Skip to content

v0.1.9: mcp-ts-core ^0.9.9 → ^0.9.13: HTTP hardening and log-level improvements

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 29 May 05:14
· 20 commits to main since this release
v0.1.9
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
e90c117
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

mcp-ts-core ^0.9.9 → ^0.9.13: HTTP hardening and log-level improvements

Adopts framework ^0.9.13 from ^0.9.9, adding configurable request-body capping, an HTTP session-init guard, and quieter expected-error logging.

  • MCP_HTTP_MAX_BODY_BYTES — 413 rejection before SDK parsing; default 1 MiB.

  • HTTP session-init gate — stateful HTTP rejects non-initialize requests missing Mcp-Session-Id with 400.

  • httpErrorHandler log-level split — 401/403/400/404 use logger.warning, eliminating stack-trace noise for expected client errors.

  • landing.requireAuth: false set in createApp() to preserve public-catalog behavior after the framework default change.

  • GET /mcp keywords — package.json keywords now surfaced on the status endpoint.

  • @cyanheads/mcp-ts-core ^0.9.9 → ^0.9.13

  • @biomejs/biome ^2.4.15 → ^2.4.16

34 tests pass; bun run devcheck clean.

Assets 3
Loading