All issues

Search results

Mcp-Name accepts an orphan header, while Mcp-Param-* rejects it as a routing spoof

Status: Open.

#3269In modelcontextprotocol/python-sdk;

· quotentiroler opened on Aug 8, 2026

Log exceptions in tool calls

Status: Open.

#3266In modelcontextprotocol/python-sdk;

· fabianlange opened on Aug 7, 2026

handle_get_stream reconnects indefinitely when the server ends the GET stream normally (attempt = 0 defeats MAX_RECONNECTION_ATTEMPTS)

Status: Open.

#3257In modelcontextprotocol/python-sdk;

· luiz00martins opened on Aug 5, 2026

OAuth client can never recover from an expired DCR client secret — even though the SDK's own server issues and enforces one

Status: Open.

#3256In modelcontextprotocol/python-sdk;

· carrotRakko opened on Aug 5, 2026

[v2] MCPServer reports empty experimental capabilities as {} via initialize but None via server/discover

Status: Open.

#3254In modelcontextprotocol/python-sdk;

· squibloads opened on Aug 5, 2026

OAuthClientProvider._initialize() breaks transparent refresh: missing update_token_expiry + missing oauth_metadata load

Status: Open.

#3250In modelcontextprotocol/python-sdk;

· draesthetic opened on Aug 4, 2026

Test suite fails with UnicodeDecodeError on Windows with non-UTF-8 locale: read_text() calls missing encoding

P3Nice to haves, rare edge casesNice to haves, rare edge cases

Status: Open.

#3244In modelcontextprotocol/python-sdk;

· ShuQingDollarVoyager opened on Aug 4, 2026

OAuth token refresh hits the wrong endpoint when the auth server lives under a path

Status: Open.

#3240In modelcontextprotocol/python-sdk;

· mfadul24 opened on Aug 3, 2026

Expose create_mcp_http_client and McpHttpClientFactory as public API (2.0 made them private-only)

Status: Open.

#3238In modelcontextprotocol/python-sdk;

· ProgrammerPlus1998 opened on Aug 3, 2026

Parameterized Context loses request state in resource and prompt handlers

Status: Open.

#3235In modelcontextprotocol/python-sdk;

· morluto opened on Aug 1, 2026

Rejected streamable-HTTP requests leave live sessions behind: the session is registered before the request is validated

Status: Open.

#3228In modelcontextprotocol/python-sdk;

· sainikhiljuluri opened on Jul 30, 2026

NotRequired TypedDict return annotation raises PydanticForbiddenQualifier at tool registration on Python 3.10

Status: Open.

#3227In modelcontextprotocol/python-sdk;

· sainikhiljuluri opened on Jul 30, 2026