@modelcontextprotocol/core@2.2.0

MCP TypeScript SDK releases published @modelcontextprotocol/core@2.2.0. This automated release-watch entry was generated from the project's official GitHub release feed and is kept separate from human-reviewed editorial analysis. Release notes: Minor Changes 2887 edd12e2 Thanks @maxisbey ! - Constructing ClientCredentialsProvider , PrivateKeyJwtProvider , StaticPrivateKeyJwtProvider or CrossAppAccessProvider without expectedIssuer is deprecated: the constructor logs one console.warn and that call signature is marked @deprecated . Behaviour is otherwise unchanged. Pass the issuer of the authorization server the credentials were registered with. fetchToken() throws AuthorizationServerMismatchError , before sending anything, when the provider's client information is bound to a different authorization server than the one it is called with. The AuthorizationServerMismatchError message no longer assumes the authorization-code callback; its fields are unchanged. OAuthTokensSchema and OAuthClientInformationSchema accept the optional issuer stamp, so a provider that reads storage back through them keeps it. auth() overwrites it on…

• Review the official MCP TypeScript SDK releases release notes before upgrading.
• Check compatibility, migration, and security notes against your current agent stack.
• Run focused regression tests before production rollout.