v1.9.0

1.9.0 (2026-09-26)

Bug Fixes

• apply canAccess to resource update subscriptions (c8bd89a)
• auth: name the MCP endpoint as the protected resource (d3ec457)
• declare resources.subscribe so notifyResourceUpdated reaches subscribers (03ac05f)
• deliver context.log messages at the level the client asked for (82b5821)
• stop advertising logging to 2025-era clients, which cannot opt in to it (ff53ec7)

Features

• auth: let providers pass clientIdMetadata and allowPlainPkce to their proxy (c106ece)