@modelcontextprotocol/inspector-client 0.16.4 → 0.16.6

package/dist/assets/{OAuthCallback-DyaAiF-O.js → OAuthCallback-Cmffn8om.js}

@@ -1,4 +1,4 @@
-import { u as useToast, r as reactExports, j as jsxRuntimeExports, p as parseOAuthCallbackParams, g as generateOAuthErrorDescription, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-MFoeZZBS.js";
+import { u as useToast, r as reactExports, j as jsxRuntimeExports, p as parseOAuthCallbackParams, g as generateOAuthErrorDescription, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-B_qh-Btq.js";
 const OAuthCallback = ({ onConnect }) => {
   const { toast } = useToast();
   const hasProcessedRef = reactExports.useRef(false);

package/dist/assets/{OAuthDebugCallback-BD-zJllm.js → OAuthDebugCallback-BhzcPtuF.js}

@@ -1,4 +1,4 @@
-import { r as reactExports, S as SESSION_KEYS, p as parseOAuthCallbackParams, j as jsxRuntimeExports, g as generateOAuthErrorDescription } from "./index-MFoeZZBS.js";
+import { r as reactExports, S as SESSION_KEYS, p as parseOAuthCallbackParams, j as jsxRuntimeExports, g as generateOAuthErrorDescription } from "./index-B_qh-Btq.js";
 const OAuthDebugCallback = ({ onConnect }) => {
   reactExports.useEffect(() => {
     let isProcessed = false;
@@ -21,6 +21,14 @@ const OAuthDebugCallback = ({ onConnect }) => {
       if (storedState) {
         try {
           restoredState = JSON.parse(storedState);
+          if (restoredState && typeof restoredState.resource === "string") {
+            restoredState.resource = new URL(restoredState.resource);
+          }
+          if (restoredState && typeof restoredState.authorizationUrl === "string") {
+            restoredState.authorizationUrl = new URL(
+              restoredState.authorizationUrl
+            );
+          }
           sessionStorage.removeItem(SESSION_KEYS.AUTH_DEBUGGER_STATE);
         } catch (e) {
           console.error("Failed to parse stored auth state:", e);

package/dist/assets/{index-MFoeZZBS.js → index-B_qh-Btq.js}

@@ -1,3 +1,6 @@
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 function _mergeNamespaces(n, m2) {
   for (var i = 0; i < m2.length; i++) {
     const e = m2[i];
@@ -15118,6 +15121,7 @@ const enumType = ZodEnum.create;
 ZodPromise.create;
 const optionalType = ZodOptional.create;
 ZodNullable.create;
+const NEVER = INVALID;
 const LATEST_PROTOCOL_VERSION = "2025-06-18";
 const SUPPORTED_PROTOCOL_VERSIONS = [
   LATEST_PROTOCOL_VERSION,
@@ -16020,7 +16024,7 @@ unionType([
   CallToolRequestSchema,
   ListToolsRequestSchema
 ]);
-const ClientNotificationSchema = unionType([
+unionType([
   CancelledNotificationSchema,
   ProgressNotificationSchema,
   InitializedNotificationSchema,
@@ -16038,7 +16042,7 @@ unionType([
   ElicitRequestSchema,
   ListRootsRequestSchema
 ]);
-const ServerNotificationSchema = unionType([
+unionType([
   CancelledNotificationSchema,
   ProgressNotificationSchema,
   LoggingMessageNotificationSchema,
@@ -16067,9 +16071,22 @@ class McpError extends Error {
     this.name = "McpError";
   }
 }
+const SafeUrlSchema = stringType().url().superRefine((val, ctx) => {
+  if (!URL.canParse(val)) {
+    ctx.addIssue({
+      code: ZodIssueCode.custom,
+      message: "URL must be parseable",
+      fatal: true
+    });
+    return NEVER;
+  }
+}).refine((url) => {
+  const u2 = new URL(url);
+  return u2.protocol !== "javascript:" && u2.protocol !== "data:" && u2.protocol !== "vbscript:";
+}, { message: "URL cannot use javascript:, data:, or vbscript: scheme" });
 const OAuthProtectedResourceMetadataSchema = objectType({
   resource: stringType().url(),
-  authorization_servers: arrayType(stringType().url()).optional(),
+  authorization_servers: arrayType(SafeUrlSchema).optional(),
   jwks_uri: stringType().url().optional(),
   scopes_supported: arrayType(stringType()).optional(),
   bearer_methods_supported: arrayType(stringType()).optional(),
@@ -16085,17 +16102,17 @@ const OAuthProtectedResourceMetadataSchema = objectType({
 }).passthrough();
 const OAuthMetadataSchema = objectType({
   issuer: stringType(),
-  authorization_endpoint: stringType(),
-  token_endpoint: stringType(),
-  registration_endpoint: stringType().optional(),
+  authorization_endpoint: SafeUrlSchema,
+  token_endpoint: SafeUrlSchema,
+  registration_endpoint: SafeUrlSchema.optional(),
   scopes_supported: arrayType(stringType()).optional(),
   response_types_supported: arrayType(stringType()),
   response_modes_supported: arrayType(stringType()).optional(),
   grant_types_supported: arrayType(stringType()).optional(),
   token_endpoint_auth_methods_supported: arrayType(stringType()).optional(),
   token_endpoint_auth_signing_alg_values_supported: arrayType(stringType()).optional(),
-  service_documentation: stringType().optional(),
-  revocation_endpoint: stringType().optional(),
+  service_documentation: SafeUrlSchema.optional(),
+  revocation_endpoint: SafeUrlSchema.optional(),
   revocation_endpoint_auth_methods_supported: arrayType(stringType()).optional(),
   revocation_endpoint_auth_signing_alg_values_supported: arrayType(stringType()).optional(),
   introspection_endpoint: stringType().optional(),
@@ -16105,11 +16122,11 @@ const OAuthMetadataSchema = objectType({
 }).passthrough();
 const OpenIdProviderMetadataSchema = objectType({
   issuer: stringType(),
-  authorization_endpoint: stringType(),
-  token_endpoint: stringType(),
-  userinfo_endpoint: stringType().optional(),
-  jwks_uri: stringType(),
-  registration_endpoint: stringType().optional(),
+  authorization_endpoint: SafeUrlSchema,
+  token_endpoint: SafeUrlSchema,
+  userinfo_endpoint: SafeUrlSchema.optional(),
+  jwks_uri: SafeUrlSchema,
+  registration_endpoint: SafeUrlSchema.optional(),
   scopes_supported: arrayType(stringType()).optional(),
   response_types_supported: arrayType(stringType()),
   response_modes_supported: arrayType(stringType()).optional(),
@@ -16137,8 +16154,8 @@ const OpenIdProviderMetadataSchema = objectType({
   request_parameter_supported: booleanType().optional(),
   request_uri_parameter_supported: booleanType().optional(),
   require_request_uri_registration: booleanType().optional(),
-  op_policy_uri: stringType().optional(),
-  op_tos_uri: stringType().optional()
+  op_policy_uri: SafeUrlSchema.optional(),
+  op_tos_uri: SafeUrlSchema.optional()
 }).passthrough();
 const OpenIdProviderDiscoveryMetadataSchema = OpenIdProviderMetadataSchema.merge(OAuthMetadataSchema.pick({
   code_challenge_methods_supported: true
@@ -16158,18 +16175,18 @@ const OAuthErrorResponseSchema = objectType({
   error_uri: stringType().optional()
 });
 const OAuthClientMetadataSchema = objectType({
-  redirect_uris: arrayType(stringType()).refine((uris) => uris.every((uri) => URL.canParse(uri)), { message: "redirect_uris must contain valid URLs" }),
+  redirect_uris: arrayType(SafeUrlSchema),
   token_endpoint_auth_method: stringType().optional(),
   grant_types: arrayType(stringType()).optional(),
   response_types: arrayType(stringType()).optional(),
   client_name: stringType().optional(),
-  client_uri: stringType().optional(),
-  logo_uri: stringType().optional(),
+  client_uri: SafeUrlSchema.optional(),
+  logo_uri: SafeUrlSchema.optional(),
   scope: stringType().optional(),
   contacts: arrayType(stringType()).optional(),
-  tos_uri: stringType().optional(),
+  tos_uri: SafeUrlSchema.optional(),
   policy_uri: stringType().optional(),
-  jwks_uri: stringType().optional(),
+  jwks_uri: SafeUrlSchema.optional(),
   jwks: anyType().optional(),
   software_id: stringType().optional(),
   software_version: stringType().optional(),
@@ -16629,7 +16646,7 @@ async function tryMetadataDiscovery(url, protocolVersion, fetchFn = fetch) {
   return await fetchWithCorsRetry(url, headers, fetchFn);
 }
 function shouldAttemptFallback(response, pathname) {
-  return !response || response.status === 404 && pathname !== "/";
+  return !response || response.status >= 400 && response.status < 500 && pathname !== "/";
 }
 async function discoverMetadataWithFallback(serverUrl, wellKnownType, fetchFn, opts) {
   var _a, _b;
@@ -16885,6 +16902,19 @@ const generateOAuthErrorDescription = (params) => {
     errorUri ? `More info: ${errorUri}.` : ""
   ].filter(Boolean).join("\n");
 };
+function validateRedirectUrl(url) {
+  try {
+    const parsedUrl = new URL(url);
+    if (parsedUrl.protocol !== "http:" && parsedUrl.protocol !== "https:") {
+      throw new Error("Authorization URL must be HTTP or HTTPS");
+    }
+  } catch (error) {
+    if (error instanceof Error && error.message === "Authorization URL must be HTTP or HTTPS") {
+      throw error;
+    }
+    throw new Error(`Invalid URL: ${url}`);
+  }
+}
 const discoverScopes = async (serverUrl, resourceMetadata) => {
   try {
     const metadata = await discoverAuthorizationServerMetadata(
@@ -16935,8 +16965,10 @@ const clearClientInformationFromSessionStorage = ({
   sessionStorage.removeItem(key);
 };
 class InspectorOAuthClientProvider {
-  constructor(serverUrl) {
+  constructor(serverUrl, scope) {
+    __publicField(this, "scope");
     this.serverUrl = serverUrl;
+    this.scope = scope;
     sessionStorage.setItem(SESSION_KEYS.SERVER_URL, serverUrl);
   }
   get redirectUrl() {
@@ -16949,7 +16981,8 @@ class InspectorOAuthClientProvider {
       grant_types: ["authorization_code", "refresh_token"],
       response_types: ["code"],
       client_name: "MCP Inspector",
-      client_uri: "https://github.com/modelcontextprotocol/inspector"
+      client_uri: "https://github.com/modelcontextprotocol/inspector",
+      scope: this.scope ?? ""
     };
   }
   state() {
@@ -16990,9 +17023,7 @@ class InspectorOAuthClientProvider {
     sessionStorage.setItem(key, JSON.stringify(tokens));
   }
   redirectToAuthorization(authorizationUrl) {
-    if (authorizationUrl.protocol !== "http:" && authorizationUrl.protocol !== "https:") {
-      throw new Error("Authorization URL must be HTTP or HTTPS");
-    }
+    validateRedirectUrl(authorizationUrl.href);
     window.location.href = authorizationUrl.href;
   }
   saveCodeVerifier(codeVerifier) {
@@ -17179,7 +17210,7 @@ const oauthTransitions = {
         authorizationCode: context.state.authorizationCode,
         codeVerifier,
         redirectUri: context.provider.redirectUrl,
-        resource: context.state.resource ?? void 0
+        resource: context.state.resource ? context.state.resource instanceof URL ? context.state.resource : new URL(context.state.resource) : void 0
       });
       context.provider.saveTokens(tokens);
       context.updateState({
@@ -24047,7 +24078,7 @@ function splitLines(chunk) {
     const crIndex = chunk.indexOf("\r", searchIndex), lfIndex = chunk.indexOf(`
 `, searchIndex);
     let lineEnd = -1;
-    if (crIndex !== -1 && lfIndex !== -1 ? lineEnd = Math.min(crIndex, lfIndex) : crIndex !== -1 ? lineEnd = crIndex : lfIndex !== -1 && (lineEnd = lfIndex), lineEnd === -1) {
+    if (crIndex !== -1 && lfIndex !== -1 ? lineEnd = Math.min(crIndex, lfIndex) : crIndex !== -1 ? crIndex === chunk.length - 1 ? lineEnd = -1 : lineEnd = crIndex : lfIndex !== -1 && (lineEnd = lfIndex), lineEnd === -1) {
       incompleteLine = chunk.slice(searchIndex);
       break;
     } else {
@@ -24835,16 +24866,7 @@ class StreamableHTTPClientTransport {
     return this._protocolVersion;
   }
 }
-const StdErrNotificationSchema = NotificationSchema.extend({
-  method: literalType("notifications/stderr"),
-  params: objectType({
-    content: stringType()
-  })
-});
-ClientNotificationSchema.or(
-  StdErrNotificationSchema
-).or(ServerNotificationSchema).or(NotificationSchema);
-const version$1 = "0.16.4";
+const version$1 = "0.16.6";
 const packageJson = {
   version: version$1
 };
@@ -24976,7 +24998,6 @@ function useConnection({
   oauthScope,
   config,
   onNotification,
-  onStdErrNotification,
   onPendingRequest,
   onElicitationRequest,
   getRoots,
@@ -25030,7 +25051,7 @@ function useConnection({
         mcpRequestOptions.onprogress = (params) => {
           if (onNotification) {
             onNotification({
-              method: "notification/progress",
+              method: "notifications/progress",
               params
             });
           }
@@ -25147,7 +25168,6 @@ function useConnection({
   };
   const handleAuthError = async (error) => {
     if (is401Error(error)) {
-      const serverAuthProvider = new InspectorOAuthClientProvider(sseUrl);
       let scope = oauthScope == null ? void 0 : oauthScope.trim();
       if (!scope) {
         let resourceMetadata;
@@ -25159,6 +25179,10 @@ function useConnection({
         }
         scope = await discoverScopes(sseUrl, resourceMetadata);
       }
+      const serverAuthProvider = new InspectorOAuthClientProvider(
+        sseUrl,
+        scope
+      );
       const result = await auth(serverAuthProvider, {
         serverUrl: sseUrl,
         scope
@@ -25212,11 +25236,18 @@ function useConnection({
       let transportOptions;
       let mcpProxyServerUrl;
       switch (transportType) {
-        case "stdio":
+        case "stdio": {
           mcpProxyServerUrl = new URL(`${getMCPProxyAddress(config)}/stdio`);
           mcpProxyServerUrl.searchParams.append("command", command);
           mcpProxyServerUrl.searchParams.append("args", args);
           mcpProxyServerUrl.searchParams.append("env", JSON.stringify(env));
+          const proxyFullAddress = config.MCP_PROXY_FULL_ADDRESS.value;
+          if (proxyFullAddress) {
+            mcpProxyServerUrl.searchParams.append(
+              "proxyFullAddress",
+              proxyFullAddress
+            );
+          }
           transportOptions = {
             authProvider: serverAuthProvider,
             eventSourceInit: {
@@ -25230,9 +25261,17 @@ function useConnection({
             }
           };
           break;
-        case "sse":
+        }
+        case "sse": {
           mcpProxyServerUrl = new URL(`${getMCPProxyAddress(config)}/sse`);
           mcpProxyServerUrl.searchParams.append("url", sseUrl);
+          const proxyFullAddressSSE = config.MCP_PROXY_FULL_ADDRESS.value;
+          if (proxyFullAddressSSE) {
+            mcpProxyServerUrl.searchParams.append(
+              "proxyFullAddress",
+              proxyFullAddressSSE
+            );
+          }
           transportOptions = {
             eventSourceInit: {
               fetch: (url, init) => fetch(url, {
@@ -25245,6 +25284,7 @@ function useConnection({
             }
           };
           break;
+        }
         case "streamable-http":
           mcpProxyServerUrl = new URL(`${getMCPProxyAddress(config)}/mcp`);
           mcpProxyServerUrl.searchParams.append("url", sseUrl);
@@ -25288,12 +25328,6 @@ function useConnection({
           return Promise.resolve();
         };
       }
-      if (onStdErrNotification) {
-        client2.setNotificationHandler(
-          StdErrNotificationSchema,
-          onStdErrNotification
-        );
-      }
       let capabilities;
       try {
         const transport = transportType === "streamable-http" ? new StreamableHTTPClientTransport(mcpProxyServerUrl, {
@@ -25354,6 +25388,15 @@ function useConnection({
       if ((capabilities == null ? void 0 : capabilities.logging) && defaultLoggingLevel) {
         lastRequest = "logging/setLevel";
         await client2.setLoggingLevel(defaultLoggingLevel);
+        pushHistory(
+          {
+            method: "logging/setLevel",
+            params: {
+              level: defaultLoggingLevel
+            }
+          },
+          {}
+        );
         lastRequest = "";
       }
       if (onElicitationRequest) {
@@ -26558,6 +26601,7 @@ const OAuthFlowProgress = ({
   updateAuthState,
   proceedToNextStep
 }) => {
+  const { toast: toast2 } = useToast();
   const provider = reactExports.useMemo(
     () => new DebugInspectorOAuthClientProvider(serverUrl),
     [serverUrl]
@@ -26688,11 +26732,24 @@ const OAuthFlowProgress = ({
             /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2", children: [
               /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs break-all", children: authState.authorizationUrl }),
               /* @__PURE__ */ jsxRuntimeExports.jsx(
-                "a",
+                "button",
                 {
-                  href: authState.authorizationUrl,
-                  target: "_blank",
-                  rel: "noopener noreferrer",
+                  onClick: () => {
+                    try {
+                      validateRedirectUrl(authState.authorizationUrl);
+                      window.open(
+                        authState.authorizationUrl,
+                        "_blank",
+                        "noopener noreferrer"
+                      );
+                    } catch (error) {
+                      toast2({
+                        title: "Invalid URL",
+                        description: error instanceof Error ? error.message : "The authorization URL is not valid",
+                        variant: "destructive"
+                      });
+                    }
+                  },
                   className: "flex items-center text-blue-500 hover:text-blue-700",
                   "aria-label": "Open authorization URL in new tab",
                   title: "Open authorization URL",
@@ -26778,7 +26835,18 @@ const OAuthFlowProgress = ({
         Button,
         {
           variant: "outline",
-          onClick: () => window.open(authState.authorizationUrl, "_blank"),
+          onClick: () => {
+            try {
+              validateRedirectUrl(authState.authorizationUrl);
+              window.open(authState.authorizationUrl, "_blank");
+            } catch (error) {
+              toast2({
+                title: "Invalid URL",
+                description: error instanceof Error ? error.message : "The authorization URL is not valid",
+                variant: "destructive"
+              });
+            }
+          },
           children: "Open in New Tab"
         }
       )
@@ -26906,6 +26974,20 @@ const AuthDebugger = ({
       while (currentState.oauthStep !== "complete") {
         await oauthMachine.executeStep(currentState);
         if (currentState.oauthStep === "authorization_code" && currentState.authorizationUrl) {
+          try {
+            validateRedirectUrl(currentState.authorizationUrl);
+          } catch (error) {
+            updateAuthState({
+              ...currentState,
+              isInitiatingAuth: false,
+              latestError: error instanceof Error ? error : new Error(String(error)),
+              statusMessage: {
+                type: "error",
+                message: `Invalid authorization URL: ${error instanceof Error ? error.message : String(error)}`
+              }
+            });
+            return;
+          }
           sessionStorage.setItem(
             SESSION_KEYS.AUTH_DEBUGGER_STATE,
             JSON.stringify(currentState)
@@ -30313,15 +30395,9 @@ function getWindowScrollBarX(element, rect) {
   }
   return rect.left + leftScroll;
 }
-function getHTMLOffset(documentElement, scroll, ignoreScrollbarX) {
-  if (ignoreScrollbarX === void 0) {
-    ignoreScrollbarX = false;
-  }
+function getHTMLOffset(documentElement, scroll) {
   const htmlRect = documentElement.getBoundingClientRect();
-  const x = htmlRect.left + scroll.scrollLeft - (ignoreScrollbarX ? 0 : (
-    // RTL <body> scrollbar.
-    getWindowScrollBarX(documentElement, htmlRect)
-  ));
+  const x = htmlRect.left + scroll.scrollLeft - getWindowScrollBarX(documentElement, htmlRect);
   const y = htmlRect.top + scroll.scrollTop;
   return {
     x,
@@ -30359,7 +30435,7 @@ function convertOffsetParentRelativeRectToViewportRelativeRect(_ref) {
       offsets.y = offsetRect.y + offsetParent.clientTop;
     }
   }
-  const htmlOffset = documentElement && !isOffsetParentAnElement && !isFixed ? getHTMLOffset(documentElement, scroll, true) : createCoords(0);
+  const htmlOffset = documentElement && !isOffsetParentAnElement && !isFixed ? getHTMLOffset(documentElement, scroll) : createCoords(0);
   return {
     width: rect.width * scale.x,
     height: rect.height * scale.y,
@@ -30388,6 +30464,7 @@ function getDocumentRect(element) {
     y
   };
 }
+const SCROLLBAR_MAX = 25;
 function getViewportRect(element, strategy) {
   const win = getWindow(element);
   const html = getDocumentElement(element);
@@ -30405,6 +30482,19 @@ function getViewportRect(element, strategy) {
       y = visualViewport.offsetTop;
     }
   }
+  const windowScrollbarX = getWindowScrollBarX(html);
+  if (windowScrollbarX <= 0) {
+    const doc = html.ownerDocument;
+    const body = doc.body;
+    const bodyStyles = getComputedStyle(body);
+    const bodyMarginInline = doc.compatMode === "CSS1Compat" ? parseFloat(bodyStyles.marginLeft) + parseFloat(bodyStyles.marginRight) || 0 : 0;
+    const clippingStableScrollbarWidth = Math.abs(html.clientWidth - body.clientWidth - bodyMarginInline);
+    if (clippingStableScrollbarWidth <= SCROLLBAR_MAX) {
+      width -= clippingStableScrollbarWidth;
+    }
+  } else if (windowScrollbarX <= SCROLLBAR_MAX) {
+    width += windowScrollbarX;
+  }
   return {
     width,
     height,
@@ -36382,7 +36472,7 @@ const useTheme = () => {
     [theme, setThemeWithSideEffect]
   );
 };
-const version = "0.16.4";
+const version = "0.16.6";
 var [createTooltipContext, createTooltipScope] = createContextScope("Tooltip", [
   createPopperScope
 ]);
@@ -36887,8 +36977,6 @@ const Sidebar = ({
   setOauthScope,
   onConnect,
   onDisconnect,
-  stdErrNotifications,
-  clearStdErrNotifications,
   logLevel,
   sendLogLevelRequest,
   loggingSupported,
@@ -37030,6 +37118,7 @@ const Sidebar = ({
               placeholder: "Command",
               value: command,
               onChange: (e) => setCommand(e.target.value),
+              onBlur: (e) => setCommand(e.target.value.trim()),
               className: "font-mono"
             }
           )
@@ -37499,30 +37588,7 @@ const Sidebar = ({
               ]
             }
           )
-        ] }),
-        stdErrNotifications.length > 0 && /* @__PURE__ */ jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mt-4 border-t border-gray-200 pt-4", children: [
-          /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex justify-between items-center", children: [
-            /* @__PURE__ */ jsxRuntimeExports.jsx("h3", { className: "text-sm font-medium", children: "Error output from MCP server" }),
-            /* @__PURE__ */ jsxRuntimeExports.jsx(
-              Button,
-              {
-                variant: "outline",
-                size: "sm",
-                onClick: clearStdErrNotifications,
-                className: "h-8 px-2",
-                children: "Clear"
-              }
-            )
-          ] }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "mt-2 max-h-80 overflow-y-auto", children: stdErrNotifications.map((notification, index2) => /* @__PURE__ */ jsxRuntimeExports.jsx(
-            "div",
-            {
-              className: "text-sm text-red-500 font-mono py-2 border-b border-gray-200 last:border-b-0",
-              children: notification.params.content
-            },
-            index2
-          )) })
-        ] }) })
+        ] })
       ] })
     ] }) }),
     /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "p-4 border-t", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between", children: [
@@ -38512,7 +38578,6 @@ const App = () => {
   const [transportType, setTransportType] = reactExports.useState(getInitialTransportType);
   const [logLevel, setLogLevel] = reactExports.useState("debug");
   const [notifications, setNotifications] = reactExports.useState([]);
-  const [stdErrNotifications, setStdErrNotifications] = reactExports.useState([]);
   const [roots, setRoots] = reactExports.useState([]);
   const [env, setEnv] = reactExports.useState({});
   const [config, setConfig] = reactExports.useState(
@@ -38591,12 +38656,6 @@ const App = () => {
     onNotification: (notification) => {
       setNotifications((prev) => [...prev, notification]);
     },
-    onStdErrNotification: (notification) => {
-      setStdErrNotifications((prev) => [
-        ...prev,
-        notification
-      ]);
-    },
     onPendingRequest: (request, resolve, reject) => {
       setPendingSampleRequests((prev) => [
         ...prev,
@@ -39034,9 +39093,6 @@ const App = () => {
     );
     setLogLevel(level);
   };
-  const clearStdErrNotifications = () => {
-    setStdErrNotifications([]);
-  };
   const AuthDebuggerWrapper = () => /* @__PURE__ */ jsxRuntimeExports.jsx(TabsContent, { value: "auth", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
     AuthDebugger,
     {
@@ -39048,13 +39104,13 @@ const App = () => {
   ) });
   if (window.location.pathname === "/oauth/callback") {
     const OAuthCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthCallback-DyaAiF-O.js"), true ? [] : void 0)
+      () => __vitePreload(() => import("./OAuthCallback-Cmffn8om.js"), true ? [] : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthCallback, { onConnect: onOAuthConnect }) });
   }
   if (window.location.pathname === "/oauth/callback/debug") {
     const OAuthDebugCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthDebugCallback-BD-zJllm.js"), true ? [] : void 0)
+      () => __vitePreload(() => import("./OAuthDebugCallback-BhzcPtuF.js"), true ? [] : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthDebugCallback, { onConnect: onOAuthDebugConnect }) });
   }
@@ -39096,11 +39152,9 @@ const App = () => {
               setOauthScope,
               onConnect: connectMcpServer,
               onDisconnect: disconnectMcpServer,
-              stdErrNotifications,
               logLevel,
               sendLogLevelRequest,
-              loggingSupported: !!(serverCapabilities == null ? void 0 : serverCapabilities.logging) || false,
-              clearStdErrNotifications
+              loggingSupported: !!(serverCapabilities == null ? void 0 : serverCapabilities.logging) || false
             }
           ),
           /* @__PURE__ */ jsxRuntimeExports.jsx(

package/dist/assets/{index-BWZfLo5E.css → index-C217Ot8c.css}

@@ -944,9 +944,6 @@ video {
 .h-screen {
   height: 100vh;
 }
-.max-h-80 {
-  max-height: 20rem;
-}
 .max-h-96 {
   max-height: 24rem;
 }
@@ -1407,9 +1404,6 @@ video {
 .pr-8 {
   padding-right: 2rem;
 }
-.pt-4 {
-  padding-top: 1rem;
-}
 .text-left {
   text-align: left;
 }
@@ -1625,6 +1619,10 @@ video {
 .ring-offset-background {
   --tw-ring-offset-color: hsl(var(--background));
 }
+.blur {
+  --tw-blur: blur(8px);
+  filter: var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow);
+}
 .filter {
   filter: var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow);
 }
@@ -1768,10 +1766,6 @@ h1 {
   color: hsl(var(--muted-foreground));
 }
 
-.last\:border-b-0:last-child {
-  border-bottom-width: 0px;
-}
-
 .hover\:border-\[\#646cff\]:hover {
   --tw-border-opacity: 1;
   border-color: rgb(100 108 255 / var(--tw-border-opacity, 1));

package/dist/index.html

@@ -5,8 +5,8 @@
     <link rel="icon" type="image/svg+xml" href="/mcp.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>MCP Inspector</title>
-    <script type="module" crossorigin src="/assets/index-MFoeZZBS.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-BWZfLo5E.css">
+    <script type="module" crossorigin src="/assets/index-B_qh-Btq.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-C217Ot8c.css">
   </head>
   <body>
     <div id="root" class="w-full"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelcontextprotocol/inspector-client",
-  "version": "0.16.4",
+  "version": "0.16.6",
   "description": "Client-side application for the Model Context Protocol inspector",
   "license": "MIT",
   "author": "Anthropic, PBC (https://anthropic.com)",
@@ -25,7 +25,7 @@
     "cleanup:e2e": "node e2e/global-teardown.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.17.2",
+    "@modelcontextprotocol/sdk": "^1.17.5",
     "@radix-ui/react-checkbox": "^1.1.4",
     "@radix-ui/react-dialog": "^1.1.3",
     "@radix-ui/react-icons": "^1.3.0",
@@ -48,7 +48,6 @@
     "react-simple-code-editor": "^0.14.1",
     "serve-handler": "^6.1.6",
     "tailwind-merge": "^2.5.3",
-    "tailwindcss-animate": "^1.0.7",
     "zod": "^3.25.76"
   },
   "devDependencies": {
@@ -72,6 +71,7 @@
     "jest-environment-jsdom": "^29.7.0",
     "postcss": "^8.5.6",
     "tailwindcss": "^3.4.13",
+    "tailwindcss-animate": "^1.0.7",
     "ts-jest": "^29.4.0",
     "typescript": "^5.5.3",
     "typescript-eslint": "^8.38.0",