FinanceMCP v4.10.2
Highlights
- Upgrade the MCP SDK to 1.30.0 and preserve credential-scoped tool discovery.
- Fix stdio protocol negotiation for MCP 2025-11-25 and keep JSON-RPC stdout clean.
- Harden Streamable HTTP lifecycle handling and DNS rebinding protection.
- Include the reviewed optional Dockhold deployment guide and trust-boundary notes.
Verification
- Project suite: 41 passed, 0 failed.
- @hasmcp/mcp-spec-test@0.1.1 against local stdio, revision 2025-11-25: 14 passed, 0 failed (6 optional capability cases not applicable; 1 SHOULD recommendation noted).
Fixes the source-level negotiation defect reported in #38. The npm latest dist-tag still needs to be advanced separately because this machine has no npm publisher session.