2 Releases published by 1 person

• 1.13.2

  published Jun 26, 2025

• 1.13.3

  published Jul 1, 2025

23 Pull requests merged by 21 people

• Bump version to 1.13.3

  #719 merged Jul 1, 2025

• Returning undefined from discoverOAuthMetadata for CORS errors

  #717 merged Jul 1, 2025

• Added Sampling Example to README

  #698 merged Jun 30, 2025

• docs: add error handling when it fails to start HTTP server

  #371 merged Jun 30, 2025

• doc minimum node version requirment

  #463 merged Jun 30, 2025

• fix: add type safety for tool output schemas in ToolCallback

  #670 merged Jun 30, 2025

• fix: Expose the MCP child process PID as an accessible property in StdioClientTransport

  #455 merged Jun 30, 2025

• fix: missing "properties" property in empty schema

  #598 merged Jun 30, 2025

• fix: extra headers when they are a Headers object

  #571 merged Jun 27, 2025

• add overloads for registerResource method in McpServer class

  #661 merged Jun 27, 2025

• fix: add windows env PROGRAMFILES, avoid some exe can not be found

  #386 merged Jun 27, 2025

• fix: add missing eventsource-parser dependency

  #424 merged Jun 27, 2025

• fix lint

  #704 merged Jun 27, 2025

• Implement DNS Rebinding Protections per spec

  #565 merged Jun 27, 2025

• Update version of the package to 1.13.2

  #701 merged Jun 26, 2025

• test(server): add more tests for SSEServerTransport class

  #391 merged Jun 26, 2025

• Bump formidable from 3.5.2 to 3.5.4 in the npm_and_yarn group across 1 directory

  #428 merged Jun 26, 2025

• docs: Add clarifying comments for stateless streamable HTTP endpoints

  #542 merged Jun 26, 2025

• Pr/protocol overwriting transport hooks

  #477 merged Jun 26, 2025

• Update readme file to include a tip to allow mcp-session-id in CORS when using StreamableHTTP

  #633 merged Jun 25, 2025

• Raw request propagation in tools - passed to callbacks via RequestHandlerExtra<ServerRequest, ServerNotification>

  #627 merged Jun 25, 2025

• Show session id per request in simpleStreamableHttp example server

  #640 merged Jun 25, 2025

• feat(shared/auth): support software_statement in OAuthClientMetadata

  #696 merged Jun 25, 2025

5 Pull requests opened by 4 people

• Allow enum in registerPrompt argsSchema

  #710 opened Jun 29, 2025

• feat: add enabled parameter support for tool registration

  #712 opened Jun 30, 2025

• feat: Add CORS configuration for browser-based MCP clients

  #713 opened Jun 30, 2025

• Support for multi-instance shttp MCP server deployments

  #718 opened Jul 1, 2025

• [auth]: support oauth client_secret_basic / none / custom methods

  #720 opened Jul 1, 2025

5 Issues closed by 5 people

• Support for acessing request headers from within a tool/resource/prompt

  #544 closed Jun 30, 2025

• Add Sampling Examples to Documentation

  #697 closed Jun 30, 2025

• Add type safety for structuredContent in ToolCallback with outputSchema

  #669 closed Jun 30, 2025

• DELETE ME

  #711 closed Jun 30, 2025

• requestInit.headers do not work

  #569 closed Jun 27, 2025

9 Issues opened by 7 people

• [RFC] Strategic Roadmap for Enterprise-Grade TypeScript MCP SDK

  #716 opened Jul 1, 2025

• OAuth - .well-known files must allow OPTIONS and not GET only

  #715 opened Jun 30, 2025

• Add manual way of registering a user without Dynamic Client Registration

  #714 opened Jun 30, 2025

• The bun environment failed to compile,bun:1.2.17,@modelcontextprotocol/sdk:1.13.2

  #709 opened Jun 29, 2025

• Need an example to implement dynamic client registration against an existing oauth server

  #707 opened Jun 27, 2025

• Prompts - Metadata attributes in prompt registration, similar to resource metadata or tool annotations

  #703 opened Jun 27, 2025

• Zod transform functions are lost during JSON Schema conversion, breaking union types

  #702 opened Jun 27, 2025

• SDK Crashes on Hot Reload Due to Invalid JSON in Stdio Stream

  #700 opened Jun 26, 2025

• McpServer class using an outputSchema gobbles thrown errors from tool calls

  #699 opened Jun 25, 2025

48 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Import Node.js APIs with `node:` prefix

  #349 commented on Jul 1, 2025 • 9 new comments

• fix(client): Some mcp server need default env(#393, #196)

  #394 commented on Jun 30, 2025 • 4 new comments

• Improve stdio test Windows compatibility and refactor command logic

  #284 commented on Jun 27, 2025 • 3 new comments

• add custom headers on initial _startOrAuth call

  #318 commented on Jun 30, 2025 • 2 new comments

• refactor: use computed property names

  #456 commented on Jun 27, 2025 • 2 new comments

• Fix phantom dependencies

  #575 commented on Jun 27, 2025 • 2 new comments

• Upgrade local node version to v20.10.0

  #282 commented on Jun 27, 2025 • 2 new comments

• fix(server): validate expiresAt token value for non existence

  #446 commented on Jun 30, 2025 • 1 new comment

• error code -32000 Bad Request: Server not initialized with StreamableHTTPServerTransport

  #408 commented on Jun 25, 2025 • 0 new comments

• fix(client/streamableHttp): retry sendMessage on 401

  #425 commented on Jun 27, 2025 • 0 new comments

• optimization: When using custom SSE request,`Authorization` header can still be automatically attached to the SSE request.

  #478 commented on Jun 25, 2025 • 0 new comments

• feature(auth): Allow delegating OAuth authorization to existing app-level implementations

  #485 commented on Jul 1, 2025 • 0 new comments

• sample: Add a sample using a group of MCP clients.

  #486 commented on Jun 30, 2025 • 0 new comments

• Allow OAuth client provider to implement token endpoint authentication methods

  #531 commented on Jun 25, 2025 • 0 new comments

• #547 kill the child process if it's not properly terminated by stdio.…

  #548 commented on Jun 30, 2025 • 0 new comments

• chore: update package.json exports

  #551 commented on Jun 27, 2025 • 0 new comments

• Add client_secret_basic and none authentication methods

  #552 commented on Jun 25, 2025 • 0 new comments

• Setting up pkg.pr.new

  #567 commented on Jul 1, 2025 • 0 new comments

• Adding `invalidateCredentials()` to `OAuthClientProvider`

  #570 commented on Jun 25, 2025 • 0 new comments

• feat: allow OIDC configuration for OAuth server

  #585 commented on Jun 25, 2025 • 0 new comments

• Add `pathVariableNames` and `queryVariableNames` getters in `UriTemplate`

  #609 commented on Jun 30, 2025 • 0 new comments

• Remove zod inference and use explicit TypeScript types

  #612 commented on Jun 30, 2025 • 0 new comments

• Fix OAuthProxyProviderClient validation

  #620 commented on Jun 25, 2025 • 0 new comments

• fix: expose ./dist/cjs/types.js in package.json exports for @modelcon…

  #646 commented on Jun 27, 2025 • 0 new comments

• feat: support oidc discovery in client sdk

  #652 commented on Jun 25, 2025 • 0 new comments

• Add OIDC ID token support

  #680 commented on Jun 25, 2025 • 0 new comments

• Add prompt=consent for OIDC offline_access scope

  #681 commented on Jun 25, 2025 • 0 new comments

• mcp client times out after 60 seconds (ignoring timeout option)

  #245 commented on Jun 25, 2025 • 0 new comments

• Module resolution issues with TypeScript ESM imports

  #218 commented on Jun 25, 2025 • 0 new comments

• ResourceTemplate fails when user selects <Empty> for optional parameter

  #677 commented on Jun 25, 2025 • 0 new comments

• (bug) Unable to resolve "@modelcontextprotocol/sdk/client/index"

  #511 commented on Jun 26, 2025 • 0 new comments

• ResourceTemplate completion functions need access to previous parameter values for context-aware auto-completion

  #678 commented on Jun 26, 2025 • 0 new comments

• StdioServerTransport failing to connect on Claude for Macos

  #554 commented on Jun 26, 2025 • 0 new comments

• Resolving Authorization server metadata URL omits the base path of the Authorization server URL

  #545 commented on Jun 27, 2025 • 0 new comments

• Support JSON schema in addition to zod

  #283 commented on Jun 28, 2025 • 0 new comments

• Consider adding Hono examples

  #385 commented on Jun 29, 2025 • 0 new comments

• Claude Desktop doesn't use resources of my MCP server

  #686 commented on Jul 1, 2025 • 0 new comments

• Fix stderr output

  #228 commented on Jun 30, 2025 • 0 new comments

• Proposal: `render` method for an `McpServer`

  #233 commented on Jun 30, 2025 • 0 new comments

• Added auto-refreshing tool list notification handler to client

  #239 commented on Jun 30, 2025 • 0 new comments

• Add error handling tests for InMemoryTransport

  #279 commented on Jun 26, 2025 • 0 new comments

• Add comprehensive tests for WebSocketClientTransport

  #295 commented on Jun 26, 2025 • 0 new comments

• feat(client/sse): allow custom fetch implementation

  #296 commented on Jun 30, 2025 • 0 new comments

• Jsonrpc refactor

  #298 commented on Jun 26, 2025 • 0 new comments

• Ensuring stdio transport closure despite server hanging. Fixing #271

  #314 commented on Jun 27, 2025 • 0 new comments

• fix: Forwarding EventSource headers to requests to reuse EventSource…

  #339 commented on Jun 26, 2025 • 0 new comments

• Add StdioParseError for improved error handling in stdio stream processing

  #357 commented on Jun 26, 2025 • 0 new comments

• feat(server): support json schema to define tool parameters

  #423 commented on Jun 26, 2025 • 0 new comments