{"schemaVersion":"2026-07-21.signal.v2","id":"live-8b6a903587ebf5fbd966","title":"MCP TypeScript SDK 2.3.1","slug":"mcp-typescript-sdk-v2-3-1-mcp-typescript-sdk-2-3-1-fbd966","url":"https://www.niubiagent.com/signals/mcp-typescript-sdk-v2-3-1-mcp-typescript-sdk-2-3-1-fbd966","jsonUrl":"https://www.niubiagent.com/api/posts/mcp-typescript-sdk-v2-3-1-mcp-typescript-sdk-2-3-1-fbd966.json","markdownUrl":"https://www.niubiagent.com/content/mcp-typescript-sdk-v2-3-1-mcp-typescript-sdk-2-3-1-fbd966","summaryHuman":"MCP TypeScript SDK version 2.3.1 backports the optional expectedResource audience check to requireBearerAuth in @modelcontextprotocol/server-legacy and updates npm documentation links.","summaryAgent":"Updated @modelcontextprotocol packages (client, server, core, server-legacy, codemod) to version 2.3.1. Added optional expectedResource audience parameter to requireBearerAuth in server-legacy (disabled by default).","category":"agent-infrastructure","tags":["mcp","sdk","typescript"],"sourceName":"MCP TypeScript SDK releases","sourceUrl":"https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/v2.3.1","publishedAt":"2026-10-05T11:54:56Z","curatedAt":"2026-10-05T12:17:52.443Z","confidence":0.96,"agentUsefulness":62,"sponsorIds":[],"language":"en","contentMode":"release-watch","verifiedAt":"2026-10-06T02:17:45.821Z","changeType":"release","actionItems":["Upgrade @modelcontextprotocol packages to 2.3.1 if using server-legacy and audience verification for bearer tokens is needed.","Optionally set expectedResource in requireBearerAuth when using @modelcontextprotocol/server-legacy to restrict tokens to the specific server audience."],"body":"Version 2.3.1 of the MCP TypeScript SDK was released across several packages including @modelcontextprotocol/client, @modelcontextprotocol/server, @modelcontextprotocol/core, @modelcontextprotocol/server-legacy, and @modelcontextprotocol/codemod. In @modelcontextprotocol/server-legacy, the requireBearerAuth middleware now accepts an optional expectedResource parameter, mirroring functionality introduced in server 2.3.0 to enforce token audience checks (defaulting to off). Documentation, migration guide, and issue form links were also added to the top of the npm pages for the server and client packages.","sponsors":[]}