@mcp-ts/sdk 2.5.2 → 2.6.0

package/dist/{tool-router-CsKVXbQB.d.mts → tool-router-C1n7OXbl.d.mts}

@@ -1,5 +1,5 @@
 import { Tool } from '@modelcontextprotocol/sdk/types.js';
-import { A as ToolClientProvider, T as ToolClient } from './types-6SmXege4.mjs';
+import { A as ToolClientProvider, T as ToolClient } from './types-DX71u9gR.mjs';
 
 /**
  * ToolIndex — Lightweight in-memory search index for MCP tool discovery.

package/dist/{tool-router-C-Mw1_BQ.d.ts → tool-router-CBIawFnt.d.ts}

@@ -1,5 +1,5 @@
 import { Tool } from '@modelcontextprotocol/sdk/types.js';
-import { A as ToolClientProvider, T as ToolClient } from './types-6SmXege4.js';
+import { A as ToolClientProvider, T as ToolClient } from './types-DX71u9gR.js';
 
 /**
  * ToolIndex — Lightweight in-memory search index for MCP tool discovery.

package/dist/{types-6SmXege4.d.mts → types-DX71u9gR.d.mts}

@@ -211,7 +211,7 @@ interface ToolPolicy {
     toolIds: string[];
     updatedAt: number;
 }
-type McpRpcMethod = 'connect' | 'disconnect' | 'reconnect' | 'listTools' | 'callTool' | 'listSessions' | 'getSession' | 'finishAuth' | 'listPrompts' | 'getPrompt' | 'listResources' | 'readResource' | 'setToolPolicy' | 'getToolPolicy';
+type McpRpcMethod = 'connect' | 'disconnect' | 'reconnect' | 'listTools' | 'callTool' | 'listSessions' | 'getSession' | 'finishAuth' | 'listPrompts' | 'getPrompt' | 'listResources' | 'readResource' | 'setToolPolicy' | 'getToolPolicy' | 'updateSession';
 interface McpRpcRequest {
     id: string;
     method: McpRpcMethod;
@@ -268,7 +268,11 @@ interface SetToolPolicyParams {
 interface GetToolPolicyParams {
     sessionId: string;
 }
-type McpRpcParams = ConnectParams | DisconnectParams | ReconnectParams | SessionParams | CallToolParams | GetPromptParams | ReadResourceParams | FinishAuthParams | SetToolPolicyParams | GetToolPolicyParams | undefined;
+interface UpdateSessionParams {
+    sessionId: string;
+    enabled?: boolean;
+}
+type McpRpcParams = ConnectParams | DisconnectParams | ReconnectParams | SessionParams | CallToolParams | GetPromptParams | ReadResourceParams | FinishAuthParams | SetToolPolicyParams | GetToolPolicyParams | UpdateSessionParams | undefined;
 interface SessionInfo {
     sessionId: string;
     serverId?: string;
@@ -283,6 +287,7 @@ interface SessionInfo {
      */
     status: SessionStatus;
     toolPolicy?: ToolPolicy;
+    enabled?: boolean;
 }
 interface SessionListResult {
     sessions: SessionInfo[];
@@ -311,6 +316,9 @@ interface SetToolPolicyResult {
     tools: Tool[];
     toolCount: number;
 }
+interface UpdateSessionResult {
+    success: boolean;
+}
 type ToolAccessInfo = Tool & {
     toolId: string;
     allowed: boolean;
@@ -341,4 +349,4 @@ interface ListResourcesResult {
     }>;
 }
 
-export { type ToolClientProvider as A, type ToolInfo as B, type CallToolParams as C, type DisconnectParams as D, Emitter as E, type FinishAuthParams as F, type GetPromptParams as G, type TransportType as H, isCallToolSuccess as I, isConnectAuthRequired as J, isConnectError as K, type ListPromptsResult as L, type McpConnectionEvent as M, isConnectSuccess as N, isListToolsSuccess as O, type ToolPolicy as P, type SetToolPolicyResult as Q, type ReadResourceParams as R, type SessionInfo as S, type ToolClient as T, type GetToolPolicyResult as U, type McpAppsUIEvent as V, type CallToolRequest as a, type CallToolResponse as b, type ConnectAuthRequiredResponse as c, type ConnectErrorResponse as d, type ConnectParams as e, type ConnectRequest as f, type ConnectResponse as g, type ConnectResult as h, type ConnectSuccessResponse as i, type DisconnectResult as j, type Disposable as k, DisposableStore as l, type Event as m, type FinishAuthResult as n, type GetSessionResult as o, type ListResourcesResult as p, type ListToolsResponse as q, type ListToolsRpcResult as r, type McpConnectionState as s, type McpObservabilityEvent as t, type McpRpcMethod as u, type McpRpcParams as v, type McpRpcRequest as w, type McpRpcResponse as x, type SessionListResult as y, type SessionParams as z };
+export { type ToolClientProvider as A, type ToolInfo as B, type CallToolParams as C, type DisconnectParams as D, Emitter as E, type FinishAuthParams as F, type GetPromptParams as G, type TransportType as H, isCallToolSuccess as I, isConnectAuthRequired as J, isConnectError as K, type ListPromptsResult as L, type McpConnectionEvent as M, isConnectSuccess as N, isListToolsSuccess as O, type ToolPolicy as P, type SetToolPolicyResult as Q, type ReadResourceParams as R, type SessionInfo as S, type ToolClient as T, type GetToolPolicyResult as U, type McpAppsUIEvent as V, type UpdateSessionResult as W, type CallToolRequest as a, type CallToolResponse as b, type ConnectAuthRequiredResponse as c, type ConnectErrorResponse as d, type ConnectParams as e, type ConnectRequest as f, type ConnectResponse as g, type ConnectResult as h, type ConnectSuccessResponse as i, type DisconnectResult as j, type Disposable as k, DisposableStore as l, type Event as m, type FinishAuthResult as n, type GetSessionResult as o, type ListResourcesResult as p, type ListToolsResponse as q, type ListToolsRpcResult as r, type McpConnectionState as s, type McpObservabilityEvent as t, type McpRpcMethod as u, type McpRpcParams as v, type McpRpcRequest as w, type McpRpcResponse as x, type SessionListResult as y, type SessionParams as z };

package/dist/{types-6SmXege4.d.ts → types-DX71u9gR.d.ts}

@@ -211,7 +211,7 @@ interface ToolPolicy {
     toolIds: string[];
     updatedAt: number;
 }
-type McpRpcMethod = 'connect' | 'disconnect' | 'reconnect' | 'listTools' | 'callTool' | 'listSessions' | 'getSession' | 'finishAuth' | 'listPrompts' | 'getPrompt' | 'listResources' | 'readResource' | 'setToolPolicy' | 'getToolPolicy';
+type McpRpcMethod = 'connect' | 'disconnect' | 'reconnect' | 'listTools' | 'callTool' | 'listSessions' | 'getSession' | 'finishAuth' | 'listPrompts' | 'getPrompt' | 'listResources' | 'readResource' | 'setToolPolicy' | 'getToolPolicy' | 'updateSession';
 interface McpRpcRequest {
     id: string;
     method: McpRpcMethod;
@@ -268,7 +268,11 @@ interface SetToolPolicyParams {
 interface GetToolPolicyParams {
     sessionId: string;
 }
-type McpRpcParams = ConnectParams | DisconnectParams | ReconnectParams | SessionParams | CallToolParams | GetPromptParams | ReadResourceParams | FinishAuthParams | SetToolPolicyParams | GetToolPolicyParams | undefined;
+interface UpdateSessionParams {
+    sessionId: string;
+    enabled?: boolean;
+}
+type McpRpcParams = ConnectParams | DisconnectParams | ReconnectParams | SessionParams | CallToolParams | GetPromptParams | ReadResourceParams | FinishAuthParams | SetToolPolicyParams | GetToolPolicyParams | UpdateSessionParams | undefined;
 interface SessionInfo {
     sessionId: string;
     serverId?: string;
@@ -283,6 +287,7 @@ interface SessionInfo {
      */
     status: SessionStatus;
     toolPolicy?: ToolPolicy;
+    enabled?: boolean;
 }
 interface SessionListResult {
     sessions: SessionInfo[];
@@ -311,6 +316,9 @@ interface SetToolPolicyResult {
     tools: Tool[];
     toolCount: number;
 }
+interface UpdateSessionResult {
+    success: boolean;
+}
 type ToolAccessInfo = Tool & {
     toolId: string;
     allowed: boolean;
@@ -341,4 +349,4 @@ interface ListResourcesResult {
     }>;
 }
 
-export { type ToolClientProvider as A, type ToolInfo as B, type CallToolParams as C, type DisconnectParams as D, Emitter as E, type FinishAuthParams as F, type GetPromptParams as G, type TransportType as H, isCallToolSuccess as I, isConnectAuthRequired as J, isConnectError as K, type ListPromptsResult as L, type McpConnectionEvent as M, isConnectSuccess as N, isListToolsSuccess as O, type ToolPolicy as P, type SetToolPolicyResult as Q, type ReadResourceParams as R, type SessionInfo as S, type ToolClient as T, type GetToolPolicyResult as U, type McpAppsUIEvent as V, type CallToolRequest as a, type CallToolResponse as b, type ConnectAuthRequiredResponse as c, type ConnectErrorResponse as d, type ConnectParams as e, type ConnectRequest as f, type ConnectResponse as g, type ConnectResult as h, type ConnectSuccessResponse as i, type DisconnectResult as j, type Disposable as k, DisposableStore as l, type Event as m, type FinishAuthResult as n, type GetSessionResult as o, type ListResourcesResult as p, type ListToolsResponse as q, type ListToolsRpcResult as r, type McpConnectionState as s, type McpObservabilityEvent as t, type McpRpcMethod as u, type McpRpcParams as v, type McpRpcRequest as w, type McpRpcResponse as x, type SessionListResult as y, type SessionParams as z };
+export { type ToolClientProvider as A, type ToolInfo as B, type CallToolParams as C, type DisconnectParams as D, Emitter as E, type FinishAuthParams as F, type GetPromptParams as G, type TransportType as H, isCallToolSuccess as I, isConnectAuthRequired as J, isConnectError as K, type ListPromptsResult as L, type McpConnectionEvent as M, isConnectSuccess as N, isListToolsSuccess as O, type ToolPolicy as P, type SetToolPolicyResult as Q, type ReadResourceParams as R, type SessionInfo as S, type ToolClient as T, type GetToolPolicyResult as U, type McpAppsUIEvent as V, type UpdateSessionResult as W, type CallToolRequest as a, type CallToolResponse as b, type ConnectAuthRequiredResponse as c, type ConnectErrorResponse as d, type ConnectParams as e, type ConnectRequest as f, type ConnectResponse as g, type ConnectResult as h, type ConnectSuccessResponse as i, type DisconnectResult as j, type Disposable as k, DisposableStore as l, type Event as m, type FinishAuthResult as n, type GetSessionResult as o, type ListResourcesResult as p, type ListToolsResponse as q, type ListToolsRpcResult as r, type McpConnectionState as s, type McpObservabilityEvent as t, type McpRpcMethod as u, type McpRpcParams as v, type McpRpcRequest as w, type McpRpcResponse as x, type SessionListResult as y, type SessionParams as z };

package/migrations/neon/20260513010000_install_mcp_sessions.sql

@@ -17,34 +17,20 @@ CREATE TABLE IF NOT EXISTS public.mcp_sessions (
         CHECK (status IN ('pending', 'active')),
     headers JSONB,
     auth_url TEXT,
-    -- tool_policy JSONB -- optional, see docs/tool-policy
-    CONSTRAINT mcp_sessions_user_session_unique
-        UNIQUE (user_id, session_id)
-);
-
-CREATE TABLE IF NOT EXISTS public.mcp_credentials (
-    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-    session_id TEXT NOT NULL,
-    user_id TEXT NOT NULL,
+    enabled BOOLEAN DEFAULT true,
+    tool_policy JSONB, -- optional, see docs/tool-policy
+    -- Runtime OAuth credentials (stored in-session, no separate credentials table)
     client_information JSONB,
     tokens JSONB,
     code_verifier TEXT,
     client_id TEXT,
     oauth_state JSONB,
-    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
-    updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
-    CONSTRAINT mcp_credentials_session_fk
-        FOREIGN KEY (user_id, session_id)
-        REFERENCES public.mcp_sessions(user_id, session_id)
-        ON DELETE CASCADE,
-    CONSTRAINT mcp_credentials_user_session_unique
+    CONSTRAINT mcp_sessions_user_session_unique
         UNIQUE (user_id, session_id)
 );
 
 CREATE INDEX IF NOT EXISTS idx_mcp_sessions_user_id ON public.mcp_sessions(user_id);
 CREATE INDEX IF NOT EXISTS idx_mcp_sessions_expires_at ON public.mcp_sessions(expires_at);
-CREATE INDEX IF NOT EXISTS idx_mcp_credentials_user_session
-ON public.mcp_credentials(user_id, session_id);
 
 CREATE OR REPLACE FUNCTION public.set_current_timestamp_updated_at()
 RETURNS TRIGGER AS $$
@@ -61,13 +47,6 @@ BEFORE UPDATE ON public.mcp_sessions
 FOR EACH ROW
 EXECUTE FUNCTION public.set_current_timestamp_updated_at();
 
-DROP TRIGGER IF EXISTS trg_mcp_credentials_updated_at ON public.mcp_credentials;
-
-CREATE TRIGGER trg_mcp_credentials_updated_at
-BEFORE UPDATE ON public.mcp_credentials
-FOR EACH ROW
-EXECUTE FUNCTION public.set_current_timestamp_updated_at();
-
 -- Optional production configuration:
 -- Create a dedicated app role and use its credentials in NEON_DATABASE_URL.
 -- Replace neondb and the password before running.
@@ -76,7 +55,6 @@ EXECUTE FUNCTION public.set_current_timestamp_updated_at();
 -- GRANT CONNECT ON DATABASE neondb TO mcp_service_role;
 -- GRANT USAGE ON SCHEMA public TO mcp_service_role;
 -- GRANT SELECT, INSERT, UPDATE, DELETE ON public.mcp_sessions TO mcp_service_role;
--- GRANT SELECT, INSERT, UPDATE, DELETE ON public.mcp_credentials TO mcp_service_role;
 -- GRANT USAGE ON ALL SEQUENCES IN SCHEMA public TO mcp_service_role;
 
 -- Optional RLS configuration:
@@ -90,7 +68,6 @@ EXECUTE FUNCTION public.set_current_timestamp_updated_at();
 -- GRANT USAGE ON ALL SEQUENCES IN SCHEMA public TO mcp_service_role;
 --
 -- ALTER TABLE public.mcp_sessions ENABLE ROW LEVEL SECURITY;
--- ALTER TABLE public.mcp_credentials ENABLE ROW LEVEL SECURITY;
 --
 -- CREATE POLICY mcp_service_role_full_access
 -- ON public.mcp_sessions
@@ -98,10 +75,3 @@ EXECUTE FUNCTION public.set_current_timestamp_updated_at();
 -- TO mcp_service_role
 -- USING (true)
 -- WITH CHECK (true);
---
--- CREATE POLICY mcp_service_role_oauth_full_access
--- ON public.mcp_credentials
--- FOR ALL
--- TO mcp_service_role
--- USING (true)
--- WITH CHECK (true);

package/migrations/supabase/20260330195700_install_mcp_sessions.sql

@@ -1,4 +1,4 @@
--- Create the mcp_sessions table
+-- Create the mcp_sessions table.
 CREATE TABLE IF NOT EXISTS public.mcp_sessions (
     id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
     session_id TEXT NOT NULL UNIQUE,
@@ -15,28 +15,15 @@ CREATE TABLE IF NOT EXISTS public.mcp_sessions (
         CHECK (status IN ('pending', 'active')),
     headers JSONB,
     auth_url TEXT,
-    -- tool_policy JSONB -- optional, see docs/tool-policy
-    CONSTRAINT mcp_sessions_user_session_unique
-        UNIQUE (user_id, session_id)
-);
-
--- Runtime credentials are kept separate from connection metadata.
-CREATE TABLE IF NOT EXISTS public.mcp_credentials (
-    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-    session_id TEXT NOT NULL,
-    user_id TEXT NOT NULL,
+    enabled BOOLEAN DEFAULT true,
+    tool_policy JSONB, -- optional, see docs/tool-policy
+    -- Runtime OAuth credentials (stored in-session, no separate credentials table)
     client_information JSONB,
     tokens JSONB,
     code_verifier TEXT,
     client_id TEXT,
     oauth_state JSONB,
-    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
-    updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
-    CONSTRAINT mcp_credentials_session_fk
-        FOREIGN KEY (user_id, session_id)
-        REFERENCES public.mcp_sessions(user_id, session_id)
-        ON DELETE CASCADE,
-    CONSTRAINT mcp_credentials_user_session_unique
+    CONSTRAINT mcp_sessions_user_session_unique
         UNIQUE (user_id, session_id)
 );
 
@@ -44,8 +31,6 @@ CREATE TABLE IF NOT EXISTS public.mcp_credentials (
 CREATE INDEX IF NOT EXISTS idx_mcp_sessions_user_id ON public.mcp_sessions(user_id);
 -- Add an index on expires_at to speed up the cleanup job
 CREATE INDEX IF NOT EXISTS idx_mcp_sessions_expires_at ON public.mcp_sessions(expires_at);
-CREATE INDEX IF NOT EXISTS idx_mcp_credentials_user_session
-ON public.mcp_credentials(user_id, session_id);
 
 -- Trigger to automatically update the 'updated_at' column
 CREATE OR REPLACE FUNCTION public.set_current_timestamp_updated_at()
@@ -62,15 +47,8 @@ BEFORE UPDATE ON public.mcp_sessions
 FOR EACH ROW
 EXECUTE FUNCTION public.set_current_timestamp_updated_at();
 
-DROP TRIGGER IF EXISTS trg_mcp_credentials_updated_at ON public.mcp_credentials;
-CREATE TRIGGER trg_mcp_credentials_updated_at
-BEFORE UPDATE ON public.mcp_credentials
-FOR EACH ROW
-EXECUTE FUNCTION public.set_current_timestamp_updated_at();
-
 -- Enable Row Level Security (RLS)
 ALTER TABLE public.mcp_sessions ENABLE ROW LEVEL SECURITY;
-ALTER TABLE public.mcp_credentials ENABLE ROW LEVEL SECURITY;
 
 -- Policy 1: Users can read their own sessions
 CREATE POLICY "Users can view their own sessions"
@@ -81,14 +59,6 @@ USING (
     auth.uid()::text = user_id
 );
 
-CREATE POLICY "Users can view their own credentials"
-ON public.mcp_credentials
-FOR SELECT
-TO authenticated
-USING (
-    auth.uid()::text = user_id
-);
-
 -- Policy 2: Users can insert their own sessions
 CREATE POLICY "Users can insert their own sessions"
 ON public.mcp_sessions
@@ -98,14 +68,6 @@ WITH CHECK (
     auth.uid()::text = user_id
 );
 
-CREATE POLICY "Users can insert their own credentials"
-ON public.mcp_credentials
-FOR INSERT
-TO authenticated
-WITH CHECK (
-    auth.uid()::text = user_id
-);
-
 -- Policy 3: Users can update their own sessions
 CREATE POLICY "Users can update their own sessions"
 ON public.mcp_sessions
@@ -118,17 +80,6 @@ WITH CHECK (
     auth.uid()::text = user_id
 );
 
-CREATE POLICY "Users can update their own credentials"
-ON public.mcp_credentials
-FOR UPDATE
-TO authenticated
-USING (
-    auth.uid()::text = user_id
-)
-WITH CHECK (
-    auth.uid()::text = user_id
-);
-
 -- Policy 4: Users can delete their own sessions
 CREATE POLICY "Users can delete their own sessions"
 ON public.mcp_sessions
@@ -137,11 +88,3 @@ TO authenticated
 USING (
     auth.uid()::text = user_id
 );
-
-CREATE POLICY "Users can delete their own credentials"
-ON public.mcp_credentials
-FOR DELETE
-TO authenticated
-USING (
-    auth.uid()::text = user_id
-);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-ts/sdk",
-  "version": "2.5.2",
+  "version": "2.6.0",
   "publishConfig": {
     "access": "public"
   },
@@ -77,6 +77,7 @@
   ],
   "scripts": {
     "build": "tsup",
+    "postbuild": "node -e \"var f='../../../mcp-client/scripts/resolve-local-pkg.cjs';require('fs').existsSync(f)&&require('child_process').execSync('node '+f,{cwd:__dirname,stdio:'inherit'})\"",
     "dev": "tsup --watch",
     "type-check": "tsc --noEmit",
     "clean": "rimraf dist",

package/src/client/core/sse-client.ts

@@ -27,6 +27,7 @@ import type {
   ListResourcesResult,
   SetToolPolicyResult,
   GetToolPolicyResult,
+  UpdateSessionResult,
   ToolPolicy,
 } from '../../shared/types.js';
 
@@ -117,6 +118,10 @@ export class SSEClient {
     return this.sendRequest<GetToolPolicyResult>('getToolPolicy', { sessionId });
   }
 
+  async updateSession(sessionId: string, enabled: boolean): Promise<UpdateSessionResult> {
+    return this.sendRequest<UpdateSessionResult>('updateSession', { sessionId, enabled });
+  }
+
   async listTools(sessionId: string): Promise<ListToolsRpcResult> {
     return this.sendRequest<ListToolsRpcResult>('listTools', { sessionId });
   }

package/src/client/react/use-mcp.ts

@@ -21,6 +21,7 @@ import type {
   ToolPolicy,
   SetToolPolicyResult,
   GetToolPolicyResult,
+  ConnectParams,
 } from '../../shared/types';
 
 export interface UseMcpOptions {
@@ -114,13 +115,7 @@ export interface McpClient {
   /**
    * Connect to an MCP server
    */
-  connect: (params: {
-    serverId: string;
-    serverName: string;
-    serverUrl: string;
-    callbackUrl: string;
-    transportType?: 'sse' | 'streamable-http';
-  }) => Promise<string>;
+  connect: (params: ConnectParams) => Promise<string>;
 
   /**
    * Disconnect from an MCP server
@@ -130,13 +125,7 @@ export interface McpClient {
   /**
    * Reconnect to an MCP server (disconnects existing session first)
    */
-  reconnect: (params: {
-    serverId: string;
-    serverName: string;
-    serverUrl: string;
-    callbackUrl: string;
-    transportType?: 'sse' | 'streamable-http';
-  }) => Promise<string>;
+  reconnect: (params: ConnectParams) => Promise<string>;
 
   /**
    * Get connection by session ID
@@ -210,6 +199,9 @@ export interface McpClient {
    */
   getToolAccess: (sessionId: string) => Promise<GetToolPolicyResult>;
 
+  /** Enable or disable a session for agent tool discovery. Tokens are preserved — no re-auth needed when re-enabling. */
+  updateSession: (sessionId: string, enabled: boolean) => Promise<{ success: boolean }>;
+
   /**
    * List available prompts for a session
    */
@@ -484,13 +476,7 @@ export function useMcp(options: UseMcpOptions): McpClient {
    * Connect to an MCP server
    */
   const connect = useCallback(
-    async (params: {
-      serverId: string;
-      serverName: string;
-      serverUrl: string;
-      callbackUrl: string;
-      transportType?: 'sse' | 'streamable-http';
-    }): Promise<string> => {
+    async (params: ConnectParams): Promise<string> => {
       if (!clientRef.current) {
         throw new Error('SSE client not initialized');
       }
@@ -505,13 +491,7 @@ export function useMcp(options: UseMcpOptions): McpClient {
    * Reconnect to an MCP server (tears down existing session, then connects fresh)
    */
   const reconnect = useCallback(
-    async (params: {
-      serverId: string;
-      serverName: string;
-      serverUrl: string;
-      callbackUrl: string;
-      transportType?: 'sse' | 'streamable-http';
-    }): Promise<string> => {
+    async (params: ConnectParams): Promise<string> => {
       if (!clientRef.current) {
         throw new Error('SSE client not initialized');
       }
@@ -642,6 +622,23 @@ export function useMcp(options: UseMcpOptions): McpClient {
     }
     return result;
   }, []);
+  const updateSession = useCallback(async (
+    sessionId: string,
+    enabled: boolean,
+  ): Promise<{ success: boolean }> => {
+    if (!clientRef.current) {
+      throw new Error('SSE client not initialized');
+    }
+    const result = await clientRef.current.updateSession(sessionId, enabled);
+    if (isMountedRef.current) {
+      setConnections((prev: McpConnection[]) => prev.map((connection) =>
+        connection.sessionId === sessionId
+          ? { ...connection, enabled, updatedAt: new Date() }
+          : connection
+      ));
+    }
+    return result;
+  }, []);
   /**
    * Get all tools with effective access state for a session
    */
@@ -747,6 +744,7 @@ export function useMcp(options: UseMcpOptions): McpClient {
       listTools,
       updateToolPolicy,
       getToolAccess,
+      updateSession,
       listPrompts,
       getPrompt,
       listResources,
@@ -773,6 +771,7 @@ export function useMcp(options: UseMcpOptions): McpClient {
       listTools,
       updateToolPolicy,
       getToolAccess,
+      updateSession,
       listPrompts,
       getPrompt,
       listResources,