All pull requests

Pull requests

• [v1.x] fix(server): accept comma-separated protocol versions in validateProtocolVersion (#2969)

  #2975·alok-108 opened Oct 9, 2026·

  ·
  1

• [v1.x] fix(tasks): deliver task-related requests when an optional task tool is called without a task

  #2974·SYEDMDSAAD opened Oct 9, 2026·

  ·
  2

• fix(packaging): bundle fast-uri 3.1.8 in dist to clear nine advisories

  v2
  #2973·Andiii208 opened Oct 9, 2026·

  ·
  1

  2

• feat: Skills extension for server and client (ext/skills subpaths)

  v2
  #2972·mattzcarey opened Oct 8, 2026Member·

  ·
  11

• Docs/migration skill

  v2
  #2968·KKonstantinov opened Oct 8, 2026Contributor·7 of 9 tasks·

  ·
  13

• fix(core): deliver progress notifications that arrive before the response

  v2
  #2967·feniix opened Oct 7, 2026·

  ·
  2

• fix(core): avoid quadratic copying and scanning in ReadBuffer (#2961)

  v2
  #2965·SuparvaCode opened Oct 6, 2026·

  ·
  1

  2

• fix(server): handle ZodObject schemas in RegisteredTool.update() on v1.x

  v1
  #2963·Ishaan-Gpt opened Oct 6, 2026·

  ·
  2

• [v1.x] fix(client): use resource_metadata from WWW-Authenticate on GET SSE 401

  v1
  #2962·kimnamu opened Oct 6, 2026·

  ·
  2

• fix(server): keep the Mcp-Param check on a tool with a number-typed header

  v2
  #2960·claude[bot] opened Oct 5, 2026Bot·

  ·
  9

• Version Packages

  v2
  #2959·github-actions[bot] opened Oct 5, 2026Bot·

  ·
  2

• fix(server): preserve completion metadata when chaining Zod methods (#2949)

  v2
  #2951·iosayin opened Oct 4, 2026·

  ·
  1

  2

• fix(validators): reuse compiled Ajv validators instead of recompiling per call

  v2
  #2950·VIVAAN-DHAWAN opened Oct 4, 2026·

  ·
  1

  3

• fix(client): keep the original error as the cause of "SSE stream disconnected"

  v2
  #2948·n-satoshi061 opened Oct 3, 2026·6 of 9 tasks·

  ·
  2

• fix(codemod): rewrite the bare barrel subpaths sdk/client, sdk/server and sdk/validation

  v2
  #2947·n-satoshi061 opened Oct 3, 2026·5 of 9 tasks·

  ·
  2

• [v1.x] fix(stdio): release consumed ReadBuffer storage

  v1
  #2943·sharifhsn opened Oct 2, 2026·

  ·
  3

• fix(server,client): use the cf-worker validator on Node when code generation is disallowed

  v2
  #2941·mertcanaltin opened Oct 2, 2026·

  ·
  2

• [v1.x] fix(client): send the scope parameter on refresh-token requests

  v1
  #2937·thegodshatetexas opened Oct 2, 2026·6 of 9 tasks·

  ·
  2

• [v1.x] fix(protocol): answer -32602 for requests whose params fail the schema

  v1
  #2932·Gauravtiwari31 opened Oct 2, 2026·

  ·
  2

• fix(client): stop resending a rejected refresh token after invalid_grant

  v2
  #2924·kohjunhao opened Oct 2, 2026·6 of 9 tasks·

  ·
  3

• fix(uri-template): preserve percent-encoded triplets in reserved expansions

  v2
  #2923·takagibit18 opened Oct 2, 2026·

  ·
  1

  2

• fix(uri-template): encode reserved punctuation in strict expansions

  v2
  #2922·takagibit18 opened Oct 2, 2026·

  ·
  1

  2

• fix(client): drain piped stderr so unread pipe cannot deadlock

  v2
  #2921·BerkantACUN opened Oct 2, 2026·6 of 9 tasks·

  ·
  2

• fix(middleware): warn on any non-loopback host without allowedHosts

  v2
  #2917·finalburner opened Oct 2, 2026·

  ·
  1

  3

• fix(core-internal): treat comma-joined Content-Type values as having no essence

  v2
  #2912·bluetomlee opened Oct 1, 2026·4 tasks done·

  ·
  1

  2