Securing MCP Servers with Spring AI

Model Context Protocol, or MCP for short, has taken over the AI world. If you've been following our blog, you've probably read the introduction to the topic, Connect Your AI to Everything: Spring AI's MCP Boot Starters. The security aspects of MCP have been evolving fast, and the latest version of the spec is getting more and more support from the ecosystem. To meet the needs of Spring users, we have incubated a dedicated project on Github: spring-ai-community/mcp-security. This week, we pushed our first releases, and you can now add them to your Spring AI 1.1.x-based applications. In this…
This Week in Spring: September 30th, 2025
Hi, Spring fans! As I write this I am about to board a flight for Colorado for the amazing Dev2Next conference! I'll be in Antwerp, Beglium for the amazing Devoxx event next week, and I'll be speaking at the Amsterdam JUG with James Ward on the Thursday after that, too! If you're around, be sure to say Hi!
- I looked at some of the amazing new resilience methods in Spring Framework 7
- here's a nice talk on how to continuously align and ugprade your Spring dependencies, recorded at this year's Spring IO 2025 event in beautiful Barcelona, Spain!
- I love this! Check out some of the prelimary details of the MCP Security community project for Spring AI
- for more on that, check out the Securing MCP Servers with Spring AI
- I love this blog called The State of HTTP Clients in Spring
- On last week's installment of A Bootiful Podcast, I talked Spring Batch lead Mahmoud Ben Hassine
- Interesting! Udemy has a course: …
The state of HTTP clients in Spring
This is a new blog post in the Road to GA series, this time exploring the new capabilities of our HTTP clients.
This is also a good time to reflect on the state of HTTP clients in Spring, so we will use this opportunity to explain an important announcement: we are officially deprecating RestTemplate
.
Upcoming RestClient features
RestClient has been introduced in Spring Framework 6.1 and evolved in the 6.x line. In the upcoming 7.0 major version we are keeping up the pace with a round of new features.
API Versioning
Spring @Controller
now supports the API Versioning concept to better implement different generations of your REST API within a single application.
This feature is also supported on the client side, by using an ApiVersionInserter
…
A Bootiful Podcast: Spring Batch lead Mahmoud Ben Hassine
Hi, Spring fans! In this installment we talk to the legendary lead of the Spring Batch project, Mahmoud Ben Hassine, about the latest-and-greatest in Spring Batch in the Spring Boot 4 generation.
This Week in Spring - September 23rd, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm preparing my talks for several amazing shows including: Commit Your Code conference in Plano, Texas (starting tomorrow); Dev2Next in Colorado; Devoxx Belgium in Antwerp, Belgium; and CloudFoundry Days in Germany. So much good stuff comin' up! And so much good stuff in the community this week, as well, so let's dive right into it!
- I love this! One of my favorite new features in Spring Framework 7 is the new HTTP Service Clients
- there's so much good stuff coming in Spring AI 1.0.2 and improved MCP support
- Spring Modulith 2.0 M3 released. This new release includes updated event publication repository implementations for JPA, Jackson 3 support, and so much more.
- in last week's installment of A Bootiful Podcast, I talked to the amazing Spring Cloud lead Spencer Gibb
- Spring Boot 3.4.10 is available now
- Spring Boot 3.5.6 available now
- Spring Boot 4.0.0 M3 available now
- Spring AI 1.0.2 is available now
- …
HTTP Service Client Enhancements
In this 3rd blog post of the Road to GA series that’s highlighting major features within the Spring portfolio for the next major versions to be released in November we’ll have a look at new features for HTTP service clients, which are a collaborative effort across several Spring projects.
Introduction
Spring Framework 6 introduced the ability to define an HTTP service through a Java interface with @HttpExchange
-annotated methods. For example:
public interface MilestoneService {
@GetExchange("/repos/{org}/{repo}/milestones")
List<Milestone> getMilestones(@PathVariable String org…
Spring AI 1.1.0-M2 Available Now: Enhanced Model Context Protocol Support
On behalf of the Spring AI engineering team and everyone who has contributed, I'm happy to announce that Spring AI 1.1.0-M2
has been released and is now available from Maven Central.
This milestone release focuses primarily on enhanced Model Context Protocol (MCP) support, incorporating critical fixes and improvements from the MCP Java SDK v0.13.0 release, along with significant updates across many areas of Spring AI.
Release Summary
This release includes 56 improvements, bug fixes, and documentation updates. The primary focus areas include:
- Model Context Protocol Enhancements: Updated to MCP Java SDK v0.13.1 with mcp-annotations v0.4.1 and protocol version 2025-06-18 support
- MCP Integration Fixes: Resolved critical stateless server registration issues with AOT compilation support
- New Features: 16 new capabilities and functionality additions
- Stability: 12 bug fixes addressing community-reported issues
- Documentation: 6 improvements including comprehensive MCP getting started guide
- Other Improvements: 22 enhancements including performance optimizations and dependency upgrades …
Spring Modulith 2.0 M3 released
I am pleased to announce the availability of Spring Modulith 2.0 M3. It release ships the following new features:
- Updated event publication repository implementation for JPA #1375
- Support for serialized event publication externalization #1370
- Jackson 3 support for event publication serialization and externalization #1369, #1364
- More lenient out-of-the-box verification for Hexagonal Architecture #1366
- Upgrade to Spring Boot 4.0 M3 #1376
- Upgrade to jMolecules 2025 RC5 #1377
Find more details about the releases in the full changelog.
A Bootiful Podcast: Spring Cloud lead Spencer Gibb, live from SpringOne 2025
Hi, Spring fans! In this installment, we talk to the legendary lead of Spring Cloud and friend to the community, Spencer Gibb! This was recorded live from Las Vegas, NV, at the fantastic SpringOne 2025 event!