Perforce

Perforce BlazeMeter 4.1: Test MCP Servers and Reduce Taurus Cloud Exposure

Perforce BlazeMeter 4.1 enables JMeter teams to check, automate, and load test MCP servers over STDIO, SSE, and Streamable HTTP. It also adds reduced Taurus Cloud image choices and addresses three identified high-severity vulnerability entries in Taurus Cloud 2.4.538-reduced.

By Chris CarpenterBlazeMeterTest AutomationDevSecOps
perforce-logo.svgPerforce BlazeMeter Logo Transparent.png
Perforce BlazeMeter 4.1: Test MCP Servers and Reduce Taurus Cloud Exposure cover graphic
Back to Perforce release updates
Release facts
VendorPerforce
ProductBlazeMeter
Version4.1
Vendor release dateOctober 11, 2026
Published by MeritoOctober 12, 2026
Upgrade pathThe empty Taurus Cloud image supports only selected executors and may require internet access or a custom executor download URL.
Vendor release notesBlazeMeter 4.1 release notes
Release historyBlazeMeter release history

The BlazeMeter MCP Plugin for JMeter v1.0 enables performance teams to check, automate, and load test MCP servers over STDIO, SSE, and Streamable HTTP. Released on October 11, 2026, BlazeMeter 4.1 also introduces reduced Taurus Cloud image choices and addresses identified security vulnerabilities.

MCP server testing in JMeter

The BlazeMeter MCP Plugin for JMeter v1.0 brings MCP server testing into JMeter. Teams can use existing JMeter test plans, assertions, listeners, and thread groups when testing MCP servers through STDIO, SSE, or Streamable HTTP.

This change applies to teams using JMeter for performance testing that need to exercise MCP server interactions within familiar test-plan structures.

JMeter-only and empty Taurus Cloud images

Taurus Cloud now offers two image options intended to reduce bundled third-party executors:

  • A JMeter-only Taurus Cloud image.
  • An empty image that loads supported executors when a test starts.

The empty image supports only selected executors. It may need internet access or a custom executor download URL. Reducing unused executors can reduce CVE findings for components an organization does not use.

Taurus Cloud vulnerability fixes

Taurus Cloud version 2.4.538-reduced applies required fixes and removes affected components for three identified high-severity vulnerability entries:

  • CVE-2026-80212 in resolv for Ruby.
  • CVE-2026-84304 in google.golang.org/grpc/internal/transport for k6.
  • CVE-2026-84304 in google.golang.org/grpc/mem for k6.

Based on the official Perforce release notes.

How Merito helps

Merito can help teams adopt and govern these BlazeMeter capabilities, including Taurus Cloud image selection, MCP test design, and test evidence expectations. See Managed Services.

Merito is an authorized Perforce reseller and services partner. Our Perforce BlazeMeter team helps you adopt the 4.1 changes, with implementation services to configure them for your environment and training and enablement to bring your teams up to speed.

About BlazeMeter

BlazeMeter licenses, renewals, upgrades and implementation are available through Merito, an authorized Perforce reseller and services partner.

Frequently Asked Questions