Google Cloud announced the official release of version 1.0 of the Model Context Protocol (MCP) Toolbox Java SDK on October 6, 2026. Authored by Google developers Abirami Sukumaran, Stenal Jolly, and Anubhav Dhawan, the release provides type-safe agent orchestration for enterprise Java environments.
New Features in Version 1.0
Google Cloud stated that the v1.0 release establishes a stable, backward-compatible foundation for production workloads. Key updates since the v0.2 release include a clean transport layer abstraction alongside HttpMcpTransport, which decouples core protocol logic from underlying HTTP clients.
The release also introduces decoupled client authentication using CredentialsProvider and AuthMethods classes, default parameter support for tool definitions, automatic pruning of bound server-side parameters, standardized version selection, and generic client headers mapping.
Security and Enterprise Integration
According to Google, the SDK features built-in detection that warns users at runtime when credentials are about to travel over a plaintext HTTP connection. Client authentication relies on Application Default Credentials (ADC) via GoogleCredentialsProvider for secure token management.
The SDK integrates with Spring Boot and LangChain4j to manage conversational memory across HTTP sessions and route agent requests directly to MCP Toolbox servers. Google demonstrated the framework using an AlloyDB database schema mapping natural language intents through a tools.yaml configuration.
What to do
- Add the Maven dependency to your project's pom.xml file: <dependency><groupId>com.google.cloud.mcp</groupId><artifactId>mcp-toolbox-sdk-java</artifactId><version>1.0.0</version></dependency>
- Or add the Gradle implementation: implementation 'com.google.cloud.mcp:mcp-toolbox-sdk-java:1.0.0'
Key facts and where they come from
- Google Cloud released MCP Toolbox Java SDK version 1.0 on October 6, 2026.
we're thrilled to announce that the MCP Toolbox Java SDK has officially reached version 1.0.
- The v1.0 release introduces a transport layer abstraction and HttpMcpTransport.
We introduced a clean transport layer abstraction alongside HttpMcpTransport.
- Client authentication is decoupled using CredentialsProvider and AuthMethods classes.
client authentication is now decoupled using CredentialsProvider and AuthMethods classes.
- Built-in detection warns users at runtime when credentials travel over plaintext HTTP.
Added built-in detection that warns you at runtime when credentials are about to travel over a plaintext HTTP connection.