1 Release published by 1 person

• 1.13.1

  published Jun 23, 2025

14 Pull requests merged by 10 people

• Update readme file to include a tip to allow mcp-session-id in CORS when using StreamableHTTP

  #633 merged Jun 25, 2025

• Raw request propagation in tools - passed to callbacks via RequestHandlerExtra<ServerRequest, ServerNotification>

  #627 merged Jun 25, 2025

• Show session id per request in simpleStreamableHttp example server

  #640 merged Jun 25, 2025

• feat(shared/auth): support software_statement in OAuthClientMetadata

  #696 merged Jun 25, 2025

• fix: skip validation if tool reports error

  #655 merged Jun 24, 2025

• [auth] refactor resource selection to not include resource if PRM is not present

  #693 merged Jun 24, 2025

• Fallback for /.well-known/oauth-authorization-server dropping path

  #692 merged Jun 24, 2025

• Fix /.well-known/oauth-authorization-server dropping path

  #687 merged Jun 24, 2025

• 1.13.1

  #683 merged Jun 23, 2025

• fix(client/sse): extract protected resource from eventsource 401

  #675 merged Jun 20, 2025

• [auth] adjust default validation for resource parameter in client flow, and server example

  #664 merged Jun 20, 2025

• feat: remove console statements from SDK code

  #668 merged Jun 20, 2025

• build: add watching script targets for build & simple streamable http server

  #663 merged Jun 19, 2025

• simpleStreamableHttp: fix example code

  #660 merged Jun 19, 2025

6 Pull requests opened by 5 people

• add overloads for registerResource method in McpServer class

  #661 opened Jun 19, 2025

• Feature/client level identifiers

  #666 opened Jun 20, 2025

• fix: add type safety for tool output schemas in ToolCallback

  #670 opened Jun 20, 2025

• Add OIDC ID token support

  #680 opened Jun 22, 2025

• Add prompt=consent for OIDC offline_access scope

  #681 opened Jun 22, 2025

• Added Sampling Example to README

  #698 opened Jun 25, 2025

2 Issues closed by 2 people

• Missing or wrong structuredContent blocks tools from reporting error

  #654 closed Jun 24, 2025

• MCP Clients triggering auth flow repeatedly

  #679 closed Jun 22, 2025

21 Issues opened by 16 people

• McpServer class using an outputSchema gobbles thrown errors from tool calls

  #699 opened Jun 25, 2025

• Add Sampling Examples to Documentation

  #697 opened Jun 25, 2025

• Patched n8n to play nicely with Roo's MCPs

  #695 opened Jun 24, 2025

• 공식 문서와 실제 npm/github 배포본의 차이, 그리고 McpServer/registerTool 기반 MCP 서버를 실제로 사용할 수 없는 문제

  #694 opened Jun 24, 2025

• Resource completion performance: Consider client-side caching and fuzzy filtering

  #690 opened Jun 23, 2025

• Elicitation feature fails on Cloudflare Workers due to AJV code generation (EvalError: Code generation from strings disallowed)

  #689 opened Jun 23, 2025

• Resource Templates: Support for display names vs values in completion and better handling of special characters in URI paths

  #688 opened Jun 23, 2025

• Claude Desktop doesn't use resources of my MCP server

  #686 opened Jun 23, 2025

• Tool `inputSchema` and `outputSchema` do not support JSON Schema

  #685 opened Jun 23, 2025

• Access to stderr stream in StdioClientTransport

  #684 opened Jun 23, 2025

• Dynamic MCP Tool Registration Not Available Mid-Chain or Same Cycle

  #682 opened Jun 23, 2025

• ResourceTemplate completion functions need access to previous parameter values for context-aware auto-completion

  #678 opened Jun 21, 2025

• ResourceTemplate fails when user selects <Empty> for optional parameter

  #677 opened Jun 21, 2025

• OAuth Request Should Accept client_id and client_secret via Headers, Not Just in the Request Body

  #676 opened Jun 20, 2025

• Please add the ability to supply the the registerClient and defaultScopes to the ProxyOAuthServerProvider

  #674 opened Jun 20, 2025

• please add PROGRAMFILES to getDefaultEnvironment

  #673 opened Jun 20, 2025

• [auth] Handle dynamically selecting scopes in client authorization url

  #672 opened Jun 20, 2025

• Add code formatters

  #671 opened Jun 20, 2025

• Add type safety for structuredContent in ToolCallback with outputSchema

  #669 opened Jun 20, 2025

• Example on README.md error

  #667 opened Jun 20, 2025

• Support Zod schema with Elicitation?

  #662 opened Jun 19, 2025

22 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Adding `invalidateCredentials()` to `OAuthClientProvider`

  #570 commented on Jun 25, 2025 • 1 new comment

• feat: support oidc discovery in client sdk

  #652 commented on Jun 25, 2025 • 0 new comments

• Fix OAuthProxyProviderClient validation

  #620 commented on Jun 25, 2025 • 0 new comments

• feat: allow OIDC configuration for OAuth server

  #585 commented on Jun 25, 2025 • 0 new comments

• Add client_secret_basic and none authentication methods

  #552 commented on Jun 25, 2025 • 0 new comments

• Allow OAuth client provider to implement token endpoint authentication methods

  #531 commented on Jun 25, 2025 • 0 new comments

• feature(auth): Allow delegating OAuth authorization to existing app-level implementations

  #485 commented on Jun 25, 2025 • 0 new comments

• optimization: When using custom SSE request,`Authorization` header can still be automatically attached to the SSE request.

  #478 commented on Jun 25, 2025 • 0 new comments

• Pr/protocol overwriting transport hooks

  #477 commented on Jun 20, 2025 • 0 new comments

• fix: Expose the MCP child process PID as an accessible property in StdioClientTransport

  #455 commented on Jun 25, 2025 • 0 new comments

• add custom headers on initial _startOrAuth call

  #318 commented on Jun 25, 2025 • 0 new comments

• Improve stdio test Windows compatibility and refactor command logic

  #284 commented on Jun 25, 2025 • 0 new comments

• Module resolution issues with TypeScript ESM imports

  #218 commented on Jun 25, 2025 • 0 new comments

• mcp client times out after 60 seconds (ignoring timeout option)

  #245 commented on Jun 25, 2025 • 0 new comments

• error code -32000 Bad Request: Server not initialized with StreamableHTTPServerTransport

  #408 commented on Jun 25, 2025 • 0 new comments

• Resolving Authorization server metadata URL omits the base path of the Authorization server URL

  #545 commented on Jun 24, 2025 • 0 new comments

• Zod 4 supported

  #555 commented on Jun 23, 2025 • 0 new comments

• Support JSON schema in addition to zod

  #283 commented on Jun 23, 2025 • 0 new comments

• Tools should be able to receive custom object

  #421 commented on Jun 22, 2025 • 0 new comments

• Client does not work in Browser

  #556 commented on Jun 20, 2025 • 0 new comments

• Option to turn off all `console` logging

  #615 commented on Jun 19, 2025 • 0 new comments

• Feature request: accept param spec as `ZodType` instead of `ZodRawShape`

  #588 commented on Jun 19, 2025 • 0 new comments