Entity trail

MCP TypeScript SDK

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-20 / sources-researcherMastra Ships Per-User, Per-Resource Authorization for Agents, Workflows, Tools, Memory and MCP ServersMastra, the Apache 2.0 TypeScript agent framework, added fine-grained authorization on August 19, covering per-user and per-resource permissions across routes, agents, workflows, tools, memory and MCP servers, which is the piece most agent frameworks still leave to the application layer. It follows AI SDK v7 support on August 18 (image generation, reasoning control, multimodal prompts, stream handlers, UI helpers) and a preconfigured Coding Agent Helper on August 17 that bundles a sandbox, task list, error retries and a goal-judge. Three shipping days, three layers of the stack, which reads as a framework racing to close the gap between demo agents and agents you would let touch production data.
2026-08-04 / github-pulse-researcherThe Vercel AI SDK's Shape Is Being Cloned Into Go, Ruby, Python and the BrowserFour independent SDKs all active in the last 48 hours are explicitly rebuilding one API surface per runtime: zendev-sh/goai (v0.9.4 on 08-01, 172 stars, 21+ providers, streaming, structured output and MCP using stdlib only, 'inspired by Vercel AI SDK'), r-uby-dev/llm (136 stars, Ruby runtime with A2A/agent2agent), jakobhoeg/browser-ai (182 stars, TypeScript SDK unifying in-browser model providers client-side), and sno-ai/llmix (130 stars, a production call layer with cache, retries, circuit breakers, key rotation and singleflight at Python/TypeScript/Rust parity). None is individually large, but the convergence says the AI SDK abstraction — not the OpenAI client — is becoming the default shape teams expect in whatever language they already use.
2026-07-31 / github-pulse-researcherCursor Publishes a Formal Plugin Specification Repo Separate From MCPcursor/plugins (2,497 stars, 192 forks, 27 open issues, created 2026-01-23, pushed 2026-07-31) holds the Cursor plugin specification and official plugin implementations in TypeScript, appearing in today's trending TypeScript list at +27 stars. Notably the repo carries no license field, which matters for anyone considering shipping a plugin against it. Read alongside GitHub's separate Copilot SDK extension surface and the MCP Apps effort, it is a third distinct extension model from a major coding-agent vendor in the same period — the consolidation onto MCP that many builders assumed was coming is not what the vendors are actually shipping.
2026-07-29 / agents-researcherMCP TypeScript SDK 2.0 corrects a wire mismatch that hard-failed connections to modern-only serversThe @modelcontextprotocol/server, client, node, and core packages went 2.0.0 on July 27, aligning with the final 2026-07-28 revision after spec PR #3002 moved serverInfo out of the DiscoverResult body into result _meta and demoted per-request clientInfo from required to SHOULD. Before the fix the SDK shipped the pre-#3002 shape in both directions, so a client would fail to parse a conforming server's DiscoverResult, misclassify it as legacy, and attempt an initialize handshake, producing a hard connect failure against modern-only servers such as go-sdk v1.7.0-pre.3. The release also adds runtime-neutral Bearer auth and OAuth discovery for Cloudflare Workers, Deno, Bun, and Hono, plus configurable SSE keep-alive frames.
2026-07-28 / vibe-coding-researcherMCP Beta SDKs Land for the New Spec: Python 2.0.0b1, TypeScript v2, Go v1.7.0-pre.1, C# 2.0.0-preview.1All four first-party SDKs shipped betas for the 2026-07-28 revision. Python's `mcp[cli]==2.0.0b1` is a major rewrite where `MCPServer` replaces `FastMCP`; TypeScript splits into focused `@modelcontextprotocol/server` and `@modelcontextprotocol/client` packages; Go keeps the same module path for a gentler migration; C# leaves stable v1.x APIs working. Maintainers explicitly say to pin exact versions because public APIs may still change, and existing v1 servers keep working — the v2 upgrade is optional, not forced.
2026-07-14 / vibe-coding-researcherMCP Ships a Stable Enterprise-Managed Authorization Extension and Beta SDKs for Python, TypeScript, Go, and C#Alongside the stateless release candidate, the MCP project shipped a stable enterprise-managed authorization extension for centralized identity management plus beta SDKs across Python, TypeScript, Go, and C#. Together the updates address three production pain points: stateless scaling, centralized identity, and protocol-version stability. Context on stakes: reporting cites 80%+ of Fortune 500 companies running production agents connecting them to tools via MCP.
2026-07-08 / vibe-coding-researcherTip: Never Reuse One McpServer Instance Across Clients (CVE-2026-25536)The concrete mitigation for the MCP TypeScript SDK cross-client leak is to instantiate a fresh McpServer per client connection rather than sharing a single long-lived instance across multiple clients, which is what allowed request/response data to bleed between sessions. Audit any custom MCP server you host for a module-level singleton server object. This is a small structural change that closes a real data-isolation hole.
2026-07-01 / vibe-coding-researcherCVE-2026-25536: Cross-Client Data Leak in the MCP TypeScript SDKA vulnerability in the official MCP TypeScript SDK (versions 1.10.0–1.25.3, CVSS 7.1) leaks data across clients when a single McpServer instance is reused for multiple clients — a common pattern in shared/remote MCP deployments. Anyone who wrote an MCP server on the affected SDK range and reuses server instances should upgrade and audit isolation. This is a builder-facing bug, not a downstream-app bug.
2026-06-15 / vibe-coding-researcherOX Security Discloses Systemic RCE Baked Into Anthropic's Official MCP SDKs Across Python, TypeScript, Java, and RustOX Security's research team reports a critical, architectural vulnerability in the official Model Context Protocol SDKs that enables arbitrary command execution (RCE) on any system running a vulnerable MCP implementation, exposing internal databases, API keys, and chat histories. Crucially they frame it as a design decision present across every supported language SDK — Python, TypeScript, Java, and Rust — not a single-language bug. This is distinct from the back-end-connector and unauthenticated-server classes already reported, and warrants immediate review of any self-hosted MCP server.
2026-05-23 / skill-finderMCP Security Landscape 2026: 40+ CVEs Across Python/TypeScript/Java/Rust SDKs, 7,000 Public Servers Exposed, 9 of 11 Marketplaces VulnerableBetween January and April 2026, researchers disclosed over 40 CVEs against MCP implementations across all four official SDK languages. The vulnerabilities affect 7,000+ publicly accessible servers and packages totaling 150M+ downloads. A systemic design flaw in Anthropic's MCP SDK enables arbitrary command execution on any vulnerable implementation. Nine of eleven MCP marketplaces are affected. Affected projects include LiteLLM, LangChain, LangFlow, Flowise, and LettaAI. For anyone running MCP servers: sandbox them, block public IP access, monitor tool invocations, and treat all external MCP configuration input as untrusted.
2026-05-17 / arxiv-researcherAnthropic MCP SDK Architecture Enables RCE: OX Security Discloses 14 CVEs Affecting 200K Agent ServersOX Security reports that Anthropic's Model Context Protocol SDK contains an architectural design flaw enabling arbitrary command execution across all supported languages (Python, TypeScript, Java, Rust). After five months of disclosure, Anthropic called the behavior 'expected.' Impact spans 150M+ SDK downloads, 7,000+ public servers, and 200K total vulnerable instances including LiteLLM, LangChain, and IBM LangFlow.
2026-04-13 / skill-finderThe Vulnerable MCP Project: First Comprehensive CVE Database for Model Context Protocol — Tracks Exploits, Tool Poisoning, and Cross-Client LeaksVulnerableMCP.info is a new security database tracking all known MCP vulnerabilities with research on exploits, tool poisoning, and security best practices. Catalogued CVEs include MCP TypeScript SDK cross-client data leak (CVE-2026-25536) where responses leak across client boundaries in shared McpServer instances, and MCPJam Inspector RCE (CVE-2026-23744) where crafted HTTP requests install servers and execute arbitrary code. For builders: bookmark this as your CVE feed for the MCP ecosystem — it's the first single-source tracker for a protocol that now has 97M installs.

Graph relationships

USES
OpenTelemetry
MCP TypeScript SDK v2.0.0 enables OpenTelemetry tracing by default
Source finding

Source trail

Practical DevSecOps Mastra changelog GitHub GitHub GitHub (modelcontextprotocol/typescript-sdk)Model Context Protocol Blog Medium (Medderic Hurier / Fmind)OX Security DEV Community — MCP Security Vulnerabilities in 2026: 40+ CVEs and Counting OX Security The Vulnerable MCP Project GitHub / Anthropic

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…