- b9e6d76: Return an actionable
410 GoneProblem Details response when a client attempts the removed HTTP+SSE transport withGET /sse. The response explains that clients can configure the existing/sseURL to use Streamable HTTP or, preferably, move to/mcpfor future compatibility. It preserves query parameters, identifies the recommended replacement in aLinkheader, and is available before OAuth authentication. Streamable HTTPPOSTrequests continue to work on both/sseand/mcp. - Updated dependencies [b9e6d76]
- @repo/mcp-common@0.20.10
- Updated dependencies [12a9a61]
- @repo/mcp-common@0.20.9
- Updated dependencies [4e1e6ab]
- @repo/mcp-common@0.20.8
- 1df6213: Migrate all MCP servers to fresh SDK v2 factories with default stateless 2025 compatibility, request-scoped auth/context, and no live protocol Durable Object or SSE session state. Upgrade the released MCP stack to
agents@0.20.1,@modelcontextprotocol/server@2.0.0,@modelcontextprotocol/client@2.0.0, and SDK v1 compatibility package@modelcontextprotocol/sdk@1.30.0, using the isolatedagents/mcp/serverstateless handler. Keep/sseas a URL alias for the same Streamable HTTP handler as/mcp, without retaining the deprecated HTTP+SSE transport. Assemble every deployment through canonical public/authenticated app modules, prune obsolete app-level routing dependencies, and expose a tracked registration context instead of the raw SDK server. Preserve append-only Durable Object migration history while explicitly deleting retired protocol classes, preserve application/security state, upgrade the OAuth provider to 0.8.2 with exact resource matching, bound MCP request bodies, and require explicit Workers Builds identifiers. - Updated dependencies [1df6213]
- @repo/mcp-common@0.20.7
- Updated dependencies [cb01861]
- @repo/mcp-common@0.20.6
-
f625075: Centralize Cloudflare account resolution and remove the account-management tools.
The
accounts_listandset_active_accounttools are removed. Account scoping is now resolved automatically by anAccountManager(via the newserver.accountTool()registration), in priority order:- Auth-pinned account — an account-scoped API token's account, or an OAuth token with a
single account, is used automatically (no
account_idparameter is exposed). cf-account-idrequest header — for tokens that can access multiple accounts, set this header in your MCP client config to pick an account.account_idtool argument — for multi-account tokens, account-scoped tools expose an optionalaccount_idparameter; when omitted (and no header is set) the tool returns an error listing the accounts you can use. Multi-account credentials also list their accounts in the server'sinitializeinstructions.
All tool error responses now set
isError: trueso clients can distinguish failures. - Auth-pinned account — an account-scoped API token's account, or an OAuth token with a
single account, is used automatically (no
-
a358e69: Upgrade
@cloudflare/workers-oauth-provider0.4.0 → 0.7.0.No tool or behavior changes. The only API change affecting this repo is that
TokenExchangeCallbackOptionsnow carries a requiredgrantIdfield, which only touched a test fixture (the provider supplies it at runtime). -
f625075: Upgrade core dependencies:
agents0.2.19 → 0.13.3,@modelcontextprotocol/sdk1.20.2 → 1.29.0,zod3 → 4, andai4 → 6.No user-facing tool or behavior changes. Internal adjustments for the new versions:
zod4:z.record(...)now takes an explicit key schema;z.string().ip()replaced withz.ipv4()/z.ipv6()validation; dropped the removedobjectOutputTypehelper.agents0.13:McpAgentenv generic is constrained toCloudflare.Env.- MCP SDK 1.29: tool
annotationshints must be flat ({ title, readOnlyHint, ... }) — fixes a latent bug where nested hints were silently ignored. ai6: eval tooling updated (LanguageModel,inputSchema,stopWhen/stepCountIs, tool-callinput).
- Updated dependencies [f77355c]
- @repo/mcp-common@0.20.5
- 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
- Updated dependencies [50926ec]
- @repo/mcp-common@0.20.4
- Updated dependencies [01a172e]
- @repo/mcp-common@0.20.3
- 99e2282: Move docs MCP server to use AI Search
- Updated dependencies [99e2282]
- @repo/mcp-common@0.20.2
- @repo/mcp-observability@0.32.5
- Updated dependencies [7fc3f18]
- @repo/mcp-common@0.20.1
- 847fc1f: Update cloudflare-oauth-handler
- Updated dependencies [f9f0bb6]
- Updated dependencies [847fc1f]
- @repo/mcp-common@0.20.0
- @repo/mcp-observability@0.32.4
- 43f493d: Update agent + modelcontextprotocol deps
- Updated dependencies [43f493d]
- @repo/mcp-observability@0.32.3
- @repo/mcp-common@0.19.3
- 24dd872: feat: Add MCP tool titles and hints to all Cloudflare tools
- Updated dependencies [24dd872]
- @repo/mcp-common@0.19.2
- dffbd36: Use proper wrangler deploy in all servers so we get the name and version
- 7422e71: Update MCP sdk
- Updated dependencies [7422e71]
- @repo/mcp-observability@0.32.2
- @repo/mcp-common@0.19.1
- cc6d41f: Update agents deps & modelcontextprotocol
- Updated dependencies [1833c6d]
- Updated dependencies [cc6d41f]
- @repo/mcp-common@0.19.0
- @repo/mcp-observability@0.32.1
- Updated dependencies [f885d07]
- @repo/mcp-common@0.18.0
- Updated dependencies [83e2d19]
- @repo/mcp-common@0.17.1
- 6cf52a6: Support AOT tokens
- 0fc4439: Update agents and modelcontext dependencies
- Updated dependencies [6cf52a6]
- Updated dependencies [0fc4439]
- @repo/mcp-observability@0.32.0
- @repo/mcp-common@0.17.0
- 3677a18: Remove extraneous log
- Updated dependencies [3677a18]
- @repo/mcp-common@0.16.3
- 86c2e4f: Add API token passthrough auth
- Updated dependencies [86c2e4f]
- @repo/mcp-common@0.16.2
-
cf3771b: chore: add suffixes to common files in apps and packages
It can be confusing switching between 16 files named 'index.ts', or 3 files named workers.ts. This change renames common files to have suffixes such as .types.ts, .api.ts, etc. to make it easier to work across files in the monorepo.
-
Updated dependencies [cf3771b]
- @repo/mcp-common@0.16.1
- @repo/mcp-observability@0.31.1