Issues

• server: registeredResource.update and registeredResourceTemplate.update desync title and metadata.title when updating metadata alone

  modelcontextprotocol/typescript-sdk#3103 · Filter by author shafiktanbir opened on Oct 26, 2026
  1

• server: memorySkillFiles.list() and read() do not normalize or validate non-canonical relative paths

  modelcontextprotocol/typescript-sdk#3102 · Filter by author shafiktanbir opened on Oct 26, 2026
  1

• [v2] server/client 2.4.0 inline fast-uri 3.1.8; four advisories published after release are fixed in 3.1.9

  modelcontextprotocol/typescript-sdk#3101 · Filter by author BenitoWotchero opened on Oct 26, 2026

• [v2] A response that arrives after its request was cancelled raises onerror

  v2
  modelcontextprotocol/typescript-sdk#3097 · Filter by author subhashpolisetti opened on Oct 25, 2026

• isProvablyObjectShapedRoot does not recognize $defs/$ref to typeless object-shaped schemas (e.g. named discriminatedUnion)

  v2
  modelcontextprotocol/typescript-sdk#3094 · Filter by author shafiktanbir opened on Oct 24, 2026

• [v1.x] Protocol.request keeps its abort listener after the request resolved, so a later abort sends notifications/cancelled for an answered request (1.30.0)

  v1
  modelcontextprotocol/typescript-sdk#3090 · Filter by author roundai-kiril opened on Oct 23, 2026
  1

• [v2] Client.connect(): timeout and signal do not bound the notifications/initialized POST

  v1v2
  modelcontextprotocol/typescript-sdk#3078 · Filter by author JarvisMaxDev opened on Oct 23, 2026
  1

• [v2] Client accepts a parent-path protected resource metadata, is this intended given RFC 9728?

  v2
  modelcontextprotocol/typescript-sdk#3077 · Filter by author PhysicallyActive opened on Oct 23, 2026
  1

• [v2] Response cache accepts pre-reset generation-0 writes after reconnect

  v2
  modelcontextprotocol/typescript-sdk#3075 · Filter by author ilovvveu opened on Oct 23, 2026

• StdioClientTransport.close() doesn't clean up listeners, causing EventEmitter memory leak warning

  v1v2
  modelcontextprotocol/typescript-sdk#3070 · Filter by author amd-clb opened on Oct 22, 2026
  3

• [v2] Expose the JSON-RPC request id to callers of request() (onRequestId)

  v1v2
  modelcontextprotocol/typescript-sdk#3061 · Filter by author DanielSLew opened on Oct 21, 2026
  1

• [v2] Expose per-request stream end (onRequestStreamEnd) in RequestOptions for custom long-lived requests

  v1v2
  modelcontextprotocol/typescript-sdk#3060 · Filter by author DanielSLew opened on Oct 21, 2026

• McpServer.connect() Appears to Return null/undefined with Per-Request Server Instantiation and await; Leads to "Method not found"

  v1
  modelcontextprotocol/typescript-sdk#3058 · Filter by author M-ldhfodh opened on Oct 20, 2026
  1

• [v2] Streamable HTTP client never re-initializes after server 404 "session not found" — needs maintainer call on era architecture

  v1v2
  modelcontextprotocol/typescript-sdk#3056 · Filter by author xyonium opened on Oct 20, 2026
  1

• Streamable HTTP: the POST for a cancelled request never settles

  v1v2
  modelcontextprotocol/typescript-sdk#3053 · Filter by author dannote opened on Oct 19, 2026
  10

• [v2] e2e protocol:timeout:max-total is flaky over SSE: fake timers advance before the request reaches the server

  v1v2
  modelcontextprotocol/typescript-sdk#3045 · Filter by author JQ100 opened on Oct 18, 2026

• [v1.x] Backport #2654: notifications/cancelled with requestId: 0 is ignored, so the first server→client request cannot be cancelled (still in 1.32.1)

  v1
  modelcontextprotocol/typescript-sdk#3043 · Filter by author mihai-r-lupu opened on Oct 17, 2026
  1

• checkResourceAllowed rejects a protected resource that differs from the server URL only by a trailing slash (one direction only)

  v1v2
  modelcontextprotocol/typescript-sdk#3041 · Filter by author magnew opened on Oct 16, 2026
  2

• [v2] createMcpHandler maxSubscriptions is handler-wide, no per-session cap option

  enhancementv2
  modelcontextprotocol/typescript-sdk#3036 · Filter by author JayDS22 opened on Oct 15, 2026
  4

• [v2] ClientCredentialsProvider cannot sign in: RFC 8414 metadata without authorization_endpoint is refused, though a client-credentials-only server has none

  v1v2
  modelcontextprotocol/typescript-sdk#3033 · Filter by author joeblew999 opened on Oct 15, 2026

• Add file parse example server (PDF DOCX XLSX without binaries)

  v1v2
  modelcontextprotocol/typescript-sdk#3031 · Filter by author TejasS1233 opened on Oct 15, 2026

• StreamableHTTPServerTransport: option to send SSE keepalive comments on open streams

  v1
  modelcontextprotocol/typescript-sdk#3027 · Filter by author 0xdeafcafe opened on Oct 14, 2026

• Client DPoP: support external signers (non-CryptoKey keys) in DpopSession

  enhancementv2
  modelcontextprotocol/typescript-sdk#3026 · Filter by author figitaki opened on Oct 14, 2026

• [v2] Browser-hosted MCP servers fail in Firefox after request-body reader changes

  v1v2
  modelcontextprotocol/typescript-sdk#3025 · Filter by author mayurj747 opened on Oct 14, 2026

• Public inbound-processing completion seam for reusable bounded admission

  v1v2
  modelcontextprotocol/typescript-sdk#3020 · Filter by author servrox opened on Oct 14, 2026