inspector

modelcontextprotocol/inspector

Watch

Fork 0

Commit graph

66763e85ee

Merge pull request #2100 from modelcontextprotocol/v2/fix/2056-app-ui-domain Cliff Hall 2026-08-24 08:59:18 -04:00
6011d4de03

fix(web): bound retained app documents by size; correct the cookie claim cliffhall 2026-08-24 01:06:12 -04:00
73bf0a2522

docs: distinguish a failed publish from an unreachable one cliffhall 2026-08-24 00:48:49 -04:00
bb3ba91b8a

fix(web): guard the app-origin port and the trusted-origin grant cliffhall 2026-08-24 00:35:21 -04:00
80f76e365e

test(web): raise the theme-flip waitFor budget cliffhall 2026-08-24 00:17:05 -04:00
fafc8367b8

fix(web): move the app origin off 6276, bound the publish route cliffhall 2026-08-24 00:07:15 -04:00
fa441da85f

fix(web): harden the app-origin paths and correct three docs cliffhall 2026-08-23 23:48:30 -04:00
41c063b9ec

docs: add the dedicated-origin showcase server to the README cliffhall 2026-08-23 23:22:08 -04:00
8e8c1bbad9

test(web): prove the dedicated app origin end to end cliffhall 2026-08-23 23:21:41 -04:00
ec40cf5531

feat(web): honor _meta.ui.domain with a dedicated app origin cliffhall 2026-08-23 23:03:55 -04:00
5e43263b09

Merge branch 'v2/main' into v2/chore/2003-pack-verify-app-render Cliff Hall 2026-08-24 08:45:35 -04:00
5de0b8a5ca

Merge pull request #2106 from modelcontextprotocol/v2/fix/2064-csp-drop-warning Cliff Hall 2026-08-24 08:45:12 -04:00
684bde5ba5

Merge branch 'v2/main' into v2/fix/2064-csp-drop-warning Cliff Hall 2026-08-24 08:28:08 -04:00
4d5ff954b9

Merge branch 'v2/main' into v2/chore/2003-pack-verify-app-render Cliff Hall 2026-08-24 08:26:43 -04:00
c0ad49f8a3

Merge pull request #2105 from modelcontextprotocol/v2/fix/2051-opaque-token-replay Cliff Hall 2026-08-24 08:22:37 -04:00
9bf2c0c97e docs: mirror the catalog-isolation rule's widened scope into copilot-instructions (#2003) cliffhall 2026-08-24 07:49:15 -04:00
deca2de604 fix(auth): require JWT shape before trusting exp as proof of validity cliffhall 2026-08-24 07:46:10 -04:00
17c33080f9 chore(ci): render an MCP App from the installed tarball in pack:verify (#2003) cliffhall 2026-08-24 07:44:58 -04:00
c20fce9ba2 docs(spec): align mid-session auth spec with the token_expired predicate cliffhall 2026-08-24 07:35:40 -04:00
99f8ccde18 docs(web): describe the accepted subset, not "parses as a source expression" cliffhall 2026-08-24 01:20:18 -04:00
268bfa1085 fix(web): state the expected shape when dropping a CSP source (#2064) cliffhall 2026-08-24 01:02:02 -04:00
d41e4e1dd7 fix(auth): don't answer token_expired from an unknowable local expiry cliffhall 2026-08-24 00:59:02 -04:00
a92a73003b

Merge pull request #2099 from modelcontextprotocol/v2/fix/2067-proxy-undici Cliff Hall 2026-08-23 23:58:15 -04:00
4faaf74694

Merge branch 'v2/main' into v2/fix/2067-proxy-undici Cliff Hall 2026-08-23 23:57:53 -04:00
eac849be44

Merge pull request #2103 from modelcontextprotocol/v2/chore/2102-remove-claude-workflow Cliff Hall 2026-08-23 23:54:06 -04:00
f6cff76aed

Merge branch 'v2/main' into v2/chore/2102-remove-claude-workflow Cliff Hall 2026-08-23 23:49:45 -04:00
5a9b7c4e7b chore: remove the Claude Code GitHub Actions workflow cliffhall 2026-08-23 23:39:43 -04:00
531cf84e60 Merge branch 'v2/main' into v2/fix/2067-proxy-undici cliffhall 2026-08-23 23:34:07 -04:00
7682263321

Merge pull request #2098 from modelcontextprotocol/v2/fix/2055-ui-resource-meta-ui Cliff Hall 2026-08-23 23:25:55 -04:00
85abfd4a28

chore: bump version to 1.0.2 (#2081) 1.0.2 Cliff Hall 2026-08-23 23:22:13 -04:00
0681500e8f

chore: deny esbuild and fsevents install scripts (#2077) Cliff Hall 2026-08-23 23:13:42 -04:00
ab92bab5aa fix(test): repair the v2/main typecheck break from a semantic conflict cliffhall 2026-08-23 23:10:12 -04:00
e31a20eec7 test(proxy): isolate proxy env per file; word the guard failure by candidate source cliffhall 2026-08-23 23:00:28 -04:00
d3085247ce

fix(deps): clear remaining npm audit advisories (#2075) Cliff Hall 2026-08-23 22:51:42 -04:00
5eba105c67

Merge branch 'v2/main' into v2/fix/2055-ui-resource-meta-ui Cliff Hall 2026-08-23 22:51:16 -04:00
21cf1bd6c3 test(tui): drop an unjustified double cast; fix a stale mock comment cliffhall 2026-08-23 22:43:38 -04:00
91e08067dc test(proxy): cover the CLI and TUI bottom-of-stack wiring cliffhall 2026-08-23 22:32:27 -04:00
acf9ff94af docs(web): state that the listing lookup is best-effort cliffhall 2026-08-23 22:20:17 -04:00
96f96aad41 fix(proxy): preserve fetch semantics through the proxy adapter cliffhall 2026-08-23 22:18:43 -04:00
53943c2ef8 fix(web): let a malformed _meta.ui stop the carrier lookup cliffhall 2026-08-23 22:05:23 -04:00
dbe95e58ed fix(guard): derive must-not-bundle candidates independently of external cliffhall 2026-08-23 22:02:54 -04:00
e2a88d49dd fix(web): restore the read result envelope as a metadata carrier cliffhall 2026-08-23 21:50:36 -04:00
2f83549bc3 test(proxy): isolate proxy env per suite; fail the bundle guard closed cliffhall 2026-08-23 21:48:06 -04:00
286dd86f6b refactor(web): type the permissions approver as the boundary it is cliffhall 2026-08-23 21:36:06 -04:00
9a084f49e5 fix(proxy): proxy /api/fetch, and detect entry-inlined externals cliffhall 2026-08-23 21:33:31 -04:00
45785a0aa6 fix(web): screen app-supplied sandbox permissions before granting them cliffhall 2026-08-23 21:22:14 -04:00
d90a955164 fix(proxy): route through undici's own fetch and keep undici external cliffhall 2026-08-23 21:03:31 -04:00
9f8dc82a9a test(web): drop the double casts from the resources hook mock cliffhall 2026-08-23 21:07:25 -04:00
a1c00e51a8 test(web): cover the App-level listed-resource metadata wiring cliffhall 2026-08-23 20:55:35 -04:00
8b9839cc93

Merge pull request #2087 from modelcontextprotocol/v2/fix/1914-surface-post-add-refresh-failure Cliff Hall 2026-08-23 20:48:01 -04:00
b44c090144

Merge pull request #2094 from modelcontextprotocol/v2/feat/1910-complex-request-metadata Cliff Hall 2026-08-23 20:45:07 -04:00
0c989a0c34 fix(web): use the resources/list entry as the UI metadata fallback cliffhall 2026-08-23 20:42:06 -04:00
06c7985d5c fix(web): read MCP App UI resource metadata from _meta.ui cliffhall 2026-08-23 20:27:58 -04:00
bc433bbf72 fix: keep the object branch's __proto__ handling when filtering per key cliffhall 2026-08-23 20:18:38 -04:00
8f0c98cace

fix(deps): bump js-yaml overrides to patched 3.15.1 / 4.3.1 (#2073) Cliff Hall 2026-08-23 20:14:24 -04:00
56d8644032 fix: stop leaking metadata values into diagnostics, and salvage per key cliffhall 2026-08-23 20:03:37 -04:00
7f5992081e fix: reject non-finite numbers before they reach _meta cliffhall 2026-08-23 19:43:39 -04:00
b1996d1093 Merge branch 'v2/main' into v2/fix/1914-surface-post-add-refresh-failure cliffhall 2026-08-23 19:37:27 -04:00
129a435fd4 docs: say "safe integer" for progressToken, matching what the code enforces cliffhall 2026-08-23 19:31:50 -04:00
06c7334b24

Merge branch 'v2/main' into v2/feat/1910-complex-request-metadata Cliff Hall 2026-08-23 18:55:24 -04:00
fd1fa06cf5

Merge pull request #2088 from modelcontextprotocol/v2/feat/2082-file-secret-store-lock Cliff Hall 2026-08-23 18:46:54 -04:00
616dd9c196 fix: exclude undefined from _meta values, and cover the JSON worker cliffhall 2026-08-23 18:27:28 -04:00
89b01d01ff

Merge branch 'v2/main' into v2/feat/2082-file-secret-store-lock Cliff Hall 2026-08-23 18:09:04 -04:00
1eaebdaf63 test: assert the dropped-member warning by its binding, not its message cliffhall 2026-08-23 18:06:37 -04:00
167b9b4dab fix: validate every reserved _meta member against the SDK's own schema cliffhall 2026-08-23 17:54:26 -04:00
2aeec1728e

Merge branch 'v2/main' into v2/feat/1910-complex-request-metadata Cliff Hall 2026-08-23 17:53:25 -04:00
d459a08ec7

Merge pull request #2092 from modelcontextprotocol/v2/chore/2000-three-small-cleanups Cliff Hall 2026-08-23 17:51:21 -04:00
7f10fa971c fix: address the Copilot review of the Ace editor cliffhall 2026-08-23 17:36:43 -04:00
9bc6ce1a68

Merge branch 'v2/main' into v2/feat/2082-file-secret-store-lock Cliff Hall 2026-08-23 17:22:17 -04:00
d186f09e6c

Merge branch 'v2/main' into v2/chore/2000-three-small-cleanups Cliff Hall 2026-08-23 17:21:23 -04:00
75f9c51146 fix(web): update a fixture the merge brought in to the object metadata shape cliffhall 2026-08-23 16:56:53 -04:00
63f81151f5 test(web): stop the AppRenderer theme-flip test racing its MutationObserver cliffhall 2026-08-23 16:55:17 -04:00
ed799a0c0b feat(web): use the Ace editor for the request-metadata JSON cliffhall 2026-08-23 16:54:58 -04:00
b0ab6842aa

Merge branch 'v2/main' into v2/feat/1910-complex-request-metadata Cliff Hall 2026-08-23 16:53:27 -04:00
30113e9d97

Merge pull request #2091 from modelcontextprotocol/v2/fix/2089-pagination-rollback-baseline Cliff Hall 2026-08-23 16:50:54 -04:00
527b3f63e2

Merge branch 'v2/main' into v2/fix/1914-surface-post-add-refresh-failure Cliff Hall 2026-08-23 16:49:45 -04:00
bb15d2c6b2 docs: normalize emphasis markers in v2_servers_file.md (#2082) cliffhall 2026-08-23 16:37:32 -04:00
617ac7b4c2 docs: drop the Claude Desktop import from the out-of-scope list (#2082) cliffhall 2026-08-23 16:36:39 -04:00
ae9536b171 fix: log the rejected progressToken's type, not its value cliffhall 2026-08-23 14:19:48 -04:00
197e7aa401 fix(web): configure the client from the tracker at connect time cliffhall 2026-08-23 14:12:50 -04:00
85e4a29990 fix: redact secrets nested inside metadata in servers/show cliffhall 2026-08-23 14:03:40 -04:00
db84823262 fix(web): apply the whole live surface, and track write outcomes per server cliffhall 2026-08-23 13:56:36 -04:00
f3878f94a9 fix: widen the test recorder's metadata type and correct a stale comment cliffhall 2026-08-23 13:49:55 -04:00
e9dc0e5e5f fix: drop a schema-invalid _meta.progressToken instead of sending it cliffhall 2026-08-23 13:36:45 -04:00
ba633fc8d2 fix(web): seed the settings draft from the tracker, and don't re-apply a rejected one cliffhall 2026-08-23 13:36:21 -04:00
01572c31b9 docs: note that the CLI does not yet apply catalog metadata cliffhall 2026-08-23 13:20:17 -04:00
38d2fd279d fix(web): apply settled settings to the live client, and reconcile on modal failure cliffhall 2026-08-23 13:16:51 -04:00
0f628a8174 fix: address Copilot review on the _meta widening cliffhall 2026-08-23 13:13:04 -04:00
6b4bf68b8b fix(scripts): observe the final polling interval before declaring a timeout cliffhall 2026-08-23 13:02:38 -04:00
2fd6280cdb fix(web): reconcile a settled modal save, not just a settled toggle cliffhall 2026-08-23 12:57:00 -04:00
04b5e70a53 fix(a11y): make the form error color meet WCAG AA in both schemes cliffhall 2026-08-23 12:56:13 -04:00
31feed970c fix(auth): make the stuck-lock guidance conditional, not an instruction (#2082) cliffhall 2026-08-23 12:49:06 -04:00
9cade95fd0 test(scripts): kill the probe child on every path; document the helper cliffhall 2026-08-23 12:48:53 -04:00
a935de08dc fix(web): re-apply the write that settles after an overlapping one failed cliffhall 2026-08-23 12:40:15 -04:00
3a64ce7f4e refactor: move the JSON-object draft parser into utils cliffhall 2026-08-23 12:29:27 -04:00
edddc6c9cc fix(auth): hold the snapshot lock across the main lock's release (#2082) cliffhall 2026-08-23 12:26:52 -04:00
b33532c024 feat: allow complex JSON values in request _meta cliffhall 2026-08-23 12:23:40 -04:00
09b35489aa test(scripts): cover the readiness-timeout teardown path (#2000 review) cliffhall 2026-08-23 12:22:24 -04:00
2aa97c1833 fix(web): let a successful read supersede a rollback, and scope it to its server cliffhall 2026-08-23 12:16:22 -04:00
031991cc90 chore: three small cleanups from the v2.2.0 merge review cliffhall 2026-08-23 12:02:55 -04:00