diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index 7c6f5dd8..2dcb4f9c 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -18,6 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
 
     steps:
       - uses: actions/checkout@v6
@@ -39,8 +40,6 @@ jobs:
             PATHS_RELEASED='[\".\", \"packages/mcp-server\"]'
           fi
           yarn tsn scripts/publish-packages.ts "{ \"paths_released\": \"$PATHS_RELEASED\" }"
-        env:
-          NPM_TOKEN: ${{ secrets.HYPERSPELL_NPM_TOKEN || secrets.NPM_TOKEN }}
 
       - name: Upload MCP Server DXT GitHub release asset
         run: |
diff --git a/.github/workflows/release-doctor.yml b/.github/workflows/release-doctor.yml
index f9ea8493..16f6b559 100644
--- a/.github/workflows/release-doctor.yml
+++ b/.github/workflows/release-doctor.yml
@@ -17,6 +17,4 @@ jobs:
       - name: Check release environment
         run: |
           bash ./bin/check-release-environment
-        env:
-          NPM_TOKEN: ${{ secrets.HYPERSPELL_NPM_TOKEN || secrets.NPM_TOKEN }}
 
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 47582228..2e04e49c 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.32.0"
+  ".": "0.32.1"
 }
diff --git a/.stats.yml b/.stats.yml
index 664d1db2..bb13c776 100644
--- a/.stats.yml
+++ b/.stats.yml
@@ -1,4 +1,4 @@
 configured_endpoints: 23
 openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/hyperspell%2Fhyperspell-ca07e6605f61ae00e12be55df648b38e467a31d505fdeec7879c8a9ea9e1b390.yml
 openapi_spec_hash: 25915d4fcda54adbd8a7f106d8af2d65
-config_hash: 983708fc30c86269c2149a960d0bfec1
+config_hash: fd3005a8f140e5baadd3d25b3c9cd79f
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a5e2da23..bb79c277 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.32.1 (2026-03-02)
+
+Full Changelog: [v0.32.0...v0.32.1](https://github.com/hyperspell/node-sdk/compare/v0.32.0...v0.32.1)
+
+### Chores
+
+* trusted publishing ([b36b6c7](https://github.com/hyperspell/node-sdk/commit/b36b6c739997fadbd80e1ccfd4011bd157fe06b0))
+
 ## 0.32.0 (2026-03-01)
 
 Full Changelog: [v0.31.0...v0.32.0](https://github.com/hyperspell/node-sdk/compare/v0.31.0...v0.32.0)
diff --git a/bin/check-release-environment b/bin/check-release-environment
index e4b6d58e..6b43775a 100644
--- a/bin/check-release-environment
+++ b/bin/check-release-environment
@@ -2,10 +2,6 @@
 
 errors=()
 
-if [ -z "${NPM_TOKEN}" ]; then
-  errors+=("The NPM_TOKEN secret has not been set. Please set it in either this repository's secrets or your organization secrets")
-fi
-
 lenErrors=${#errors[@]}
 
 if [[ lenErrors -gt 0 ]]; then
diff --git a/bin/publish-npm b/bin/publish-npm
index 45e8aa80..3d05c0bd 100644
--- a/bin/publish-npm
+++ b/bin/publish-npm
@@ -2,7 +2,12 @@
 
 set -eux
 
-npm config set '//registry.npmjs.org/:_authToken' "$NPM_TOKEN"
+if [[ ${NPM_TOKEN:-} ]]; then
+  npm config set '//registry.npmjs.org/:_authToken' "$NPM_TOKEN"
+elif [[ ! ${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-} ]]; then
+  echo "ERROR: NPM_TOKEN must be set if not running in a Github Action with id-token permission"
+  exit 1
+fi
 
 yarn build
 cd dist
@@ -57,5 +62,9 @@ else
   TAG="latest"
 fi
 
+# Install OIDC compatible npm version
+npm install --prefix ../oidc/ npm@11.6.2
+
 # Publish with the appropriate tag
-yarn publish --tag "$TAG"
+export npm_config_registry='https://registry.npmjs.org'
+../oidc/node_modules/.bin/npm publish --tag "$TAG"
diff --git a/package.json b/package.json
index 5fc34580..43a06f58 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "hyperspell",
-  "version": "0.32.0",
+  "version": "0.32.1",
   "description": "The official TypeScript library for the Hyperspell API",
   "author": "Hyperspell <hello@hyperspell.com>",
   "types": "dist/index.d.ts",
diff --git a/packages/mcp-server/manifest.json b/packages/mcp-server/manifest.json
index a10efcdd..9c4e49e0 100644
--- a/packages/mcp-server/manifest.json
+++ b/packages/mcp-server/manifest.json
@@ -1,7 +1,7 @@
 {
   "dxt_version": "0.2",
   "name": "hyperspell-mcp",
-  "version": "0.32.0",
+  "version": "0.32.1",
   "description": "The official MCP Server for the Hyperspell API",
   "author": {
     "name": "Hyperspell",
diff --git a/packages/mcp-server/package.json b/packages/mcp-server/package.json
index 6004bf72..bf28a103 100644
--- a/packages/mcp-server/package.json
+++ b/packages/mcp-server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "hyperspell-mcp",
-  "version": "0.32.0",
+  "version": "0.32.1",
   "description": "The official MCP Server for the Hyperspell API",
   "author": "Hyperspell <hello@hyperspell.com>",
   "types": "dist/index.d.ts",
diff --git a/packages/mcp-server/src/server.ts b/packages/mcp-server/src/server.ts
index 88f81b80..95fc3b7f 100644
--- a/packages/mcp-server/src/server.ts
+++ b/packages/mcp-server/src/server.ts
@@ -21,7 +21,7 @@ export const newMcpServer = async (stainlessApiKey: string | undefined) =>
   new McpServer(
     {
       name: 'hyperspell_api',
-      version: '0.32.0',
+      version: '0.32.1',
     },
     {
       instructions: await getInstructions(stainlessApiKey),
diff --git a/src/version.ts b/src/version.ts
index b413d151..ab5165fb 100644
--- a/src/version.ts
+++ b/src/version.ts
@@ -1 +1 @@
-export const VERSION = '0.32.0'; // x-release-please-version
+export const VERSION = '0.32.1'; // x-release-please-version