All pull requests

Pull requests

• fix(server): settle in-flight JSON-mode requests and release their stream mappings (v1.x)

  v1
  #2747·lvyanyan opened Sep 2, 2026·

  ·
  3

• refactor(client): replace cross-spawn with tinyexec

  v2
  #2746·andriyor opened Sep 2, 2026·

  ·
  2

• fix(client): preserve resumption token when a resumed SSE stream drops before any id-bearing event

  v2
  #2745·ayush00git opened Sep 2, 2026·

  ·
  1

  2

• chore(deps): update eventsource to ^4.1.1, eventsource-parser to ^3.1.1

  v2
  #2744·andriyor opened Sep 1, 2026·5 of 6 tasks·

  ·
  2

• [v1.x] fix(server): parse Accept media types exactly

  v1
  #2738·SnowSky1 opened Aug 29, 2026·5 of 9 tasks·

  ·
  2

• fix(client): validate discovered AS metadata by document shape, not well-known path

  v2
  #2734·claude[bot] opened Aug 28, 2026Bot·

  ·
  1

  36

• fix(core): decode URI template match values

  v2
  #2732·xianjianlf2 opened Aug 27, 2026·

  ·
  4

• docs(subscriptions): fix client HTTP URL to point at /mcp endpoint

  v2
  #2731·jinghuan-Chen opened Aug 27, 2026·1 of 9 tasks·

  ·
  2

• docs: explain v1 empty inputSchema / _def crash from z.object() raw-shape misuse

  v2
  #2727·FenjuFu opened Aug 27, 2026·

  ·
  1

  2

• fix(transport): validate redirect targets to prevent SSRF and protocol confusion (#2700)

  v2
  #2725·teddiesloco opened Aug 26, 2026·6 of 9 tasks·

  ·
  1

  3

• fix(server): keep the registry key current when a handle is renamed

  v2
  #2724·YatsukBogdan1 opened Aug 26, 2026·

  ·
  1

  2

• fix(client): send the scope parameter on refresh-token requests

  v2
  #2720·claude[bot] opened Aug 26, 2026Bot·

  ·
  1

  14

• fix: normalize paramsSchema in RegisteredTool.update

  v2
  #2710·VedantMadane opened Aug 24, 2026·

  ·
  1

  3

• docs: NodeStreamableHTTPServerTransport's own examples now show DNS rebinding protection

  v2
  #2709·BerkantACUN opened Aug 24, 2026·

  ·
  2

• fix(client): pin output schema for in-flight tool calls (v1.x)

  v1
  #2708·OllieinCanada opened Aug 24, 2026·

  ·
  2

• Fix streamable HTTP SSE tests for Node v26.7.0+ (Fixes #2661)

  v2
  #2707·mukktinaadh opened Aug 24, 2026·

  ·
  1

  2

• fix(stdio): share a single drain listener under backpressure

  v2
  #2706·Gursimrxn opened Aug 24, 2026·

  ·
  1

  5

• fix(exports): resolve .js subpath imports to real declaration files

  v1
  #2702·johnhenry opened Aug 22, 2026·

  ·
  2

• fix(server): honour enabled on resource templates

  v2
  #2694·sainikhiljuluri opened Aug 21, 2026·

  ·
  1

  2

• fix(server): settle pending JSON-mode responses when the streamable HTTP transport closes

  v2
  #2692·retif opened Aug 21, 2026·

  ·
  2

• fix(client): serialize response cache invalidation

  v2
  #2688·tandede opened Aug 19, 2026·

  ·
  2

• fix(core): merge request headers case-insensitively

  v2
  #2687·uczltw6 opened Aug 19, 2026·

  ·
  2

• fix(client): persist SSE reconnection attempt count across idle-close cycles

  v2
  #2684·claude[bot] opened Aug 18, 2026Bot·

  ·
  1

  36

• chore(deps): bump changesets/action from 1.9.0 to 2.1.0

  dependenciesgithub_actionsv2
  #2681·dependabot[bot] opened Aug 17, 2026Bot·

  ·
  4

• fix(core): surface protocol errors when no onerror handler is set

  v2
  #2678·yigiterturk-dev opened Aug 17, 2026·

  ·
  1

  2