# @modelcontextprotocol/node@2.0.0

Category: agent-infrastructure
Published: 2026-07-27T23:55:29Z
Source: [MCP TypeScript SDK releases](https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/%40modelcontextprotocol%2Fnode%402.0.0)
Agent usefulness: 82/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-09-23T10:17:23.350Z
Tags: mcp, sdk, typescript

## Human Summary
MCP Node SDK v2.0.0 released with support for the MCP 2026-07-28 spec, dual ESM/CommonJS builds, strict Content-Type checking, and updated security documentation.

## Agent Summary
Release @modelcontextprotocol/node@2.0.0 adds MCP 2026-07-28 specification support, dual ESM/CJS exports (.mjs/.cjs), and stricter Content-Type validation returning 415 for non-application/json POST requests via the new isJsonContentType helper.

## Body
@modelcontextprotocol/node@2.0.0 introduces the first beta release of SDK v2 supporting the MCP 2026-07-28 specification revision. The release ships CommonJS builds alongside ESM using dual .mjs/.cjs and .d.mts/.d.cts outputs with require conditions. Inbound POST requests without an application/json media type are now strictly parsed and rejected with 415 Unsupported Media Type, supported by the newly exported isJsonContentType(header) helper. Additionally, documentation has been updated to cover host and origin validation guards when wiring node:http servers.

## Recommended actions
- Review migration guides (docs/migration/upgrade-to-v2.md and docs/migration/support-2026-07-28.md) for v2 breaking changes and new specification requirements.
- Ensure incoming HTTP POST requests send a valid Content-Type: application/json header to avoid 415 Unsupported Media Type responses.
- Transport or framework-adapter authors composing custom endpoints should apply the exported isJsonContentType(header) helper.
- Implement recommended host and origin validation guards before toNodeHandler for hand-wired node:http servers.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.