`github.com/modelcontextprotocol/go-sdk`

Ecosystem:
go

Package URL:
pkg:golang/github.com/modelcontextprotocol/go-sdk

Total PRs:
378 Dependabot PRs

Latest PR:
18 days ago

Unique Repositories:
191 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk

GHSA-89xv-2j6f-qhc8 CVE-2026-33252 HIGH published 3 months ago • updated 20 days ago

The Go SDK's Streamable HTTP transport accepted browser-generated cross-site `POST` requests without validating the `Origin` header and without req...

Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk

GHSA-q382-vc8q-7jhj HIGH published 3 months ago • updated 20 days ago

The Go SDK recently transitioned to the `segmentio/encoding` library for JSON parsing in version 1.3.1. While this change addressed both case-insen...

DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost

GHSA-xw59-hvm2-8pj6 CVE-2026-34742 HIGH published 3 months ago • updated 9 days ago

The Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server i...

1.3.0 → 1.4.1 Minor PR

Closed 3 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.1

grokify/google-mcp-server #10

1.3.1 → 1.4.1 Minor PR

Closed 3 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1-0.20260220105450-b17143f71798 to 1.4.1

Nodoubtz-Record-Label/github-mcp-server #9

1.3.1-0.20260220105450-b17143f71798 → 1.4.1 Minor PR

Closed 3 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1

openshift/backplane-cli #911

1.4.0 → 1.4.1 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the go-minor-patch group across 3 directories with 15 updates

mingrenya/AI-Waf #6

1.2.0 → 1.4.1 Minor PR

Open 3 months ago 5 comments

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1-0.20260220105450-b17143f71798 to 1.4.1

masroorhussainv/github-mcp-plus #4

1.3.1-0.20260220105450-b17143f71798 → 1.4.1 Minor PR

Open 3 months ago 1 comment

fix(deps): Bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1

Kubedoll-Heavy-Industries/helm-mcp #22

1.4.0 → 1.4.1 Patch PR

Open 3 months ago 3 comments

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.4.1

agentcrate/crated #17

1.3.0 → 1.4.1 Minor PR

Closed 3 months ago 5 comments

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.5.0 in the go-dependencies group across 1 directory

ethpandaops/openrouter-agent-sdk-go #2

1.3.1 → 1.5.0 Minor PR

Closed 3 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1-0.20260220105450-b17143f71798 to 1.3.1 in the go_modules group across 1 directory

Kushmanmb/github-mcp-server #5

1.3.1-0.20260220105450-b17143f71798 → 1.3.1

Open 3 months ago 1 comment

chore: bump the engine group across 2 directories with 61 updates

sipsma/dagger #1247

1.3.1 → 1.4.0 Minor PR

Open 3 months ago 1 comment

chore: bump the engine group across 2 directories with 54 updates

dagger/dagger #11987

1.3.1 → 1.4.0 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the go group across 1 directory with 27 updates

envoyproxy/ai-gateway #1928

1.3.1 → 1.4.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

sipeed/picoclaw #1199

1.3.0 → 1.3.1 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the go-modules group with 6 updates

waftester/waftester #34

1.3.1 → 1.4.0 Minor PR

Closed 4 months ago 2 comments

Bump github.com/modelcontextprotocol/go-sdk from 1.0.0 to 1.3.1

kusold/homebox-export #56

1.0.0 → 1.3.1 Minor PR

Open 4 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.1 in /gopls in the go_modules group across 1 directory

Hawthorne001/tools #218

1.2.0 → 1.3.1 Minor PR

Closed 4 months ago 3 comments

chore: bump the engine group across 2 directories with 48 updates

dagger/dagger #11969

1.3.1 → 1.4.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.1.0 to 1.3.1

finettt/agent-go #57

1.1.0 → 1.3.1 Minor PR

Open 4 months ago 2 comments

chore(deps): bump the go group across 1 directory with 26 updates

envoyproxy/ai-gateway #1923

1.3.0 → 1.4.0 Minor PR

Open 4 months ago 1 comment

build(deps): bump the go-dependencies group with 2 updates

ethpandaops/claude-agent-sdk-go #2

1.3.0 → 1.4.0 Minor PR

Closed 4 months ago 1 comment

build(deps): Bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.4.0

tjhop/mcp-token-analyzer #13

1.2.0 → 1.4.0 Minor PR

Closed 4 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.0

malbeclabs/lake #158

1.3.1 → 1.4.0 Minor PR

Closed 4 months ago 2 comments

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.4.0

blacktop/lifx #7

1.2.0 → 1.4.0 Minor PR

Open 4 months ago 1 comment

chore(deps): bump the go group across 1 directory with 23 updates

envoyproxy/ai-gateway #1910

1.3.0 → 1.4.0 Minor PR

Closed 4 months ago 2 comments

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1-0.20260220105450-b17143f71798 to 1.3.1

kristentr/github-mcp-server #1

1.3.1-0.20260220105450-b17143f71798 → 1.3.1

Open 4 months ago 2 comments

chore(deps)(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.4.0

KubeHeal/openshift-cluster-health-mcp #84

1.2.0 → 1.4.0 Minor PR

Closed 4 months ago 2 comments

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.4.0

Goldziher/ai-rulez #90

1.3.0 → 1.4.0 Minor PR

Open 4 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.0

guyinwonder168/database-mcp-server #39

1.3.1 → 1.4.0 Minor PR

Closed 4 months ago 2 comments

chore(deps): Bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.0

SPANDigital/mcp-server-dump #86

1.3.1 → 1.4.0 Minor PR

Closed 4 months ago 1 comment

Bump the go_modules group across 6 directories with 8 updates

JSTONE1111/datadog-agent #2

1.1.0 → 1.3.1 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.4.0

jcaldwell-labs/my-context #131

1.2.0 → 1.4.0 Minor PR

Open 4 months ago 1 comment

chore(deps): bump the go_modules group across 1 directory with 3 updates

asleekgeek/LocalAI #387

1.3.0 → 1.3.1 Patch PR

Closed 4 months ago 1 comment

deps: bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.0

olgasafonova/mcp-otel-go #5

1.3.1 → 1.4.0 Minor PR

Open 4 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.7.0 to 1.3.1

sjoerd2025/adk-go #1

0.7.0 → 1.3.1 Major PR

Open 4 months ago 1 comment

Bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

telepresenceio/telepresence #4065

1.3.0 → 1.3.1 Patch PR

Closed 4 months ago 1 comment

Bump the go_modules group across 2 directories with 5 updates

BY-SOMMER/mcp-gateway #6

1.2.0 → 1.3.1 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.1

jonwraymond/toolcompose #15

1.2.0 → 1.3.1 Minor PR

Open 4 months ago 2 comments

chore(deps): Bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

valter-silva-au/ai-dev-brain-v1 #43

1.3.0 → 1.3.1 Patch PR

Closed 4 months ago 1 comment

Bump the go_modules group across 1 directory with 2 updates

bobbravo2/odh-dashboard #8

0.3.1 → 1.3.1 Major PR

Closed 4 months ago 3 comments

Bump github.com/modelcontextprotocol/go-sdk from 0.3.1 to 1.3.1

last9/mcp-go-sdk #1

0.3.1 → 1.3.1 Major PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.1

jonwraymond/toolfoundation #16

1.2.0 → 1.3.1 Minor PR

Open 4 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.1

codeready-toolchain/argocd-mcp-server #60

1.2.0 → 1.3.1 Minor PR

Open 4 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.1 in the go_modules group across 1 directory

datum-cloud/datum-mcp #51

1.2.0 → 1.3.1 Minor PR

Open 4 months ago 1 comment

Bump github.com/modelcontextprotocol/go-sdk from 0.7.0 to 1.3.1

handsomegato/adk-go #3

0.7.0 → 1.3.1 Major PR

Open 4 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 0.5.0 to 1.3.1

FUTUREAIINTEGRATION/mcp-gateway #2

0.5.0 → 1.3.1 Major PR

Open 4 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.7.0 to 1.3.1

FUTUREAIINTEGRATION/agentregistry-inventory #1

0.7.0 → 1.3.1 Major PR

Open 4 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1 in the go_modules group across 1 directory

sandboxec/sandboxec #2

1.3.0 → 1.3.1 Patch PR

Closed 4 months ago 3 comments

Bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.1

omnistrate-oss/omnistrate-ctl #543

1.2.0 → 1.3.1 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.3.0 to 1.3.1 in the go_modules group across 1 directory

datum-cloud/activity #71

0.3.0 → 1.3.1 Major PR

Open 4 months ago 2 comments

Package Details

Name:	`github.com/modelcontextprotocol/go-sdk`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/modelcontextprotocol/go-sdk`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 4

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/modelcontextprotocol/go-sdk
Homepage:	https://github.com/modelcontextprotocol/go-sdk
Latest Release:	`v0.1.0` 12 months ago
Dependent Repos:	0
Dependent Packages:	0
Ranking:	Top 5.6698% by dependent repos Top 5.3127% by dependent pkgs

PR Status

Open 182 (48.1%)

Merged 27 (7.1%)

Closed 169 (44.7%)

PR Types

Major 75 (19.8%)

Minor 263 (69.6%)

Patch 38 (10.1%)

github.com/modelcontextprotocol/go-sdk

Security Advisories

Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk

Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk

DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

Recent PRs

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`github.com/modelcontextprotocol/go-sdk`