@modelcontextprotocol/inspector 0.17.2 → 0.18.0

package/client/dist/index.html

@@ -5,8 +5,8 @@
     <link rel="icon" type="image/svg+xml" href="/mcp.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>MCP Inspector</title>
-    <script type="module" crossorigin src="/assets/index-Bl2jgoAl.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-CV-uzqYs.css">
+    <script type="module" crossorigin src="/assets/index-Dw52pmVD.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-DoQUGvvr.css">
   </head>
   <body>
     <div id="root" class="w-full"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelcontextprotocol/inspector",
-  "version": "0.17.2",
+  "version": "0.18.0",
   "description": "Model Context Protocol inspector",
   "license": "MIT",
   "author": "Anthropic, PBC (https://anthropic.com)",
@@ -47,10 +47,10 @@
     "check-version": "node scripts/check-version-consistency.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/inspector-cli": "^0.17.2",
-    "@modelcontextprotocol/inspector-client": "^0.17.2",
-    "@modelcontextprotocol/inspector-server": "^0.17.2",
-    "@modelcontextprotocol/sdk": "^1.20.1",
+    "@modelcontextprotocol/inspector-cli": "^0.18.0",
+    "@modelcontextprotocol/inspector-client": "^0.18.0",
+    "@modelcontextprotocol/inspector-server": "^0.18.0",
+    "@modelcontextprotocol/sdk": "^1.24.3",
     "concurrently": "^9.2.0",
     "node-fetch": "^3.3.2",
     "open": "^10.2.0",
@@ -68,7 +68,7 @@
     "jest-fixed-jsdom": "^0.0.9",
     "lint-staged": "^16.1.5",
     "playwright": "^1.56.1",
-    "prettier": "^3.6.2",
+    "prettier": "^3.7.1",
     "rimraf": "^6.0.1",
     "typescript": "^5.4.2"
   },

package/server/build/index.js

@@ -8,7 +8,7 @@ const fetch = nodeFetch;
 const Headers = NodeHeaders;
 import { SSEClientTransport, SseError, } from "@modelcontextprotocol/sdk/client/sse.js";
 import { StdioClientTransport, getDefaultEnvironment, } from "@modelcontextprotocol/sdk/client/stdio.js";
-import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { StreamableHTTPClientTransport, StreamableHTTPError, } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
 import express from "express";
@@ -30,6 +30,21 @@ const { values } = parseArgs({
         "server-url": { type: "string", default: "" },
     },
 });
+/**
+ * Helper function to detect 401 Unauthorized errors from various transport types.
+ * StreamableHTTPClientTransport throws a generic Error with "HTTP 401" in the message
+ * when there's no authProvider configured, while SSEClientTransport throws SseError.
+ */
+const is401Error = (error) => {
+    if (error instanceof SseError && error.code === 401)
+        return true;
+    if (error instanceof StreamableHTTPError && error.code === 401)
+        return true;
+    if (error instanceof Error &&
+        (error.message.includes("HTTP 401") || error.message.includes("(401)")))
+        return true;
+    return false;
+};
 // Function to get HTTP headers.
 const getHttpHeaders = (req) => {
     const headers = {};
@@ -187,18 +202,31 @@ const authMiddleware = (req, res, next) => {
  * This is necessary for the EventSource polyfill which expects web streams
  */
 const createWebReadableStream = (nodeStream) => {
+    let closed = false;
     return new ReadableStream({
         start(controller) {
             nodeStream.on("data", (chunk) => {
-                controller.enqueue(chunk);
+                if (!closed) {
+                    controller.enqueue(chunk);
+                }
             });
             nodeStream.on("end", () => {
-                controller.close();
+                if (!closed) {
+                    closed = true;
+                    controller.close();
+                }
             });
             nodeStream.on("error", (err) => {
-                controller.error(err);
+                if (!closed) {
+                    closed = true;
+                    controller.error(err);
+                }
             });
         },
+        cancel() {
+            closed = true;
+            nodeStream.destroy();
+        },
     });
 };
 /**
@@ -375,8 +403,8 @@ app.post("/mcp", originValidationMiddleware, authMiddleware, async (req, res) =>
             await webAppTransport.handleRequest(req, res, req.body);
         }
         catch (error) {
-            if (error instanceof SseError && error.code === 401) {
-                console.error("Received 401 Unauthorized from MCP server:", error.message);
+            if (is401Error(error)) {
+                console.error("Received 401 Unauthorized from MCP server:", error instanceof Error ? error.message : error);
                 res.status(401).json(error);
                 return;
             }
@@ -396,6 +424,7 @@ app.delete("/mcp", originValidationMiddleware, authMiddleware, async (req, res)
             }
             else {
                 await serverTransport.terminateSession();
+                await serverTransport.close();
                 webAppTransports.delete(sessionId);
                 serverTransports.delete(sessionId);
                 sessionHeaderHolders.delete(sessionId);
@@ -507,7 +536,7 @@ app.get("/stdio", originValidationMiddleware, authMiddleware, async (req, res) =
         });
     }
     catch (error) {
-        if (error instanceof SseError && error.code === 401) {
+        if (is401Error(error)) {
             console.error("Received 401 Unauthorized from MCP server. Authentication failure.");
             res.status(401).json(error);
             return;
@@ -538,7 +567,7 @@ app.get("/sse", originValidationMiddleware, authMiddleware, async (req, res) =>
         });
     }
     catch (error) {
-        if (error instanceof SseError && error.code === 401) {
+        if (is401Error(error)) {
             console.error("Received 401 Unauthorized from MCP server. Authentication failure.");
             res.status(401).json(error);
             return;