release: 0.117.0

[kernel-internal]

Automated Release PR

0.117.0 (2026-10-02)

Features

• Invoke WebMCP tools with vault item fields (615cfaf)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

High Risk
Adds an API path that injects vaulted secrets into live browser WebMCP tools with possible page side effects and unredacted, untrusted tool output.

Overview
Release 0.117.0 bumps package/docs version strings and changelog; the functional change is SDK support for a new vault item operation.

Clients can call webmcp_invoke through VaultItemPerformOperationParams (OfWebmcpInvoke), supplying browser session ID, discovered tool_ref/page_url, public input with null slots, and bindings that map vault fields (via VaultWebmcpBindingParam JSON pointers) into those slots. Responses include a new WebmcpInvokeVaultItemOperationResult variant on VaultItemOperationResponseUnion (status, invocation ID, output, error text). Available-operation metadata on credential/card/wallet vault items now lists webmcp_invoke alongside existing ops.

^{Reviewed by Cursor Bugbot for commit 754f1bc. Bugbot is set up for automated code reviews on this repo. Configure here.}

[rgarcia]

Reviewed generated WebMCP invoke request/response types and release checks; approved for release.

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-go-sdk/releases/tag/v0.117.0 🌻