Issues

• Two untested SEP-2243 server requirements: one real gap, one row I can't find spec text for

  modelcontextprotocol/conformance#570 · Filter by author beskvladimir-create opened on Oct 21, 2026

• Is an authorization-server leg wanted for WIF (SEP-1933)?

  modelcontextprotocol/conformance#569 · Filter by author beskvladimir-create opened on Oct 21, 2026

• examples: SDK-transport servers cannot speak draft protocol versions — extract everything-server's pre-transport handling into a shared helper

  modelcontextprotocol/conformance#568 · Filter by author PieterKas opened on Oct 21, 2026

• SEP-1932 DPoP fixtures fail auth/dpop-server-validation at the CLI's default spec version

  modelcontextprotocol/conformance#566 · Filter by author figitaki opened on Oct 17, 2026
  1

• Server Auth: Protected Resource Metadata discovery (RFC 9728)

  enhancement
  modelcontextprotocol/conformance#565 · Filter by author nbarbettini opened on Oct 17, 2026

• test_logging_tool response omits resultType on the 2026-07-28 wire

  bug
  modelcontextprotocol/conformance#562 · Filter by author nulltoken opened on Oct 16, 2026
  1

• Client scenario elicitation-sep1034-client-defaults (2025-11-25): the mock never delivers the server→client elicitation — GET stream answers keepalives only

  modelcontextprotocol/conformance#557 · Filter by author zhoutk opened on Oct 15, 2026

• http-header-validation grades -32020 as SHOULD for standard headers; 2026-07-28 Server Validation makes it MUST

  modelcontextprotocol/conformance#553 · Filter by author cig13zs opened on Oct 15, 2026

• sep-2164-error-code grades the resource-not-found code as SHOULD; 2026-07-28 makes it MUST

  modelcontextprotocol/conformance#552 · Filter by author cig13zs opened on Oct 15, 2026

• auth/dpop: refresh-binding check is unreachable for real clients — add a short-expiry posture

  modelcontextprotocol/conformance#551 · Filter by author PieterKas opened on Oct 14, 2026

• Proposal: SEP-2127 Server Card scenario

  modelcontextprotocol/conformance#550 · Filter by author Wolfe-Jam opened on Oct 14, 2026
  1

• sep-1932 authorization-server scenario: dpop_jkt enforcement is untested (RFC 9449 §10)

  modelcontextprotocol/conformance#549 · Filter by author PieterKas opened on Oct 12, 2026

• sep-2322 client scenario never sends requestState without inputRequests

  modelcontextprotocol/conformance#547 · Filter by author SergeevDmitry opened on Oct 10, 2026

• server-initialize passes a server that answers every method with a result

  modelcontextprotocol/conformance#546 · Filter by author dosvk opened on Oct 9, 2026

• Traceability refresh workflow stopped opening PRs after #292 merged

  modelcontextprotocol/conformance#543 · Filter by author nbarbettini opened on Oct 5, 2026

• SEP-1036 (URL elicitation): conformance checks

  enhancement
  modelcontextprotocol/conformance#542 · Filter by author nbarbettini opened on Oct 4, 2026
  1

• Triggers and Events extension: client conformance scenarios

  modelcontextprotocol/conformance#540 · Filter by author panyam opened on Oct 2, 2026
  1

• Follow-up to #454: validate --timeout before running scenarios

  modelcontextprotocol/conformance#539 · Filter by author yannvr opened on Oct 1, 2026

• everything-server: implement the tasks extension (io.modelcontextprotocol/tasks)

  modelcontextprotocol/conformance#536 · Filter by author dhruvtv opened on Sep 29, 2026

• dns-rebinding-protection: check Host and Origin validation separately

  enhancement
  modelcontextprotocol/conformance#535 · Filter by author ninadphalak opened on Sep 28, 2026

• everything-server: subscriptions/listen responds with newline-delimited JSON, not SSE

  modelcontextprotocol/conformance#531 · Filter by author dhruvtv opened on Sep 27, 2026
  1

• server-stateless: 500 ms whole-request deadline in no-log-without-loglevel reports slow servers as failures

  modelcontextprotocol/conformance#530 · Filter by author birbprophet opened on Sep 25, 2026

• server: sessions of failed scenarios are never closed (close() skipped on the error path)

  modelcontextprotocol/conformance#526 · Filter by author joshscott13 opened on Sep 25, 2026

• http-custom-header-server-validation: no case sends an empty x-mcp-header value

  modelcontextprotocol/conformance#519 · Filter by author po-et opened on Sep 24, 2026
  1

• Cover optional extension capability preservation in legacy initialize handshakes

  modelcontextprotocol/conformance#517 · Filter by author sambhav opened on Sep 23, 2026