v2.0.0
Major Changes
-
33c06b6: Upgrade to MCP SDK v2 and the 2026-07-28 MCP specification (CIMD era).
- The handler now serves the stateless 2026-07-28 protocol (per-request
_metaenvelope,server/discover) natively, with the SDK's stateless legacy fallback answering 2025-era Streamable HTTP clients from the same handler. - Breaking: requires
@modelcontextprotocol/server^2.0.0 (replaces the@modelcontextprotocol/sdkpeer dependency),zod^4.2.0 for schemas, and Node.js 20+. - Breaking: the legacy HTTP+SSE transport (protocol 2024-11-05) has been removed.
/sseand/messageendpoints answer410 Gone; theredisdependency andredisUrl,maxDuration, andsessionIdGeneratorconfig options are deprecated no-ops. - Breaking: tool/prompt/resource registration follows SDK v2 (
registerToolwithz.object(...)Standard Schemas; variadicserver.tool(...)is gone;extra.authInfois nowctx.http?.authInfo). withMcpAuthnow builds its 401/403 challenges with the SDK's consolidatedOAuthError/bearerAuthChallengeResponse, keeping RFC 9728resource_metadatadiscovery in place for CIMD-era authorization flows. Dynamic Client Registration is deprecated by the spec in favor of Client ID Metadata Documents — see README.
- The handler now serves the stateless 2026-07-28 protocol (per-request