-
Notifications
You must be signed in to change notification settings - Fork 4k
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
OAuth client scope handling breaks on comma-separated scope strings
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3566 In modelcontextprotocol/python-sdk;SEP-2243 Mcp-Param-* validation runs a full
tools/listpertools/call, with no opt-out and no by-name fast pathspec-2026-07-28Concerns the SDK's implementation of the 2026-07-28 MCP spec revisionConcerns the SDK's implementation of the 2026-07-28 MCP spec revisionv2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3565 In modelcontextprotocol/python-sdk;OAuth HTTP routes set
CORSMiddleware(allow_origins="*")on token/register/metadata endpoints |v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3563 In modelcontextprotocol/python-sdk;DNS rebinding protection defaults off when
security_settingsis omitted (non-loopback binds stay unprotected) |v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3562 In modelcontextprotocol/python-sdk;POST failure identical to task cancellation in streamable HTTP client
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3560 In modelcontextprotocol/python-sdk;- Status: Open.#3559 In modelcontextprotocol/python-sdk;
Malformed requests get -32602 where JSON-RPC 2.0 requires -32600 (non-Request body) and -32601 (unknown method)
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3557 In modelcontextprotocol/python-sdk;Streamable HTTP client treats 404 as terminal instead of re-initializing, as the spec requires
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3556 In modelcontextprotocol/python-sdk;Structured tool output:
-> bytesreturn crashes with a generic error on non-UTF-8 payloads instead of returning the advertised base64/binary stringv1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3554 In modelcontextprotocol/python-sdk;stdio server ignores the first two Ctrl+C presses at a terminal (blocked stdin worker thread)
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3551 In modelcontextprotocol/python-sdk;- Status: Open.#3549 In modelcontextprotocol/python-sdk;
Streamable HTTP client logs a WARNING for valid 202 Accepted on session termination (DELETE)
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3546 In modelcontextprotocol/python-sdk;