Skip to content

fix: don't fail a notification POST on response shape - #1063

Open
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape
Open

fix: don't fail a notification POST on response shape#1063
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape

Conversation

@otherwhere666

Copy link
Copy Markdown

Problem

A POST that carries only notifications/responses/errors leaves no request outstanding, so nothing in the response is load-bearing. The spec says the server SHOULD reply 202 Accepted with no body — but servers in the wild routinely reply 200 instead, with or without a body, and with or without a Content-Type.

post_message currently accepts such a POST only on 202/204, on a 2xx carrying a literal Content-Length: 0, or on a 2xx typed application/json / text/event-stream. Anything else returns UnexpectedContentType, which fails the send. When the message is notifications/initialized, that takes the whole handshake down against a server whose only fault is answering 200 instead of 202.

Two shapes hit this in practice:

  1. 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its content-type validation behind hasRequests, so a notification-only POST skips the check entirely and any 2xx passes. We are stricter than the other client SDKs a server is likely to have been tested against — a server can pass every other client and fail only here.
  2. An empty body sent with chunked transfer encoding.Content-Length is absent, so content_length == Some(0) cannot fire even though the body is in fact empty, and the request falls through to the fatal arm.

We hit (1) against a stateless server that returned 200 for notifications/initialized. The same endpoint completed the handshake against five other MCP clients; ours was the only one that rejected it.

Change

Never fail a POST that awaits no response on response shape alone — only on a non-success status.

application/json and text/event-stream are still parsed and streamed exactly as before, so no behavior is lost; only the previously fatal fallback arm changes. A POST that is still waiting on a reply keeps every existing strict check.

Tests

Added to the module's inline mod tests:

  • post_notification_accepts_unusable_success_body — two rstest cases, 200 + text/plain and 200 with the Content-Type stripped. Both fail on main with UnexpectedContentType(Some("text/plain")) and UnexpectedContentType(None) respectively; both pass with the change. The second also covers the chunked-empty-body shape, which takes the identical path (no Content-Length, no Content-Type).
  • post_request_still_rejects_unexpected_content_type — guard against over-loosening: a POST still awaiting a reply must keep failing. Passes before and after.

cargo clippy -p rmcp --all-features --all-targets is clean and cargo fmt --check passes. Full suite per the just test recipe: 949 passed, 0 failed. (test_with_python fails identically on pristine main in my environment because uv isn't installed — unrelated.)

A POST that carries only notifications/responses/errors leaves no request
outstanding, so nothing in the response is load-bearing. The spec says the
server SHOULD reply 202 Accepted with no body, but servers in the wild
routinely reply 200 instead, with or without a body, and with or without a
Content-Type.
`post_message` previously accepted such a POST only on 202/204, on a 2xx
carrying a literal `Content-Length: 0`, or on a 2xx typed `application/json`
or `text/event-stream`. Anything else returned `UnexpectedContentType`, which
fails the send. When the message is `notifications/initialized` that takes the
entire handshake down, against servers whose only fault is answering 200
instead of 202.
Two shapes hit this in practice:
- 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its
content-type validation behind `hasRequests`, so a notification-only POST
skips the check entirely and any 2xx passes; we were stricter than the other
client SDKs a server is likely to have been tested against.
- An empty body sent with chunked transfer encoding. Content-Length is absent,
so the existing empty-body tolerance cannot fire even though the body is in
fact empty.
Never fail a POST that awaits no response on response shape alone — only on a
non-success status. `application/json` and `text/event-stream` are still
parsed and streamed exactly as before, so no behavior is lost; only the
previously fatal fallback arm changes. A POST that is still waiting on a reply
keeps every existing strict check.
@otherwhere666
otherwhere666 requested a review from a team as a code ownerJuly 27, 2026 22:03
@github-actionsgithub-actionsBot added T-core Core library changes T-transport Transport layer changes labels Jul 27, 2026
// servers that answer 200 with an unexpected or absent Content-Type.
// This also covers an empty body sent with chunked transfer encoding,
// where Content-Length is absent and the check above cannot fire.
_ if awaits_no_response => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

UnixSocketHttpClient::post_message_with_max_sse_event_size uses the same Content-Length and Content-Type decision tree, but its fallback still returns UnexpectedContentType for notification, response, and error POSTs. Could we apply the same awaits_no_response guard and fallback there, along with equivalent regression tests, so notifications/initialized stops failing for users of the Unix-socket transport?

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

T-coreCore library changesT-transportTransport layer changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@otherwhere666@DaleSeo
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
fix: don't fail a notification POST on response shape by otherwhere666 · Pull Request #1063 · modelcontextprotocol/rust-sdk · GitHub
Skip to content

fix: don't fail a notification POST on response shape - #1063

Open
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape
Open

fix: don't fail a notification POST on response shape#1063
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape

Conversation

@otherwhere666

Copy link
Copy Markdown

Problem

A POST that carries only notifications/responses/errors leaves no request outstanding, so nothing in the response is load-bearing. The spec says the server SHOULD reply 202 Accepted with no body — but servers in the wild routinely reply 200 instead, with or without a body, and with or without a Content-Type.

post_message currently accepts such a POST only on 202/204, on a 2xx carrying a literal Content-Length: 0, or on a 2xx typed application/json / text/event-stream. Anything else returns UnexpectedContentType, which fails the send. When the message is notifications/initialized, that takes the whole handshake down against a server whose only fault is answering 200 instead of 202.

Two shapes hit this in practice:

  1. 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its content-type validation behind hasRequests, so a notification-only POST skips the check entirely and any 2xx passes. We are stricter than the other client SDKs a server is likely to have been tested against — a server can pass every other client and fail only here.
  2. An empty body sent with chunked transfer encoding.Content-Length is absent, so content_length == Some(0) cannot fire even though the body is in fact empty, and the request falls through to the fatal arm.

We hit (1) against a stateless server that returned 200 for notifications/initialized. The same endpoint completed the handshake against five other MCP clients; ours was the only one that rejected it.

Change

Never fail a POST that awaits no response on response shape alone — only on a non-success status.

application/json and text/event-stream are still parsed and streamed exactly as before, so no behavior is lost; only the previously fatal fallback arm changes. A POST that is still waiting on a reply keeps every existing strict check.

Tests

Added to the module's inline mod tests:

  • post_notification_accepts_unusable_success_body — two rstest cases, 200 + text/plain and 200 with the Content-Type stripped. Both fail on main with UnexpectedContentType(Some("text/plain")) and UnexpectedContentType(None) respectively; both pass with the change. The second also covers the chunked-empty-body shape, which takes the identical path (no Content-Length, no Content-Type).
  • post_request_still_rejects_unexpected_content_type — guard against over-loosening: a POST still awaiting a reply must keep failing. Passes before and after.

cargo clippy -p rmcp --all-features --all-targets is clean and cargo fmt --check passes. Full suite per the just test recipe: 949 passed, 0 failed. (test_with_python fails identically on pristine main in my environment because uv isn't installed — unrelated.)

A POST that carries only notifications/responses/errors leaves no request
outstanding, so nothing in the response is load-bearing. The spec says the
server SHOULD reply 202 Accepted with no body, but servers in the wild
routinely reply 200 instead, with or without a body, and with or without a
Content-Type.
`post_message` previously accepted such a POST only on 202/204, on a 2xx
carrying a literal `Content-Length: 0`, or on a 2xx typed `application/json`
or `text/event-stream`. Anything else returned `UnexpectedContentType`, which
fails the send. When the message is `notifications/initialized` that takes the
entire handshake down, against servers whose only fault is answering 200
instead of 202.
Two shapes hit this in practice:
- 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its
content-type validation behind `hasRequests`, so a notification-only POST
skips the check entirely and any 2xx passes; we were stricter than the other
client SDKs a server is likely to have been tested against.
- An empty body sent with chunked transfer encoding. Content-Length is absent,
so the existing empty-body tolerance cannot fire even though the body is in
fact empty.
Never fail a POST that awaits no response on response shape alone — only on a
non-success status. `application/json` and `text/event-stream` are still
parsed and streamed exactly as before, so no behavior is lost; only the
previously fatal fallback arm changes. A POST that is still waiting on a reply
keeps every existing strict check.
@otherwhere666
otherwhere666 requested a review from a team as a code ownerJuly 27, 2026 22:03
@github-actionsgithub-actionsBot added T-core Core library changes T-transport Transport layer changes labels Jul 27, 2026
// servers that answer 200 with an unexpected or absent Content-Type.
// This also covers an empty body sent with chunked transfer encoding,
// where Content-Length is absent and the check above cannot fire.
_ if awaits_no_response => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

UnixSocketHttpClient::post_message_with_max_sse_event_size uses the same Content-Length and Content-Type decision tree, but its fallback still returns UnexpectedContentType for notification, response, and error POSTs. Could we apply the same awaits_no_response guard and fallback there, along with equivalent regression tests, so notifications/initialized stops failing for users of the Unix-socket transport?

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

T-coreCore library changesT-transportTransport layer changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@otherwhere666@DaleSeo
, 'i'); if (__m === '*' || __re.test(location.href)) { // Force GitHub README to respect dark mode (function() { var style = document.createElement('style'); style.textContent = ' .markdown-body { color-scheme: dark light; } .markdown-body pre { background: #161b22 !important; } .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; } .markdown-body table th, .markdown-body table td { border-color: #30363d !important; } .markdown-body img { background: #0d1117; } .markdown-body blockquote { border-left-color: #8b949e; } .markdown-body hr { border-color: #30363d; } '; document.head.appendChild(style); })(); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' fix: don't fail a notification POST on response shape by otherwhere666 · Pull Request #1063 · modelcontextprotocol/rust-sdk · GitHub
Skip to content

fix: don't fail a notification POST on response shape - #1063

Open
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape
Open

fix: don't fail a notification POST on response shape#1063
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape

Conversation

@otherwhere666

Copy link
Copy Markdown

Problem

A POST that carries only notifications/responses/errors leaves no request outstanding, so nothing in the response is load-bearing. The spec says the server SHOULD reply 202 Accepted with no body — but servers in the wild routinely reply 200 instead, with or without a body, and with or without a Content-Type.

post_message currently accepts such a POST only on 202/204, on a 2xx carrying a literal Content-Length: 0, or on a 2xx typed application/json / text/event-stream. Anything else returns UnexpectedContentType, which fails the send. When the message is notifications/initialized, that takes the whole handshake down against a server whose only fault is answering 200 instead of 202.

Two shapes hit this in practice:

  1. 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its content-type validation behind hasRequests, so a notification-only POST skips the check entirely and any 2xx passes. We are stricter than the other client SDKs a server is likely to have been tested against — a server can pass every other client and fail only here.
  2. An empty body sent with chunked transfer encoding.Content-Length is absent, so content_length == Some(0) cannot fire even though the body is in fact empty, and the request falls through to the fatal arm.

We hit (1) against a stateless server that returned 200 for notifications/initialized. The same endpoint completed the handshake against five other MCP clients; ours was the only one that rejected it.

Change

Never fail a POST that awaits no response on response shape alone — only on a non-success status.

application/json and text/event-stream are still parsed and streamed exactly as before, so no behavior is lost; only the previously fatal fallback arm changes. A POST that is still waiting on a reply keeps every existing strict check.

Tests

Added to the module's inline mod tests:

  • post_notification_accepts_unusable_success_body — two rstest cases, 200 + text/plain and 200 with the Content-Type stripped. Both fail on main with UnexpectedContentType(Some("text/plain")) and UnexpectedContentType(None) respectively; both pass with the change. The second also covers the chunked-empty-body shape, which takes the identical path (no Content-Length, no Content-Type).
  • post_request_still_rejects_unexpected_content_type — guard against over-loosening: a POST still awaiting a reply must keep failing. Passes before and after.

cargo clippy -p rmcp --all-features --all-targets is clean and cargo fmt --check passes. Full suite per the just test recipe: 949 passed, 0 failed. (test_with_python fails identically on pristine main in my environment because uv isn't installed — unrelated.)

A POST that carries only notifications/responses/errors leaves no request
outstanding, so nothing in the response is load-bearing. The spec says the
server SHOULD reply 202 Accepted with no body, but servers in the wild
routinely reply 200 instead, with or without a body, and with or without a
Content-Type.
`post_message` previously accepted such a POST only on 202/204, on a 2xx
carrying a literal `Content-Length: 0`, or on a 2xx typed `application/json`
or `text/event-stream`. Anything else returned `UnexpectedContentType`, which
fails the send. When the message is `notifications/initialized` that takes the
entire handshake down, against servers whose only fault is answering 200
instead of 202.
Two shapes hit this in practice:
- 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its
content-type validation behind `hasRequests`, so a notification-only POST
skips the check entirely and any 2xx passes; we were stricter than the other
client SDKs a server is likely to have been tested against.
- An empty body sent with chunked transfer encoding. Content-Length is absent,
so the existing empty-body tolerance cannot fire even though the body is in
fact empty.
Never fail a POST that awaits no response on response shape alone — only on a
non-success status. `application/json` and `text/event-stream` are still
parsed and streamed exactly as before, so no behavior is lost; only the
previously fatal fallback arm changes. A POST that is still waiting on a reply
keeps every existing strict check.
@otherwhere666
otherwhere666 requested a review from a team as a code ownerJuly 27, 2026 22:03
@github-actionsgithub-actionsBot added T-core Core library changes T-transport Transport layer changes labels Jul 27, 2026
// servers that answer 200 with an unexpected or absent Content-Type.
// This also covers an empty body sent with chunked transfer encoding,
// where Content-Length is absent and the check above cannot fire.
_ if awaits_no_response => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

UnixSocketHttpClient::post_message_with_max_sse_event_size uses the same Content-Length and Content-Type decision tree, but its fallback still returns UnexpectedContentType for notification, response, and error POSTs. Could we apply the same awaits_no_response guard and fallback there, along with equivalent regression tests, so notifications/initialized stops failing for users of the Unix-socket transport?

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

T-coreCore library changesT-transportTransport layer changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@otherwhere666@DaleSeo
, 'i'); if (__m === '*' || __re.test(location.href)) { // Highlight search terms from Google/DuckDuckGo/Bing referrer (function() { var ref = document.referrer; var terms = []; if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) { var url = new URL(ref); var q = url.searchParams.get('q') || url.searchParams.get('p'); if (q) { terms = q.split(/\s+/).filter(function(t) { return t.length > 2; }); } } if (terms.length === 0) return; var style = document.createElement('style'); style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }'; document.head.appendChild(style); function highlight(node) { if (node.nodeType === 3) { // text node var text = node.textContent; var found = false; terms.forEach(function(term) { var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' fix: don't fail a notification POST on response shape by otherwhere666 · Pull Request #1063 · modelcontextprotocol/rust-sdk · GitHub
Skip to content

fix: don't fail a notification POST on response shape - #1063

Open
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape
Open

fix: don't fail a notification POST on response shape#1063
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape

Conversation

@otherwhere666

Copy link
Copy Markdown

Problem

A POST that carries only notifications/responses/errors leaves no request outstanding, so nothing in the response is load-bearing. The spec says the server SHOULD reply 202 Accepted with no body — but servers in the wild routinely reply 200 instead, with or without a body, and with or without a Content-Type.

post_message currently accepts such a POST only on 202/204, on a 2xx carrying a literal Content-Length: 0, or on a 2xx typed application/json / text/event-stream. Anything else returns UnexpectedContentType, which fails the send. When the message is notifications/initialized, that takes the whole handshake down against a server whose only fault is answering 200 instead of 202.

Two shapes hit this in practice:

  1. 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its content-type validation behind hasRequests, so a notification-only POST skips the check entirely and any 2xx passes. We are stricter than the other client SDKs a server is likely to have been tested against — a server can pass every other client and fail only here.
  2. An empty body sent with chunked transfer encoding.Content-Length is absent, so content_length == Some(0) cannot fire even though the body is in fact empty, and the request falls through to the fatal arm.

We hit (1) against a stateless server that returned 200 for notifications/initialized. The same endpoint completed the handshake against five other MCP clients; ours was the only one that rejected it.

Change

Never fail a POST that awaits no response on response shape alone — only on a non-success status.

application/json and text/event-stream are still parsed and streamed exactly as before, so no behavior is lost; only the previously fatal fallback arm changes. A POST that is still waiting on a reply keeps every existing strict check.

Tests

Added to the module's inline mod tests:

  • post_notification_accepts_unusable_success_body — two rstest cases, 200 + text/plain and 200 with the Content-Type stripped. Both fail on main with UnexpectedContentType(Some("text/plain")) and UnexpectedContentType(None) respectively; both pass with the change. The second also covers the chunked-empty-body shape, which takes the identical path (no Content-Length, no Content-Type).
  • post_request_still_rejects_unexpected_content_type — guard against over-loosening: a POST still awaiting a reply must keep failing. Passes before and after.

cargo clippy -p rmcp --all-features --all-targets is clean and cargo fmt --check passes. Full suite per the just test recipe: 949 passed, 0 failed. (test_with_python fails identically on pristine main in my environment because uv isn't installed — unrelated.)

A POST that carries only notifications/responses/errors leaves no request
outstanding, so nothing in the response is load-bearing. The spec says the
server SHOULD reply 202 Accepted with no body, but servers in the wild
routinely reply 200 instead, with or without a body, and with or without a
Content-Type.
`post_message` previously accepted such a POST only on 202/204, on a 2xx
carrying a literal `Content-Length: 0`, or on a 2xx typed `application/json`
or `text/event-stream`. Anything else returned `UnexpectedContentType`, which
fails the send. When the message is `notifications/initialized` that takes the
entire handshake down, against servers whose only fault is answering 200
instead of 202.
Two shapes hit this in practice:
- 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its
content-type validation behind `hasRequests`, so a notification-only POST
skips the check entirely and any 2xx passes; we were stricter than the other
client SDKs a server is likely to have been tested against.
- An empty body sent with chunked transfer encoding. Content-Length is absent,
so the existing empty-body tolerance cannot fire even though the body is in
fact empty.
Never fail a POST that awaits no response on response shape alone — only on a
non-success status. `application/json` and `text/event-stream` are still
parsed and streamed exactly as before, so no behavior is lost; only the
previously fatal fallback arm changes. A POST that is still waiting on a reply
keeps every existing strict check.
@otherwhere666
otherwhere666 requested a review from a team as a code ownerJuly 27, 2026 22:03
@github-actionsgithub-actionsBot added T-core Core library changes T-transport Transport layer changes labels Jul 27, 2026
// servers that answer 200 with an unexpected or absent Content-Type.
// This also covers an empty body sent with chunked transfer encoding,
// where Content-Length is absent and the check above cannot fire.
_ if awaits_no_response => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

UnixSocketHttpClient::post_message_with_max_sse_event_size uses the same Content-Length and Content-Type decision tree, but its fallback still returns UnexpectedContentType for notification, response, and error POSTs. Could we apply the same awaits_no_response guard and fallback there, along with equivalent regression tests, so notifications/initialized stops failing for users of the Unix-socket transport?

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

T-coreCore library changesT-transportTransport layer changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@otherwhere666@DaleSeo
, 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ' fix: don't fail a notification POST on response shape by otherwhere666 · Pull Request #1063 · modelcontextprotocol/rust-sdk · GitHub
Skip to content

fix: don't fail a notification POST on response shape - #1063

Open
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape
Open

fix: don't fail a notification POST on response shape#1063
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape

Conversation

@otherwhere666

Copy link
Copy Markdown

Problem

A POST that carries only notifications/responses/errors leaves no request outstanding, so nothing in the response is load-bearing. The spec says the server SHOULD reply 202 Accepted with no body — but servers in the wild routinely reply 200 instead, with or without a body, and with or without a Content-Type.

post_message currently accepts such a POST only on 202/204, on a 2xx carrying a literal Content-Length: 0, or on a 2xx typed application/json / text/event-stream. Anything else returns UnexpectedContentType, which fails the send. When the message is notifications/initialized, that takes the whole handshake down against a server whose only fault is answering 200 instead of 202.

Two shapes hit this in practice:

  1. 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its content-type validation behind hasRequests, so a notification-only POST skips the check entirely and any 2xx passes. We are stricter than the other client SDKs a server is likely to have been tested against — a server can pass every other client and fail only here.
  2. An empty body sent with chunked transfer encoding.Content-Length is absent, so content_length == Some(0) cannot fire even though the body is in fact empty, and the request falls through to the fatal arm.

We hit (1) against a stateless server that returned 200 for notifications/initialized. The same endpoint completed the handshake against five other MCP clients; ours was the only one that rejected it.

Change

Never fail a POST that awaits no response on response shape alone — only on a non-success status.

application/json and text/event-stream are still parsed and streamed exactly as before, so no behavior is lost; only the previously fatal fallback arm changes. A POST that is still waiting on a reply keeps every existing strict check.

Tests

Added to the module's inline mod tests:

  • post_notification_accepts_unusable_success_body — two rstest cases, 200 + text/plain and 200 with the Content-Type stripped. Both fail on main with UnexpectedContentType(Some("text/plain")) and UnexpectedContentType(None) respectively; both pass with the change. The second also covers the chunked-empty-body shape, which takes the identical path (no Content-Length, no Content-Type).
  • post_request_still_rejects_unexpected_content_type — guard against over-loosening: a POST still awaiting a reply must keep failing. Passes before and after.

cargo clippy -p rmcp --all-features --all-targets is clean and cargo fmt --check passes. Full suite per the just test recipe: 949 passed, 0 failed. (test_with_python fails identically on pristine main in my environment because uv isn't installed — unrelated.)

A POST that carries only notifications/responses/errors leaves no request
outstanding, so nothing in the response is load-bearing. The spec says the
server SHOULD reply 202 Accepted with no body, but servers in the wild
routinely reply 200 instead, with or without a body, and with or without a
Content-Type.
`post_message` previously accepted such a POST only on 202/204, on a 2xx
carrying a literal `Content-Length: 0`, or on a 2xx typed `application/json`
or `text/event-stream`. Anything else returned `UnexpectedContentType`, which
fails the send. When the message is `notifications/initialized` that takes the
entire handshake down, against servers whose only fault is answering 200
instead of 202.
Two shapes hit this in practice:
- 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its
content-type validation behind `hasRequests`, so a notification-only POST
skips the check entirely and any 2xx passes; we were stricter than the other
client SDKs a server is likely to have been tested against.
- An empty body sent with chunked transfer encoding. Content-Length is absent,
so the existing empty-body tolerance cannot fire even though the body is in
fact empty.
Never fail a POST that awaits no response on response shape alone — only on a
non-success status. `application/json` and `text/event-stream` are still
parsed and streamed exactly as before, so no behavior is lost; only the
previously fatal fallback arm changes. A POST that is still waiting on a reply
keeps every existing strict check.
@otherwhere666
otherwhere666 requested a review from a team as a code ownerJuly 27, 2026 22:03
@github-actionsgithub-actionsBot added T-core Core library changes T-transport Transport layer changes labels Jul 27, 2026
// servers that answer 200 with an unexpected or absent Content-Type.
// This also covers an empty body sent with chunked transfer encoding,
// where Content-Length is absent and the check above cannot fire.
_ if awaits_no_response => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

UnixSocketHttpClient::post_message_with_max_sse_event_size uses the same Content-Length and Content-Type decision tree, but its fallback still returns UnexpectedContentType for notification, response, and error POSTs. Could we apply the same awaits_no_response guard and fallback there, along with equivalent regression tests, so notifications/initialized stops failing for users of the Unix-socket transport?

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

T-coreCore library changesT-transportTransport layer changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@otherwhere666@DaleSeo
, 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' fix: don't fail a notification POST on response shape by otherwhere666 · Pull Request #1063 · modelcontextprotocol/rust-sdk · GitHub
Skip to content

fix: don't fail a notification POST on response shape - #1063

Open
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape
Open

fix: don't fail a notification POST on response shape#1063
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape

Conversation

@otherwhere666

Copy link
Copy Markdown

Problem

A POST that carries only notifications/responses/errors leaves no request outstanding, so nothing in the response is load-bearing. The spec says the server SHOULD reply 202 Accepted with no body — but servers in the wild routinely reply 200 instead, with or without a body, and with or without a Content-Type.

post_message currently accepts such a POST only on 202/204, on a 2xx carrying a literal Content-Length: 0, or on a 2xx typed application/json / text/event-stream. Anything else returns UnexpectedContentType, which fails the send. When the message is notifications/initialized, that takes the whole handshake down against a server whose only fault is answering 200 instead of 202.

Two shapes hit this in practice:

  1. 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its content-type validation behind hasRequests, so a notification-only POST skips the check entirely and any 2xx passes. We are stricter than the other client SDKs a server is likely to have been tested against — a server can pass every other client and fail only here.
  2. An empty body sent with chunked transfer encoding.Content-Length is absent, so content_length == Some(0) cannot fire even though the body is in fact empty, and the request falls through to the fatal arm.

We hit (1) against a stateless server that returned 200 for notifications/initialized. The same endpoint completed the handshake against five other MCP clients; ours was the only one that rejected it.

Change

Never fail a POST that awaits no response on response shape alone — only on a non-success status.

application/json and text/event-stream are still parsed and streamed exactly as before, so no behavior is lost; only the previously fatal fallback arm changes. A POST that is still waiting on a reply keeps every existing strict check.

Tests

Added to the module's inline mod tests:

  • post_notification_accepts_unusable_success_body — two rstest cases, 200 + text/plain and 200 with the Content-Type stripped. Both fail on main with UnexpectedContentType(Some("text/plain")) and UnexpectedContentType(None) respectively; both pass with the change. The second also covers the chunked-empty-body shape, which takes the identical path (no Content-Length, no Content-Type).
  • post_request_still_rejects_unexpected_content_type — guard against over-loosening: a POST still awaiting a reply must keep failing. Passes before and after.

cargo clippy -p rmcp --all-features --all-targets is clean and cargo fmt --check passes. Full suite per the just test recipe: 949 passed, 0 failed. (test_with_python fails identically on pristine main in my environment because uv isn't installed — unrelated.)

A POST that carries only notifications/responses/errors leaves no request
outstanding, so nothing in the response is load-bearing. The spec says the
server SHOULD reply 202 Accepted with no body, but servers in the wild
routinely reply 200 instead, with or without a body, and with or without a
Content-Type.
`post_message` previously accepted such a POST only on 202/204, on a 2xx
carrying a literal `Content-Length: 0`, or on a 2xx typed `application/json`
or `text/event-stream`. Anything else returned `UnexpectedContentType`, which
fails the send. When the message is `notifications/initialized` that takes the
entire handshake down, against servers whose only fault is answering 200
instead of 202.
Two shapes hit this in practice:
- 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its
content-type validation behind `hasRequests`, so a notification-only POST
skips the check entirely and any 2xx passes; we were stricter than the other
client SDKs a server is likely to have been tested against.
- An empty body sent with chunked transfer encoding. Content-Length is absent,
so the existing empty-body tolerance cannot fire even though the body is in
fact empty.
Never fail a POST that awaits no response on response shape alone — only on a
non-success status. `application/json` and `text/event-stream` are still
parsed and streamed exactly as before, so no behavior is lost; only the
previously fatal fallback arm changes. A POST that is still waiting on a reply
keeps every existing strict check.
@otherwhere666
otherwhere666 requested a review from a team as a code ownerJuly 27, 2026 22:03
@github-actionsgithub-actionsBot added T-core Core library changes T-transport Transport layer changes labels Jul 27, 2026
// servers that answer 200 with an unexpected or absent Content-Type.
// This also covers an empty body sent with chunked transfer encoding,
// where Content-Length is absent and the check above cannot fire.
_ if awaits_no_response => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

UnixSocketHttpClient::post_message_with_max_sse_event_size uses the same Content-Length and Content-Type decision tree, but its fallback still returns UnexpectedContentType for notification, response, and error POSTs. Could we apply the same awaits_no_response guard and fallback there, along with equivalent regression tests, so notifications/initialized stops failing for users of the Unix-socket transport?

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

T-coreCore library changesT-transportTransport layer changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@otherwhere666@DaleSeo
, 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); })(); fix: don't fail a notification POST on response shape by otherwhere666 · Pull Request #1063 · modelcontextprotocol/rust-sdk · GitHub
Skip to content

fix: don't fail a notification POST on response shape - #1063

Open
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape
Open

fix: don't fail a notification POST on response shape#1063
otherwhere666 wants to merge 1 commit into
modelcontextprotocol:mainfrom
AugureAI:fix/notification-post-response-shape

Conversation

@otherwhere666

Copy link
Copy Markdown

Problem

A POST that carries only notifications/responses/errors leaves no request outstanding, so nothing in the response is load-bearing. The spec says the server SHOULD reply 202 Accepted with no body — but servers in the wild routinely reply 200 instead, with or without a body, and with or without a Content-Type.

post_message currently accepts such a POST only on 202/204, on a 2xx carrying a literal Content-Length: 0, or on a 2xx typed application/json / text/event-stream. Anything else returns UnexpectedContentType, which fails the send. When the message is notifications/initialized, that takes the whole handshake down against a server whose only fault is answering 200 instead of 202.

Two shapes hit this in practice:

  1. 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its content-type validation behind hasRequests, so a notification-only POST skips the check entirely and any 2xx passes. We are stricter than the other client SDKs a server is likely to have been tested against — a server can pass every other client and fail only here.
  2. An empty body sent with chunked transfer encoding.Content-Length is absent, so content_length == Some(0) cannot fire even though the body is in fact empty, and the request falls through to the fatal arm.

We hit (1) against a stateless server that returned 200 for notifications/initialized. The same endpoint completed the handshake against five other MCP clients; ours was the only one that rejected it.

Change

Never fail a POST that awaits no response on response shape alone — only on a non-success status.

application/json and text/event-stream are still parsed and streamed exactly as before, so no behavior is lost; only the previously fatal fallback arm changes. A POST that is still waiting on a reply keeps every existing strict check.

Tests

Added to the module's inline mod tests:

  • post_notification_accepts_unusable_success_body — two rstest cases, 200 + text/plain and 200 with the Content-Type stripped. Both fail on main with UnexpectedContentType(Some("text/plain")) and UnexpectedContentType(None) respectively; both pass with the change. The second also covers the chunked-empty-body shape, which takes the identical path (no Content-Length, no Content-Type).
  • post_request_still_rejects_unexpected_content_type — guard against over-loosening: a POST still awaiting a reply must keep failing. Passes before and after.

cargo clippy -p rmcp --all-features --all-targets is clean and cargo fmt --check passes. Full suite per the just test recipe: 949 passed, 0 failed. (test_with_python fails identically on pristine main in my environment because uv isn't installed — unrelated.)

A POST that carries only notifications/responses/errors leaves no request
outstanding, so nothing in the response is load-bearing. The spec says the
server SHOULD reply 202 Accepted with no body, but servers in the wild
routinely reply 200 instead, with or without a body, and with or without a
Content-Type.
`post_message` previously accepted such a POST only on 202/204, on a 2xx
carrying a literal `Content-Length: 0`, or on a 2xx typed `application/json`
or `text/event-stream`. Anything else returned `UnexpectedContentType`, which
fails the send. When the message is `notifications/initialized` that takes the
entire handshake down, against servers whose only fault is answering 200
instead of 202.
Two shapes hit this in practice:
- 200 with an unexpected or absent Content-Type. The TypeScript SDK gates its
content-type validation behind `hasRequests`, so a notification-only POST
skips the check entirely and any 2xx passes; we were stricter than the other
client SDKs a server is likely to have been tested against.
- An empty body sent with chunked transfer encoding. Content-Length is absent,
so the existing empty-body tolerance cannot fire even though the body is in
fact empty.
Never fail a POST that awaits no response on response shape alone — only on a
non-success status. `application/json` and `text/event-stream` are still
parsed and streamed exactly as before, so no behavior is lost; only the
previously fatal fallback arm changes. A POST that is still waiting on a reply
keeps every existing strict check.
@otherwhere666
otherwhere666 requested a review from a team as a code ownerJuly 27, 2026 22:03
@github-actionsgithub-actionsBot added T-core Core library changes T-transport Transport layer changes labels Jul 27, 2026
// servers that answer 200 with an unexpected or absent Content-Type.
// This also covers an empty body sent with chunked transfer encoding,
// where Content-Length is absent and the check above cannot fire.
_ if awaits_no_response => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

UnixSocketHttpClient::post_message_with_max_sse_event_size uses the same Content-Length and Content-Type decision tree, but its fallback still returns UnexpectedContentType for notification, response, and error POSTs. Could we apply the same awaits_no_response guard and fallback there, along with equivalent regression tests, so notifications/initialized stops failing for users of the Unix-socket transport?

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

T-coreCore library changesT-transportTransport layer changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@otherwhere666@DaleSeo