CAST HIGHLIGHT - MCP Server release notes

Version 1.0.0 of Ask CAST (CAST Highlight's MCP server) is now available from our different SaaS platforms:

• DEMO: https://demo.casthighlight.com/mcp
• RPA: https://rpa.casthighlight.com/mcp
• CLOUD: https://cloud.casthighlight.com/mcp
• APP: https://app.casthighlight.com/mcp

The MCP server can also be locally deployed, available from CAST Extend: https://extend.castsoftware.com/#/extension?id=com.castsoftware.highlight.mcpserver&version=1.0.0

One clarification though: As our SaaS environments (demo, rpa, cloud, app) are protected by F5 (web app firewall), local MCP servers can't access our SaaS environments. Local MCP servers are rather targeting HL on-premise customers.

For more information on our SaaS MCP servers, refer to this documentation website where configurations are available for most of AI assistants: https://doc.casthighlight.com/mcp.

• Introduced a catalog-based discovery model:
  • list_functions to discover available capabilities
  • get_portfolio_search_function_syntax to inspect exact parameters and usage
• Centralized execution through a single MCP dispatcher, reducing tool sprawl and making the server easier to maintain.
• Added a REST endpoint catalog to document and explore API coverage, including wrapped and unwrapped endpoints.
• Improved caching and response handling with disk-backed, content-addressed downloads and paginated previews.
• Added follow-up tool suggestions to guide users toward the next relevant action.
• Strengthened deployment security 

Portfolio Tools

• list_subdomains – List child domains and optionally expand the applications they contain.
• list_domain_tags – List tags defined on the current domain, with optional filtering.
• get_domain_vulnerabilities_aggregated – Return domain-level aggregated CVE criticality counts.
• list_vuln_aggr_by_app – List aggregated vulnerability data for all applications in the current domain.
• get_vuln_aggr_by_app – Return the aggregated vulnerability data for one specific application.
• get_domain_recommendation_catalog – Return the recommendation catalog for the current domain, with filters.
• get_domain_recommendation_by_app – Return a filtered domain recommendation view using portfolio criteria.
• list_portfolio_recommendations – List portfolio-level recommendations generated from the recommendation catalog.

Application Tools

• get_cloud_containerization_by_app – Retrieve cloud containerization blockers and related details for one application.
• get_cloud_recommendation_by_app – Retrieve cloud migration recommendations for one application.
• get_green_data_by_app – Retrieve Green scoring data and estimator details for one application.
• reinitialize_application_results – Refresh cached analysis results for a specific application after a scan or rescan.

Optimisation

• Dedicated volumes creation and rights, gaining performance over the standard deploy and faster read/write

Documentation

• Updated global documentation 
• Proper up and ready test API for deployment  
  • curl http://localhost:5185/rest/ready/
• Updating Agent's recommendations 
• Adding Copilot configuration