`github.com/modelcontextprotocol/go-sdk`

Ecosystem:
go

Package URL:
pkg:golang/github.com/modelcontextprotocol/go-sdk

Total PRs:
378 Dependabot PRs

Latest PR:
17 days ago

Unique Repositories:
191 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk

GHSA-89xv-2j6f-qhc8 CVE-2026-33252 HIGH published 3 months ago • updated 19 days ago

The Go SDK's Streamable HTTP transport accepted browser-generated cross-site `POST` requests without validating the `Origin` header and without req...

Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk

GHSA-q382-vc8q-7jhj HIGH published 3 months ago • updated 20 days ago

The Go SDK recently transitioned to the `segmentio/encoding` library for JSON parsing in version 1.3.1. While this change addressed both case-insen...

DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost

GHSA-xw59-hvm2-8pj6 CVE-2026-34742 HIGH published 3 months ago • updated 9 days ago

The Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server i...

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

GHSA-wvj2-96wp-fq3f CVE-2026-27896 HIGH published 4 months ago • updated 6 days ago

The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing. Go's standard library performs case-insens...

Recent PRs (filtered by: Closed )

RSS Feed Clear filter

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1 in the go-minor-patch group across 1 directory

jmrplens/gitlab-mcp-server #139

1.6.0 → 1.6.1 Patch PR

Closed 20 days ago 2 comments

chore: bump the engine group across 1 directory with 50 updates

sipsma/dagger #1292

1.4.1 → 1.6.1 Minor PR

Closed 21 days ago 2 comments

chore(deps): bump the go-minor-patch group with 2 updates

jmrplens/gitlab-mcp-server #135

1.6.0 → 1.6.1 Patch PR

Closed 24 days ago 2 comments

deps(go): bump the go-minor-patch group with 7 updates

ruaan-deysel/vault #106

1.6.0 → 1.6.1 Patch PR

Closed 24 days ago 2 comments

deps: bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

txn2/mcp-data-platform #476

1.6.0 → 1.6.1 Patch PR

Closed 25 days ago 2 comments

deps(deps): bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0

AravG7/gke-mcp #8

1.5.0 → 1.6.0 Minor PR

Closed about 1 month ago 3 comments

Bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.6.0

PeterD1524/slack-user-mcp #4

1.4.1 → 1.6.0 Minor PR

Closed about 2 months ago 1 comment

deps(deps): bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0

GoogleCloudPlatform/gke-mcp #298

1.5.0 → 1.6.0 Minor PR

Closed about 2 months ago 3 comments

deps: bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.6.0

jpvelasco/ludus #176

1.4.1 → 1.6.0 Minor PR

Closed about 2 months ago 3 comments

chore(deps): bump the go-modules group across 1 directory with 4 updates

shyshlakov/pci-dss-mcp #30

1.5.0 → 1.6.0 Minor PR

Closed about 2 months ago 1 comment

Bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0

jasondillingham/architect-mcp #3

1.5.0 → 1.6.0 Minor PR

Closed about 2 months ago 2 comments

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0

Arkestone/mcp #55

1.5.0 → 1.6.0 Minor PR

Closed about 2 months ago 3 comments

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1-0.20260220105450-b17143f71798 to 1.6.0

Siwakorn165/github-mcp-server #8

1.3.1-0.20260220105450-b17143f71798 → 1.6.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0

wcatz/ghost #157

1.5.0 → 1.6.0 Minor PR

Closed about 2 months ago 2 comments

Bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.6.0

lethuan127/CentrAI-Agent #6

1.4.0 → 1.6.0 Minor PR

Closed about 2 months ago 1 comment

deps(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0

quanticsoul4772/unified-thinking #70

1.4.1 → 1.5.0 Minor PR

Closed about 2 months ago 3 comments

chore: bump the engine group across 1 directory with 36 updates

sipsma/dagger #1269

1.4.1 → 1.5.0 Minor PR

Closed about 2 months ago 2 comments

chore: bump the engine group across 1 directory with 34 updates

dagger/dagger #13011

1.4.1 → 1.5.0 Minor PR

Closed about 2 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.5.0 in the go-dependencies group across 1 directory

ethpandaops/lm-agent-sdk-go #2

1.3.1 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

chore: bump the engine group across 1 directory with 31 updates

dagger/dagger #13005

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the go_modules group across 1 directory with 6 updates

zeromicro/go-zero #5541

1.4.0 → 1.4.1 Patch PR

Closed 2 months ago 1 comment

build(deps): Bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0

StacklokLabs/gofetch #127

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

Bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.5.0 in /cli-go

s992/margin #14

1.3.0 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the all group across 1 directory with 15 updates

chenchunrun/SecOps #4

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 2 comments

deps(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.5.0

meschbach/mcp-vikunja #14

1.3.0 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0

usadamasa/orm-discovery-mcp-go #179

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 3 comments

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0

Arkestone/mcp #46

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 3 comments

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1-0.20260220105450-b17143f71798 to 1.5.0

Nodoubtz-Record-Label/github-mcp-server #23

1.3.1-0.20260220105450-b17143f71798 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

Bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.5.0

vitas/evidra-lock #8

1.3.1 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

Bump the minor-dependencies group with 2 updates

dimitar-grigorov/mcp-file-tools #13

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

chore: bump the engine group across 1 directory with 26 updates

sipsma/dagger #1264

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 2 comments

chore(deps): Bump the dependencies group with 2 updates

duck8823/traceary #384

1.1.0 → 1.5.0 Minor PR

Closed 2 months ago 2 comments

chore: bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0

kubewarden/sbomscanner #1034

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): Bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0

knewstimek/agent-tool #4

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 2 comments

build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0

pali-mem/pali #27

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0

sushichan044/sidetable #42

1.4.1 → 1.5.0 Minor PR

Closed 2 months ago 1 comment

Bump the go_modules group across 1 directory with 4 updates

bobbravo2/odh-dashboard #12

0.3.1 → 1.4.1 Major PR

Closed 3 months ago 3 comments

Bump the go_modules group across 8 directories with 7 updates

google/android-cuttlefish #2322

1.4.0 → 1.4.1 Patch PR

Closed 3 months ago 1 comment

deps(go): Bump the go-minor group across 1 directory with 14 updates

dmora/crucible #10

1.3.1 → 1.4.1 Minor PR

Closed 3 months ago 3 comments

chore(deps): bump the all group across 1 directory with 24 updates

CaptainPhantasy/floyd-v5 #5

1.2.0 → 1.4.1 Minor PR

Closed 3 months ago 3 comments

Bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.1

elastic/terraform-provider-elasticstack #1957

1.3.1 → 1.4.1 Minor PR

Closed 3 months ago 1 comment

Bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.4.1

icholy/xagent #338

1.2.0 → 1.4.1 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.1 in /agentsandboxes

gke-labs/gemini-for-kubernetes-development #806

1.3.1 → 1.4.1 Minor PR

Closed 3 months ago 3 comments

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.4.1 in /server_go

corvicai/agenteval-labs #48

1.3.0 → 1.4.1 Minor PR

Closed 3 months ago 1 comment

Bump github.com/modelcontextprotocol/go-sdk from 0.8.0 to 1.4.1

atlanticdynamic/firelynx #181

0.8.0 → 1.4.1 Major PR

Closed 3 months ago 5 comments

Bump github.com/modelcontextprotocol/go-sdk from 0.2.0 to 1.4.1 in /mcp-server

intel/aog #29

0.2.0 → 1.4.1 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the go_modules group across 3 directories with 6 updates

aramos68/aramos-dashboard #6

0.3.1 → 1.3.1 Major PR

Closed 3 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.4.1

flashcatcloud/flashduty-runner #25

1.2.0 → 1.4.1 Minor PR

Closed 3 months ago 1 comment

chore: bump the engine group across 2 directories with 62 updates

dagger/dagger #12017

1.3.1 → 1.4.1 Minor PR

Closed 3 months ago 1 comment

Bump the minor-dependencies group across 1 directory with 4 updates

rwx-cloud/rwx #429

1.4.0 → 1.5.0 Minor PR

Closed 3 months ago 1 comment

Package Details

Name:	`github.com/modelcontextprotocol/go-sdk`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/modelcontextprotocol/go-sdk`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 4

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/modelcontextprotocol/go-sdk
Homepage:	https://github.com/modelcontextprotocol/go-sdk
Latest Release:	`v0.1.0` 12 months ago
Dependent Repos:	0
Dependent Packages:	0
Ranking:	Top 5.6698% by dependent repos Top 5.3127% by dependent pkgs

PR Status

Open 182 (48.1%)

Merged 27 (7.1%)

Closed 169 (44.7%)

PR Types

Major 75 (19.8%)

Minor 263 (69.6%)

Patch 38 (10.1%)