Skip to content

v0.1.15: mcp-ts-core ^0.9.6 → ^0.9.13 with HTTP hardening and API key placeholder fix

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 29 May 05:26
v0.1.15
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
f873166
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

mcp-ts-core ^0.9.6 → ^0.9.13 with HTTP hardening and API key placeholder fix

Adopts framework 0.9.7–0.9.13: configurable HTTP request body cap (MCP_HTTP_MAX_BODY_BYTES,
default 1 MiB, 413 guard), HTTP session-init gate (400 on missing Mcp-Session-Id),
quieter logging for 401/403/400/404 client errors, and GET /mcp now surfaces package keywords.

Added:

  • landing: { requireAuth: false } — serves full tool inventory on landing page for this public-catalog deployment
  • MCP_HTTP_MAX_BODY_BYTES documented in .env.example

Changed:

  • OPENFDA_API_KEY parser — z.preprocess strips MCPB placeholder strings and empty values to undefined
  • manifest.json user_config.openfda_api_key — "default": "" added
  • package.json keywords — bun, stdio, streamable-http added; now surfaced on GET /mcp

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.9.6 → ^0.9.13
  • @biomejs/biome ^2.4.15 → ^2.4.16

46 tests pass; bun run devcheck clean.

Assets 3
Loading