If you -previously combined `--isolate-network` with `--network host` explicitly, pick -one: drop `--network host` to keep enforced isolation, or set -`--isolate-network=false` to keep host networking. - -::: - ## Example: Enable network isolation using registry defaults Many MCP servers in the ToolHive registry have default permission profiles that From 8dc71a457a71513e766b27f9e50d89919eff9207 Mon Sep 17 00:00:00 2001 From: Dan Barr <6922515+danbarr@users.noreply.github.com> Date: Thu, 30 Jul 2026 15:23:15 -0400 Subject: [PATCH 4/4] Fix filler-opener descriptions on integrations pages The front matter descriptions started with 'Learn how to' or 'A guide to,' crowding out the useful summary in the first ~70 characters used for the DocCard preview. Lead with the action or topic instead. Fixes #1073 --- docs/toolhive/integrations/aws-sts.mdx | 4 ++-- docs/toolhive/integrations/ingress-ngrok.mdx | 4 ++-- docs/toolhive/integrations/vault.mdx | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/toolhive/integrations/aws-sts.mdx b/docs/toolhive/integrations/aws-sts.mdx index a37e6191..8f87136f 100644 --- a/docs/toolhive/integrations/aws-sts.mdx +++ b/docs/toolhive/integrations/aws-sts.mdx @@ -1,8 +1,8 @@ --- title: AWS STS authentication for the AWS MCP Server description: - Learn how to centralize AWS credential management by using ToolHive to - exchange OIDC tokens for temporary AWS credentials via STS. + Centralize AWS credential management by using ToolHive to exchange OIDC tokens + for temporary AWS credentials via STS. --- This tutorial shows you how to use ToolHive as an authentication proxy for the diff --git a/docs/toolhive/integrations/ingress-ngrok.mdx b/docs/toolhive/integrations/ingress-ngrok.mdx index 02aca2d1..8e5e4ddf 100644 --- a/docs/toolhive/integrations/ingress-ngrok.mdx +++ b/docs/toolhive/integrations/ingress-ngrok.mdx @@ -1,8 +1,8 @@ --- title: Configure secure ingress for MCP servers on Kubernetes description: - A guide to setting up secure ingress for MCP servers running on a Kubernetes - cluster using the ToolHive Operator. + Set up secure ingress for MCP servers running on a Kubernetes cluster using + the ToolHive Operator. --- In this tutorial, you'll configure secure ingress for MCP servers running on a diff --git a/docs/toolhive/integrations/vault.mdx b/docs/toolhive/integrations/vault.mdx index 02eb48f1..b1804e37 100644 --- a/docs/toolhive/integrations/vault.mdx +++ b/docs/toolhive/integrations/vault.mdx @@ -1,8 +1,8 @@ --- title: HashiCorp Vault integration description: - Learn how to securely manage MCP server secrets using HashiCorp Vault with - ToolHive Kubernetes Operator. + Securely manage MCP server secrets using HashiCorp Vault with the ToolHive + Kubernetes Operator. --- This tutorial shows how to integrate HashiCorp Vault with the ToolHive