1.12.0

Authorization spec: DRAFT-2025-v2 🔐 🚀

• feat: Add support for separate Authorization Server / Resource server in server flow (spec: DRAFT-2025-v2) by @pcarleton in #503
• Feat: Separate authorization server and resource server on client auth flow by @0Itsuki0 in #416
• Example Auth client by @ihrpr in #526

Other changes

• Add support for message field in progress notifications by @bhosmer-ant in #502
• Fix Ajv import compatibility issue by downgrading to v6 by @bhosmer-ant in #517
• fix: ProxyOAuthServerProvider: redirect_uri missing in token request by @shubham-lohar in #519
• Save existing refresh_token in store if no new refresh_token is returned by @fredericbarthelet in #483
  #527
• Add state param to OAuth provider by @jescalan in #529
• Fix StreamableHttp example for tool calls - have a separate option for testing notifications resumption by @ihrpr in #534

New Contributors

• @0Itsuki0 made their first contribution in #416
• @shubham-lohar made their first contribution in #519
• @jescalan made their first contribution in #529

Full Changelog: 1.11.4...1.12.0

1.11.5

What's Changed

• Make content in Tool Result required by @bhosmer-ant in #524

Full Changelog: 1.11.4...1.11.5

1.11.4

What's Changed

• Prototype support for outputSchema/structuredContent by @bhosmer-ant in #454
• fix sse endpoint path preservation by @bhosmer-ant in #504
• rollback path preservation fix by @bhosmer-ant in #506

Full Changelog: 1.11.3...1.11.4

1.11.3

What's Changed

• fix: preserve custom paths in SSE endpoint URLs by @bhosmer-ant in #466
• chore: fix cross-spawn version to 7.0.5 (issue: #488) by @rafaelportomoura in #489
• [FEAT] added support for AuthInfo in extra for StreamableHTTPServerTransport by @its-nikhil in #399
• feat(auth): support custom scope in authorization requests by @xiaoyijun in #491
• Fix notificaions in README.md by @Boyquotes in #480
• docs: Fix import paths for ProxyOAuthServerProvider in README by @grimmerk in #457
• Fix Table of Contents in README and markdown linter warnings. by @petervandenabeele in #449

New Contributors

• @rafaelportomoura made their first contribution in #489
• @its-nikhil made their first contribution in #399
• @xiaoyijun made their first contribution in #491
• @Boyquotes made their first contribution in #480
• @grimmerk made their first contribution in #457
• @petervandenabeele made their first contribution in #449

Full Changelog: 1.11.2...1.11.3

1.11.2

What's Changed

• feat: Add scope parameter to startAuthorization function by @pcarleton in #464
• Fix Zod object detection logic by @geelen in #468

New Contributors

• @pcarleton made their first contribution in #464

Full Changelog: 1.11.1...1.11.2

1.11.1

What's Changed

• Fix isZodRawShape return false on empty object and add test by @yuna0x0 in #448

New Contributors

• @yuna0x0 made their first contribution in #448

Full Changelog: 1.11.0...1.11.1

1.11.0

🚀 Tool Annotations

Adding support for Tools Annotations for better describing tool behavior, like whether it is read-only or destructive, as per protocol version 2025-03-26

Spec Version Update

Since we implemented most of the features in the recent spec we are updating the latest protocol version

Other Changes

• Pass requestId to handlers via metadata by @lforst in #358
• stateless had a wrong example by @TomasRup in #338
• fix SSE transport server examples by @ihrpr in #388
• Update README.md to include working examples by @simonedstrom96 in #384
• Pass request _meta to request handlers extra param by @iamarcel in #328
• Update stateless streamable http usecase by @c121914yu in #417
• Add 401 during POST request test case on StreamableHTTP transport to check auth flow by @fredericbarthelet in #411
• Ensure JSONRPCError messages are sent for streamable http by @mhart in #409
• nit: fix the comment format in the streamableHTTP.ts by @botengyao in #406
• comment: fix stateless comments that no session-id is included in any responses by @botengyao in #403
• Add stderr access before start by @hmwildermuth in #437

Please report any issues at https://github.com/modelcontextprotocol/typescript-sdk/issues.

New Contributors

• @lforst made their first contribution in #358
• @bhosmer-ant made their first contribution in #309
• @TomasRup made their first contribution in #338
• @simonedstrom96 made their first contribution in #384
• @iamarcel made their first contribution in #328
• @c121914yu made their first contribution in #417
• @mhart made their first contribution in #409
• @botengyao made their first contribution in #406
• @hmwildermuth made their first contribution in #437

Full Changelog: 1.10.2...1.11.0

1.10.2

What's Changed

• Update README.md to use correct location of InMemoryEventStore by @RamAnanth in #366
• Streamable Http - fix server initialization validation in Stateless servers by @ihrpr in #377
• Fixed Streamable HTTP Example by @ferrants in #374

New Contributors

• @RamAnanth made their first contribution in #366
• @ferrants made their first contribution in #374

Full Changelog: 1.10.1...1.10.2

1.10.1

What's Changed

• Streamable Http - fix examples for stateless server by @ihrpr in #363

Full Changelog: 1.10.0...1.10.1

1.10.0

Streamable HTTP release

This is the first release supporting the new Streamable HTTP transport from protocol version 2025-03-26, which supersedes the SSE transport from protocol version 2024-11-05. 🎉

• See the Streamable HTTP section of the README and the included examples for how to use this new transport in your client or server.
• There's also a guide on backwards compatibility, to maintain support with SSE clients or servers while the ecosystem upgrades to Streamable HTTP.

Please report any issues at https://github.com/modelcontextprotocol/typescript-sdk/issues.

Other Changes

• Improve SSE endpoint sessionId parameter handling by @akazwz in #177
• Mutations for McpServer by @geelen in #247
• StreamableHTTPClientTransport cleanup / fixes by @beaulac in #300
• Add helper functions to distinguish between jsonRPC message types by @fredericbarthelet in #281
• Bump to version 1.10.0 by @cliffhall in #305
• Include Authorization Info in Tool Calls (and request handlers generally) by @allenzhou101 in #166

New Contributors

• @akazwz made their first contribution in #177
• @geelen made their first contribution in #247
• @beaulac made their first contribution in #300
• @fredericbarthelet made their first contribution in #281
• @cliffhall made their first contribution in #305

Full Changelog: 1.9.0...1.10.0