Sam Morrow
6032170087
feat(server): add request-time OAuth scope challenges ( #1624 )
...
Conformance Tests / client-conformance (push) Has been cancelled
Conformance Tests / server-conformance (push) Has been cancelled
Deploy Docs / deploy-docs (push) Has been cancelled
Examples / examples (build + e2e) (push) Has been cancelled
/ build (push) Has been cancelled
/ test (20) (push) Has been cancelled
/ test (22) (push) Has been cancelled
/ test (24) (push) Has been cancelled
/ test-e2e (20) (push) Has been cancelled
/ test-e2e (22) (push) Has been cancelled
/ test-e2e (24) (push) Has been cancelled
/ test-runtimes (bun, 1.x) (push) Has been cancelled
/ test-runtimes (deno, v2.x) (push) Has been cancelled
Publish Any Commit / pkg-publish (push) Has been cancelled
Release / Version (push) Has been cancelled
Release / Publish (push) Has been cancelled
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
2026-09-16 16:51:56 +00:00
sanjibani
b65426158e
fix(client): let OAuth-derived Authorization override caller-supplied header ( #2475 )
...
Signed-off-by: sanjibani <18418553+sanjibani@users.noreply.github.com>
Co-authored-by: sanjibani <18418553+sanjibani@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-09-11 10:35:43 +03:00
claude[bot]
5ecc791d81
fix(codemod): only count real module specifiers in project-type inference ( #2765 )
...
Co-authored-by: Claude <noreply@anthropic.com>
2026-09-09 23:50:57 +03:00
Hugo Moreira
5119ee7fd7
fix: preserve exact OAuth resource indicators ( #2581 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-09-03 19:36:13 +03:00
LuckTerence
6fa42279fe
fix(client): surface underlying network error via Error.cause on probe failures ( #2657 ) ( #2726 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-09-03 17:32:08 +03:00
Bhavani Shankar Garikapati
dcc01028ff
feat(client): add DPoP (RFC 9449) sender-constrained token support ( #2629 )
...
Co-authored-by: Paul Carleton <paulc@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-31 18:00:18 +01:00
James Carman
70de0c8b56
fix: mirror params.taskId into Mcp-Name for tasks requests (SEP-2663) ( #2613 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-08-28 19:23:49 +03:00
Max
7b781ed4e2
fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length ( #2698 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
2026-08-25 14:23:40 +01:00
Sai Asish Y
3924de99df
fix(client/auth): propagate saveTokens errors after refresh ( #2053 )
...
Signed-off-by: SAY-5 <say.apm35@gmail.com>
Signed-off-by: Sai Asish Y <say.apm35@gmail.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-08-18 22:09:20 +03:00
Felix Weinberger
a81ef34ac1
docs: client log levels, elicitation completion notification; drive json-schema-2020-12-preservation on the alpha.11 referee ( #2686 )
2026-08-18 15:56:55 +01:00
Felix Weinberger
68523682fd
docs: cover tool content types, prompt image content, elicitation defaults, ping, legacy SSE serving ( #2679 )
2026-08-18 13:42:45 +01:00
Felix Weinberger
e3f39c1a81
docs: add ROADMAP, VERSIONING and DEPENDENCY_POLICY for the v2 line ( #2680 )
2026-08-18 13:34:31 +01:00
Konstantin Konstantinov
3e90449fd5
fix(core): never send notifications/cancelled for the initialize hand… ( #2668 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-08-17 11:09:11 +00:00
David Pavlovschii
75dc7ea6e2
fix(server): reject a modern POST without the required MCP-Protocol-Version header ( #2590 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-08-17 09:31:47 +03:00
pshah19
03842cd9ca
fix: handle cancellation for request ID 0 ( #2654 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-08-16 12:17:04 +03:00
Konstantin Konstantinov
27a94b5d1c
fix(scripts): stop the snippet sync walking node_modules and cloned f… ( #2664 )
2026-08-14 15:03:06 +01:00
github-actions[bot]
cc4b41617c
Version Packages ( #2555 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-28 00:52:57 +01:00
Felix Weinberger
faa7e2b470
fix(client): treat HTTP 401/403 on the negotiation probe as auth failures, not legacy evidence ( #2564 )
2026-07-28 00:41:02 +01:00
Felix Weinberger
a9835b4149
docs: comprehensive GA pass — stable-release wording, released-spec links, install tags ( #2566 )
2026-07-27 23:32:17 +01:00
Felix Weinberger
f6fbd48e0c
chore: exit changesets prerelease mode ( #2565 )
2026-07-27 21:10:50 +01:00
Felix Weinberger
f130e1ac5f
fix(validators): honor declared draft-07/06 JSON Schema dialects instead of rejecting them ( #2534 )
2026-07-27 16:11:06 +01:00
Paul Carleton
6dac272880
test: bump conformance referee to 0.2.0-alpha.10, unbaseline server-stateless ( #2557 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-07-27 14:37:33 +01:00
Matt
470678d56b
fix: send SSE keep-alive comment frames from WebStandardStreamableHTTPServerTransport ( #2541 )
2026-07-27 14:21:49 +01:00
github-actions[bot]
1e1392e3f9
Version Packages (beta) ( #2512 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-21 14:34:35 +01:00
Felix Weinberger
6fe196310d
fix(client): probe stdio servers on a disposable sibling process ( #2514 )
2026-07-21 13:07:12 +01:00
Felix Weinberger
f4137630c0
Align 2026-07-28 wire with spec PR #3002 : serverInfo in result _meta, clientInfo optional ( #2513 )
2026-07-20 16:09:55 +01:00
Felix Weinberger
f60dff0674
feat(client): accept a cached era verdict on ConnectOptions.prior ( #2511 )
2026-07-17 17:25:02 +01:00
Felix Weinberger
1480241e2a
Export Protocol and mergeCapabilities from client/server package roots ( #2501 )
2026-07-17 14:37:31 +01:00
github-actions[bot]
e81758caed
Version Packages (beta) ( #2484 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-13 18:38:22 +01:00
Felix Weinberger
ee8267af4a
chore: version the codemod with the core SDK fixed group ( #2486 )
2026-07-13 18:30:08 +01:00
Felix Weinberger
5db6e38f2b
refactor(client): response cache stores serialized documents; drop structuredClone ( #2468 )
2026-07-13 17:39:41 +01:00
Felix Weinberger
3f07a325c6
perf: add preloadSchemas() and warm wire schemas eagerly on workerd ( #2483 )
2026-07-13 17:27:22 +01:00
Felix Weinberger
8e1d2e92b1
refactor: move the schema source modules into @modelcontextprotocol/core ( #2477 )
2026-07-13 17:19:58 +01:00
Felix Weinberger
7c49b47fb3
perf: construct the default Ajv engine lazily on first validation ( #2458 )
2026-07-13 17:09:06 +01:00
Felix Weinberger
e0a0ab74d9
perf: build era wire schemas lazily through memoized factories ( #2476 )
2026-07-13 17:03:47 +01:00
github-actions[bot]
95d28cbae9
Version Packages (beta) ( #2471 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-09 14:35:52 +01:00
Felix Weinberger
9b41b5685d
fix(client): initialize requests never carry a session id; capture only from the initialize response ( #2469 )
2026-07-09 14:28:19 +01:00
Felix Weinberger
44797d7779
fix(core): restore the v1 content default for tools/call results on the legacy era ( #2456 )
2026-07-09 14:02:08 +01:00
Felix Weinberger
3834921074
fix: convert elicitation Standard Schemas via an explicit wire-grammar walk ( #2454 )
2026-07-09 12:30:57 +01:00
Matt
24be4040d4
feat(server): accept Standard Schemas in inputRequired.elicit ( #2369 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-07-09 11:04:16 +01:00
Felix Weinberger
cc70c5e6a9
fix(client): preserve pre-set transport handlers across the version-negotiation probe window ( #2455 )
2026-07-07 15:09:41 +01:00
Matt
0ab5d1471d
fix(server): trim OWS from standard MCP headers ( #2453 )
2026-07-07 13:22:45 +00:00
Matt
7e697354de
fix(server): return Invalid Params for malformed resource URIs ( #2451 )
2026-07-07 13:48:48 +01:00
dependabot[bot]
e2aeac2085
chore(deps): bump denoland/setup-deno from 2.0.4 to 2.0.5 ( #2443 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 08:32:12 +00:00
Felix Weinberger
78fabea445
Use protected HTTP wiring in examples and guides ( #2445 )
2026-07-06 21:03:15 +01:00
Felix Weinberger
561c6d8345
fix(server): validate Content-Type by parsed media type instead of substring match ( #2441 )
2026-07-06 20:29:58 +01:00
Felix Weinberger
7015d2129b
examples: web-standard twin of the bearer-auth story ( #2424 )
2026-07-06 19:58:41 +01:00
Sehlani042
e8de519d31
fix: keep validator providers off root declarations ( #2425 )
...
Co-authored-by: Sehlani042 <257166922+Sehlani042@users.noreply.github.com>
2026-07-06 19:34:24 +01:00
Felix Weinberger
d2f1bed893
Fix import ordering in client auth ( #2442 )
2026-07-06 19:24:13 +01:00
Felix Weinberger
61866d7a5f
feat(server): runtime-neutral OAuth discovery serving for web-standard hosts ( #2422 )
2026-07-06 18:02:06 +01:00
