v0.3.0 — completeness release
Full 2026-07-28 detection coverage, a real migration path, and a programmatic API.
Detection — now 9 rules: adds tasks/list and tasks/result removals, the deprecated-capability method strings (sampling/createMessage, roots/list, logging/setLevel, …), SDK schema-constant and capability-constructor registration (setRequestHandler(InitializeRequestSchema, …), ClientCapabilities(roots=RootsCapability())), and value-aware sessionIdGenerator. Validated against the official reference servers — 0 false positives.
Tooling — --fix (with --dry-run preview) for the mechanical -32002 → -32602 rewrite; --json stdout; a typed programmatic API (import { scan } from '@booyaka/mcp-vet'); config JSON Schema; and a "needs manual review" reminder for changes static analysis can't catch.
Fixes — --fix no longer corrupts a -32002 inside a string on multibyte Python lines, and no longer reports success on a failed write; CLI --disable now applies on top of a config only.
npx @booyaka/mcp-vet .See CHANGELOG.md.