github-featured/modelcontextprotocol--python-sdk
2
0
Fork 0
Code Issues Pull Requests Deployments Models Agent Notes Packages Projects Releases Wiki Activity
689 Commits 166 Branches 73 Tags
v1.23.3
Commit Graph

259 Commits

Author SHA1 Message Date
Arjun TS 2bf9b10f63 Skip empty SSE data to avoid parsing errors (#1753) 
Co-authored-by: ARJUN-TS1 <arjun.ts1@ibm.com>
Co-authored-by: Max Isbey <224885523+maxisbey@users.noreply.github.com>
 2025-12-09 15:14:23 +00:00
Anton Pidkuiko 8ac11ec604 fix: allow MIME type parameters in resource validation (RFC 2045) (#1755) 
Co-authored-by: Claude <noreply@anthropic.com>
 2025-12-09 14:56:40 +00:00
Max Isbey 8b984d93a3 refactor(auth): remove unused _register_client method (#1748) 2025-12-08 21:50:20 +00:00
Felix Weinberger 89ff338174 fix: skip priming events and close_sse_stream for old protocol versions (#1719)
Main branch checks / checks (push) Failing after 0s
Details
2025-12-04 14:44:08 +00:00
Edison 9ed0b93ceb fix: handle ClosedResourceError in StreamableHTTP message router (#1384) 
Co-authored-by: Max Isbey <224885523+maxisbey@users.noreply.github.com>
Co-authored-by: Marcelo Trylesinski <marcelotryle@gmail.com>
 2025-12-04 11:36:23 +01:00
Felix Weinberger 8e02fc17e1 chore: update LATEST_PROTOCOL_VERSION to 2025-11-25 (#1715)
Main branch checks / checks (push) Failing after 1s
Details
2025-12-02 18:27:27 +00:00
Paul Carleton d3a184119e Merge commit from fork
Main branch checks / checks (push) Failing after 0s
Details 
* Auto-enable DNS rebinding protection for localhost servers

When a FastMCP server is created with host="127.0.0.1" or "localhost"
and no explicit transport_security is provided, automatically enable
DNS rebinding protection. Both 127.0.0.1 and localhost are allowed
as valid hosts/origins since clients may use either to connect.

* Add tests for auto DNS rebinding protection on localhost

Tests verify that:
- Protection auto-enables for host=127.0.0.1
- Protection auto-enables for host=localhost
- Both 127.0.0.1 and localhost are in allowed hosts/origins
- Protection does NOT auto-enable for other hosts (e.g., 0.0.0.0)
- Explicit transport_security settings are not overridden

* Add IPv6 localhost (::1) support for DNS rebinding protection

Extend auto-enable DNS rebinding protection to also cover IPv6
localhost. When host="::1", protection is now auto-enabled with
appropriate allowed hosts ([::1]:*) and origins (http://[::1]:*).

* Fix import ordering in test file
 2025-12-02 13:23:55 +00:00
Felix Weinberger fa851d93a2 feat: backwards-compatible create_message overloads for SEP-1577 (#1713) 2025-12-02 13:17:45 +00:00
Paul Carleton f82b0c9371 Support client_credentials flow with JWT and Basic auth (#1663) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
 2025-12-02 12:53:55 +00:00
Felix Weinberger 281fd4765e Add SSE polling support (SEP-1699) (#1654) 2025-12-02 11:44:49 +00:00
Camila Rondinini 2cd178a962 Add on_session_created callback option (#1710) 2025-12-01 17:48:33 +00:00
Max Isbey c92bb2f7ff SEP-1686: Tasks (#1645) 2025-11-28 18:51:58 +00:00
Felix Weinberger 5983a650cc Skip empty SSE data to avoid parsing errors (#1670) 2025-11-26 18:09:39 +00:00
Chris Coutinho 02b7889929 Implement SEP-1036: URL mode elicitation for secure out-of-band interactions (#1580) 
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
 2025-11-25 11:00:21 +00:00
Paul Carleton f22501315e feat: implement SEP-991 URL-based client ID (CIMD) support (#1652) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
 2025-11-24 17:21:03 +00:00
Felix Weinberger 091afb82dc Implement SEP-986: Tool name validation (#1655) 2025-11-24 16:46:57 +00:00
Tapan Chugh b19fa6f279 SEP-1330: Elicitation Enum Schema Improvements and Standards Compliance (#1246) 
Co-authored-by: Tapan Chugh <tapanc@cs.washington.edu>
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
 2025-11-23 23:32:08 +00:00
Olivier Chafik 71c475588f Implement SEP-1577 - Sampling With Tools (#1594) 
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
 2025-11-22 23:58:14 -05:00
Jon Shea c51936f61f Add client_secret_basic authentication support (#1334) 
Co-authored-by: Paul Carleton <paulc@anthropic.com>
 2025-11-20 20:53:37 +00:00
Felix Weinberger 397089a78e Add tests for JSON Schema 2020-12 field preservation (SEP-1613) (#1649) 2025-11-20 20:51:13 +00:00
Liang Wu 9c8f763aa8 chore: Lazy import jsonschema library (#1596) 
Co-authored-by: Max Isbey <224885523+maxisbey@users.noreply.github.com>
 2025-11-19 15:30:52 +00:00
Andrii Blyzniuk 5489e8b6fb fix get_client_metadata_scopes on 401 (#1631) 
Co-authored-by: Max Isbey <224885523+maxisbey@users.noreply.github.com>
 2025-11-16 17:18:50 +00:00
inaku a357380cfa feat: Pass through and expose additional parameters in ClientSessionGroup.call_tool and .connect_to_server (#1576) 2025-11-16 15:57:43 +00:00
Victorien 116c13e2c6 Refactor func_metadata() implementation (#1496) 2025-11-13 20:21:15 +00:00
Max Isbey 91ccdb3d65 Fix OAuth discovery fallback and URL ordering (#1624) 2025-11-13 19:37:24 +00:00
Max Isbey 7d12e83cf4 refactor: extract OAuth helper functions and simplify provider state (#1586) 2025-11-13 13:28:48 +00:00
Max Isbey 89e9c43acf Get baseline 100% clean coverage (#1553) 2025-11-11 14:09:32 +01:00
Camila Rondinini 9eae96a05e Add get_server_capabilities() to ClientSession (#1588)
Main branch checks / checks (push) Failing after 0s
Details
2025-11-06 20:44:40 +00:00
Chris Coutinho 3390e49c01 Implement SEP-985: OAuth Protected Resource Metadata discovery fallback (#1548) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Paul Carleton <paulc@anthropic.com>
 2025-11-05 15:51:02 +00:00
Luca Chang f161149680 Implement RFC 7523 JWT flows (#1247) 
Co-authored-by: Yann Jouanin <yann.jouanin@valueandco.com>
 2025-10-29 16:48:08 +00:00
Max Isbey db9e451551 fix: Replace remaining manual server polling with wait_for_server helper (#1529) 2025-10-29 11:27:57 +00:00
Max Isbey c44e68f766 Fix flaky timeout test in test_88_random_error (#1525) 2025-10-28 14:45:25 -07:00
Max Isbey 3e86edfb2f fix: Replace arbitrary sleeps with active server readiness checks in tests (#1527) 
Co-authored-by: Claude <noreply@anthropic.com>
 2025-10-28 21:42:33 +00:00
Max Isbey f97f7c4a7d fix: Replace fixed sleep with active server readiness check in SSE tests (#1526) 2025-10-28 19:49:13 +00:00
adam jones 31ae5f4dc4 Relax Accept header requirement for JSON-only responses (#1500) 2025-10-27 17:46:04 +00:00
mingo007 b7e4ae7542 test: use errno.ENOENT for command not found assertion (#1498) 2025-10-23 16:30:50 -07:00
Brandon Shar 1200ba0082 Allow CallToolResult to be returned directly to support _meta field for OpenAI Apps (#1459) 
Co-authored-by: Max Isbey <224885523+maxisbey@users.noreply.github.com>
 2025-10-21 18:52:08 +00:00
Samuel Felipe Chenatti 40acbc596c Expose RequestParams._meta in ClientSession.call_tool (#1231) 
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
 2025-10-17 17:57:56 +01:00
Mat Leonard 98f82485bd feat: add tool metadata in FastMCP.tool decorator (#1463) 
Co-authored-by: Max Isbey <224885523+maxisbey@users.noreply.github.com>
 2025-10-17 11:18:34 +00:00
daamitt dcc68ce56b fix: Set the Server session initialization state immediately after respond… (#1478)
Main branch checks / checks (push) Failing after 0s
Details 
Co-authored-by: Max Isbey <224885523+maxisbey@users.noreply.github.com>
 2025-10-15 13:56:43 +01:00
Felix Weinberger de89457683 fix: send params as empty object for list methods without cursor (#1453) 2025-10-14 11:11:38 +01:00
Fenn Bailey cd7253c593 feat: add resource annotations support to FastMCP (#1468) 2025-10-14 11:07:37 +01:00
AishwaryaKalloli b4e50aa9f9 Handles message type Exception in lowlevel/server.py _handle_message function. Mentioned as TODO on line 528. (#786) 
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
 2025-10-13 14:29:03 +01:00
Dogacan Colak 0e29cc4130 [client] Implement MCP OAuth scope selection and step-up authorization (#1324) 2025-10-13 14:18:00 +01:00
Brandon Wu b8e758b02b feat: add ability to remove tools (#1322) 
Co-authored-by: David Soria Parra <167242713+dsp-ant@users.noreply.github.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
Co-authored-by: Max Isbey <224885523+maxisbey@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
 2025-10-06 14:16:50 +01:00
Marcus Shu df3e428ee8 Improve OAuth protected resource metadata URL construction per RFC 9728 (#1407) 2025-10-06 13:52:44 +01:00
Peter Alexander 3e798bfc01 Add icons support for ResourceTemplate (#1412)
Main branch checks / checks (push) Failing after 0s
Details
2025-10-01 13:23:46 +01:00
Lorenzo d648a31359 fix: improve misleading warning for progress callback exceptions (#775) 2025-09-30 14:39:52 +01:00
Peter Alexander 80c0d23d48 Update Icon.sizes to use string array format (#1411) 2025-09-29 14:27:32 +01:00
Peter Alexander 60f4b2d10a Add comprehensive Unicode tests for streamable HTTP transport (#1381) 2025-09-29 14:09:33 +01:00