`@modelcontextprotocol/sdk`

Ecosystem:
npm

Package URL:
pkg:npm/@modelcontextprotocol/sdk

Total PRs:
7,740 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
2,617 repositories

Unique Repos (30 days):
436 repositories

Security Advisories

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

GHSA-345p-7cg4-v4c7 CVE-2026-25536 HIGH published about 1 month ago • updated 8 days ago

### Summary Cross-client data leak via two distinct issues: (1) reusing a single `StreamableHTTPServerTransport` across multiple client requests, ...

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

GHSA-8r9q-7v3j-jr4g CVE-2026-0621 HIGH published 2 months ago • updated 8 days ago

### Impact A ReDoS vulnerability in the `UriTemplate` class allows attackers to cause denial of service. The `partToRegExp()` function generates a...

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

GHSA-w48q-cv73-mx4w CVE-2025-66414 HIGH published 3 months ago • updated 8 days ago

The Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP ...

Recent PRs (filtered by: Major PRs )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 10 directories with 13 updates

prakashgbid/caia #26

0.6.1 → 1.26.0 Major PR

Open 4 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 14 updates

prakashgbid/caia #25

0.6.1 → 1.26.0 Major PR

Open 4 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 13 updates

prakashgbid/caia #23

0.6.1 → 1.26.0 Major PR

Closed 5 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 13 updates

prakashgbid/caia #22

0.6.1 → 1.26.0 Major PR

Open 6 days ago 3 comments

chore(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.27.1

FIFA0313/sui-mcp-server-wallet-management #23

0.5.0 → 1.27.1 Major PR

Open 6 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 13 updates

prakashgbid/caia #20

0.6.1 → 1.26.0 Major PR

Closed 7 days ago 4 comments

chore(deps): bump the npm-all group with 8 updates

mcp-tool-shop-org/websketch-mcp #7

0.5.0 → 1.27.1 Major PR

Closed 7 days ago 3 comments

Bump the npm_and_yarn group across 3 directories with 7 updates

servant-io/gloo-hack-2025 #49

0.5.0 → 1.26.0 Major PR

Closed 8 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 17 updates

prakashgbid/caia #18

0.6.1 → 1.26.0 Major PR

Open 9 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 17 updates

prakashgbid/caia #16

0.6.1 → 1.26.0 Major PR

Open 12 days ago 4 comments

Bump the npm_and_yarn group across 2 directories with 4 updates

Luckyspot0gold/RangisNet #14

0.5.0 → 1.27.0 Major PR

Closed 13 days ago 1 comment

build(deps): Bump the npm_and_yarn group across 3 directories with 3 updates

mohitmishra786/never #35

0.6.1 → 1.26.0 Major PR

Closed 14 days ago 1 comment

build(deps): Bump the npm_and_yarn group across 3 directories with 3 updates

shadepants/StudioMode #3

0.5.0 → 1.26.0 Major PR

Open 14 days ago 2 comments

chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates

darbotlabs/Darbot-Deepmind-MCP #8

0.5.0 → 1.26.0 Major PR

Closed 14 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 16 updates

prakashgbid/caia #15

0.6.1 → 1.26.0 Major PR

Open 15 days ago 3 comments

build(deps): bump the npm_and_yarn group across 2 directories with 4 updates

RemyLoveLogicAI/FLOWSTATE-WEB3 #17

0.7.0 → 1.26.0 Major PR

Open 17 days ago 6 comments

Bump the npm_and_yarn group across 3 directories with 6 updates

servant-io/gloo-hack-2025 #46

0.5.0 → 1.26.0 Major PR

Open 17 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

GlacierEQ/n8n-mcp-server #2

0.7.0 → 1.26.0 Major PR

Open 26 days ago 3 comments

chore(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.26.0

FIFA0313/sui-mcp-server-wallet-management #16

0.5.0 → 1.26.0 Major PR

Open 27 days ago 1 comment

Bump the npm_and_yarn group across 6 directories with 3 updates

stackconsult/RE-Engine #3

0.4.0 → 1.25.2 Major PR

Open about 1 month ago 3 comments

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.3 in /mcp-servers/heady-windsurf-router in the npm_and_yarn group across 1 directory

HeadyMe/Heady #38

0.5.0 → 1.25.3 Major PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 2 directories with 1 update

henryperkins/tarot #27

0.5.0 → 1.25.2 Major PR

Open about 1 month ago 5 comments

build(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.3

mcp-tool-shop/websketch-mcp #2

0.5.0 → 1.25.3 Major PR

Open about 1 month ago 1 comment

chore(deps)(deps): bump @modelcontextprotocol/sdk from 0.6.1 to 1.25.3 in /apps/api

Smashkat12/crechebooks #30

0.6.1 → 1.25.3 Major PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 9 updates

GlacierEQ/gemini-mcp-tool #2

0.5.0 → 1.25.2 Major PR

Open about 1 month ago 3 comments

Bump the npm_and_yarn group across 2 directories with 1 update

GlacierEQ/mcp-server #1

0.6.0 → 1.25.2 Major PR

Open about 1 month ago 3 comments

chore(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.3

FIFA0313/sui-mcp-server-wallet-management #11

0.5.0 → 1.25.3 Major PR

Closed about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 3 directories with 3 updates

henryperkins/tarot #25

0.5.0 → 1.25.2 Major PR

Closed about 1 month ago 4 comments

chore(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.2

jrc1883/popkit-claude #32

0.5.0 → 1.25.2 Major PR

Closed about 2 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 0.4.0 to 1.25.2 in /mcp-servers

g-but/orangecat #71

0.4.0 → 1.25.2 Major PR

Open 2 months ago 1 comment

build(deps): Bump @modelcontextprotocol/sdk from 0.6.1 to 1.25.2 in /mcps/neuroviews-growth-mcp

MoLinesGitHub/NeuroViews #12

0.6.1 → 1.25.2 Major PR

Open 2 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 0.6.1 to 1.25.2

earth-sol/supabase-mcp #5

0.6.1 → 1.25.2 Major PR

Closed 2 months ago 1 comment

build(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.2

windschord/context-mcp #27

0.5.0 → 1.25.2 Major PR

Open 2 months ago 2 comments

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.2

Digital-Defiance/Akira #3

0.5.0 → 1.25.2 Major PR

Open 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.2 in /src/sequentialthinking

Mosasathaliya/servers #7

0.5.0 → 1.25.2 Major PR

Open 2 months ago 1 comment

chore(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.2

Piotr1215/mcp-obsidian #12

0.5.0 → 1.25.2 Major PR

Closed 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.2

fishke22/servers #11

0.5.0 → 1.25.2 Major PR

Closed 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.4.0 to 1.25.2

infobip/plantuml-mcp-server #7

0.4.0 → 1.25.2 Major PR

Closed 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.6.0 to 1.25.1

MaxParisotto/iggy-mcp-server #2

0.6.0 → 1.25.1 Major PR

Closed 2 months ago 1 comment

chore(deps): Bump @modelcontextprotocol/sdk from 0.6.1 to 1.25.1

da-okazaki/mcp-fish-audio-server #8

0.6.1 → 1.25.1 Major PR

Closed 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.6.0 to 1.25.1

kushal45/testOMSMCP #4

0.6.0 → 1.25.1 Major PR

Closed 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.6.0 to 1.25.1

seajhawk/telegram-mcp #4

0.6.0 → 1.25.1 Major PR

Closed 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.1

Commencement-Technology/terminals #2

0.5.0 → 1.25.1 Major PR

Closed 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.1 in /github-mcp2

p12s/ai-advent #17

0.5.0 → 1.25.1 Major PR

Closed 2 months ago 1 comment

build(deps): bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.1

windschord/context-mcp #26

0.5.0 → 1.25.1 Major PR

Open 2 months ago 2 comments

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.1

hitoshura25/mpo-api-authn-server #110

0.5.0 → 1.25.1 Major PR

Open 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.1

brianveltman/sonatype-mcp #9

0.5.0 → 1.25.1 Major PR

Closed 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.1

1999AZZAR/project-guardian-mcp-server #3

0.5.0 → 1.25.1 Major PR

Open 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.5.0 to 1.25.1 in /servers/src/everart

gewei100/my_mcp #9

0.5.0 → 1.25.1 Major PR

Open 2 months ago 1 comment

Bump @modelcontextprotocol/sdk from 0.4.0 to 1.25.1

tinabel/mcp-accessibility-evaluator #4

0.4.0 → 1.25.1 Major PR

Closed 2 months ago 1 comment

Package Details

Name:	`@modelcontextprotocol/sdk`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@modelcontextprotocol/sdk`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 3

View All npm Advisories

Package Information

Description:

Model Context Protocol implementation for TypeScript

Repository:	https://github.com/modelcontextprotocol/typescript-sdk
Homepage:	https://modelcontextprotocol.io
Latest Release:	`1.12.1` 9 months ago
Dependent Repos:	0
Dependent Packages:	0
Downloads:	20,675,691
Ranking:	Top 25.5593% by dependent repos Top 37.0256% by dependent pkgs

PR Status

Open 3,317 (42.9%)

Merged 493 (6.4%)

Closed 3,448 (44.5%)

PR Types

Major 278 (3.6%)

Patch 1,267 (16.4%)

Minor 5,713 (73.8%)