-
Notifications
You must be signed in to change notification settings - Fork 3.9k
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[v2] modern streamable HTTP watch_disconnect can busy-loop and peg a CPU core
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3439 In modelcontextprotocol/python-sdk;TransportSecuritySettings.allowed_hosts is compared case-sensitively (NOT RFC 9110 compliant), so an uppercase host entry (the Windows default) rejects every fetch-based client with 421
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3437 In modelcontextprotocol/python-sdk;In-process callback failures break tool calls and notification sends
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3434 In modelcontextprotocol/python-sdk;coerce_request_id() folds non-canonical numeric strings, conflating wire-distinct JSON-RPC ids
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3432 In modelcontextprotocol/python-sdk;test_safe_join_rejects_symlink_escape fails on Windows without elevation or Developer Mode
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3408 In modelcontextprotocol/python-sdk;Tool input schemas carry a pydantic-derived title on every property
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3391 In modelcontextprotocol/python-sdk;[v2] Expose request cancellation on MCPServer tool Context
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3389 In modelcontextprotocol/python-sdk;A tool returning a non-finite float puts invalid JSON in the text content block
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3385 In modelcontextprotocol/python-sdk;ClientSessionGroup raises KeyError when a server exposes no tools, resources or prompts
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3384 In modelcontextprotocol/python-sdk;OAuthClientProvider auth lock is permanently poisoned when httpx closes async_auth_flow from a different task (RuntimeError: The current task is not holding this lock)
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3382 In modelcontextprotocol/python-sdk;pyjwt[crypto] as an unconditional dependency blocks installation on platforms without a cryptography wheel (e.g. Windows on ARM)
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3373 In modelcontextprotocol/python-sdk;Client SSRF / protocol confusion: streamable HTTP transport follows server 3xx into internal+loopback services (follow_redirects=True, no host validation; #2106 closed but fix #2180 never merged)
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3358 In modelcontextprotocol/python-sdk;