Replaces the Client/Server subclassing from the v2 migration with direct Protocol extension, now that the SDK exports Protocol from the client package root. This restores the v1 wire contract on the iframe channel: ui/initialize is the first and only handshake, so deployed hosts keep working unchanged. Deleted with the double handshake: the inner MCP initialize round-trip and its pinned protocol version, the contentless inner capabilities and their retro-registration plumbing, the oninitialized defineProperty shadow, and the getCapabilities/getHostCapabilities split (v1 getCapabilities restored). Tests pin the wire order and assert no MCP initialize is sent in either direction. Note: package.json overrides point the SDK packages at locally built tarballs carrying the Protocol export; replace with published versions before any upstream PR.
4.8 KiB
MCP Apps SDK
Project Overview
MCP Apps SDK (@modelcontextprotocol/ext-apps) enables MCP servers to display interactive UIs in conversational clients.
Key abstractions:
- View - UI running in an iframe, uses
Appclass withPostMessageTransportto communicate with host - Host - Chat client embedding the iframe, uses
AppBridgeclass to proxy MCP requests - Server - MCP server that registers tools/resources with UI metadata
Specification (stable): specification/2026-01-26/apps.mdx
Commands
# Install dependencies
npm install
# Build the SDK only (generates schemas + bundles, does not build examples)
npm run build
# Build everything (SDK + all examples)
npm run build:all
# Type check + build a single example
npm run --workspace examples/<example-name> build
# Run all examples (starts server at http://localhost:8080)
npm start
# Run E2E tests (primary testing mechanism - starts examples server automatically)
npm run test:e2e
# Run unit tests (E2E tests have broader coverage; unit tests cover specific modules)
npm test
# Check JSDoc comment syntax and `{@link}` references
npm exec typedoc -- --treatValidationWarningsAsErrors --emit none
# Regenerate package-lock.json
# Note: repo .npmrc pins registry to npmjs.org, so a plain `npm i` is safe even
# if your global npm config points elsewhere. The Docker step below is optional
# — it locks linux-amd64 optionalDependencies (sharp, rollup, bun) for CI.
rm -fR package-lock.json node_modules && \
docker run --rm -it --platform linux/amd64 -v $PWD:/src:rw -w /src node:latest npm i && \
rm -fR node_modules && \
npm i --cache=~/.npm-mcp-apps --registry=https://registry.npmjs.org/
Architecture
SDK Entry Points
@modelcontextprotocol/ext-apps- Main SDK for Apps (Appclass,PostMessageTransport)@modelcontextprotocol/ext-apps/react- React hooks (useApp,useHostStyleVariables, etc.)@modelcontextprotocol/ext-apps/app-bridge- SDK for hosts (AppBridgeclass)@modelcontextprotocol/ext-apps/server- Server helpers (registerAppTool,registerAppResource)
Key Source Files
src/app.ts-Appsubclasses the base MCP SDKProtocol, handles View initialization, tool calls, and messagingsrc/app-bridge.ts-AppBridgesubclasses the base MCP SDKProtocolfor the iframe channel and proxies through a separate outerClientsrc/server/index.ts- Helpers for MCP servers to register tools/resources with UI metadatasrc/types.ts- Protocol types re-exported fromspec.types.tsand Zod schemas fromgenerated/schema.ts(auto-generated during build)src/message-transport.ts-PostMessageTransportfor iframe communicationsrc/react/- React hooks:useApp,useHostStyles,useAutoResize,useDocumentTheme
Protocol Flow
View (App/Protocol) <--PostMessageTransport--> Host (AppBridge/Protocol) <--separate MCP Client--> MCP Server
- Host creates iframe with view HTML
- View creates
Appinstance and callsconnect()withPostMessageTransport - View sends
ui/initialize(the only handshake on the iframe channel) and receives authoritative Apps capabilities and context - Host sends
sendToolInput()with tool arguments after initialization - View can call server tools via
app.callServerTool()or send messages viaapp.sendMessage() - Host sends
sendToolResult()when tool execution completes - Host calls
teardownResource()before unmounting iframe
Documentation
JSDoc @example tags should pull type-checked code from companion .examples.ts files (e.g., app.ts → app.examples.ts). Use ```ts source="./file.examples.ts#regionName" fences referencing //#region regionName blocks; region names follow exportedName_variant or ClassName_methodName_variant pattern (e.g., useApp_basicUsage, App_hostCapabilities_checkAfterConnection). For whole-file inclusion (any file type), omit the #regionName. Run npm run sync:snippets to sync.
Standalone docs in docs/ (listed in typedoc.config.mjs projectDocuments) can also have type-checked companion .ts/.tsx files using the same pattern.
Full Examples
Uses npm workspaces. Full examples in examples/ are separate packages:
basic-server-*- Starter templates (vanillajs, react, vue, svelte, preact, solid). Use these as the basis for new examples.basic-host- Reference host implementation- Other examples showcase specific features (charts, 3D, video, etc.)
Claude Code Plugin
The plugins/mcp-apps/ directory contains a Claude Code plugin distributed via the plugin marketplace. It provides the following Claude Code skills files:
plugins/mcp-apps/skills/create-mcp-app/SKILL.md— for creating an MCP Appplugins/mcp-apps/skills/migrate-oai-app/SKILL.md— for migrating an app from the OpenAI Apps SDK to the MCP Apps SDK