Repository Issue Activity (beta)

#1082 Deprecate misleading `ServerInfo` and `ClientInfo` aliases

#1245 Expose protocol version negotiation to servers that override `ServerHandler::initialize`

#1174 `#[tool_router]` builds an empty router without complaining when the impl has no directly-visible `#[tool]` fn

#1251 Client ignores legacy reverse-request cancellation and may cancel an unrelated outbound request

#1203 rmcp (official Rust MCP SDK): default Streamable HTTP client never follows spec-permitted redirects - redirecting MCP servers hard-fail with Err(UnexpectedServerResponse)

#1244 Observed `LocalSessionManager` never removes sessions that exit via `WorkerQuitReason::IdleTimeout`, so abandoned streamable-HTTP sessions leak their map entry permanently causing memory leak

#1242 Empty cacheScope on tools/list drops every tool

#531 Implement SEP-990: Enterprise Managed Authorization (Extension)

#1209 Calling Intialize with Procol version 2026-07-28 returns success

#1164 Update Streamable HTTP client example to use the discover/Auto lifecycle

#1096 `rs1.` request-state format carries no `kid`, so key rotation cannot be targeted

#1215 Track OpenSSF Scorecard security follow-ups

#1198 fix(sse): saturate exponential reconnect backoff

#1193 streamable-http-client: RequestHandle::cancel hangs before response stream starts

#1225 Handler-generated HeaderMismatch responses use HTTP 200 instead of 400

#1040 `ClientLifecycleMode::Auto` does not fall back for deployed legacy-server responses

#1191 Enforce 2026-07-28 Origin validation semantics

#527 Implement SEP-1649: MCP Server Cards (.well-known Discovery)

#1188 Streamable HTTP returns 400 instead of 403 for malformed Origin

#1190 eval smoke test 2026-08-03

#1168 Elicitation `requestedSchema` silently drops `$schema` and unknown property keywords

#1161 request-state and JWT signing key material lacks minimum-length enforcement and zeroization

#1157 stdio server: malformed-_meta 2026 request as first message gets no error response (connection wedges silently)

#1147 `examples/servers/src/mrtr.rs` never checks the elicitation `action`, so a declined elicitation is answered as if it had been accepted

#1172 Stateless streamable-HTTP logs a placeholder client_info ("rmcp") instead of the real client identity