Search results

Proposal: browser-automation capability contract for safety invariants

Status: Open.

#3305 In modelcontextprotocol/modelcontextprotocol;

· pitiflautico opened on Aug 25, 2026

TypeScript SDK — Tier 1 Assessment

Status: Open.

#3268 In modelcontextprotocol/modelcontextprotocol;

· felixweinberger opened on Aug 18, 2026

Ruby SDK — Tier 1 Assessment

Status: Open.

#3247 In modelcontextprotocol/modelcontextprotocol;

· koic opened on Aug 15, 2026

inputSchema and requestedSchema hard-code JSON Schema keywords into dialect-agnostic slots

bugSomething isn't workingSomething isn't working

Status: Open.

#3238 In modelcontextprotocol/modelcontextprotocol;

· clemensv opened on Aug 14, 2026

Tasks extension (SEP-2663): no interoperable surface for partial output of a running task

Status: Open.

#3237 In modelcontextprotocol/modelcontextprotocol;

· Cam10001110101 opened on Aug 14, 2026

[Proposal] Add visibility / 'hidden': true attribute for confidential prompts and server instructions

Status: Open.

#3232 In modelcontextprotocol/modelcontextprotocol;

· vmskonakanchi opened on Aug 12, 2026

Clarify whether notifications/resources/list_changed should be sent if the list of resource templates changes

bugSomething isn't workingSomething isn't working

Status: Open.

#3226 In modelcontextprotocol/modelcontextprotocol;

· mkouba opened on Aug 11, 2026

A list of Implementation Requirements for OAuth Client ID Metadata Document

bugSomething isn't workingSomething isn't working

Status: Open.

#3224 In modelcontextprotocol/modelcontextprotocol;

· adeinega opened on Aug 10, 2026

redirect URIs using localhost

bugSomething isn't workingSomething isn't working

Status: Open.

#3223 In modelcontextprotocol/modelcontextprotocol;

· adeinega opened on Aug 10, 2026

MCP-2026-015: server/discover instructions field enables prompt injection (amplified by cacheScope:public)

Status: Open.

#3213 In modelcontextprotocol/modelcontextprotocol;

· shunfeng8421 opened on Aug 7, 2026

MCP-2026-008: CacheableResult cacheScope:public enables cross-user cache poisoning

Status: Open.

#3207 In modelcontextprotocol/modelcontextprotocol;

· shunfeng8421 opened on Aug 6, 2026

generate:schema:json produces empty schemas when using wildcard type on Windows

bugSomething isn't workingSomething isn't working

Status: Open.

#3114 In modelcontextprotocol/modelcontextprotocol;

· vortsghost2025 opened on Jul 22, 2026