Skip to content

2.0.1

Choose a tag to compare

View all tags
@ObjectIsAdvantag ObjectIsAdvantag released this 15 Sep 04:50
· 13 commits to main since this release
Immutable release. Only release title and notes can be modified.
v2.0.1
29e3713
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v2 stable release with security patch

CLI

  • Updated to @mcpdesc/core 0.11.0 and @mcpdesc/validator 0.12.0; new
    dumps, validation, projection, splitting, and migration now
    target MCP Description 0.8.0 and its canonical schema URI.

  • dump now warns about server capabilities that MCP Description cannot
    represent and omits them instead of generating an invalid document.

  • Simplified `dump --help` into a concise grouped reference and expanded
    `agents --command dump` as the detailed guide for advanced connection,
    OAuth, CORS, and pagination behavior.

  • Dump diagnostics now use consistent [LOG], [WARN], and [VERBOSE]
    prefixes, and servers without prompts no longer emit an SDK debug trace.

  • Stateful Streamable HTTP dumps now fall back to the canonical
    `Mcp-Session-Id` header name when raw response-header inspection is
    unavailable, instead of failing after capability extraction.

  • Added dual-era MCP negotiation for legacy initialize/session servers and
    stateless MCP 2026-07-28 discovery, with --protocol auto, legacy, and
    2026-07-28 modes across CLI help and shell completions.

  • Added --protocol-version selection to diff, compare, and document for
    processing one effective view of a multi-version MCP Description.

  • Breaking: dump now emits MCP Description 0.8.0 with its exact
    immutable $schema URI instead of mcpdesc 0.7.0, and no longer generates
    x-cisco-metadata

  • split now preserves all protocol-scoped variants of selected tool identities
    and document-wide content without generating split metadata.

  • The deprecated convert command now validates and migrates mcpdesc 0.7.0
    documents to MCP Description 0.8.0

  • Breaking: the minimum supported Node.js version is now 22.

  • Replaced the legacy MCP SDK integration with @modelcontextprotocol/client
    2.0.0

  • Adopted @mcpdesc/validator for exact v0.8 validation, and @mcpdesc/core` to 0.4.0 for shared semantic operations.

  • Validation now dispatches MCP Description 0.8.0 documents by exact snapshot without falling back to a mutable latest schema; historical 0.7.0 validation remains available.

  • split now preserves all protocol-scoped variants of selected tool identities
    and document-wide content without generating split metadata or altering an
    existing extension.

  • The deprecated convert command now validates and migrates mcpdesc 0.7.0
    documents to MCP Description 0.8.0

Security

  • Updated the transitive development dependency override for js-yaml to
    ^4.3.2, resolving GHSA-2883-xcg3-v3hh / CVE-2026-84375 (unbounded CPU use
    when parsing empty merge sources).

Docs

  • Updated MCP Description documentation to direct readers to
    mcpdesc.org and contributors to the canonical
    mcpdesc/mcpdesc-specification
    repository. The bundled v0.7 specification and schemas are now clearly marked
    as historical compatibility material.
Assets 3
Loading