`@modelcontextprotocol/sdk`

Ecosystem:
npm

Package URL:
pkg:npm/@modelcontextprotocol/sdk

Total PRs:
8,637 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
3,045 repositories

Unique Repos (30 days):
74 repositories

Security Advisories

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

GHSA-345p-7cg4-v4c7 CVE-2026-25536 HIGH published 4 months ago • updated about 2 months ago

### Summary Cross-client data leak via two distinct issues: (1) reusing a single `StreamableHTTPServerTransport` across multiple client requests, ...

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

GHSA-8r9q-7v3j-jr4g CVE-2026-0621 HIGH published 5 months ago • updated 13 days ago

### Impact A ReDoS vulnerability in the `UriTemplate` class allows attackers to cause denial of service. The `partToRegExp()` function generates a...

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

GHSA-w48q-cv73-mx4w CVE-2025-66414 HIGH published 7 months ago • updated 9 days ago

The Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP ...

Recent PRs

RSS Feed

build(deps): bump @modelcontextprotocol/sdk from 1.25.1 to 1.25.2 in /packages/mcp

vercube/vercube #652

1.25.1 → 1.25.2 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2

google-gemini/gemini-cli #16072

1.23.0 → 1.25.2 Minor PR

Open 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.24.3 to 1.25.2 in the npm_and_yarn group across 1 directory

ruchernchong/simplycpf #79

1.24.3 → 1.25.2 Minor PR

Closed 5 months ago 3 comments

build(deps): bump @modelcontextprotocol/sdk from 1.21.0 to 1.25.2

cierrateam/LibreChat #6

1.21.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.24.0 to 1.25.2

MjrTom/Apex-CodeGenesis-VSCode #38

1.24.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

build(deps): bump @modelcontextprotocol/sdk from 1.24.2 to 1.25.2 in the npm_and_yarn group across 1 directory

gowinston-ai/winston-ai-mcp-server #52

1.24.2 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.24.3 to 1.25.2

drupaltools/drupaltools.github.io #49

1.24.3 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

fix(deps): bump @modelcontextprotocol/sdk from 1.24.0 to 1.25.2

forcedotcom/mobile-mcp-tools #125

1.24.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

build(deps): Bump @modelcontextprotocol/sdk from 1.25.1 to 1.25.2

PrashamTrivedi/memory-server #40

1.25.1 → 1.25.2 Patch PR

Open 5 months ago 3 comments

chore(deps): bump @modelcontextprotocol/sdk from 1.24.1 to 1.25.2 in the npm_and_yarn group across 1 directory

tubone24/self_check #391

1.24.1 → 1.25.2 Minor PR

Open 5 months ago 5 comments

Bump @modelcontextprotocol/sdk from 1.22.0 to 1.25.2

blubblub/nuclino-mcp #2

1.22.0 → 1.25.2 Minor PR

Closed 5 months ago 2 comments

chore(deps): bump @modelcontextprotocol/sdk from 1.24.0 to 1.25.2 in /mcp-servers/github-project-manager

sutazai/sutazaiapp #52

1.24.0 → 1.25.2 Minor PR

Open 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2

mziyut/articles #361

1.23.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.24.0 to 1.25.2

primer/react #7429

1.24.0 → 1.25.2 Minor PR

Open 5 months ago 2 comments

chore(deps): bump @modelcontextprotocol/sdk from 1.24.0 to 1.25.2

EtienneBBeaulac/workrail #56

1.24.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.22.0 to 1.25.2

valian-ca/fireway #8

1.22.0 → 1.25.2 Minor PR

Open 5 months ago 2 comments

chore(deps): bump @modelcontextprotocol/sdk from 1.21.0 to 1.25.2 in /modules/yqrashawn/home-manager/dotfiles

yqrashawn/yqdotfiles #136

1.21.0 → 1.25.2 Minor PR

Closed 5 months ago 2 comments

build(deps): bump @modelcontextprotocol/sdk from 1.21.0 to 1.25.2

border-z/LibreChat #9

1.21.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.22.0 to 1.25.2 in /chatgpt-mcp-server

Poghappy/IhuoniaoN8NFirecralwrules #12

1.22.0 → 1.25.2 Minor PR

Open 5 months ago 2 comments

chore(deps): bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2

heymeowcat/nexus-apis #3

1.23.0 → 1.25.2 Minor PR

Closed 5 months ago 2 comments

Bump @modelcontextprotocol/sdk from 1.22.0 to 1.25.2

timescale/tiger-salesforce-mcp-server #10

1.22.0 → 1.25.2 Minor PR

Closed 5 months ago 2 comments

chore(deps): bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2

aashari/mcp-server-atlassian-confluence #157

1.23.0 → 1.25.2 Minor PR

Open 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.22.0 to 1.25.2

kwizzlesurp10-ctrl/kwizzle-analyzer #8

1.22.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.18.2 to 1.25.2 in /evals

CongressWiki/next-evals-oss #22

1.18.2 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.19.1 to 1.25.2

juspay/neurolink #764

1.19.1 → 1.25.2 Minor PR

Open 5 months ago 5 comments

Bump @modelcontextprotocol/sdk from 1.21.1 to 1.25.2

ErwanLegrand/chat-ui #3

1.21.1 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

deps(deps): bump @modelcontextprotocol/sdk from 1.21.2 to 1.25.2

dynatrace-oss/dynatrace-managed-mcp #21

1.21.2 → 1.25.2 Minor PR

Open 5 months ago 2 comments

deps(deps): bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2

cbwinslow/new_project_bundle #21

1.23.0 → 1.25.2 Minor PR

Open 5 months ago 7 comments

Bump @modelcontextprotocol/sdk from 1.24.0 to 1.25.2 in /mcp/mpc-server

dynatrace-oss/dynatrace-ai-agent-instrumentation-examples #21

1.24.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.21.0 to 1.25.2

animeshxd/append_file #6

1.21.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.22.0 to 1.25.2 in the npm_and_yarn group across 1 directory

PichaiTK/context7 #15

1.22.0 → 1.25.2 Minor PR

Open 5 months ago 2 comments

Bump @modelcontextprotocol/sdk from 1.18.2 to 1.25.2 in /apps/logpush

WRLDInc/mcp-server-cloudflare #9

1.18.2 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.21.0 to 1.25.2

quinnjr/guitar-pro-mcp #8

1.21.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.20.2 to 1.25.2 in /frontend

linuxfoundation/insights #1544

1.20.2 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

chore(deps-dev): bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2

cloudflare/ai #352

1.23.0 → 1.25.2 Minor PR

Open 5 months ago 2 comments

deps(deps): bump @modelcontextprotocol/sdk from 1.22.0 to 1.25.2

nmeierpolys/mcp-structured-memory #72

1.22.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2 in /initiatives/genai_red_team_handbook/exploitation/promptfoo

OWASP/www-project-top-10-for-large-language-model-applications #792

1.23.0 → 1.25.2 Minor PR

Closed 5 months ago 2 comments

build(deps): bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2

maximmasiutin/gemini-cli #5

1.23.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.20.2 to 1.25.2

MarwanRefaat/inbox-zero #10

1.20.2 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.20.2 to 1.25.2

Semsemq/remote-mcp-server-authless1 #7

1.20.2 → 1.25.2 Minor PR

Open 5 months ago 2 comments

chore(deps): Bump @modelcontextprotocol/sdk from 1.20.2 to 1.25.2

GlacierEQ/MCP-SuperAssistant #6

1.20.2 → 1.25.2 Minor PR

Open 5 months ago 4 comments

Bump @modelcontextprotocol/sdk from 1.17.3 to 1.25.2 in /tools/Mcp

Azure/azure-powershell #29033

1.17.3 → 1.25.2 Minor PR

Open 5 months ago 4 comments

build(deps): bump @modelcontextprotocol/sdk from 1.20.0 to 1.25.2

chrisowen491/tranmere-web #780

1.20.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

build(deps): bump @modelcontextprotocol/sdk from 1.23.0 to 1.25.2

GLanDrive/lobe-chat #4

1.23.0 → 1.25.2 Minor PR

Closed 5 months ago 5 comments

Bump @modelcontextprotocol/sdk from 1.20.1 to 1.25.2 in /mcp-server-webauthn-client

hitoshura25/mpo-api-authn-server #112

1.20.1 → 1.25.2 Minor PR

Closed 5 months ago 2 comments

build(deps): bump @modelcontextprotocol/sdk from 1.22.0 to 1.25.2

next-dev-team/next-dev #50

1.22.0 → 1.25.2 Minor PR

Closed 5 months ago 2 comments

chore(deps): bump @modelcontextprotocol/sdk from 1.19.1 to 1.25.2

lexolve/langchainjs #2

1.19.1 → 1.25.2 Minor PR

Closed 5 months ago 2 comments

build(deps): bump @modelcontextprotocol/sdk from 1.20.0 to 1.25.2 in /agents/open-agent-builder-main(1)/open-agent-builder-main

executiveusa/pauli-comic-funnel #32

1.20.0 → 1.25.2 Minor PR

Closed 5 months ago 3 comments

Bump @modelcontextprotocol/sdk from 1.19.1 to 1.25.2

automationjp/servers #5

1.19.1 → 1.25.2 Minor PR

Open 5 months ago 1 comment

Bump @modelcontextprotocol/sdk from 1.20.0 to 1.25.2

samollari/cf_ai_weather_chat #9

1.20.0 → 1.25.2 Minor PR

Closed 5 months ago 1 comment

Package Details

Name:	`@modelcontextprotocol/sdk`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@modelcontextprotocol/sdk`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 3

View All npm Advisories

Package Information

Description:

Model Context Protocol implementation for TypeScript

Repository:	https://github.com/modelcontextprotocol/typescript-sdk
Homepage:	https://modelcontextprotocol.io
Latest Release:	`1.12.1` about 1 year ago
Dependent Repos:	0
Dependent Packages:	0
Downloads:	20,675,691
Ranking:	Top 25.5593% by dependent repos Top 37.0256% by dependent pkgs

PR Status

Open 3,701 (42.9%)

Merged 494 (5.7%)

Closed 3,960 (45.8%)

PR Types

Major 294 (3.4%)

Minor 6,591 (76.3%)

Patch 1,268 (14.7%)