4 Releases published by 2 people

• 1.15.1

  published Jul 10, 2025

• 1.16.0

  published Jul 17, 2025

• 1.17.0

  published Jul 24, 2025

• 1.17.1

  published Jul 31, 2025

37 Pull requests merged by 22 people

• fix: retry next endpoint on CORS error during auth server discovery

  #827 merged Aug 4, 2025

• 1.17.1

  #831 merged Jul 31, 2025

• fix: prevent responses being sent to wrong client when multiple transports connect

  #820 merged Jul 29, 2025

• (fix): Update fallbackRequestHandler type to match _requestHandlers leaves type

  #784 merged Jul 29, 2025

• Bump version 1.17.0

  #810 merged Jul 24, 2025

• Bump form-data from 4.0.2 to 4.0.4 in the npm_and_yarn group across 1 directory

  #798 merged Jul 24, 2025

• fix: remove extraneous code block in README.md

  #791 merged Jul 24, 2025

• feat: support oidc discovery in client sdk

  #652 merged Jul 24, 2025

• fix: Explicitly declare accpet type to json when exchanging oauth token

  #801 merged Jul 24, 2025

• Fix indent

  #807 merged Jul 24, 2025

• Tweak strict types setup, fix type errors under strictTypes.ts

  #806 merged Jul 24, 2025

• update codeowners

  #803 merged Jul 23, 2025

• Add more robust base64 check

  #786 merged Jul 21, 2025

• Add CODEOWNERS file for sdk

  #781 merged Jul 18, 2025

• 1.16.0

  #779 merged Jul 17, 2025

• fix client id issuance date should only be sent when generated

  #775 merged Jul 17, 2025

• fix: consistently use consumer-provided fetch function

  #767 merged Jul 17, 2025

• fix(731): StreamableHTTPClientTransport Fails to Reconnect on Non-Resumable Streams

  #732 merged Jul 15, 2025

• feat(protocol): Debounce notifications to improve network efficiancy

  #746 merged Jul 15, 2025

• fix: use authorization_server_url as issuer when fetching metadata

  #763 merged Jul 14, 2025

• Adding invalidateCredentials() to OAuthClientProvider

  #570 merged Jul 14, 2025

• make client side client_id generation configurable in the oauth router

  #734 merged Jul 14, 2025

• Non-critical: Readme syntax and typographical error fixes

  #765 merged Jul 14, 2025

• Add prompt=consent for OIDC offline_access scope

  #681 merged Jul 14, 2025

• Add OIDC ID token support

  #680 merged Jul 14, 2025

• Add type compatibility test between SDK and spec types

  #729 merged Jul 14, 2025

• auth: fetch AS metadata in well-known subpath from serverUrl even when PRM returns external AS

  #752 merged Jul 10, 2025

• Fix oauth well-known paths to retain path and query

  #756 merged Jul 10, 2025

• feat: support async callbacks for onsessioninitialized and onsessionclosed

  #751 merged Jul 9, 2025

• [auth]: support oauth client_secret_basic / none / custom methods

  #720 merged Jul 9, 2025

• fix(server): validate expiresAt token value for non existence

  #446 merged Jul 9, 2025

• Add missing app.listen error handling to server examples

  #749 merged Jul 9, 2025

• Improve stdio test Windows compatibility and refactor command logic

  #284 merged Jul 8, 2025

• add custom headers on initial _startOrAuth call

  #318 merged Jul 7, 2025

• Add onsessionclosed hook to StreamableHTTPServerTransport

  #743 merged Jul 7, 2025

• feat: Add CORS configuration for browser-based MCP clients

  #713 merged Jul 7, 2025

• fix(client): Some mcp server need default env(#393, #196)

  #394 merged Jul 7, 2025

25 Pull requests opened by 24 people

• feat: use scopes_supported from resource metadata by default (fixes #580)

  #757 opened Jul 10, 2025

• Add nonce support

  #769 opened Jul 14, 2025

• Add nonce validation

  #770 opened Jul 15, 2025

• feat: add multi-level initial access token support for OAuth 2.0 Dynamic Client Registration (RFC 7591)

  #773 opened Jul 16, 2025

• docs: add LLM-friendly documentation and generation script

  #788 opened Jul 19, 2025

• docs: correct parameter schema key in Dynamic Servers documentation

  #789 opened Jul 20, 2025

• Make zod types strip (default) instead of passthrough

  #792 opened Jul 20, 2025

• Enable distributed mode

  #793 opened Jul 20, 2025

• fix: clean up event listeners in StdioClientTransport.close()

  #795 opened Jul 21, 2025

• Fix open handles detected by jest

  #813 opened Jul 25, 2025

• `registerTool`: accept ZodType<object> for input and output schema

  #816 opened Jul 28, 2025

• Ensure stdio client closes underlying process

  #818 opened Jul 29, 2025

• feat: Add custom context support for MCP transports

  #819 opened Jul 29, 2025

• fix(stdio): implement graceful shutdown as per spec

  #821 opened Jul 29, 2025

• Make README formatting more consistent

  #826 opened Jul 30, 2025

• fix: preserve canonical URL format in OAuth resource parameter per MCP auth spec

  #829 opened Jul 31, 2025

• Fix connection closure handling in Protocol and InMemoryTransport

  #833 opened Aug 2, 2025

• [prototype] add example implementation of client id metadata documents (SEP-991)

  #839 opened Aug 4, 2025

• Group/Tag Filtering Implementation

  #840 opened Aug 4, 2025

• fix(auth): prevent javascript url injection in oauth endpoints

  #841 opened Aug 5, 2025

• fix: Replace non-standard `enumNames` with standard `oneOf` in `EnumSchema`

  #844 opened Aug 5, 2025

• fix: typo in comment in ResourceTemplate class

  #845 opened Aug 5, 2025

• feat: add optional strict parameter to registerTool for Zod validation

  #846 opened Aug 5, 2025

• feat: add bulk registration methods for tools, resources, and prompts

  #847 opened Aug 5, 2025

• Fix [mcp client times out after 60 seconds (ignoring timeout option) #245]

  #849 opened Aug 6, 2025

13 Issues closed by 8 people

• MCP inspector tool do not have option to add input in Streamable HTTP mode

  #835 closed Aug 3, 2025

• Can't define inputSchema as a primitive; prevents ChatGPT connector usage(?)

  #815 closed Jul 28, 2025

• Auth server metadata fallbacks abort on non-404 failures

  #804 closed Jul 24, 2025

• OAuth Metadata Discovery should respect provided Authorization Server URL before applying RFC 8414 path construction

  #744 closed Jul 24, 2025

• enhance auth server discovery with OAuth2 and OIDC metadata support

  #653 closed Jul 24, 2025

• Critical zod error for MCP tool arguments schema definition

  #796 closed Jul 21, 2025

• Server-side StreamableHTTPServerTransport.close() does not fully clean up, causing nodemon hang on shutdown

  #783 closed Jul 19, 2025

• Please fix the description to say `TypeScript` instead of `Typescript`

  #755 closed Jul 16, 2025

• OAuth metadata url building should use authorization_server as base_url rather than mcp server url

  #762 closed Jul 14, 2025

• Disable client id generation in ProxyOAuthProvider

  #724 closed Jul 14, 2025

• OAuth authentication flow should use scopes_supported of Protected Resource Metadata

  #580 closed Jul 14, 2025

• ResourceTemplate completion functions need access to previous parameter values for context-aware auto-completion

  #678 closed Jul 10, 2025

• SSEClientTransport's custom header support seems inconsistent

  #317 closed Jul 7, 2025

42 Issues opened by 40 people

• Unable to use async callbacks for tools/resources with Streamable HTTP transport.

  #848 opened Aug 6, 2025

• Horizontal Scalability for stateful streamable HTTP

  #843 opened Aug 5, 2025

• Bulk tool registration causes EventEmitter memory leak warnings

  #842 opened Aug 5, 2025

• Cannot find module @modelcontextprotocol\sdk\dist\cjs\types

  #838 opened Aug 4, 2025

• typing structuredContent indirectly causes type error

  #837 opened Aug 4, 2025

• Dynamic Tool Registration Based on Authentication Context

  #836 opened Aug 3, 2025

• Version negotiation is skipped for initialization request

  #834 opened Aug 2, 2025

• Azure OIDC discovery metadata missing code_challenge_methods_supported breaks S256 PKCE validation

  #832 opened Aug 1, 2025

• Need to handle GET and POST differently in OAuthServerProvider.authorize handler

  #830 opened Jul 31, 2025

• Use Typebox as inputSchema or outputSchema

  #825 opened Jul 30, 2025

• The return type of Client.callTool() incorrectly specifies `content` as `unknown`

  #823 opened Jul 30, 2025

• RFC 8414 Compliance

  #822 opened Jul 30, 2025

• Package attaches process signal handlers

  #817 opened Jul 28, 2025

• next.js应用，通过server actions使用StdioClientTransport连接mcp server， listTools()正常，但是callTool超时

  #814 opened Jul 27, 2025

• MCP - "Streamable HTTP" transport - Idle Session Timeout

  #812 opened Jul 25, 2025

• Cannot destructure property 'requestInfo' of 'undefined' as it is undefined.

  #811 opened Jul 24, 2025

• SDK V2

  #809 opened Jul 24, 2025

• [Feature request] Support of ZodDiscriminatedUnion in schemas

  #808 opened Jul 24, 2025

• Expose zod for SDK consumers to avoid version compatibility issues

  #802 opened Jul 23, 2025

• Error occurs in Windsurf when registering tool with input schema

  #800 opened Jul 23, 2025

• Consider using an express alternative

  #799 opened Jul 22, 2025

• disconnect method for MCP client

  #794 opened Jul 20, 2025

• [Sampling] Display sampling request to users in chat before sent out

  #790 opened Jul 20, 2025

• onerror and other listener not remove after client close (stdio)

  #780 opened Jul 18, 2025

• invoke asyn method in mcp tool through StreamableHttpTransport cause early return from tool call

  #778 opened Jul 17, 2025

• Where to search actually WORKING example of using Remote MCP server aka "Connector" for Claude?

  #777 opened Jul 16, 2025

• [BUG] Multi-Node Deployment with Persistent Storage Mode not working

  #776 opened Jul 16, 2025

• [Feature Request] Include McpError 'data' payload in JSON-RPC error response

  #774 opened Jul 16, 2025

• Add Initial Access Token Support for Dynamic Client Registration

  #772 opened Jul 16, 2025

• Memory leak in StreamableHTTP and SSE

  #771 opened Jul 16, 2025

• Add auth flow debug logging

  #768 opened Jul 14, 2025

• sendLoggingMessage with Streamable HTTP - logs are not received

  #766 opened Jul 14, 2025

• MCP Python SDK sessionId not maintained in browser with TypeScript SDK client

  #764 opened Jul 14, 2025

• Feature Request: Native AWS Lambda Transport for MCP

  #760 opened Jul 11, 2025

• OAuth token exchange fails with URL-encoded responses - assumes JSON format only

  #759 opened Jul 11, 2025

• OAuth discovery fails for RFC 8792 servers requiring WWW-Authenticate header probing

  #758 opened Jul 11, 2025

• ProxyOAuthServerProvider fails with Zod validation error when using Ory Hydra as OAuth provider

  #754 opened Jul 9, 2025

• Can we move the transports to separate packages?

  #753 opened Jul 9, 2025

• MCP TypeScript SDK generates JSON Schema draft-07, breaking compatibility with modern MCP clients requiring draft-2020-12

  #745 opened Jul 8, 2025

• Streamable HTTP Transport Mixes Responses Across Sessions

  #742 opened Jul 7, 2025

• Feature: Retrieve info about registered Resources and execute them from a tool

  #741 opened Jul 7, 2025

• Can we have a chatbot example that connected to multiple remote servers

  #740 opened Jul 7, 2025

26 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• optimization: When using custom SSE request,`Authorization` header can still be automatically attached to the SSE request.

  #478 commented on Aug 1, 2025 • 10 new comments

• Upgrade local node version to v20.10.0

  #282 commented on Jul 7, 2025 • 2 new comments

• feature(auth): Allow delegating OAuth authorization to existing app-level implementations

  #485 commented on Aug 6, 2025 • 1 new comment

• Add revokeToken() function for client

  #739 commented on Jul 15, 2025 • 0 new comments

• Import Node.js APIs with `node:` prefix

  #349 commented on Aug 4, 2025 • 0 new comments

• Support JSON schema in addition to zod

  #283 commented on Aug 6, 2025 • 0 new comments

• Zod 4 supported

  #555 commented on Aug 5, 2025 • 0 new comments

• Error MCP error -32602: MCP error -32602: Tool {TOOLNAME} not found"?

  #288 commented on Aug 2, 2025 • 0 new comments

• Feature request: accept param spec as `ZodType` instead of `ZodRawShape`

  #588 commented on Jul 28, 2025 • 0 new comments

• Module resolution issues with TypeScript ESM imports

  #218 commented on Jul 28, 2025 • 0 new comments

• ChatGPT calling MCP does not receive the errors

  #628 commented on Jul 23, 2025 • 0 new comments

• Following weather tutorial does not work

  #278 commented on Jul 23, 2025 • 0 new comments

• Support object type tool result

  #156 commented on Jul 18, 2025 • 0 new comments

• Request time out issue repeatedly

  #737 commented on Jul 18, 2025 • 0 new comments

• OAuth - .well-known files must allow OPTIONS and not GET only

  #715 commented on Jul 16, 2025 • 0 new comments

• [auth] Handle dynamically selecting scopes in client authorization url

  #672 commented on Jul 14, 2025 • 0 new comments

• "Type instantiation is excessively deep and possibly infinite" typescript error when importing ToolCallback type

  #494 commented on Jul 13, 2025 • 0 new comments

• How to use prompts and resources in MCP servers? Can prompts and resources be reused or called from tools?

  #481 commented on Jul 11, 2025 • 0 new comments

• (bug) Unable to resolve "@modelcontextprotocol/sdk/client/index"

  #511 commented on Jul 11, 2025 • 0 new comments

• Add Browser-Based MCP Transport for Client-Server Communication within Browser Environments

  #219 commented on Jul 9, 2025 • 0 new comments

• simplify return types

  #119 commented on Jul 8, 2025 • 0 new comments

• What's with the use of .passthrough() in zod?

  #182 commented on Jul 8, 2025 • 0 new comments

• SDK Crashes on Hot Reload Due to Invalid JSON in Stdio Stream

  #700 commented on Jul 8, 2025 • 0 new comments

• Transport for web standard fetch APIs: FetchSSEServerTransport

  #260 commented on Jul 8, 2025 • 0 new comments

• Context AuthInfo - undefined

  #735 commented on Jul 7, 2025 • 0 new comments

• How to use MCP client in a multi-user application?

  #243 commented on Jul 7, 2025 • 0 new comments