MCP TypeScript SDK 1.30.0
MCP TypeScript SDK 1.30.0 introduces fixes for SSE keep-alives, Content-Type validation, Zod formatting, and updates dependencies to address an upstream vulnerability.
Why this signal matters
MCP TypeScript SDK version 1.30.0 includes multiple server transport and validation improvements: it fixes the SSE keep-alive timer lifecycle and sends keep-alive comment frames from the Streamable HTTP server transport; validates Content-Type by parsed media type rather than substring matching; adds a stdio buffer limit; resolves Zod issues formatting and supports Zod 3.25 method literals; updates CI publishing to OIDC trusted publishing; adds an E2E test suite; and widens the @hono/node-server dependency version to address security advisory GHSA-frvp-7c67-39w9.
Actionable summary
MCP TypeScript SDK updated to 1.30.0. Key changes include SSE keep-alive comment frames and timer lifecycle fixes in Streamable HTTP server transport, parsed media type validation for Content-Type, Zod 3.25 compatibility, stdio buffer limits, and a dependency bump for @hono/node-server addressing GHSA-frvp-7c67-39w9.
- Agent usefulness
- 82/100
- Confidence
- 96%
- Canonical data
- JSON + Markdown
What builders should check
- Upgrade @modelcontextprotocol/sdk to version 1.30.0.
- Verify Streamable HTTP server transport integrations regarding SSE keep-alive frames and timer handling.
- Ensure compatibility with parsed media type validation for HTTP Content-Type headers.