From eda547ee7b03edcbba0d4f47ad9b5312ed27b73c Mon Sep 17 00:00:00 2001 From: cliffhall Date: Sat, 11 Oct 2025 14:35:47 -0400 Subject: [PATCH 1/3] Fix duplicate OAuth redirect URIs * In auth.ts - add getter for redirect_uris which returns redirectUrl and debugRedirectUrl but de-duped - included comments that explains the problem and link to issue - in clientMetadata getter, - replace hardcoded array value with this..redirect_uris, so it will never contain duplicate uris Fixes #825 --- client/src/lib/auth.ts | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/client/src/lib/auth.ts b/client/src/lib/auth.ts index b9c941c5..23e21b6a 100644 --- a/client/src/lib/auth.ts +++ b/client/src/lib/auth.ts @@ -121,10 +121,16 @@ export class InspectorOAuthClientProvider implements OAuthClientProvider { return window.location.origin + "/oauth/callback/debug"; } + get redirect_uris() { + // Normally register both redirect URIs to support both normal and debug flows + // In debug subclass, redirectUrl may be the same as debugRedirectUrl, so remove duplicates + // See: https://github.com/modelcontextprotocol/inspector/issues/825 + return [...new Set([this.redirectUrl, this.debugRedirectUrl])]; + } + get clientMetadata(): OAuthClientMetadata { - // Register both redirect URIs to support both normal and debug flows return { - redirect_uris: [this.redirectUrl, this.debugRedirectUrl], + redirect_uris: this.redirect_uris, token_endpoint_auth_method: "none", grant_types: ["authorization_code", "refresh_token"], response_types: ["code"], From 8fab47668dcc45b26e808306615cc65e126a3cd9 Mon Sep 17 00:00:00 2001 From: olaservo Date: Sun, 12 Oct 2025 21:02:52 -0700 Subject: [PATCH 2/3] Bump version to 0.17.1 --- cli/package.json | 2 +- client/package.json | 2 +- package-lock.json | 16 ++++++++-------- package.json | 8 ++++---- server/package.json | 2 +- 5 files changed, 15 insertions(+), 15 deletions(-) diff --git a/cli/package.json b/cli/package.json index ddeb3b93..527b0035 100644 --- a/cli/package.json +++ b/cli/package.json @@ -1,6 +1,6 @@ { "name": "@modelcontextprotocol/inspector-cli", - "version": "0.17.0", + "version": "0.17.1", "description": "CLI for the Model Context Protocol inspector", "license": "MIT", "author": "Anthropic, PBC (https://anthropic.com)", diff --git a/client/package.json b/client/package.json index 6881c1f7..a206816a 100644 --- a/client/package.json +++ b/client/package.json @@ -1,6 +1,6 @@ { "name": "@modelcontextprotocol/inspector-client", - "version": "0.17.0", + "version": "0.17.1", "description": "Client-side application for the Model Context Protocol inspector", "license": "MIT", "author": "Anthropic, PBC (https://anthropic.com)", diff --git a/package-lock.json b/package-lock.json index 405c3d3b..373f0790 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "@modelcontextprotocol/inspector", - "version": "0.17.0", + "version": "0.17.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@modelcontextprotocol/inspector", - "version": "0.17.0", + "version": "0.17.1", "license": "MIT", "workspaces": [ "client", @@ -14,9 +14,9 @@ "cli" ], "dependencies": { - "@modelcontextprotocol/inspector-cli": "^0.17.0", - "@modelcontextprotocol/inspector-client": "^0.17.0", - "@modelcontextprotocol/inspector-server": "^0.17.0", + "@modelcontextprotocol/inspector-cli": "^0.17.1", + "@modelcontextprotocol/inspector-client": "^0.17.1", + "@modelcontextprotocol/inspector-server": "^0.17.1", "@modelcontextprotocol/sdk": "^1.18.0", "concurrently": "^9.2.0", "node-fetch": "^3.3.2", @@ -47,7 +47,7 @@ }, "cli": { "name": "@modelcontextprotocol/inspector-cli", - "version": "0.17.0", + "version": "0.17.1", "license": "MIT", "dependencies": { "@modelcontextprotocol/sdk": "^1.18.0", @@ -70,7 +70,7 @@ }, "client": { "name": "@modelcontextprotocol/inspector-client", - "version": "0.17.0", + "version": "0.17.1", "license": "MIT", "dependencies": { "@modelcontextprotocol/sdk": "^1.18.0", @@ -11875,7 +11875,7 @@ }, "server": { "name": "@modelcontextprotocol/inspector-server", - "version": "0.17.0", + "version": "0.17.1", "license": "MIT", "dependencies": { "@modelcontextprotocol/sdk": "^1.18.0", diff --git a/package.json b/package.json index ae9b73d6..3bda0c1f 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@modelcontextprotocol/inspector", - "version": "0.17.0", + "version": "0.17.1", "description": "Model Context Protocol inspector", "license": "MIT", "author": "Anthropic, PBC (https://anthropic.com)", @@ -47,9 +47,9 @@ "check-version": "node scripts/check-version-consistency.js" }, "dependencies": { - "@modelcontextprotocol/inspector-cli": "^0.17.0", - "@modelcontextprotocol/inspector-client": "^0.17.0", - "@modelcontextprotocol/inspector-server": "^0.17.0", + "@modelcontextprotocol/inspector-cli": "^0.17.1", + "@modelcontextprotocol/inspector-client": "^0.17.1", + "@modelcontextprotocol/inspector-server": "^0.17.1", "@modelcontextprotocol/sdk": "^1.18.0", "concurrently": "^9.2.0", "node-fetch": "^3.3.2", diff --git a/server/package.json b/server/package.json index 55632fe1..50711f2c 100644 --- a/server/package.json +++ b/server/package.json @@ -1,6 +1,6 @@ { "name": "@modelcontextprotocol/inspector-server", - "version": "0.17.0", + "version": "0.17.1", "description": "Server-side application for the Model Context Protocol inspector", "license": "MIT", "author": "Anthropic, PBC (https://anthropic.com)", From 266abf422c4fab9f50a8ccb6748ec16814058cff Mon Sep 17 00:00:00 2001 From: Anton Pidkuiko MacBook Date: Tue, 14 Oct 2025 15:26:31 +0100 Subject: [PATCH 3/3] fix: lock get-intrinsic to 1.3.0 to avoid generator-function dependency Add npm override to lock get-intrinsic to version 1.3.0, preventing upgrades to 1.3.1 which requires the generator-function package. The generator-function package is not available in Anthropic's internal Artifactory, causing installation failures when users run `npx @modelcontextprotocol/inspector` and npm resolves to get-intrinsic@1.3.1. This override ensures all installations use get-intrinsic@1.3.0 which does not have the generator-function dependency. --- package.json | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package.json b/package.json index 3bda0c1f..01f5cc58 100644 --- a/package.json +++ b/package.json @@ -71,6 +71,9 @@ "rimraf": "^6.0.1", "typescript": "^5.4.2" }, + "overrides": { + "get-intrinsic": "1.3.0" + }, "engines": { "node": ">=22.7.5" },