@modelcontextprotocol/inspector 0.17.1 → 0.17.5

package/README.md

@@ -236,13 +236,15 @@ ALLOWED_ORIGINS=http://localhost:6274,http://localhost:8000 npm start
 
 The MCP Inspector supports the following configuration settings. To change them, click on the `Configuration` button in the MCP Inspector UI:
 
-| Setting                                 | Description                                                                                                                                       | Default |
-| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | ------- |
-| `MCP_SERVER_REQUEST_TIMEOUT`            | Timeout for requests to the MCP server (ms)                                                                                                       | 10000   |
-| `MCP_REQUEST_TIMEOUT_RESET_ON_PROGRESS` | Reset timeout on progress notifications                                                                                                           | true    |
-| `MCP_REQUEST_MAX_TOTAL_TIMEOUT`         | Maximum total timeout for requests sent to the MCP server (ms) (Use with progress notifications)                                                  | 60000   |
-| `MCP_PROXY_FULL_ADDRESS`                | Set this if you are running the MCP Inspector Proxy on a non-default address. Example: http://10.1.1.22:5577                                      | ""      |
-| `MCP_AUTO_OPEN_ENABLED`                 | Enable automatic browser opening when inspector starts (works with authentication enabled). Only as environment var, not configurable in browser. | true    |
+| Setting                                 | Description                                                                                                                                         | Default |
+| --------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- | ------- |
+| `MCP_SERVER_REQUEST_TIMEOUT`            | Client-side timeout (ms) - Inspector will cancel the request if no response is received within this time. Note: servers may have their own timeouts | 300000  |
+| `MCP_REQUEST_TIMEOUT_RESET_ON_PROGRESS` | Reset timeout on progress notifications                                                                                                             | true    |
+| `MCP_REQUEST_MAX_TOTAL_TIMEOUT`         | Maximum total timeout for requests sent to the MCP server (ms) (Use with progress notifications)                                                    | 60000   |
+| `MCP_PROXY_FULL_ADDRESS`                | Set this if you are running the MCP Inspector Proxy on a non-default address. Example: http://10.1.1.22:5577                                        | ""      |
+| `MCP_AUTO_OPEN_ENABLED`                 | Enable automatic browser opening when inspector starts (works with authentication enabled). Only as environment var, not configurable in browser.   | true    |
+
+**Note on Timeouts:** The timeout settings above control when the Inspector (as an MCP client) will cancel requests. These are independent of any server-side timeouts. For example, if a server tool has a 10-minute timeout but the Inspector's timeout is set to 30 seconds, the Inspector will cancel the request after 30 seconds. Conversely, if the Inspector's timeout is 10 minutes but the server times out after 30 seconds, you'll receive the server's timeout error. For tools that require user interaction (like elicitation) or long-running operations, ensure the Inspector's timeout is set appropriately.
 
 These settings can be adjusted in real-time through the UI and will persist across sessions.
 
@@ -361,7 +363,7 @@ http://localhost:6274/?transport=stdio&serverCommand=npx&serverArgs=arg1%20arg2
 You can also set initial config settings via query params, for example:
 
 ```
-http://localhost:6274/?MCP_SERVER_REQUEST_TIMEOUT=10000&MCP_REQUEST_TIMEOUT_RESET_ON_PROGRESS=false&MCP_PROXY_FULL_ADDRESS=http://10.1.1.22:5577
+http://localhost:6274/?MCP_SERVER_REQUEST_TIMEOUT=60000&MCP_REQUEST_TIMEOUT_RESET_ON_PROGRESS=false&MCP_PROXY_FULL_ADDRESS=http://10.1.1.22:5577
 ```
 
 Note that if both the query param and the corresponding localStorage item are set, the query param will take precedence.
@@ -456,6 +458,17 @@ npx @modelcontextprotocol/inspector --cli https://my-mcp-server.example.com --me
 | **Automation**           | N/A                                                                       | Ideal for CI/CD pipelines, batch processing, and integration with coding assistants                                                                  |
 | **Learning MCP**         | Rich visual interface helps new users understand server capabilities      | Simplified commands for focused learning of specific endpoints                                                                                       |
 
+## Tool Input Validation Guidelines
+
+When implementing or modifying tool input parameter handling in the Inspector:
+
+- **Omit optional fields with empty values** - When processing form inputs, omit empty strings or null values for optional parameters, UNLESS the field has an explicit default value in the schema that matches the current value
+- **Preserve explicit default values** - If a field schema contains an explicit default (e.g., `default: null`), and the current value matches that default, include it in the request. This is a meaningful value the tool expects
+- **Always include required fields** - Preserve required field values even when empty, allowing the MCP server to validate and return appropriate error messages
+- **Defer deep validation to the server** - Implement basic field presence checking in the Inspector client, but rely on the MCP server for parameter validation according to its schema
+
+These guidelines maintain clean parameter passing and proper separation of concerns between the Inspector client and MCP servers.
+
 ## License
 
 This project is licensed under the MIT License—see the [LICENSE](LICENSE) file for details.

package/cli/build/client/prompts.js

@@ -1,7 +1,8 @@
 // List available prompts
-export async function listPrompts(client) {
+export async function listPrompts(client, metadata) {
     try {
-        const response = await client.listPrompts();
+        const params = metadata && Object.keys(metadata).length > 0 ? { _meta: metadata } : {};
+        const response = await client.listPrompts(params);
         return response;
     }
     catch (error) {
@@ -9,7 +10,7 @@ export async function listPrompts(client) {
     }
 }
 // Get a prompt
-export async function getPrompt(client, name, args) {
+export async function getPrompt(client, name, args, metadata) {
     try {
         // Convert all arguments to strings for prompt arguments
         const stringArgs = {};
@@ -26,10 +27,14 @@ export async function getPrompt(client, name, args) {
                 }
             }
         }
-        const response = await client.getPrompt({
+        const params = {
             name,
             arguments: stringArgs,
-        });
+        };
+        if (metadata && Object.keys(metadata).length > 0) {
+            params._meta = metadata;
+        }
+        const response = await client.getPrompt(params);
         return response;
     }
     catch (error) {

package/cli/build/client/resources.js

@@ -1,7 +1,8 @@
 // List available resources
-export async function listResources(client) {
+export async function listResources(client, metadata) {
     try {
-        const response = await client.listResources();
+        const params = metadata && Object.keys(metadata).length > 0 ? { _meta: metadata } : {};
+        const response = await client.listResources(params);
         return response;
     }
     catch (error) {
@@ -9,9 +10,13 @@ export async function listResources(client) {
     }
 }
 // Read a resource
-export async function readResource(client, uri) {
+export async function readResource(client, uri, metadata) {
     try {
-        const response = await client.readResource({ uri });
+        const params = { uri };
+        if (metadata && Object.keys(metadata).length > 0) {
+            params._meta = metadata;
+        }
+        const response = await client.readResource(params);
         return response;
     }
     catch (error) {
@@ -19,9 +24,10 @@ export async function readResource(client, uri) {
     }
 }
 // List resource templates
-export async function listResourceTemplates(client) {
+export async function listResourceTemplates(client, metadata) {
     try {
-        const response = await client.listResourceTemplates();
+        const params = metadata && Object.keys(metadata).length > 0 ? { _meta: metadata } : {};
+        const response = await client.listResourceTemplates(params);
         return response;
     }
     catch (error) {

package/cli/build/client/tools.js

@@ -1,6 +1,7 @@
-export async function listTools(client) {
+export async function listTools(client, metadata) {
     try {
-        const response = await client.listTools();
+        const params = metadata && Object.keys(metadata).length > 0 ? { _meta: metadata } : {};
+        const response = await client.listTools(params);
         return response;
     }
     catch (error) {
@@ -42,9 +43,9 @@ function convertParameters(tool, params) {
     }
     return result;
 }
-export async function callTool(client, name, args) {
+export async function callTool(client, name, args, generalMetadata, toolSpecificMetadata) {
     try {
-        const toolsResponse = await listTools(client);
+        const toolsResponse = await listTools(client, generalMetadata);
         const tools = toolsResponse.tools;
         const tool = tools.find((t) => t.name === name);
         let convertedArgs = args;
@@ -62,9 +63,21 @@ export async function callTool(client, name, args) {
                 convertedArgs = { ...args, ...convertedStringArgs };
             }
         }
+        // Merge general metadata with tool-specific metadata
+        // Tool-specific metadata takes precedence over general metadata
+        let mergedMetadata;
+        if (generalMetadata || toolSpecificMetadata) {
+            mergedMetadata = {
+                ...(generalMetadata || {}),
+                ...(toolSpecificMetadata || {}),
+            };
+        }
         const response = await client.callTool({
             name: name,
             arguments: convertedArgs,
+            _meta: mergedMetadata && Object.keys(mergedMetadata).length > 0
+                ? mergedMetadata
+                : undefined,
         });
         return response;
     }

package/cli/build/index.js

@@ -71,36 +71,36 @@ async function callMethod(args) {
         let result;
         // Tools methods
         if (args.method === "tools/list") {
-            result = await listTools(client);
+            result = await listTools(client, args.metadata);
         }
         else if (args.method === "tools/call") {
             if (!args.toolName) {
                 throw new Error("Tool name is required for tools/call method. Use --tool-name to specify the tool name.");
             }
-            result = await callTool(client, args.toolName, args.toolArg || {});
+            result = await callTool(client, args.toolName, args.toolArg || {}, args.metadata, args.toolMeta);
         }
         // Resources methods
         else if (args.method === "resources/list") {
-            result = await listResources(client);
+            result = await listResources(client, args.metadata);
         }
         else if (args.method === "resources/read") {
             if (!args.uri) {
                 throw new Error("URI is required for resources/read method. Use --uri to specify the resource URI.");
             }
-            result = await readResource(client, args.uri);
+            result = await readResource(client, args.uri, args.metadata);
         }
         else if (args.method === "resources/templates/list") {
-            result = await listResourceTemplates(client);
+            result = await listResourceTemplates(client, args.metadata);
         }
         // Prompts methods
         else if (args.method === "prompts/list") {
-            result = await listPrompts(client);
+            result = await listPrompts(client, args.metadata);
         }
         else if (args.method === "prompts/get") {
             if (!args.promptName) {
                 throw new Error("Prompt name is required for prompts/get method. Use --prompt-name to specify the prompt name.");
             }
-            result = await getPrompt(client, args.promptName, args.promptArgs || {});
+            result = await getPrompt(client, args.promptName, args.promptArgs || {}, args.metadata);
         }
         // Logging methods
         else if (args.method === "logging/setLevel") {
@@ -207,7 +207,12 @@ function parseArgs() {
         //
         // HTTP headers
         //
-        .option("--header <headers...>", 'HTTP headers as "HeaderName: Value" pairs (for HTTP/SSE transports)', parseHeaderPair, {});
+        .option("--header <headers...>", 'HTTP headers as "HeaderName: Value" pairs (for HTTP/SSE transports)', parseHeaderPair, {})
+        //
+        // Metadata options
+        //
+        .option("--metadata <pairs...>", "General metadata as key=value pairs (applied to all methods)", parseKeyValuePair, {})
+        .option("--tool-metadata <pairs...>", "Tool-specific metadata as key=value pairs (for tools/call method only)", parseKeyValuePair, {});
     // Parse only the arguments before --
     program.parse(preArgs);
     const options = program.opts();
@@ -221,6 +226,18 @@ function parseArgs() {
         target: finalArgs,
         ...options,
         headers: options.header, // commander.js uses 'header' field, map to 'headers'
+        metadata: options.metadata
+            ? Object.fromEntries(Object.entries(options.metadata).map(([key, value]) => [
+                key,
+                String(value),
+            ]))
+            : undefined,
+        toolMeta: options.toolMetadata
+            ? Object.fromEntries(Object.entries(options.toolMetadata).map(([key, value]) => [
+                key,
+                String(value),
+            ]))
+            : undefined,
     };
 }
 async function main() {

package/client/dist/assets/{OAuthCallback-0GeGMxax.js → OAuthCallback-Bojw9MF2.js}

@@ -1,4 +1,4 @@
-import { u as useToast, r as reactExports, j as jsxRuntimeExports, p as parseOAuthCallbackParams, g as generateOAuthErrorDescription, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-9_nBaufL.js";
+import { u as useToast, r as reactExports, j as jsxRuntimeExports, p as parseOAuthCallbackParams, g as generateOAuthErrorDescription, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-CneFQkmB.js";
 const OAuthCallback = ({ onConnect }) => {
   const { toast } = useToast();
   const hasProcessedRef = reactExports.useRef(false);

package/client/dist/assets/{OAuthDebugCallback-DEQBSYMe.js → OAuthDebugCallback-ms23dRpk.js}

@@ -1,4 +1,4 @@
-import { r as reactExports, S as SESSION_KEYS, p as parseOAuthCallbackParams, j as jsxRuntimeExports, g as generateOAuthErrorDescription } from "./index-9_nBaufL.js";
+import { r as reactExports, S as SESSION_KEYS, p as parseOAuthCallbackParams, j as jsxRuntimeExports, g as generateOAuthErrorDescription } from "./index-CneFQkmB.js";
 const OAuthDebugCallback = ({ onConnect }) => {
   reactExports.useEffect(() => {
     let isProcessed = false;