Issues

• [v2] Last-Event-ID resumability on modern createMcpHandler path

  v2
  modelcontextprotocol/typescript-sdk#3037 · Filter by author JayDS22 opened on Oct 15, 2026

• [v2] createMcpHandler maxSubscriptions is handler-wide, no per-session cap option

  v2
  modelcontextprotocol/typescript-sdk#3036 · Filter by author JayDS22 opened on Oct 15, 2026

• [v2] ClientCredentialsProvider cannot sign in: RFC 8414 metadata without authorization_endpoint is refused, though a client-credentials-only server has none

  v1v2
  modelcontextprotocol/typescript-sdk#3033 · Filter by author joeblew999 opened on Oct 15, 2026

• [v2] outputSchema whose root is a $ref (zod .meta({ id })) is taken for a non-object: on 2025 connections an object result is wrapped as { result }

  v2
  modelcontextprotocol/typescript-sdk#3032 · Filter by author joeblew999 opened on Oct 15, 2026
  1

• Add file parse example server (PDF DOCX XLSX without binaries)

  v1v2
  modelcontextprotocol/typescript-sdk#3031 · Filter by author TejasS1233 opened on Oct 15, 2026

• StreamableHTTPServerTransport: option to send SSE keepalive comments on open streams

  v1
  modelcontextprotocol/typescript-sdk#3027 · Filter by author 0xdeafcafe opened on Oct 14, 2026

• Client DPoP: support external signers (non-CryptoKey keys) in DpopSession

  v2
  modelcontextprotocol/typescript-sdk#3026 · Filter by author figitaki opened on Oct 14, 2026

• [v2] Browser-hosted MCP servers fail in Firefox after request-body reader changes

  v1v2
  modelcontextprotocol/typescript-sdk#3025 · Filter by author mayurj747 opened on Oct 14, 2026

• use of @hono/node-server v1 results in GHSA-rmxm-3fg6-px4f

  v2
  modelcontextprotocol/typescript-sdk#3022 · Filter by author andyedwardsibm opened on Oct 14, 2026

• Public inbound-processing completion seam for reusable bounded admission

  v1v2
  modelcontextprotocol/typescript-sdk#3020 · Filter by author servrox opened on Oct 14, 2026

• McpServer.registerTool rejects tool names inherited from Object.prototype (constructor, toString, __proto__)

  v1v2
  modelcontextprotocol/typescript-sdk#3019 · Filter by author ocdejong opened on Oct 14, 2026

• Progress notifications are dropped when they arrive in the same read as their request's response

  v1v2
  modelcontextprotocol/typescript-sdk#3018 · Filter by author ot-of-fincra opened on Oct 14, 2026
  1

• AjvJsonSchemaValidator: allow ajv options (e.g. useDefaults) without giving up the per-dialect engine choice

  v2
  modelcontextprotocol/typescript-sdk#3017 · Filter by author marcusschiesser opened on Oct 14, 2026

• [v2] docs:api fails on native Windows with backslash entry-point globs

  v2
  modelcontextprotocol/typescript-sdk#3015 · Filter by author jpdefo opened on Oct 14, 2026

• [v2] Link targets for the "AuthInfo" interface are improper

  v2
  modelcontextprotocol/typescript-sdk#3012 · Filter by author mikecat opened on Oct 13, 2026
  1

• Low-level Server.setRequestHandler strips unknown tools/call params members before any author schema can preserve them

  v2
  modelcontextprotocol/typescript-sdk#3008 · Filter by author kesslerio opened on Oct 12, 2026
  3

• UriTemplate treats RFC 6570 prefix modifiers as variable-name text and drops scalar values

  v1v2
  modelcontextprotocol/typescript-sdk#3000 · Filter by author jayfeng7 opened on Oct 11, 2026
  1

• v1→v2 upgrade path (TL;DR + codemod) ends at a server that 2026-07-28 clients cannot connect to; add a closing step or notice

  v2
  modelcontextprotocol/typescript-sdk#2977 · Filter by author ANcpLua opened on Oct 9, 2026
  2

• Client: allow an async JsonSchemaValidator for tool output validation

  v1v2
  modelcontextprotocol/typescript-sdk#2971 · Filter by author Alexander-Ollman opened on Oct 8, 2026
  2

• Stateless 405 response omits the Allow header

  v2
  modelcontextprotocol/typescript-sdk#2970 · Filter by author knoan opened on Oct 8, 2026
  2

• Server validateProtocolVersion rejects the comma-separated protocol range the client sends after negotiation

  v1
  modelcontextprotocol/typescript-sdk#2969 · Filter by author omaracone opened on Oct 8, 2026
  1

• [v2] @modelcontextprotocol/server inlines fast-uri 3.1.0, which has 9 published advisories

  v2
  modelcontextprotocol/typescript-sdk#2966 · Filter by author iroha924 opened on Oct 6, 2026
  3

• [v2] Auto-opened subscriptions/listen stream is never reopened after the server restarts or the stream drops, and the application is not notified

  v2
  modelcontextprotocol/typescript-sdk#2964 · Filter by author informatJonas opened on Oct 6, 2026
  2

• ReadBuffer: reading a single large stdio message takes time quadratic in its size

  v1v2
  modelcontextprotocol/typescript-sdk#2961 · Filter by author 11113127 opened on Oct 5, 2026
  1

• Scope challenge raised from inside a running tool handler

  authenhancementneeds decision
  modelcontextprotocol/typescript-sdk#2957 · Filter by author felixweinberger opened on Oct 5, 2026