Skip to content

MCP Attack Surface Detect v1.0.2 Release

Choose a tag to compare

@hoodoer hoodoer released this 26 Feb 00:41
· 1 commit to main since this release

Bump version to 1.0.2: Add HTTP POST-only transport, fix mTLS across all transports

  • Merge PR #10: HTTP POST-only transport for MCP servers that don't support GET/SSE
  • Fix mTLS bug in all three transports (SSE, WebSocket, POST-only) where configureMtls() overwrote the trust-all SSL context, breaking connections to servers with self-signed certificates
  • Fix PostOnlyTransport thread/resource leaks: shut down OkHttp dispatcher on close, call listener.onClose(), use bounded thread pool
  • Update README to reflect new transport option