All pull requests

Pull requests

• fix(model): reject a request whose id is not an integer or a string

  T-coreT-testT-transport
  #1346·talhayme opened Oct 12, 2026·

  ·
  1

• feat(client): cancel an abandoned tools/call, prompts/get or resources/read

  T-configT-coreT-dependenciesT-serviceT-test
  #1344·talhayme opened Oct 12, 2026·

  ·
  1

  6

• feat(transport): expose streamable HTTP Host header check

  T-coreT-testT-transport
  #1343·monody0007 opened Oct 12, 2026·

  ·
  1

• fix: ship LICENSE in rmcp and rmcp-macros crates

  T-macrosT-test
  #1342·Steeve-Crypto opened Oct 11, 2026·

  ·
  1

  2

• fix(transport): keep 401/403 status when the body is a JSON-RPC error

  T-coreT-testT-transport
  #1341·aton-of-data opened Oct 11, 2026·

  ·
  1

• fix(server): omit non-object tool output for legacy peers

  T-coreT-handlerT-test
  #1340·Cassian433 opened Oct 11, 2026·5 of 9 tasks·

  ·
  1

• fix(auth): refresh with granted scopes

  T-coreT-transport
  #1331·jstar0 opened Oct 9, 2026Contributor·

  ·
  1

  4

• fix(http): cancel local session requests on disconnect

  T-coreT-testT-transport
  #1328·kkkhs opened Oct 7, 2026·

  ·
  1

• chore: release v3.5.2

  #1327·github-actions[bot] opened Oct 6, 2026Bot·

  ·

• fix(server): reject server-to-client requests on 2026-07-28

  T-coreT-serviceT-testT-transport
  #1326·DaleSeo opened Oct 6, 2026Member·6 of 9 tasks·

  ·
  1

  

• fix(http): validate Origin literals and cache known schemas

  T-coreT-testT-transport
  #1319·GraciousGazelles opened Oct 4, 2026·

  ·
  1

• fix(client): keep ProgressDispatcher lock off the await path

  T-coreT-handlerT-test
  #1310·monody0007 opened Sep 29, 2026·

  ·
  1

  2

• fix(auth): structure protected resource discovery errors

  T-coreT-testT-transport
  #1305·Niri7981 opened Sep 28, 2026·

  ·
  4

• feat(transport): add non-blocking stdio_pipes transport

  T-configT-coreT-dependenciesT-transport
  #1304·itsmunzir opened Sep 27, 2026·

  ·
  1

  21

• fix(server): answer malformed params for spec methods with invalid params

  T-coreT-handlerT-test
  #1303·2sumtech opened Sep 26, 2026·6 of 9 tasks·

  ·

• fix(auth): allow cross-origin resource_metadata urls

  T-coreT-transport
  #1302·DaleSeo opened Sep 26, 2026Member·6 of 9 tasks·

  ·
  1

  6

  

• chore(deps): update sse-stream requirement from 0.2.4 to 0.3.0

  T-configT-dependencies
  #1289·dependabot[bot] opened Sep 22, 2026Bot·

  ·

• fix(model): reject malformed JSON-RPC messages with conflicting result and error fields (#1283)

  T-configT-coreT-dependencies
  #1287·ump45nose opened Sep 20, 2026Contributor·

  ·
  8

• feat(rmcp): implement SEP-2640 MCP Skills Extension

  T-configT-coreT-dependenciesT-documentationT-handlerT-macrosT-modelT-serviceT-test
  #1286·branben opened Sep 18, 2026Contributor·7 of 9 tasks·

  ·
  6

• fix(streamable-http): match Origin's omitted default port against explicit allowlist entries

  T-coreT-testT-transport
  #1282·yinnho opened Sep 17, 2026·

  ·
  1

  1

• fix(auth): structure metadata discovery errors

  T-coreT-transport
  #1280·ASTion24 opened Sep 16, 2026·

  ·
  1

  4

• fix: reject discovery for legacy-only servers

  T-coreT-handlerT-test
  #1269·JulienCote opened Sep 14, 2026·

  ·
  9

• fix(http): cancel session work when the transport closes

  T-coreT-testT-transport
  #1267·charliemarsh-oai opened Sep 13, 2026·

  ·

• ci: combine AI issue triage with a maintainer rotation as the responsible reviewer

  T-CIT-configT-documentation
  #1260·alexhancock opened Sep 11, 2026Contributor·7 of 9 tasks·

  ·
  10

• fix(transport): stop keeping a session and GET stream at 2026-07-28

  T-configT-coreT-dependenciesT-testT-transport
  #1256·LizunovSergey opened Sep 10, 2026·

  ·
  1

  14