`github.com/modelcontextprotocol/go-sdk`

Ecosystem:
go

Package URL:
pkg:golang/github.com/modelcontextprotocol/go-sdk

Total PRs:
378 Dependabot PRs

Latest PR:
17 days ago

Unique Repositories:
191 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk

GHSA-89xv-2j6f-qhc8 CVE-2026-33252 HIGH published 3 months ago • updated 19 days ago

The Go SDK's Streamable HTTP transport accepted browser-generated cross-site `POST` requests without validating the `Origin` header and without req...

Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk

GHSA-q382-vc8q-7jhj HIGH published 3 months ago • updated 20 days ago

The Go SDK recently transitioned to the `segmentio/encoding` library for JSON parsing in version 1.3.1. While this change addressed both case-insen...

DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost

GHSA-xw59-hvm2-8pj6 CVE-2026-34742 HIGH published 3 months ago • updated 9 days ago

The Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server i...

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

GHSA-wvj2-96wp-fq3f CVE-2026-27896 HIGH published 4 months ago • updated 6 days ago

The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing. Go's standard library performs case-insens...

Recent PRs (filtered by: Merged )

RSS Feed Clear filter

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.8.0 to 1.0.0

wolfeidau/go-mcp-evals #23

0.8.0 → 1.0.0 Major PR

Merged 9 months ago

Bump github.com/modelcontextprotocol/go-sdk from 0.8.0 to 1.0.0

baely/officetracker #144

0.8.0 → 1.0.0 Major PR

Merged 9 months ago

extras mcp (deps): bump github.com/modelcontextprotocol/go-sdk from 0.6.0 to 1.0.0 in /extras/mcp

piusalfred/whatsapp #112

0.6.0 → 1.0.0 Major PR

Merged 9 months ago 3 comments

build: bump github.com/modelcontextprotocol/go-sdk from 0.4.0 to 1.0.0

dhth/punchout #79

0.4.0 → 1.0.0 Major PR

Merged 9 months ago

examples(deps): bump github.com/modelcontextprotocol/go-sdk from 0.7.0 to 1.0.0 in /_examples

piusalfred/whatsapp #108

0.7.0 → 1.0.0 Major PR

Merged 9 months ago 3 comments

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.7.0 to 1.0.0

grokify/aha-mcp-server #21

0.7.0 → 1.0.0 Major PR

Merged 9 months ago

build(deps): bump github.com/modelcontextprotocol/go-sdk from 0.7.0 to 0.8.0

lima-vm/lima #4105

0.7.0 → 0.8.0 Minor PR

Merged 9 months ago

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.6.0 to 0.8.0

grokify/metasearch-mcp-server #4

0.6.0 → 0.8.0 Minor PR

Merged 9 months ago

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.6.0 to 0.7.0

yshngg/pmcp #74

0.6.0 → 0.7.0 Minor PR

Merged 9 months ago 3 comments

Bump github.com/modelcontextprotocol/go-sdk from 0.6.0 to 0.7.0

trento-project/mcp-server #50

0.6.0 → 0.7.0 Minor PR

Merged 9 months ago

build(deps): bump github.com/modelcontextprotocol/go-sdk from 0.6.0 to 0.7.0

lima-vm/lima #4092

0.6.0 → 0.7.0 Minor PR

Merged 9 months ago

deps(deps): bump the go-dependencies group across 1 directory with 2 updates

genmcp/gen-mcp #110

0.5.0 → 0.6.0 Minor PR

Merged 9 months ago 2 comments

Bump github.com/modelcontextprotocol/go-sdk from 0.5.0 to 0.6.0

baely/officetracker #141

0.5.0 → 0.6.0 Minor PR

Merged 9 months ago

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.5.0 to 0.6.0

grokify/metasearch-mcp-server #2

0.5.0 → 0.6.0 Minor PR

Merged 9 months ago

deps(deps): Bump the go-dependencies group across 1 directory with 4 updates

genmcp/gen-mcp #95

0.4.0 → 0.5.0 Minor PR

Merged 9 months ago 1 comment

chore(deps): Bump github.com/modelcontextprotocol/go-sdk from 0.4.0 to 0.5.0

oras-project/oras-mcp #10

0.4.0 → 0.5.0 Minor PR

Merged 9 months ago 1 comment

Bump github.com/modelcontextprotocol/go-sdk from 0.4.0 to 0.5.0 in the minor-dependencies group

rwx-cloud/cli #187

0.4.0 → 0.5.0 Minor PR

Merged 9 months ago

Bump github.com/modelcontextprotocol/go-sdk from 0.4.0 to 0.5.0

trento-project/mcp-server #36

0.4.0 → 0.5.0 Minor PR

Merged 9 months ago

Bump github.com/modelcontextprotocol/go-sdk from 0.4.0 to 0.5.0

baely/officetracker #140

0.4.0 → 0.5.0 Minor PR

Merged 9 months ago

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.4.0 to 0.5.0

lybic/lybic-sdk-go #23

0.4.0 → 0.5.0 Minor PR

Merged 9 months ago

Bump the minor-dependencies group across 1 directory with 6 updates

rwx-cloud/cli #186

0.2.0 → 0.4.0 Minor PR

Merged 9 months ago

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.3.1 to 0.4.0

lybic/lybic-sdk-go #21

0.3.1 → 0.4.0 Minor PR

Merged 10 months ago

Bump github.com/modelcontextprotocol/go-sdk from 0.3.0 to 0.3.1

baely/officetracker #127

0.3.0 → 0.3.1 Patch PR

Merged 10 months ago

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.3.0 to 0.3.1

lybic/lybic-sdk-go #17

0.3.0 → 0.3.1 Patch PR

Merged 10 months ago

Bump github.com/modelcontextprotocol/go-sdk from 0.2.0 to 0.3.0

baely/officetracker #121

0.2.0 → 0.3.0 Minor PR

Merged 10 months ago 1 comment

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.2.0 to 0.3.0

lybic/lybic-sdk-go #13

0.2.0 → 0.3.0 Minor PR

Merged 10 months ago

Bump github.com/modelcontextprotocol/go-sdk from 0.0.0-20250627194314-8a3f272dbbcf to 0.1.0

whywaita/myshoes-mcp-server #14

0.0.0-20250627194314-8a3f272dbbcf → 0.1.0 Minor PR

Merged 12 months ago

Package Details

Name:	`github.com/modelcontextprotocol/go-sdk`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/modelcontextprotocol/go-sdk`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 4

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/modelcontextprotocol/go-sdk
Homepage:	https://github.com/modelcontextprotocol/go-sdk
Latest Release:	`v0.1.0` 12 months ago
Dependent Repos:	0
Dependent Packages:	0
Ranking:	Top 5.6698% by dependent repos Top 5.3127% by dependent pkgs

PR Status

Open 182 (48.1%)

Merged 27 (7.1%)

Closed 169 (44.7%)

PR Types

Major 75 (19.8%)

Minor 263 (69.6%)

Patch 38 (10.1%)