All pull requests

Pull requests

• feat(core-internal): expose raw request params through opt-in context

  #3038·kesslerio opened Oct 15, 2026·

  ·
  2

• fix: recognize object output schemas behind local references

  #3035·skulitom opened Oct 15, 2026·

  ·
  1

  6

• fix(auth): accept RFC 8414 client-credentials metadata without authorize URL (#3033)

  #3034·karaaslanz opened Oct 15, 2026·

  ·
  1

  2

• fix(client): use one tool definition for mirroring and output validation

  #3030·Poke-nushi opened Oct 15, 2026·

  ·
  2

• fix(docs): give AuthInfo interface a stable link target (#3012)

  v2
  #3029·karaaslanz opened Oct 15, 2026·

  ·
  1

  2

• fix(server): read request bodies where Request.body is not implemented

  v2
  #3028·littleKitchen opened Oct 14, 2026·

  ·
  1

  3

• Expose actual inbound-processing completion for reusable transport admission

  v2
  #3024·servrox opened Oct 14, 2026·

  ·
  2

• fix: deliver progress notifications that share a read with their response

  v2
  #3023·Steeve-Crypto opened Oct 14, 2026·3 tasks done·

  ·
  1

  3

• fix(server): use null-prototype maps for McpServer registries

  v2
  #3021·Hugo-DDT opened Oct 14, 2026·9 tasks·

  ·
  1

  4

• fix(docs): use relative POSIX package entry globs

  v2
  #3016·jpdefo opened Oct 14, 2026·

  ·
  1

  2

• chore(deps): bump pnpm/action-setup from 5.0.0 to 6.1.0

  dependenciesgithub_actionsv2
  #3014·dependabot[bot] opened Oct 14, 2026Bot·

  ·
  2

• chore(deps): bump changesets/action from 1.9.0 to 2.1.2

  dependenciesgithub_actionsv2
  #3013·dependabot[bot] opened Oct 14, 2026Bot·

  ·
  6

• feat(client): allow async tool output validators (#2971)

  v2
  #3011·karaaslanz opened Oct 13, 2026·

  ·
  2

• fix(core): exclude fragment delimiter from URI template matches

  v2
  #3010·sravan-v opened Oct 13, 2026·

  ·
  3

• ci: add npmscan PR dependency scan

  v2
  #3009·salemalem opened Oct 12, 2026·4 tasks·

  ·
  2

• fix(core-internal): silence unknown-format warnings in v2 validators

  v2
  #3007·senorMk opened Oct 12, 2026·

  ·
  1

  2

• docs(client): document DPoP client authentication

  v2
  #3006·LeonMAG opened Oct 12, 2026·

  ·
  2

• fix(core-internal): support RFC 6570 prefix modifiers in UriTemplate (#3000)

  v2
  #3003·MokuLakshithReddy opened Oct 11, 2026·

  ·
  1

  10

• fix(server): set Allow: POST on stateless legacy 405 responses

  v2
  #3002·Hugo-DDT opened Oct 11, 2026·5 of 9 tasks·

  ·
  1

  4

• test(client): add public REA catalog reproduction fixture

  v2
  #3001·N0zoM1z0 opened Oct 11, 2026·

  ·
  2

• docs: show the decline branch in the lead input_required example

  v2
  #2999·yy5652-hash opened Oct 10, 2026·

  ·
  1

• fix(client): compile output validators lazily for the called tool

  v2
  #2998·epistemedeus opened Oct 10, 2026·

  ·
  1

  7

• fix(codemod): migrate constant template literal module specifiers

  v2
  #2996·rudycelekli opened Oct 9, 2026·

  ·
  2

• fix(core): match exploded slash-separated URI path variables

  v2
  #2995·rudycelekli opened Oct 9, 2026·

  ·
  2

• fix(core): expand multiple scalar URI variables with operator semantics

  v2
  #2994·rudycelekli opened Oct 9, 2026·

  ·
  2