sanjibani
b65426158e
fix(client): let OAuth-derived Authorization override caller-supplied header ( #2475 )
...
Signed-off-by: sanjibani <18418553+sanjibani@users.noreply.github.com>
Co-authored-by: sanjibani <18418553+sanjibani@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-09-11 10:35:43 +03:00
Hugo Moreira
5119ee7fd7
fix: preserve exact OAuth resource indicators ( #2581 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-09-03 19:36:13 +03:00
LuckTerence
6fa42279fe
fix(client): surface underlying network error via Error.cause on probe failures ( #2657 ) ( #2726 )
...
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-09-03 17:32:08 +03:00
Bhavani Shankar Garikapati
dcc01028ff
feat(client): add DPoP (RFC 9449) sender-constrained token support ( #2629 )
...
Co-authored-by: Paul Carleton <paulc@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-31 18:00:18 +01:00
James Carman
70de0c8b56
fix: mirror params.taskId into Mcp-Name for tasks requests (SEP-2663) ( #2613 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-08-28 19:23:49 +03:00
Sai Asish Y
3924de99df
fix(client/auth): propagate saveTokens errors after refresh ( #2053 )
...
Signed-off-by: SAY-5 <say.apm35@gmail.com>
Signed-off-by: Sai Asish Y <say.apm35@gmail.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2026-08-18 22:09:20 +03:00
Felix Weinberger
faa7e2b470
fix(client): treat HTTP 401/403 on the negotiation probe as auth failures, not legacy evidence ( #2564 )
2026-07-28 00:41:02 +01:00
Felix Weinberger
6fe196310d
fix(client): probe stdio servers on a disposable sibling process ( #2514 )
2026-07-21 13:07:12 +01:00
Felix Weinberger
f4137630c0
Align 2026-07-28 wire with spec PR #3002 : serverInfo in result _meta, clientInfo optional ( #2513 )
2026-07-20 16:09:55 +01:00
Felix Weinberger
f60dff0674
feat(client): accept a cached era verdict on ConnectOptions.prior ( #2511 )
2026-07-17 17:25:02 +01:00
Felix Weinberger
1480241e2a
Export Protocol and mergeCapabilities from client/server package roots ( #2501 )
2026-07-17 14:37:31 +01:00
Felix Weinberger
5db6e38f2b
refactor(client): response cache stores serialized documents; drop structuredClone ( #2468 )
2026-07-13 17:39:41 +01:00
Felix Weinberger
3f07a325c6
perf: add preloadSchemas() and warm wire schemas eagerly on workerd ( #2483 )
2026-07-13 17:27:22 +01:00
Felix Weinberger
8e1d2e92b1
refactor: move the schema source modules into @modelcontextprotocol/core ( #2477 )
2026-07-13 17:19:58 +01:00
Felix Weinberger
9b41b5685d
fix(client): initialize requests never carry a session id; capture only from the initialize response ( #2469 )
2026-07-09 14:28:19 +01:00
Felix Weinberger
cc70c5e6a9
fix(client): preserve pre-set transport handlers across the version-negotiation probe window ( #2455 )
2026-07-07 15:09:41 +01:00
Felix Weinberger
561c6d8345
fix(server): validate Content-Type by parsed media type instead of substring match ( #2441 )
2026-07-06 20:29:58 +01:00
Sehlani042
e8de519d31
fix: keep validator providers off root declarations ( #2425 )
...
Co-authored-by: Sehlani042 <257166922+Sehlani042@users.noreply.github.com>
2026-07-06 19:34:24 +01:00
Felix Weinberger
ce2f65db0e
fix(core): make instanceof on SDK error classes work across bundled copies ( #2384 )
2026-07-06 15:53:12 +01:00
morluto
1b90c96d11
fix(packaging): expose Ajv from CJS validator subpaths ( #2431 )
2026-07-06 15:00:16 +01:00
Felix Weinberger
1823aae891
Implement MCP 2026-07-28 ( #2286 )
...
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-26 14:01:10 +01:00
Konstantin Konstantinov
0fb8406d83
v2: codemod iterations, canonical zod schema exports from sdk-shared ( #2354 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
2026-06-25 19:42:44 +01:00
Matt
7ea6fde1b6
test(client): cover refresh retry after invalid token 401 ( #2367 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-06-25 13:59:30 +01:00
Matt
ee732d64b6
chore: switch to module ESNext + moduleResolution bundler ( #2095 )
2026-06-25 11:49:17 +01:00
Konstantin Konstantinov
542d5c9586
v2: SdkError tests + codemod ( #2137 )
2026-06-10 20:15:15 +03:00
Konstantin Konstantinov
1b53a415ea
Port of #2239 (v1.x) to v2 ( #2275 )
2026-06-10 20:14:36 +03:00
Matt
16d13abf78
feat(client,server): bundle default validators, expose customisation via subpaths ( #2088 )
2026-05-29 21:39:32 +03:00
Konstantin Konstantinov
4f226c1e35
v2 backwards compat: SdkError status code ( #2049 )
2026-05-21 08:09:32 +03:00
Felix Weinberger
9fc9070b7b
refactor(client,server): move stdio transports to ./stdio subpath export ( #1871 )
...
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-04-29 14:48:36 +01:00
Yusufhan Saçak
9ed62fe7d8
feat(client): support custom claims in PrivateKeyJwtProvider ( #1875 )
2026-04-14 10:33:53 +00:00
Luis Reche
6bec24a14c
fix: validate clientMetadataUrl at construction time (fail-fast) ( #1653 )
...
Co-authored-by: Luis <reche@Luiss-MacBook-Pro.local>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-04-14 10:17:01 +00:00
Niels Kaspers
1eb31236e7
fix(client): preserve custom Accept headers in StreamableHTTPClientTransport ( #1655 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
2026-04-02 13:52:53 +01:00
Anthony
9bc9abc68b
Fix: Handle error responses in Streamable HTTP SSE streams ( #1390 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-03-31 11:53:52 +01:00
Matan Tsach
d99f3ee527
fix: continue OAuth metadata discovery on 5xx responses ( #1632 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
Co-authored-by: Paul Carleton <paulcarletonjr@gmail.com>
2026-03-30 19:11:19 +00:00
Zwifi
4aec5f7906
Private key jwt scopes ( #1443 )
2026-03-30 18:19:42 +00:00
Wils Dawson
9d083923d5
SEP-2207: Refresh token guidance ( #1523 )
2026-03-30 18:11:55 +01:00
Felix Weinberger
6711ed9ae8
feat(client): add reconnectionScheduler to StreamableHTTPClientTransport ( #1763 )
...
Co-authored-by: CHOIJEWON <alsrn6040@kakao.com>
2026-03-30 14:02:20 +01:00
Felix Weinberger
527643966e
fix(stdio): always set windowsHide on Windows, not just in Electron ( #1772 )
...
Co-authored-by: jnMetaCode <147776183+jnMetaCode@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
2026-03-30 13:56:11 +03:00
Felix Weinberger
e563e63bd2
feat: introduce minimal AuthProvider interface with OAuthClientProvider adapter ( #1710 )
2026-03-25 13:09:16 +00:00
bhosmer-ant
13a0d345c0
Don't swallow fetch TypeError as CORS in non-browser environments ( #1595 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
2026-03-25 10:45:59 +00:00
bhosmer-ant
72fe68b266
Restore negotiated protocol version on reconnection transport ( #1591 )
...
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-03-23 14:58:13 +00:00
sagar-okta
ccb78f2043
Implement SEP-990 Enterprise Managed OAuth ( #1593 )
...
Co-authored-by: Paul Carleton <paulc@anthropic.com>
2026-03-15 14:18:14 +00:00
Anthony
108f2f3ab6
fix: correct error handling for unknown tools and resources ( #1389 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-03-09 18:17:09 +00:00
bhosmer-ant
ad4b2f9cac
Include requestInit options in GET SSE stream request ( #1592 )
...
Co-authored-by: De Wildt van Reenen <dewildt@labs.epiuse.com>
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2026-03-09 18:05:30 +00:00
Paul Carleton
1a78b0138f
feat: use scopes_supported from resource metadata by default (forward-port #757 ) ( #1614 )
...
Co-authored-by: Anthony Giniers <antogyn@gmail.com>
2026-03-02 17:13:59 +00:00
bhosmer-ant
9a8f37b366
Default to client_secret_basic when server omits token_endpoint_auth_methods_supported ( #1594 )
...
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
2026-03-02 11:31:29 +00:00
Felix Weinberger
dc896e198b
feat: expose discoverOAuthServerInfo() and add provider caching for auth server URL ( #1527 )
...
Co-authored-by: hassan123789 <49031989+hassan123789@users.noreply.github.com>
2026-02-13 17:55:12 +00:00
Jonathan Hefner
7778c74e1f
docs: fix grammar, typos, and style in JSDoc comments ( #1491 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-02-10 23:51:06 +00:00
Konstantin Konstantinov
0f0a4eb7c8
v2: Errors refactor (ProtocolError, SdkError, OAuthError) (#1454 )
2026-02-03 18:41:22 +02:00
Matt
f6e8204b86
fix: replace schema-based handlers with string method names ( #1446 )
2026-02-02 23:57:07 +00:00