MCP Inspector 2.15.0
MCP Inspector 2.15.0 fixes four vulnerabilities and adds per-tool run history, session management, and load testing features.
The Deploy Log | Companies | Free, no signup
Every row from Model Context Protocol in The Deploy Log: 30 rows, newest first, each linking the publisher's own page. The newest shipped are MCP Inspector 2.15.0 and @modelcontextprotocol/client@2.4.0. The first is dated and the newest . By lane: Tools and products 30. They fall in 3 months. The tables below count them by lane and month, and date them.
| Lane | Rows |
|---|---|
| Tools and products | 30 |
| Figure | Value |
|---|---|
| First row dated | |
| Newest row dated | |
| Median days between release days, publisher's dates only | 2.5 |
MCP Inspector 2.15.0 fixes four vulnerabilities and adds per-tool run history, session management, and load testing features.
Adds opt-in scope for refresh-token requests for authorization servers that reject refresh without it.
Adds Skills extension (SEP-2640) via new ext/skills subpaths.
@modelcontextprotocol/node 2.1.2 published with @hono/node-server dependency range widened to ^1.19.9 || ^2.1.3.
@modelcontextprotocol/server 2.4.0 published with Skills extension reachable through new ext/skills subpaths.
@modelcontextprotocol/server-legacy 2.4.0 published with updated dependency on @modelcontextprotocol/core 2.4.0.
MCP TypeScript SDK 2.4.0 released with client, server, core, server-legacy, and codemod packages at 2.4.0.
MCP Inspector 2.12.0 fixes three vulnerabilities affecting every v2 release from 2.0.0 through 2.11.0.
MCP TypeScript SDK client package version 2.3.1 released.
MCP TypeScript SDK codemod package version 2.3.1 released.
MCP TypeScript SDK core package version 2.3.1 released.
MCP TypeScript SDK server package version 2.3.1 released.
requireBearerAuth in server-legacy now accepts the optional expectedResource parameter.
License field of package manifests is now Apache-2.0; LICENSE file carries full terms.
requireBearerAuth and verifyBearerToken take a new optional expectedResource to accept only tokens issued for this resource.
Server or McpServer now serves one connection at a time; stateless Streamable HTTP transport serves one request.
Server or McpServer now serves one connection at a time; stateless Streamable HTTP transport serves one request.
requireBearerAuth and verifyBearerToken take a new optional expectedResource to accept only tokens issued for this resource.
The license field of the package manifests is now Apache-2.0 with no code change.
HTTP client transports now follow redirects only on the same origin unless redirectPolicy is set to follow.
Server.connect() now rejects while the instance is already connected, and a stateless server is one per request.
MCP Inspector 2.2.0 released with sandbox proxy loading and keychain degradation fixes.
MCP Inspector 2.3.0 released with loopback binding and sandbox port pinning fixes.
MCP Inspector 2.4.0 released with app-rendered form elicitations and SecretStore support.
MCP Inspector 2.5.0 released with Firefox smoke tests and tool schema rendering fixes.
@modelcontextprotocol/core 2.2.0 published with deprecation warning for OAuth providers missing expectedIssuer.
@modelcontextprotocol/server 2.2.0 published with fixes for unhandled promise rejection and stack overflow.
@modelcontextprotocol/server-legacy 2.2.0 published with dependency update to core 2.2.0.
Stored OAuth tokens and client information now include an issuer field; pass expectedIssuer when constructing OAuth providers.
MCP TypeScript SDK 2.2.0 released with expectedIssuer required for machine-to-machine OAuth providers.
One line every time AI actually ships, around the clock, free on Threads and Bluesky. Every one is in The Deploy Log with its source.