github-featured/modelcontextprotocol--python-sdk

Files

T

History

Paul Carleton ca0c774ec9 Use token introspection instead of hardcoded token validation

Replace the hardcoded token prefix validation with OAuth 2.0 Token
Introspection (RFC 7662). The server now:
- Discovers the introspection endpoint from AS metadata
- Calls the introspection endpoint to validate each token
- Extracts client_id, scopes, and expiry from the response

This properly integrates with the authorization server rather than
relying on hardcoded token patterns.

2026-01-14 12:14:24 +00:00

clients

feat: standardize timeout values to floats in seconds (#1766 )

2025-12-19 12:22:56 +00:00

fastmcp

Allow CallToolResult to be returned directly to support _meta field for OpenAI Apps (#1459 )

2025-10-21 18:52:08 +00:00

servers

Use token introspection instead of hardcoded token validation

2026-01-14 12:14:24 +00:00

snippets

Add streamable_http_client which accepts httpx.AsyncClient instead of httpx_client_factory (#1177 )

2025-12-10 16:39:00 +00:00

README.md

Update READMEs

2024-11-19 12:37:10 +00:00

README.md

Python SDK Examples

This folders aims to provide simple examples of using the Python SDK. Please refer to the servers repository for real-world servers.