Commit graph

1,270 commits

Author SHA1 Message Date
Jacopo Cappellato
608360047d
Modify Origin header validation in validateRequestHeaders (streamableHttp.ts and sse.ts) to allow requests without an Origin, as they are not relevant to server DNS rebinding protection. (#1205) 2025-12-02 09:56:09 +00:00
Matt
a6ee2cb3c2
fix: normalize null to undefined in ElicitResultSchema content field (#1204) 2025-12-01 17:02:13 +00:00
Felix Weinberger
4b651b8fe1
feat: add closeStandaloneSSEStream for GET stream polling (#1203) 2025-12-01 17:01:20 +00:00
marcrasi
5ceabfb3fb
fix: normalize headers in sse transport (#856)
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
Co-authored-by: Matt Carey <mcarey@cloudflare.com>
2025-12-01 16:38:19 +00:00
Felix Weinberger
f67fc2ff58
fix: improve SSE reconnection behavior (#1191) 2025-12-01 16:31:24 +00:00
Felix Weinberger
fab7e1e9b3
feat: add closeSSEStream callback to RequestHandlerExtra (#1166) 2025-12-01 16:18:29 +00:00
Koichi ITO
6c863c8e75
[Docs] Fix typo (#1067)
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
2025-12-01 16:05:48 +00:00
Konstantin Konstantinov
74ab69ffa0
README refactor (#1197) 2025-12-01 18:04:23 +02:00
Matt
ace9b62d3c
fix hanging stdio servers (#1200)
Co-authored-by: Johnny Santos <johnnyadsantos@gmail.com>
Co-authored-by: TomasRup <tomasr@wix.com>
2025-12-01 14:56:48 +00:00
Filip Bartuska
5aaf6ee67e
Fix optional argument handling in prompts for Zod V4 (#1199)
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
2025-12-01 12:10:52 +00:00
Michael Gyarmathy
ae0eaf4163
adds the transitive @types/express-serve-static-core dependency as a direct devDependency (#1078)
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
2025-12-01 11:47:03 +00:00
Konstantin Konstantinov
4fb4d4d55e
SEP-1046: Client credentials flow for M2M without user interaction (#1157)
Co-authored-by: Paul Carleton <paulc@anthropic.com>
2025-11-28 17:01:15 +00:00
Matt
b37f08ae3a
fix: update registerTool signature for proper typed ToolCallback (#1188)
Co-authored-by: Gavin <gching@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-11-28 16:14:26 +00:00
Jerome
5e0302fa77
Allow HTTP issuer URLs when MCP_DEV_MODE is enabled (#1189)
Co-authored-by: Claude <noreply@anthropic.com>
2025-11-28 15:53:03 +00:00
Adam Kuhn
b4c6090bf2
coerce 'expires_in' to be a number (#1111)
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <konstantin@mach5technology.com>
2025-11-28 14:13:49 +00:00
Kazuki Yamada
6b90e1ada8
fix(client): use StreamableHTTPError instead of plain Error in send() (#1178)
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
2025-11-28 13:09:07 +00:00
Eduardo Gomes
5e97e1a479
Add invalid_target oauth error (rfc 8707) (#1183)
Co-authored-by: Eduardo Gomes <egomes@cloudflare.com>
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
2025-11-28 11:59:59 +00:00
Felix Weinberger
42a2f41f77
fix: call tasks/result to deliver side-channel messages (#1185) 2025-11-28 11:46:20 +00:00
Matt
cca6ba05b5
feat: eslint rule to prefer node protocols (#1187) 2025-11-28 11:37:25 +00:00
Yuwei Zhou
ec33e3f506
Fix StreamableHTTPClientTransport instantiation (#944) 2025-11-28 10:46:30 +00:00
Felix Weinberger
9203091219
Fix JSON parse error on SSE events with empty data (#1184) 2025-11-27 21:22:00 +00:00
Luca Chang
b9538a222a
SEP-1686: Tasks (#1041)
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
2025-11-27 20:11:25 +00:00
Sahar Shemesh
2aa697ceda
docs: add GET request handling for streamableHttp stateless mode (#1161) 2025-11-27 16:57:17 +00:00
Eduardo Gomes
466483f25d
Make sure to consume HTTP error response bodies (#1173)
Co-authored-by: Eduardo Gomes <egomes@cloudflare.com>
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-11-26 15:52:56 +00:00
adam jones
e343bf5815
fix: update spec links from latest to draft (#1171) 2025-11-26 11:38:01 +00:00
Felix Weinberger
e6c71bbab1
chore: bump package number for release (#1170) 1.23.0 2025-11-25 21:09:37 +00:00
Felix Weinberger
3c50d07e9f
feat: implement SEP-1699 SSE polling via server-side disconnect (#1129) 2025-11-25 17:19:40 +00:00
Felix Weinberger
b59a2bde7d
fix: React to upstream RC schema changes for form mode elicitation requests (#1164)
Co-authored-by: Nate Barbettini <nate@arcade.dev>
2025-11-25 11:21:07 +00:00
Olivier Chafik
2a55dfd5f2
sampling: validate tools, tool_use, tool_result constraints (#1156) 2025-11-22 23:56:59 -05:00
Felix Weinberger
41c6b35e07
SEP-1613: use.catchall() on inputSchema/outputSchema to support JSON Schema 2020-12 (#1135) 2025-11-21 13:41:12 +00:00
Felix Weinberger
0c1cbf0d37
Bump version to 1.23.0-beta.0 (#1147) 1.23.0-beta.0 2025-11-20 21:53:19 +00:00
Felix Weinberger
33229a482c
Support beta releases by publishing with --tag beta (#1146) 2025-11-20 21:40:34 +00:00
Nayana Parameswarappa
3485a06f85
Support upscoping on insufficient_scope 403 (#1115)
Co-authored-by: Paul Carleton <paulc@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Paul Carleton <paulcarletonjr@gmail.com>
2025-11-20 19:37:44 +00:00
Nate Barbettini
fc4a6ecb40
fix: Connect error in URL elicitation example (#1136) 2025-11-20 18:30:10 +00:00
Nate Barbettini
9df0972774
chore: Add deprecated marker to old elicitInput overload (#1142) 2025-11-20 18:26:22 +00:00
Konstantin Konstantinov
43189335a3
Follow up: unify v3 and v4 zod types via describe matrix and a test helper (#1141) 2025-11-20 10:10:15 +00:00
Olivier Chafik
9438478aaf
Implement SEP-1577 - Sampling With Tools (#1101) 2025-11-19 18:29:46 -05:00
Matt
8acd838829
docs: update installation instructions for zod peer dependency (#1139) 2025-11-19 20:55:46 +00:00
Matt
8eb2beaa86
fix: remove pnpm lock and regenerate package-lock (#1138) 2025-11-19 20:39:18 +00:00
Devin Clark
418b7f9b85
feat: zod v4 with backwards compatibility for v3.25+ (#1040) 2025-11-19 20:24:53 +00:00
Matt
7fca1f2b15
feat: url based client metadata registration (SEP 991) (#1127) 2025-11-19 16:44:53 +00:00
Matt
61db19537b
chore: remove unused @types/eslint__js dependency (#1128) 2025-11-19 15:45:54 +00:00
Max Isbey
fe7a938434
chore: add .idea/ to .gitignore (#1134) 2025-11-19 11:49:32 +00:00
Paul Carleton
2e67eb552e
[auth] Adjust scope management to line up with SEP-835 (#1133)
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-11-18 17:30:50 +00:00
Michael
7e44b10401
add none to test and the router. (#1116) 2025-11-18 15:34:31 +00:00
Nate Barbettini
4debc740a5
SEP-1036: URL Elicitation (#1105) 2025-11-18 10:53:15 +00:00
David Soria Parra
df56e35322
fix: Pass RequestInit options to auth requests (#1066)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Paul Carleton <paulcarletonjr@gmail.com>
2025-11-17 16:06:21 +00:00
Konstantin Konstantinov
a7e525a100
Fix: clean up accidental spec.types.ts (#1122) 2025-11-17 15:11:37 +00:00
Konstantin Konstantinov
55f02c0839
Fix: @types/node incompatibility with vite warnings on npm install (#1121) 2025-11-17 15:09:58 +00:00
Felix Weinberger
5bcf53fa12
ci: add workflow_dispatch trigger for manual CI runs (#1114) 2025-11-14 14:30:33 +00:00