Max Isbey 94982a5b93 feat: add MCP_HIDE_INPUT_IN_ERRORS env var to redact payloads from validation errors ...

Pydantic's ValidationError repr includes the raw input_value by default.
When the SDK calls model_validate_json() on untrusted data (SSE messages,
OAuth responses) and validation fails, logger.exception() dumps the entire
payload into logs. This can leak sensitive tool output or OAuth tokens.

Setting MCP_HIDE_INPUT_IN_ERRORS=1 before importing the SDK applies
hide_input_in_errors=True to the jsonrpc_message_adapter TypeAdapter and
the OAuth models (OAuthToken, OAuthClientMetadata, OAuthMetadata,
ProtectedResourceMetadata). The error type and location remain in the
message; only the raw input is omitted.

Opt-in via env var to preserve the current debugging-friendly default.

2026-03-25 16:16:02 +00:00

..

cli

test: rewrite cli.claude config tests to assert JSON output directly (#2311)

2026-03-19 15:16:34 +00:00

client

test: rewrite cli.claude config tests to assert JSON output directly (#2311)

2026-03-19 15:16:34 +00:00

experimental

perf: use deque for InMemoryTaskMessageQueue FIFO operations (#2165)

2026-03-05 15:44:33 +00:00

issues

test: fix progress notification assertions for related_request_id (#2038)

2026-02-18 11:53:03 +00:00

server

fix: cancel in-flight handlers when transport closes in server.run() (#2306)

2026-03-20 13:37:32 +00:00

shared

test: fix WS test port race; narrow to single smoke test covering both transport ends (#2267)

2026-03-18 15:48:30 +00:00

__init__.py

Initial import

2024-09-24 22:04:19 +01:00

conftest.py

tests: cleanup

2025-02-05 11:02:51 +00:00

test_examples.py

fix: make local coverage runs reliable (#2236)

2026-03-06 17:24:18 +00:00

test_helpers.py

test: fix WS test port race; narrow to single smoke test covering both transport ends (#2267)

2026-03-18 15:48:30 +00:00

test_types.py

feat: add MCP_HIDE_INPUT_IN_ERRORS env var to redact payloads from validation errors

2026-03-25 16:16:02 +00:00