Konstantin Konstantinov
43189335a3
Follow up: unify v3 and v4 zod types via describe matrix and a test helper ( #1141 )
2025-11-20 10:10:15 +00:00
Olivier Chafik
9438478aaf
Implement SEP-1577 - Sampling With Tools ( #1101 )
2025-11-19 18:29:46 -05:00
Devin Clark
418b7f9b85
feat: zod v4 with backwards compatibility for v3.25+ ( #1040 )
2025-11-19 20:24:53 +00:00
Matt
7fca1f2b15
feat: url based client metadata registration (SEP 991) ( #1127 )
2025-11-19 16:44:53 +00:00
Paul Carleton
2e67eb552e
[auth] Adjust scope management to line up with SEP-835 ( #1133 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-11-18 17:30:50 +00:00
Michael
7e44b10401
add none to test and the router. ( #1116 )
2025-11-18 15:34:31 +00:00
Nate Barbettini
4debc740a5
SEP-1036: URL Elicitation ( #1105 )
2025-11-18 10:53:15 +00:00
David Soria Parra
df56e35322
fix: Pass RequestInit options to auth requests ( #1066 )
...
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Paul Carleton <paulcarletonjr@gmail.com>
2025-11-17 16:06:21 +00:00
Matt
98df118a4c
Migrate to vitest from jest ( #1074 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
2025-11-14 14:08:00 +00:00
Paul Carleton
8019972832
[auth] Fix march spec fallback for metadata discovery ( #1108 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
2025-11-13 19:31:42 +00:00
Kent C. Dodds
29cb08071a
Implementation of SEP-986: Specify Format for Tool Names ( #900 )
...
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-11-11 18:45:31 +00:00
Konstantin Konstantinov
9f06b6b499
SEP-1330: Compatibility with SEP-1034 ( #1100 )
...
Co-authored-by: cliffhall <cliff@futurescale.com>
2025-11-11 17:03:28 +00:00
Konstantin Konstantinov
ce420f8f94
DRAFT: SEP-1034: Default values for Elicitation Schemas ( #1096 )
2025-11-11 14:11:42 +00:00
Konstantin Konstantinov
f59996ae66
SEP-1319: Decouple Request Payloads, Remove passthrough iteration, Typecheck fixes ( #1086 )
2025-11-07 16:50:20 +00:00
Kenneth Sinder
806d7cf9c0
registerTool: accept ZodType<object> for input and output schema (#816 )
2025-11-07 16:22:58 +00:00
Matt
4463737330
FIX: use a nightly spec.types.ts ( #1087 )
2025-11-07 14:16:11 +00:00
Matt
11f04e1b0b
Check script which typechecks using Typescripts new Go port ( #1075 )
2025-11-06 18:23:37 +00:00
Matt
9757ace06e
move CLI script to dedicated scripts directory ( #1073 )
2025-11-04 17:52:28 +00:00
Chip
ee9fed28cc
fix: Support WWW-Authenticate scope param for SEP-835 ( #983 )
...
Co-authored-by: OtotheA <oscar@otothea.com>
2025-11-03 15:24:42 +00:00
adam jones
216604720b
Add @deprecated annotations to legacy APIs ( #1018 )
...
Co-authored-by: Claude <noreply@anthropic.com>
2025-11-03 15:21:18 +00:00
Vinay Dandekar
664e66e575
Only use path-based discovery URLs from the authorization server to discover metadata ( #1070 )
2025-11-03 14:52:33 +00:00
Konstantin Konstantinov
7387c44bf5
Fix: Non-existent tool, disabled tool and inputSchema validation return MCP protocol level instead of CallToolResult with isError: true ( #1044 )
2025-10-28 15:00:04 +00:00
Chip
874aa27a89
fix: Prefer the token_endpoint_auth_method response from DCR registration ( #1022 )
2025-10-28 11:24:46 +00:00
Paul Carleton
e74a358728
Update metadata.ts ( #1010 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-10-27 17:40:23 +00:00
Matt
5a8fb39430
feat: pluggable JSON schema validator providers ( #1012 )
2025-10-25 11:56:42 -04:00
Pierre-Élie Fauché
c543095985
fix: Zod to JSONSchema pipe strategies ( #962 )
2025-10-18 08:12:42 +01:00
Frédéric Barthelet
caa25503cd
Allow empty string as valid URL in DCR workflow ( #987 )
2025-10-13 15:43:58 +01:00
Simon Vestergaard Laursen
8f4150e5a0
fix: Add Accept header to auth metadata request ( #901 )
2025-10-13 15:29:47 +01:00
Luca Chang
59cb50463a
Default to S256 code challenge if not specified in authorization server metadata ( #992 )
2025-10-07 15:29:44 +01:00
Inna Harper
1150b1d843
run prettier ( #995 )
2025-10-02 18:21:00 +01:00
Konstantin Konstantinov
856d9ec9dd
MCP: Icons type as per SEP-973, spec types test improvements, ImplementationSchema use IconsSchema ( #947 )
2025-09-30 22:15:32 +01:00
adam jones
7d29cee2ba
fix: change Icon.sizes from string to string[] ( #981 )
2025-09-29 19:40:12 +01:00
Arjun Kumar
7146eede0b
fix: prevent infinite recursion when server throws 401 after successful authentication ( #945 )
...
Co-authored-by: Vinicius Costa <viniciuscsouza@yahoo.com.br>
Co-authored-by: Tyler James Leonhardt <2644648+TylerLeonhardt@users.noreply.github.com>
Co-authored-by: Blust.AI <159488814+blustAI@users.noreply.github.com>
Co-authored-by: Eugene <eugene@blust.ai>
2025-09-27 17:40:59 +01:00
Blust.AI
1d475bb3f7
fix(auth-router): correct Protected Resource Metadata for pathful RS and add explicit resourceServerUrl (RFC 9728) ( #858 )
...
Co-authored-by: Eugene <eugene@blust.ai>
2025-09-22 15:32:29 +01:00
Tyler James Leonhardt
9841a6cf29
Use redirect Uri passed in in demoInMemoryOAuthProvider ( #931 )
2025-09-22 15:29:39 +01:00
Jakub Kopecký
24b3972931
fix: prevent streamable http wite after end from crashing the node process ( #933 )
2025-09-17 10:51:37 +01:00
Inna Harper
b28c297184
ignore icons for now ( #938 )
2025-09-11 20:34:09 +01:00
Cliff Hall
ebf39330f3
Fix automatic log level handling for sessionless connections ( #917 )
2025-09-09 21:35:08 +01:00
Khanh Nguyen
5dd7a2b700
feat: add _meta field support to tool definitions ( #922 )
...
Co-authored-by: David Soria Parra <167242713+dsp-ant@users.noreply.github.com>
2025-09-09 14:39:52 +01:00
David Soria Parra
4de54fed0c
Add the checkIcon test, so that tests aren't failing anymore
2025-09-09 14:30:40 +01:00
Jesse Lumarie
217756edf7
mcp: update SDK for SEP 973 + add to example server ( #904 )
...
Co-authored-by: David Soria Parra <167242713+dsp-ant@users.noreply.github.com>
2025-09-09 12:21:03 +01:00
Cliff Hall
3dd074f8a2
Fix the SDK vs Spec types test that is breaking CI ( #908 )
2025-08-29 14:03:19 -04:00
Cliff Hall
79d11dc53f
Automatic handling of logging level ( #882 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-08-27 15:09:07 -04:00
Paul Carleton
1f5950be01
[auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 ( #879 )
...
Co-authored-by: adam jones <domdomegg+git@gmail.com>
2025-08-19 15:43:09 +01:00
Paul Carleton
64f7cdd09b
restrict url schemes allowed in oauth metadata ( #877 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-08-19 14:39:21 +00:00
Marcelo Paternostro
abb2f0aa14
feature(middleware): Composable fetch middleware for auth and cross‑cutting concerns ( #485 )
...
Co-authored-by: David Soria Parra <davidsp@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-08-18 14:11:15 +01:00
Arjun Kumar
aad33a15a8
fix: pass fetchfn parameter to registerClient and refreshAuthorizatio… ( #850 )
2025-08-14 15:06:18 +01:00
Dale Seo
4d0977bc91
Fix quit command in Example client with OAuth ( #864 )
2025-08-11 19:23:07 +01:00
Xiao Yijun
f657ead472
fix: retry next endpoint on CORS error during auth server discovery ( #827 )
2025-08-04 15:43:09 +01:00
Grimmer Kang
31acdcbb18
fix: prevent responses being sent to wrong client when multiple transports connect ( #820 )
2025-07-29 14:07:01 +01:00
