v0.1.4 — crash detection and mcp SDK 2.x compatibility
Retracted finding: Earlier versions reported a 33-50% contract crash rate against mcp-server-git and @modelcontextprotocol/server-filesystem, filed upstream as modelcontextprotocol/servers#4754. That finding was wrong and has been retracted — neither server crashes. It was a bug in this scanner's error classifier, fixed below.
Fix 1 — crash detection no longer reads error message text. Response.delivered is now the crash signal: false only when a response was built from a raised exception. Rejections we cannot classify are reported as unclassified rather than scored as crashes.
Fix 2 — mcp SDK 2.x compatibility. The SDK renamed isError, inputSchema and serverInfo in 2.0, and every read used getattr with a default — so a 2.x install reported every tool error as a success. Both majors now work, with a regression test per major. Dependency capped at mcp>=1.0.0,<3.
610 tests. All nine previously scanned servers re-run side by side. Three scores changed — the two wrongly accused servers.