Skip to content

v2.5.2: mcp-ts-core ^0.9.9 → ^0.9.13: 413 body cap, session-init gate, quieter error logs, GET /mcp keywords

Choose a tag to compare

@cyanheads cyanheads released this 29 May 05:03
v2.5.2
c5af39d

mcp-ts-core ^0.9.9 → ^0.9.13: 413 body cap, session-init gate, quieter error logs, GET /mcp keywords

Adopts four framework releases and adds explicit landing page configuration.

Changed:

  • MCP_HTTP_MAX_BODY_BYTES — 413 body cap (default 1 MiB) before any session or SDK parsing
  • HTTP session-init gate — 400 on requests missing Mcp-Session-Id before session established
  • Quieter 401/403/400/404 logging — warning-level, no stack traces
  • GET /mcppackage.json keywords now surfaced on status JSON
  • landing.requireAuth: false — explicit opt-in to full inventory; required after 0.9.13 default changed to auth-gated
  • manifest.json — repository, homepage, license fields added
  • .claude-plugin/ and .codex-plugin/ — plugin metadata scaffolded

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.9.9 → ^0.9.13
  • @biomejs/biome ^2.4.15 → ^2.4.16
  • @cloudflare/workers-types ^4.20260526.1 → ^4.20260529.1

326 tests pass; bun run devcheck clean.