@ai-sdk/mcp 2.0.32 → 2.0.34

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @ai-sdk/mcp
 
+## 2.0.34
+
+### Patch Changes
+
+- Updated dependencies [e6087c9]
+  - @ai-sdk/provider-utils@5.0.28
+
+## 2.0.33
+
+### Patch Changes
+
+- 1f29230: feat(mcp): harden oauth client registration according to latest protocol
+- 0c60a40: feat(mcp): add mcp 2026 streamable HTTP support
+- e6a9927: feat(mcp): add the latest 2026 protocol discovery foundation
+
 ## 2.0.32
 
 ### Patch Changes

package/README.md

@@ -59,6 +59,17 @@ try {
 The client converts MCP tool definitions into AI SDK tools, so model calls can
 use them through the standard `tools` option.
 
+## Protocol versions
+
+The client supports legacy MCP protocol versions through the `initialize`
+handshake and MCP `2026-07-28` through stateless protocol discovery. The
+built-in stdio transport probes with `server/discover` and falls back to the
+legacy handshake when connected to an older server.
+
+Custom transports can opt into the same negotiation by setting
+`supportsProtocolVersionDiscovery` to `true`. Modern requests include the
+protocol version, client capabilities, and client information in `_meta`.
+
 For streaming responses, close the MCP client when the stream finishes:
 
 ```ts
@@ -90,6 +101,10 @@ for await (const textPart of result.textStream) {
 
 HTTP is recommended for production deployments:
 
+Session persistence applies only to legacy MCP protocol versions. MCP
+`2026-07-28` is stateless and does not use session ids or cached initialize
+results.
+
 ```ts
 import { createMCPClient } from '@ai-sdk/mcp';
 

package/dist/index.d.ts

@@ -16,12 +16,13 @@ declare const JSONRPCResponseSchema: z.ZodObject<{
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
     result: z.ZodObject<{
         _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+        resultType: z.ZodOptional<z.ZodString>;
     }, z.core.$loose>;
 }, z.core.$strict>;
 type JSONRPCResponse = z.infer<typeof JSONRPCResponseSchema>;
 declare const JSONRPCErrorSchema: z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
-    id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+    id: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
     error: z.ZodObject<{
         code: z.ZodNumber;
         message: z.ZodString;
@@ -55,10 +56,11 @@ declare const JSONRPCMessageSchema: z.ZodUnion<readonly [z.ZodObject<{
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
     result: z.ZodObject<{
         _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+        resultType: z.ZodOptional<z.ZodString>;
     }, z.core.$loose>;
 }, z.core.$strict>, z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
-    id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+    id: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
     error: z.ZodObject<{
         code: z.ZodNumber;
         message: z.ZodString;
@@ -78,6 +80,7 @@ declare const OAuthTokensSchema: z.ZodObject<{
     expires_in: z.ZodOptional<z.ZodNumber>;
     scope: z.ZodOptional<z.ZodString>;
     refresh_token: z.ZodOptional<z.ZodString>;
+    issuer: z.ZodOptional<z.ZodString>;
     authorization_server: z.ZodOptional<z.ZodString>;
     token_endpoint: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
@@ -86,6 +89,8 @@ declare const OAuthMetadataSchema: z.ZodObject<{
     authorization_endpoint: z.ZodString;
     token_endpoint: z.ZodString;
     registration_endpoint: z.ZodOptional<z.ZodString>;
+    authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    client_id_metadata_document_supported: z.ZodOptional<z.ZodBoolean>;
     scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
     response_types_supported: z.ZodArray<z.ZodString>;
     grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -105,6 +110,8 @@ declare const OpenIdProviderDiscoveryMetadataSchema: z.ZodObject<{
     userinfo_endpoint: z.ZodOptional<z.ZodString>;
     jwks_uri: z.ZodString;
     registration_endpoint: z.ZodOptional<z.ZodString>;
+    authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    client_id_metadata_document_supported: z.ZodOptional<z.ZodBoolean>;
     scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
     response_types_supported: z.ZodArray<z.ZodString>;
     grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -119,11 +126,13 @@ declare const OAuthClientInformationSchema: z.ZodObject<{
     client_secret: z.ZodOptional<z.ZodString>;
     client_id_issued_at: z.ZodOptional<z.ZodNumber>;
     client_secret_expires_at: z.ZodOptional<z.ZodNumber>;
+    issuer: z.ZodOptional<z.ZodString>;
     authorization_server: z.ZodOptional<z.ZodString>;
     token_endpoint: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 declare const OAuthClientMetadataSchema: z.ZodObject<{
     redirect_uris: z.ZodArray<z.ZodString>;
+    application_type: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"native">, z.ZodLiteral<"web">]>>;
     token_endpoint_auth_method: z.ZodOptional<z.ZodString>;
     grant_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
     response_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -149,6 +158,7 @@ type OAuthClientMetadata = z.infer<typeof OAuthClientMetadataSchema>;
 
 type AuthResult = 'AUTHORIZED' | 'REDIRECT';
 interface OAuthAuthorizationServerInformation {
+    issuer?: string;
     authorizationServerUrl: string;
     tokenEndpoint: string;
 }
@@ -209,6 +219,10 @@ declare function auth(provider: OAuthClientProvider, options: {
     serverUrl: string | URL;
     authorizationCode?: string;
     callbackState?: string;
+    /**
+     * Value of the `iss` parameter from the authorization response.
+     */
+    callbackIssuer?: string;
     scope?: string;
     resourceMetadataUrl?: URL;
     fetchFn?: FetchFunction;
@@ -223,6 +237,10 @@ type MCPTransportSendOptions = {
      * Cancels the transport operation for this message.
      */
     signal?: AbortSignal;
+    /**
+     * Request-specific HTTP headers produced from MCP tool parameters.
+     */
+    headers?: Record<string, string>;
     /**
      * Associates an outgoing message with an incoming request.
      */
@@ -243,6 +261,18 @@ type MCPTransportCloseOptions = {
     signal?: AbortSignal;
 };
 interface MCPTransport {
+    /**
+     * Whether this transport can probe for stateless MCP protocol versions.
+     *
+     * Custom transports default to the legacy initialization flow unless they
+     * explicitly opt in.
+     */
+    supportsProtocolVersionDiscovery?: boolean;
+    /**
+     * Whether this transport mirrors x-mcp-header tool parameters into request
+     * headers.
+     */
+    supportsMcpToolParameterHeaders?: boolean;
     /**
      * Initialize and start the transport
      */
@@ -397,6 +427,7 @@ declare const ClientCapabilitiesSchema: z.ZodObject<{
 type ClientCapabilities = z.infer<typeof ClientCapabilitiesSchema>;
 declare const InitializeResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     protocolVersion: z.ZodString;
     capabilities: z.ZodObject<{
         experimental: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
@@ -431,13 +462,14 @@ type PaginatedRequest = Request & {
 };
 declare const ListToolsResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     nextCursor: z.ZodOptional<z.ZodString>;
     tools: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         title: z.ZodOptional<z.ZodString>;
         description: z.ZodOptional<z.ZodString>;
         inputSchema: z.ZodObject<{
-            type: z.ZodLiteral<"object">;
+            type: z.ZodOptional<z.ZodUnknown>;
             properties: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
         }, z.core.$loose>;
         outputSchema: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
@@ -450,6 +482,7 @@ declare const ListToolsResultSchema: z.ZodObject<{
 type ListToolsResult = z.infer<typeof ListToolsResultSchema>;
 declare const ListResourcesResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     nextCursor: z.ZodOptional<z.ZodString>;
     resources: z.ZodArray<z.ZodObject<{
         uri: z.ZodString;
@@ -463,6 +496,7 @@ declare const ListResourcesResultSchema: z.ZodObject<{
 type ListResourcesResult = z.infer<typeof ListResourcesResultSchema>;
 declare const CallToolResultSchema: z.ZodUnion<[z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     content: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
         type: z.ZodLiteral<"text">;
         text: z.ZodString;
@@ -496,11 +530,13 @@ declare const CallToolResultSchema: z.ZodUnion<[z.ZodObject<{
     isError: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
 }, z.core.$loose>, z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     toolResult: z.ZodUnknown;
 }, z.core.$loose>]>;
 type CallToolResult = z.infer<typeof CallToolResultSchema>;
 declare const ListResourceTemplatesResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     resourceTemplates: z.ZodArray<z.ZodObject<{
         uriTemplate: z.ZodString;
         name: z.ZodString;
@@ -512,6 +548,7 @@ declare const ListResourceTemplatesResultSchema: z.ZodObject<{
 type ListResourceTemplatesResult = z.infer<typeof ListResourceTemplatesResultSchema>;
 declare const ReadResourceResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     contents: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
         uri: z.ZodString;
         name: z.ZodOptional<z.ZodString>;
@@ -547,6 +584,7 @@ declare const CompleteRequestParamsSchema: z.ZodObject<{
 type CompleteRequestParams = z.infer<typeof CompleteRequestParamsSchema>;
 declare const CompleteResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     completion: z.ZodObject<{
         values: z.ZodArray<z.ZodString>;
         total: z.ZodOptional<z.ZodNumber>;
@@ -556,6 +594,7 @@ declare const CompleteResultSchema: z.ZodObject<{
 type CompleteResult = z.infer<typeof CompleteResultSchema>;
 declare const ListPromptsResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     nextCursor: z.ZodOptional<z.ZodString>;
     prompts: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -571,6 +610,7 @@ declare const ListPromptsResultSchema: z.ZodObject<{
 type ListPromptsResult = z.infer<typeof ListPromptsResultSchema>;
 declare const GetPromptResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
     messages: z.ZodArray<z.ZodObject<{
         role: z.ZodUnion<readonly [z.ZodLiteral<"user">, z.ZodLiteral<"assistant">]>;
@@ -617,6 +657,7 @@ declare const ElicitationRequestSchema: z.ZodObject<{
 type ElicitationRequest = z.infer<typeof ElicitationRequestSchema>;
 declare const ElicitResultSchema: z.ZodObject<{
     _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    resultType: z.ZodOptional<z.ZodString>;
     action: z.ZodUnion<readonly [z.ZodLiteral<"accept">, z.ZodLiteral<"decline">, z.ZodLiteral<"cancel">]>;
     content: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$loose>;
@@ -625,6 +666,16 @@ type ElicitResult = z.infer<typeof ElicitResultSchema>;
 interface MCPClientConfig {
     /** Transport configuration for connecting to the MCP server */
     transport: MCPTransportConfig | MCPTransport;
+    /**
+     * Whether transports that support stateless protocol discovery should probe
+     * with `server/discover` before falling back to legacy initialization.
+     *
+     * Disable this for legacy servers that require `initialize` to be the first
+     * request.
+     *
+     * @default true
+     */
+    protocolVersionDiscovery?: boolean;
     /**
      * Options that bound or cancel transport startup and the initialize request.
      */