`@modelcontextprotocol/sdk`

Ecosystem:
npm

Package URL:
pkg:npm/@modelcontextprotocol/sdk

Total PRs:
8,642 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
3,048 repositories

Unique Repos (30 days):
41 repositories

Security Advisories

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

GHSA-8r9q-7v3j-jr4g CVE-2026-0621 HIGH published 6 months ago • updated 7 days ago

### Impact A ReDoS vulnerability in the `UriTemplate` class allows attackers to cause denial of service. The `partToRegExp()` function generates a...

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

GHSA-345p-7cg4-v4c7 CVE-2026-25536 HIGH published 5 months ago • updated 7 days ago

### Summary Cross-client data leak via two distinct issues: (1) reusing a single `StreamableHTTPServerTransport` across multiple client requests, ...

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

GHSA-w48q-cv73-mx4w CVE-2025-66414 HIGH published 7 months ago • updated 1 day ago

The Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP ...

Recent PRs

RSS Feed

Bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0

OctoMind-dev/octomind-mcp #245

1.17.5 → 1.18.0 Minor PR

Merged 10 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.13.0 to 1.18.0

vyb1ng/plex-mcp #53

1.13.0 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

[dependencies]: Bump @modelcontextprotocol/sdk from 1.13.2 to 1.18.0

Chandan-Baba/azure-devops-mcp #15

1.13.2 → 1.18.0 Minor PR

Open 10 months ago

deps(deps): bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0

egarcia74/warp-sql-server-mcp #137

1.17.5 → 1.18.0 Minor PR

Merged 10 months ago 20 comments

deps(deps): bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0 in the mcp-sdk-updates group

tosin2013/mcp-adr-analysis-server #110

1.17.5 → 1.18.0 Minor PR

Merged 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.8.0 to 1.18.0

hyorimitsu/mcp-amazon-cloudwatch-logs #257

1.8.0 → 1.18.0 Minor PR

Open 10 months ago

Bump @modelcontextprotocol/sdk from 0.6.0 to 1.18.0

earth-sol/tavily-mcp #17

0.6.0 → 1.18.0 Major PR

Closed 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0 in the mcp-dependencies group

trevSmart/microscope-mcp-client #8

1.17.5 → 1.18.0 Minor PR

Open 10 months ago 1 comment

build(deps): bump @modelcontextprotocol/sdk from 1.17.3 to 1.18.0

scho-to/mcp-jira-cloud-v2 #18

1.17.3 → 1.18.0 Minor PR

Open 10 months ago

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.18.0

susumutomita/Hackathon-AI #385

0.5.0 → 1.18.0 Major PR

Closed 10 months ago 3 comments

build(deps): bump @modelcontextprotocol/sdk from 1.9.0 to 1.18.0

nwtgck/one-mcp #89

1.9.0 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

chore(deps): Update @modelcontextprotocol/sdk requirement from ^1.17.1 to ^1.18.0

Zion-Holdings/zion.app #13686

^1.17.1 → ^1.18.0 Minor PR

Open 10 months ago

Bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0

withinfocus/tba-mcp-server #34

1.17.5 → 1.18.0 Minor PR

Closed 10 months ago 2 comments

build(deps): bump @modelcontextprotocol/sdk from 1.13.0 to 1.18.0

udamir/youtrack-vscode #76

1.13.0 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.16.0 to 1.18.0

Levalicious/server-memory #22

1.16.0 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

security: bump @modelcontextprotocol/sdk from 1.12.1 to 1.18.0

akiojin/playfab-mcp-server #154

1.12.1 → 1.18.0 Minor PR

Open 10 months ago 1 comment

[dependencies]: Bump @modelcontextprotocol/sdk from 1.15.1 to 1.18.0

GUIAENCONSTRUCCIONGLOBAM/xGithub-private #21

1.15.1 → 1.18.0 Minor PR

Open 10 months ago 2 comments

chore(deps-dev): bump @modelcontextprotocol/sdk from 1.12.1 to 1.18.0

jungchihoon/mcp-hub-python #23

1.12.1 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.4.1 to 1.18.0

l878waw/mcp-server-asana #26

1.4.1 → 1.18.0 Minor PR

Closed 10 months ago 2 comments

Bump @modelcontextprotocol/sdk from 1.11.0 to 1.18.0

MCP-Mirror/OctoMind-dev_octomind-mcp #78

1.11.0 → 1.18.0 Minor PR

Open 10 months ago

chore(deps-dev): bump @modelcontextprotocol/sdk from 1.15.1 to 1.18.0

ravitemer/mcp-hub #120

1.15.1 → 1.18.0 Minor PR

Open 10 months ago

build(deps): bump @modelcontextprotocol/sdk from 1.15.0 to 1.18.0

julienroussel/mcp #191

1.15.0 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.17.0 to 1.18.0

contentful/contentful-mcp-server #149

1.17.0 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

chore(deps): Bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0

SAP/ai-sdk-js #1069

1.17.5 → 1.18.0 Minor PR

Merged 10 months ago 1 comment

chore(deps): Bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0

SAP/ai-sdk-js #1068

1.17.5 → 1.18.0 Minor PR

Open 10 months ago

chore(deps): bump @modelcontextprotocol/sdk from 1.17.3 to 1.18.0

olaservo/mcp-maintainer-toolkit #10

1.17.3 → 1.18.0 Minor PR

Merged 10 months ago

Bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0

DecisionsDev/decision-intelligence-mcp-server #89

1.17.5 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

deps(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.18.0

Daghis/teamcity-mcp #52

0.5.0 → 1.18.0 Major PR

Open 10 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.17.3 to 1.18.0

SocketDev/socket-mcp #69

1.17.3 → 1.18.0 Minor PR

Open 10 months ago 2 comments

chore(deps): bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0

jeswr/solid-mcp #114

1.17.5 → 1.18.0 Minor PR

Open 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.13.2 to 1.18.0

timrogers/formanator #536

1.13.2 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.11.2 to 1.18.0

muratsu/mcplens #62

1.11.2 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.17.5 to 1.18.0

zillow/auto-mobile #40

1.17.5 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

deps(npm): bump @modelcontextprotocol/sdk from 1.17.2 to 1.18.0

KBB99/agentic-world #6

1.17.2 → 1.18.0 Minor PR

Closed 10 months ago 1 comment

deps(deps): bump the minor-and-patch group with 4 updates

vltansky/cursor-user-commands #3

1.13.3 → 1.17.5 Minor PR

Open 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.17.4 to 1.17.5 in the mcp-dependencies group

trevSmart/ibm-salesforce-context #245

1.17.4 → 1.17.5 Patch PR

Open 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.17.4 to 1.17.5 in the mcp-dependencies group

trevSmart/ibm-salesforce-context #243

1.17.4 → 1.17.5 Patch PR

Open 10 months ago 1 comment

deps(deps): bump @modelcontextprotocol/sdk from 0.4.0 to 1.17.5

get2knowio/n8n-mcp #6

0.4.0 → 1.17.5 Major PR

Merged 10 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.11.2 to 1.17.5

ctkadvisors/n8n-mcp-memory #103

1.11.2 → 1.17.5 Minor PR

Closed 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.17.2 to 1.17.5

kopfrechner/gitlab-mr-mcp #47

1.17.2 → 1.17.5 Patch PR

Closed 10 months ago 1 comment

deps(deps): bump @modelcontextprotocol/sdk from 1.17.1 to 1.17.5

johnymontana/go-fetch #43

1.17.1 → 1.17.5 Patch PR

Closed 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.17.4 to 1.17.5

tidewave-ai/tidewave_js #12

1.17.4 → 1.17.5 Patch PR

Closed 10 months ago

build(deps): bump @modelcontextprotocol/sdk from 1.17.1 to 1.17.5

djankies/vitest-mcp #16

1.17.1 → 1.17.5 Patch PR

Closed 10 months ago 2 comments

Bump @modelcontextprotocol/sdk from 1.0.4 to 1.17.5

74226/h #24

1.0.4 → 1.17.5 Minor PR

Closed 10 months ago 2 comments

Bump @modelcontextprotocol/sdk from 1.16.0 to 1.17.5

timrogers/execute-github-actions-workflow-mcp-server #24

1.16.0 → 1.17.5 Minor PR

Closed 10 months ago 1 comment

deps(deps): bump @modelcontextprotocol/sdk from 1.17.4 to 1.17.5 in the production-dependencies group

nmeierpolys/mcp-structured-memory #25

1.17.4 → 1.17.5 Patch PR

Merged 10 months ago

Bump @modelcontextprotocol/sdk from 1.12.0 to 1.17.5 in /taskmanager-mcp-server

jung-wan-kim/figma-mcp-blog-automation #84

1.12.0 → 1.17.5 Minor PR

Closed 10 months ago 2 comments

Bump @modelcontextprotocol/sdk from 1.0.3 to 1.17.5 in /context7-mcp-server

jung-wan-kim/figma-mcp-blog-automation #83

1.0.3 → 1.17.5 Minor PR

Closed 10 months ago 2 comments

chore(deps): Bump @modelcontextprotocol/sdk from 1.13.0 to 1.17.5

presidio-oss/factifai-mcp-server #18

1.13.0 → 1.17.5 Minor PR

Closed 10 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.8.0 to 1.17.5

MCP-Mirror/sylphlab_pdf-reader-mcp #131

1.8.0 → 1.17.5 Minor PR

Closed 10 months ago 1 comment

Package Details

Name:	`@modelcontextprotocol/sdk`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@modelcontextprotocol/sdk`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 3

View All npm Advisories

Package Information

Description:

Model Context Protocol implementation for TypeScript

Repository:	https://github.com/modelcontextprotocol/typescript-sdk
Homepage:	https://modelcontextprotocol.io
Latest Release:	`1.12.1` about 1 year ago
Dependent Repos:	0
Dependent Packages:	0
Downloads:	20,675,691
Ranking:	Top 25.5593% by dependent repos Top 37.0256% by dependent pkgs

PR Status

Open 3,704 (42.9%)

Merged 494 (5.7%)

Closed 3,962 (45.8%)

PR Types

Major 294 (3.4%)

Minor 6,596 (76.3%)

Patch 1,268 (14.7%)