v2.7.7: mcp-ts-core ^0.9.10 → ^0.9.13; landing page, 413 guard, GET /mcp keywords
mcp-ts-core ^0.9.10 → ^0.9.13; landing page, 413 guard, GET /mcp keywords
Framework adoption across three releases (0.9.11–0.9.13).
Changed:
landing.requireAuth: false(src/index.ts) — explicit opt-out for the hosted public catalog. Framework 0.9.13 changed the default:landing.requireAuthis nowtruewhenMCP_AUTH_MODEisjwtoroauth. The pubmed instance is a public catalog, so this preserves the open-by-default behavior.- 413 request-body cap —
MCP_HTTP_MAX_BODY_BYTESdocumented in.env.example. Framework 0.9.13 rejects oversized HTTP requests before per-request allocation. Default 1 MiB; set to0to disable. GET /mcpkeywords —server.keywordsnow included in the HTTP status response (frompackage.jsonkeywords). Added"stdio"and"streamable-http"to the keywords list for better catalog discovery.
Dependency bumps:
@cyanheads/mcp-ts-core^0.9.10 → ^0.9.13
624 tests pass; bun run devcheck clean.