Commit Graph

62 Commits

Author SHA1 Message Date
dependabot[bot]
1c654a4e7d chore(deps): bump @modelcontextprotocol/sdk
Bumps the npm_and_yarn group with 1 update in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk).


Updates `@modelcontextprotocol/sdk` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/1.23.0...1.24.0)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.24.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-02 17:40:23 +00:00
dependabot[bot]
8dbea85ccf chore(deps): bump express in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [express](https://github.com/expressjs/express).


Updates `express` from 4.21.2 to 4.22.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.2...4.22.0)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 4.22.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 22:17:03 +00:00
dependabot[bot]
c017f44ee2 chore(deps): bump glob in the npm_and_yarn group across 1 directory (#3076)
Bumps the npm_and_yarn group with 1 update in the / directory: [glob](https://github.com/isaacs/node-glob).


Updates `glob` from 10.4.5 to 10.5.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/node-glob/compare/v10.4.5...v10.5.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-26 13:18:16 +00:00
adam jones
3154518344 Update @modelcontextprotocol/sdk to 1.23.0 in TypeScript servers (#3065)
Update the SDK from ^1.19.1 to ^1.23.0 in all TypeScript reference servers:
- everything
- filesystem
- memory
- sequentialthinking

Also update everything server for SDK breaking changes:
- Update zod to ^3.25.0 (zod v4 compatibility)
- Fix ToolInput/ToolOutput types to use Tool["inputSchema"] instead of
  inferring from zod schemas
- Fix result.content handling to support array format

Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-11-26 12:32:37 +00:00
olaservo
e68a555943 Add Vitest testing framework and implement tests for memory management features 2025-10-28 20:06:34 -07:00
olaservo
b666e7f246 Migrate sequentialthinking and filesystem servers from Jest to Vitest
- Replace Jest dependencies with Vitest and @vitest/coverage-v8
- Update test scripts to use 'vitest run --coverage'
- Create vitest.config.ts for both servers with node environment and coverage settings
- Update all test files:
  - Change imports from '@jest/globals' to 'vitest'
  - Replace jest.mock() with vi.mock()
  - Replace jest.fn() with vi.fn()
  - Update mock clearing/restoring to use vi methods
- Remove jest.config.cjs files
- All 151 tests passing (24 in sequentialthinking, 127 in filesystem)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-19 11:21:58 -07:00
olaservo
636b0872cb chore: add cors dependency to package.json 2025-10-12 18:22:08 -07:00
olaservo
f6fbfc4c5e Merge remote-tracking branch 'upstream/main' into add-sequentialthinking-tests-update-sdk 2025-10-12 18:09:41 -07:00
Olivier Chafik
232258426e add zip tool to everything server (demonstrates consuming and producing URIs, incl. data URIs) 2025-10-08 17:44:24 +01:00
olaservo
072e53322b Add tests for sequential thinking and update typescript sdk versions 2025-10-07 23:01:42 -07:00
Misha Kolesnik
402f0ed43e fix: resolve brace-expansion ReDoS vulnerability (CVE-2025-5889) (#2752)
Updates brace-expansion from 2.0.1 to 2.0.2 to fix a Regular Expression
Denial of Service vulnerability.

Fixes #2700
2025-09-23 12:35:17 +01:00
Cliff Hall
f8c05004d0 Open CORS for any origin to allow direct browser connection (#2725)
* * In src/everything/sse.ts
  - import cors
  - use cors with config allowing any origin + GET/POST
* In src/everything/streamableHttp.ts
  - import cors
    - use cors with config allowing any origin + GET/POST/DELETE, and exposed protocol headers for client to read
* In package.json and package-lock.json
  - add cors as a dependency

* * In package.json and package-lock.json
  - add @types/cors as dev dependency

* Add caution note for CORS origin wildcard usage

Added caution note for using '*' in CORS origin.

* * In streamableHttp.ts
  - remove remove unintentional console log

* * In streamableHttp.ts
  - add comment about why opening cors for all routes

* * In sse.ts
  - add comment about using * with caution in production for cors

* * In sse.ts
  - indent on cors config

---------

Co-authored-by: shaun smith <1936278+evalstate@users.noreply.github.com>
2025-09-19 01:28:41 +01:00
Cliff Hall
c3093739ca Let Everything's STDIO server use SDK's automatic log level handling (#2706)
- bump TS SDK to 1.18.0
* In src/everything/stdio.ts
  - remove logging related imports
  - remove custom log-level handling, now handled automatically by the SDK
* In src/everything/everything.ts
  - remove console.log of sessionId
2025-09-11 17:31:49 -07:00
cliffhall
97c6408f04 * in .gitignore
- add .idea/ for Jetbrains IDEs
* in everything.ts
  - remove import of SetLevelRequestSchema
  - remove logLevel var
  - add sessionId var
  - in startNotificationIntervals function
    - add optional sid argument
    - set sessionId to sid
    - define messages to be sent, adding sessionId if present
  - remove setRequestHandler call for SetLevelRequestSchema
  - replace server.notification calls that sent "notifications/message" objects with calls to server.sendLoggingMessage, passing just the parameters and sessionId.
* In package.json & package-lock.json
  - bump TS SDK version to 1.17.5
* In sse.ts, pass transport.sessionId to startNotificationIntervals call
* In stdio.ts
  - destructure startNotificationIntervals from createServer call
  - implement custom logging request handler and server.sendLoggingMessage implementation, as a
  workaround for the fact that the SDK's automatic log level handling currently only tracks requested log level by session id. This will be fixed in a followup PR for the SDK
  - call the startNotificationIntervals function after connecting the transport to the server
* In streamableHttp.ts
  - destructure startNotificationIntervals from createServer call
  - call startNotificationIntervals passing the transport.sessionId after connecting the transport to the server
2025-09-02 17:18:11 -04:00
cliffhall
a32f15750d Suppress startElicitation tool if client does not advertise support for elicitation capability
* In everything.ts
  - remove inappropriate elicitation entry from server capabilities (this is a client capability)
  - When creating tool list, only add `ToolName.ELICITATION` definition to tools array if `clientCapabilities` includes `elicitation`

* In package.json / package-lock.json
  - bump @modelcontextprotocol/sdk to "^1.17.4", adding `elicitation` to `ClientCapabilities` type
2025-08-28 14:13:47 -04:00
Michael Vorburger
81fdd1869e Fix low severity security vulnerability in memory server by running npm audit fix 2025-08-20 23:28:17 +02:00
Michael Casazza
46368832ef Windows filesystem MCP enhancements (#543)
* fix: comprehensive Windows path handling improvements

- Add path-utils module for consistent path handling
- Handle Windows paths with spaces via proper quoting
- Support Unix-style Windows paths (/c/path)
- Support WSL paths (/mnt/c/path)
- Add comprehensive test coverage
- Fix path normalization for all path formats

Closes #447

* tested locally and working now

* Add filesystem path utils and tests

* Ensure Windows drive letters are capitalized in normalizePath

* adding test for gh pr comment

* pushing jest and windows testing config

* last commit? fixing comments on PR

* Fix bin and bump sdk

* Remove redundant commonjs version of path-utils and import from ts version

* Remove copying cjs file

* Remove copying run-server

* Remove complex args parsing and do other cleanup

* Add missing tools details to Readme

* Move utility functions from index to lib

* Add more tests and handle very small and very large files edge cases

* Finish refactoring and include original security fix comments

* On Windows, also check for drive root

* Check symlink support on restricted Windows environments

* Fix tests

* Bump SDK and package version

* Clean up

---------

Co-authored-by: olaservo <olahungerford@gmail.com>
Co-authored-by: adam jones <adamj+git@anthropic.com>
2025-08-18 18:23:40 +01:00
cliffhall
471ac89f55 Update SDK version 2025-07-24 14:37:49 -04:00
cliffhall
ba20bd60af Update the way the stream is concatenated
Update the ts sdk
2025-07-18 16:09:56 -04:00
Paul Carleton
42f9c842c2 restore 2025-07-01 19:28:26 +01:00
Jenn Newton
d00c60df9d Address symlink and path prefix issues with allowed directories 2025-06-30 20:04:46 -04:00
Ola Hungerford
098979ca2a Update SDK 2025-06-15 23:38:23 -07:00
olaservo
8bdd270abb Add working test config for filesystem 2025-04-13 20:02:08 -07:00
Ola Hungerford
bfc4b41771 Update package-lock.json 2025-03-24 14:14:39 -07:00
Ola Hungerford
b12d0e7b05 Update package-lock.json 2025-03-15 18:15:11 -07:00
Tim Rogers
18dadff9c7 Commit package-lock.json with new universal-user-agent dependency
This fixes the build, after the merge of #592, by committing an
updated `/package-lock.json` file with the new `universal-user-
agent` dependency.
2025-02-04 13:16:48 +00:00
David Soria Parra
383b9c9cc0 address npm dependency fixes 2025-01-14 16:33:40 +00:00
David Soria Parra
12dfc22a33 update lockfile 2024-12-20 18:59:40 +00:00
Jim Clark
368e3b23ca Add Dockerfiles for the 17 sample MCP servers
* add Dockerfiles and update README.md definitions
2024-12-19 13:11:34 -08:00
devin-ai-integration[bot]
ddb24ade66 chore: add minimatch dependency for glob pattern matching 2024-12-06 21:41:54 +00:00
Justin Spahr-Summers
f7da6f41de npm install 2024-12-05 23:15:48 +00:00
Justin Spahr-Summers
0724ae472e Merge pull request #103 from 0xRaduan/add-search-for-github
feat(github): Add GitHub Search to Github MCP
2024-12-05 22:58:00 +00:00
Justin Spahr-Summers
75e7fcea58 npm install 2024-12-05 22:55:41 +00:00
Justin Spahr-Summers
bd4a101ac1 npm install 2024-12-05 12:10:12 +00:00
David Soria Parra
94a36286d2 typescript servers 0.6.2 2024-12-04 16:11:35 +00:00
David Soria Parra
e1fa30300f update package-lock.json 2024-12-03 13:00:22 +00:00
David Soria Parra
4cace8da71 update package-json.lock 2024-12-03 11:50:40 +00:00
David Soria Parra
10e4bdfe2a update package-lock.json 2024-11-27 22:15:16 +00:00
Vladislav Polyakov
f5be3b785c refactor: clean up code formatting and update package version to 0.5.2 2024-11-25 23:59:13 +03:00
Justin Spahr-Summers
c9fd80016e And another one 2024-11-25 13:46:10 -06:00
Justin Spahr-Summers
dcc0b3b0d4 Add a couple of missing @types/nodes 2024-11-25 13:44:31 -06:00
Justin Spahr-Summers
83082ca265 Add missing dependencies 2024-11-25 13:37:24 -06:00
Mahesh Murag
a1120c307b README Cleanup (#30) 2024-11-24 03:27:08 +00:00
Justin Spahr-Summers
3d6de86730 Bump all package versions 2024-11-21 19:10:05 +00:00
Mahesh Murag
823e658d87 Merge pull request #13 from modelcontextprotocol/mahesh/slack
Updated Slack
2024-11-21 15:19:36 +01:00
Mahesh Murag
234819e0b4 Merge branch 'main' into mahesh/add-filesystem 2024-11-21 06:25:38 +01:00
Mahesh Murag
9a07bb1700 Updated Github to Zod 2024-11-21 00:21:04 -05:00
Mahesh Murag
e935bfee80 Updated Filesystem 2024-11-20 23:28:00 -05:00
Mahesh Murag
3ded1f161d Updated Filesystem 2024-11-20 22:32:38 -05:00
Mahesh Murag
dc123c1f92 Updated Brave 2024-11-20 22:25:09 -05:00