Sam Morrow
6032170087
feat(server): add request-time OAuth scope challenges ( #1624 )
...
Conformance Tests / client-conformance (push) Has been cancelled
Conformance Tests / server-conformance (push) Has been cancelled
Deploy Docs / deploy-docs (push) Has been cancelled
Examples / examples (build + e2e) (push) Has been cancelled
/ build (push) Has been cancelled
/ test (20) (push) Has been cancelled
/ test (22) (push) Has been cancelled
/ test (24) (push) Has been cancelled
/ test-e2e (20) (push) Has been cancelled
/ test-e2e (22) (push) Has been cancelled
/ test-e2e (24) (push) Has been cancelled
/ test-runtimes (bun, 1.x) (push) Has been cancelled
/ test-runtimes (deno, v2.x) (push) Has been cancelled
Publish Any Commit / pkg-publish (push) Has been cancelled
Release / Version (push) Has been cancelled
Release / Publish (push) Has been cancelled
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
2026-09-16 16:51:56 +00:00
sanjibani
b65426158e
fix(client): let OAuth-derived Authorization override caller-supplied header ( #2475 )
...
Signed-off-by: sanjibani <18418553+sanjibani@users.noreply.github.com>
Co-authored-by: sanjibani <18418553+sanjibani@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-09-11 10:35:43 +03:00
claude[bot]
5ecc791d81
fix(codemod): only count real module specifiers in project-type inference ( #2765 )
...
Co-authored-by: Claude <noreply@anthropic.com>
2026-09-09 23:50:57 +03:00
Hugo Moreira
5119ee7fd7
fix: preserve exact OAuth resource indicators ( #2581 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-09-03 19:36:13 +03:00
LuckTerence
6fa42279fe
fix(client): surface underlying network error via Error.cause on probe failures ( #2657 ) ( #2726 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-09-03 17:32:08 +03:00
Bhavani Shankar Garikapati
dcc01028ff
feat(client): add DPoP (RFC 9449) sender-constrained token support ( #2629 )
...
Co-authored-by: Paul Carleton <paulc@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-31 18:00:18 +01:00
James Carman
70de0c8b56
fix: mirror params.taskId into Mcp-Name for tasks requests (SEP-2663) ( #2613 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-08-28 19:23:49 +03:00
Max
7b781ed4e2
fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length ( #2698 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
2026-08-25 14:23:40 +01:00
Sai Asish Y
3924de99df
fix(client/auth): propagate saveTokens errors after refresh ( #2053 )
...
Signed-off-by: SAY-5 <say.apm35@gmail.com>
Signed-off-by: Sai Asish Y <say.apm35@gmail.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-08-18 22:09:20 +03:00
Konstantin Konstantinov
3e90449fd5
fix(core): never send notifications/cancelled for the initialize hand… ( #2668 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-08-17 11:09:11 +00:00
David Pavlovschii
75dc7ea6e2
fix(server): reject a modern POST without the required MCP-Protocol-Version header ( #2590 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-08-17 09:31:47 +03:00
pshah19
03842cd9ca
fix: handle cancellation for request ID 0 ( #2654 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-08-16 12:17:04 +03:00
github-actions[bot]
cc4b41617c
Version Packages ( #2555 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-28 00:52:57 +01:00
Felix Weinberger
faa7e2b470
fix(client): treat HTTP 401/403 on the negotiation probe as auth failures, not legacy evidence ( #2564 )
2026-07-28 00:41:02 +01:00
Felix Weinberger
a9835b4149
docs: comprehensive GA pass — stable-release wording, released-spec links, install tags ( #2566 )
2026-07-27 23:32:17 +01:00
Felix Weinberger
f130e1ac5f
fix(validators): honor declared draft-07/06 JSON Schema dialects instead of rejecting them ( #2534 )
2026-07-27 16:11:06 +01:00
Matt
470678d56b
fix: send SSE keep-alive comment frames from WebStandardStreamableHTTPServerTransport ( #2541 )
2026-07-27 14:21:49 +01:00
github-actions[bot]
1e1392e3f9
Version Packages (beta) ( #2512 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-21 14:34:35 +01:00
Felix Weinberger
6fe196310d
fix(client): probe stdio servers on a disposable sibling process ( #2514 )
2026-07-21 13:07:12 +01:00
Felix Weinberger
f4137630c0
Align 2026-07-28 wire with spec PR #3002 : serverInfo in result _meta, clientInfo optional ( #2513 )
2026-07-20 16:09:55 +01:00
Felix Weinberger
f60dff0674
feat(client): accept a cached era verdict on ConnectOptions.prior ( #2511 )
2026-07-17 17:25:02 +01:00
Felix Weinberger
1480241e2a
Export Protocol and mergeCapabilities from client/server package roots ( #2501 )
2026-07-17 14:37:31 +01:00
github-actions[bot]
e81758caed
Version Packages (beta) ( #2484 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-13 18:38:22 +01:00
Felix Weinberger
5db6e38f2b
refactor(client): response cache stores serialized documents; drop structuredClone ( #2468 )
2026-07-13 17:39:41 +01:00
Felix Weinberger
3f07a325c6
perf: add preloadSchemas() and warm wire schemas eagerly on workerd ( #2483 )
2026-07-13 17:27:22 +01:00
Felix Weinberger
8e1d2e92b1
refactor: move the schema source modules into @modelcontextprotocol/core ( #2477 )
2026-07-13 17:19:58 +01:00
Felix Weinberger
7c49b47fb3
perf: construct the default Ajv engine lazily on first validation ( #2458 )
2026-07-13 17:09:06 +01:00
Felix Weinberger
e0a0ab74d9
perf: build era wire schemas lazily through memoized factories ( #2476 )
2026-07-13 17:03:47 +01:00
github-actions[bot]
95d28cbae9
Version Packages (beta) ( #2471 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-09 14:35:52 +01:00
Felix Weinberger
9b41b5685d
fix(client): initialize requests never carry a session id; capture only from the initialize response ( #2469 )
2026-07-09 14:28:19 +01:00
Felix Weinberger
44797d7779
fix(core): restore the v1 content default for tools/call results on the legacy era ( #2456 )
2026-07-09 14:02:08 +01:00
Felix Weinberger
3834921074
fix: convert elicitation Standard Schemas via an explicit wire-grammar walk ( #2454 )
2026-07-09 12:30:57 +01:00
Matt
24be4040d4
feat(server): accept Standard Schemas in inputRequired.elicit ( #2369 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-07-09 11:04:16 +01:00
Felix Weinberger
cc70c5e6a9
fix(client): preserve pre-set transport handlers across the version-negotiation probe window ( #2455 )
2026-07-07 15:09:41 +01:00
Matt
0ab5d1471d
fix(server): trim OWS from standard MCP headers ( #2453 )
2026-07-07 13:22:45 +00:00
Matt
7e697354de
fix(server): return Invalid Params for malformed resource URIs ( #2451 )
2026-07-07 13:48:48 +01:00
Felix Weinberger
78fabea445
Use protected HTTP wiring in examples and guides ( #2445 )
2026-07-06 21:03:15 +01:00
Felix Weinberger
561c6d8345
fix(server): validate Content-Type by parsed media type instead of substring match ( #2441 )
2026-07-06 20:29:58 +01:00
Sehlani042
e8de519d31
fix: keep validator providers off root declarations ( #2425 )
...
Co-authored-by: Sehlani042 <257166922+Sehlani042@users.noreply.github.com>
2026-07-06 19:34:24 +01:00
Felix Weinberger
d2f1bed893
Fix import ordering in client auth ( #2442 )
2026-07-06 19:24:13 +01:00
Felix Weinberger
61866d7a5f
feat(server): runtime-neutral OAuth discovery serving for web-standard hosts ( #2422 )
2026-07-06 18:02:06 +01:00
Felix Weinberger
ce2f65db0e
fix(core): make instanceof on SDK error classes work across bundled copies ( #2384 )
2026-07-06 15:53:12 +01:00
morluto
1b90c96d11
fix(packaging): expose Ajv from CJS validator subpaths ( #2431 )
2026-07-06 15:00:16 +01:00
Felix Weinberger
7635115d01
feat(server): runtime-neutral requireBearerAuth for web-standard hosts ( #2420 )
2026-07-02 19:35:21 +01:00
Felix Weinberger
79dc162efc
Read codemod target versions from workspace manifests at build time ( #2419 )
2026-07-02 16:01:32 +01:00
github-actions[bot]
35f6856a17
Version Packages (beta) ( #2416 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-02 13:26:04 +01:00
Felix Weinberger
3c7ddafa05
test(conformance): bump referee to 0.2.0-alpha.9; arm SEP-2575 diagnostic fixtures; fix post-dispatch -32021 HTTP status ( #2399 )
2026-07-02 13:17:08 +01:00
Konstantin Konstantinov
1772473b76
codemod iterations 5 ( #2398 )
2026-07-02 00:34:43 +03:00
Matt
f172626a8e
feat(packaging): ship CommonJS builds alongside ESM for v2 packages ( #2405 )
2026-07-01 19:40:37 +03:00
github-actions[bot]
2dcf10bea5
Version Packages (beta) ( #2404 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-30 23:42:35 +01:00
