Skip to content

v2.0.1

Choose a tag to compare

View all tags
@benoitc benoitc released this 21 May 00:10
· 7 commits to main since this release
v2.0.1
89b8527
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Follow-up hardening from a review of the 2.0.0 transport. No API changes.

  • Attach _auth only on the request dispatch path, so a client-posted JSON-RPC response (answering a server sampling/elicitation request) no longer carries it into the delivered map. Server-internal; matches 1.x.
  • barrel_mcp_http_listener backs off briefly on non-closed accept errors, so file-descriptor exhaustion (emfile) throttles the acceptor instead of spinning the CPU.

See CHANGELOG.md for full notes.

Assets 2
Loading