diff --git a/.changeset/computer-use-remembered-approvals.md b/.changeset/computer-use-remembered-approvals.md
index 50ab5b6d7e..126dc98113 100644
--- a/.changeset/computer-use-remembered-approvals.md
+++ b/.changeset/computer-use-remembered-approvals.md
@@ -4,7 +4,6 @@
 "@executor-js/plugin-mcp": patch
 "@executor-js/api": patch
 "@executor-js/react": patch
-"@executor-js/host-mcp": patch
 "@executor-js/cloudflare": patch
 "executor": patch
 ---
diff --git a/.changeset/mcp-passthrough-mode.md b/.changeset/mcp-passthrough-mode.md
index 9008960f31..53b72ebafa 100644
--- a/.changeset/mcp-passthrough-mode.md
+++ b/.changeset/mcp-passthrough-mode.md
@@ -1,7 +1,7 @@
 ---
-"@executor-js/sdk": minor
-"@executor-js/execution": minor
-"executor": minor
+"@executor-js/sdk": patch
+"@executor-js/execution": patch
+"executor": patch
 ---
 
 Add a search and invoke MCP mode (`?mode=passthrough`, `executor mcp --mode passthrough`). Search returns bounded pages of matching tool IDs and input schemas. Invoke validates arguments and runs the selected tool, with native client approval and workspace blocks enforced. The MCP catalog stays at two tools regardless of integration count.
diff --git a/.changeset/mcp-session-executor-leak.md b/.changeset/mcp-session-executor-leak.md
index e8419ec356..ea54575e20 100644
--- a/.changeset/mcp-session-executor-leak.md
+++ b/.changeset/mcp-session-executor-leak.md
@@ -1,5 +1,4 @@
 ---
-"@executor-js/host-mcp": patch
 "@executor-js/api": patch
 "executor": patch
 ---