All pull requests

Pull requests

• fix(streamable-http-client): handle error responses to initialize

  T-configT-coreT-dependenciesT-testT-transport
  #1361·gocamille opened Oct 14, 2026Contributor·

  ·
  1

  1

• fix(transport): accept nested x-mcp-header annotations

  T-coreT-transport
  #1359·DaleSeo opened Oct 14, 2026Member·6 of 9 tasks·

  ·
  1

  1

  

• fix(auth): select supported DCR authentication methods

  T-coreT-transport
  #1358·dux-web opened Oct 14, 2026·

  ·
  1

  

• feat(auth): add initial authorization scope selection

  T-coreT-transport
  #1352·zamoshchin-openai opened Oct 13, 2026·

  ·
  2

  

• fix(streamable-http-server): look up tool schemas per request

  T-coreT-testT-transport
  #1349·DaleSeo opened Oct 13, 2026Member·6 of 9 tasks·

  ·
  1

  1

  

• fix(model): reject a request whose id is not an integer or a string

  T-coreT-testT-transport
  #1346·talhayme opened Oct 12, 2026·

  ·
  1

  1

• feat(client): cancel an abandoned tools/call, prompts/get or resources/read

  T-configT-coreT-dependenciesT-serviceT-test
  #1344·talhayme opened Oct 12, 2026·

  ·
  1

  6

• feat(transport): expose streamable HTTP Host header check

  T-coreT-testT-transport
  #1343·monody0007 opened Oct 12, 2026·

  ·
  1

• fix(transport): keep 401/403 status when the body is a JSON-RPC error

  T-coreT-testT-transport
  #1341·aton-of-data opened Oct 11, 2026·

  ·
  1

• fix(server): omit non-object tool output for legacy peers

  T-coreT-handlerT-test
  #1340·Cassian433 opened Oct 11, 2026·5 of 9 tasks·

  ·
  1

• fix(auth): refresh with granted scopes

  T-coreT-transport
  #1331·jstar0 opened Oct 9, 2026Contributor·

  ·
  1

  4

• fix(http): cancel local session requests on disconnect

  T-coreT-testT-transport
  #1328·kkkhs opened Oct 7, 2026·

  ·
  1

• chore: release v3.6.0

  #1327·github-actions[bot] opened Oct 6, 2026Bot·

  ·

• fix(server): reject server-to-client requests on 2026-07-28

  T-coreT-serviceT-testT-transport
  #1326·DaleSeo opened Oct 6, 2026Member·6 of 9 tasks·

  ·
  1

  

• fix(http): validate Origin literals and cache known schemas

  T-coreT-testT-transport
  #1319·GraciousGazelles opened Oct 4, 2026·

  ·
  1

• fix(client): keep ProgressDispatcher lock off the await path

  T-coreT-handlerT-test
  #1310·monody0007 opened Sep 29, 2026·

  ·
  1

  5

• fix(auth): structure protected resource discovery errors

  T-coreT-testT-transport
  #1305·Niri7981 opened Sep 28, 2026·

  ·
  4

• fix(server): answer malformed params for spec methods with invalid params

  T-coreT-handlerT-test
  #1303·2sumtech opened Sep 26, 2026·6 of 9 tasks·

  ·
  1

• fix(auth): allow cross-origin resource_metadata urls

  T-coreT-transport
  #1302·DaleSeo opened Sep 26, 2026Member·6 of 9 tasks·

  ·
  1

  6

  

• chore(deps): update sse-stream requirement from 0.2.4 to 0.3.0

  T-configT-dependencies
  #1289·dependabot[bot] opened Sep 22, 2026Bot·

  ·

• feat(rmcp): implement SEP-2640 MCP Skills Extension

  T-configT-coreT-dependenciesT-documentationT-handlerT-macrosT-modelT-serviceT-test
  #1286·branben opened Sep 18, 2026Contributor·8 of 9 tasks·

  ·
  7

• fix(streamable-http): match Origin's omitted default port against explicit allowlist entries

  T-coreT-testT-transport
  #1282·yinnho opened Sep 17, 2026·

  ·
  1

  1

• fix(auth): structure metadata discovery errors

  T-coreT-transport
  #1280·ASTion24 opened Sep 16, 2026·

  ·
  1

  4

• fix: reject discovery for legacy-only servers

  T-coreT-handlerT-test
  #1269·JulienCote opened Sep 14, 2026·

  ·
  9

• fix(http): cancel session work when the transport closes

  T-coreT-testT-transport
  #1267·charliemarsh-oai opened Sep 13, 2026·

  ·