Skip to content

v1.2.8: mcp-ts-core ^0.9.6 → ^0.9.13: HTTP hardening, quieter client-error logging, GET /mcp keywords

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 29 May 04:50
· 15 commits to main since this release
v1.2.8
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
a542821
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

mcp-ts-core ^0.9.6 → ^0.9.13: HTTP hardening, quieter client-error logging, GET /mcp keywords

Framework adoption picks up six releases of mcp-ts-core with HTTP transport hardening,
improved error observability, and package keyword surfacing.

Changed:

  • HTTP session-init gate — stateful HTTP mode now rejects non-initialize requests without Mcp-Session-Id with 400, preventing uninitialized session minting.
  • MCP_HTTP_MAX_BODY_BYTES — oversized HTTP requests rejected with 413 before SDK body parse (default 1 MiB).
  • httpErrorHandler — 401/403/400/404 responses now log at warning instead of running the full error-handler pipeline with stack traces, reducing noise.
  • GET /mcp keywords — package.json keywords surfaced in the HTTP status response alongside name, version, and description.
  • landing.requireAuth: false — explicitly set in createApp() to restore full landing page inventory for public-catalog deployments.

Added:

  • npm keywords: bun, stdio, streamable-http added for discovery.

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.9.6 → ^0.9.13
  • @biomejs/biome ^2.4.15 → ^2.4.16

235 tests pass; bun run devcheck clean.

Assets 3
Loading