@tmcp/transport-http 0.6.3 → 0.7.1

package/README.md

@@ -72,13 +72,16 @@ httpServer.listen(3000, () => {
 
 ```javascript
 const transport = new HttpTransport(server, {
-	// Custom MCP endpoint path (default: '/mcp')
+	// Custom MCP endpoint path (default: '/mcp', use null to respond on every path)
 	path: '/api/mcp',
 	// Custom session ID generation
 	getSessionId: () => {
 		return `session-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
 	},
 });
+
+> [!NOTE]
+> When the transport runs in development mode and you omit the `path` option, a warning is emitted. Future releases will treat an `undefined` path as "respond on every path", so set the property explicitly (for example `path: '/mcp'` or `path: null`) to lock in the behavior you want today.
 ```
 
 ### With Custom Context
@@ -162,7 +165,7 @@ const transport = new HttpTransport(server, {
 - **🌐 HTTP/SSE Communication**: Uses Server-Sent Events for real-time bidirectional communication
 - **🔄 Session Management**: Maintains client sessions with automatic session ID generation
 - **📡 Streaming Responses**: Supports streaming responses through SSE
-- **🛤️ Configurable Path**: Customizable MCP endpoint path with automatic filtering
+- **🛤️ Configurable Path**: Customizable MCP endpoint path with automatic filtering (set `path` to `null` to respond everywhere)
 - **🔧 Framework Agnostic**: Works with any HTTP server framework (Fastify, Bun, Deno, etc.)
 - **⚡ Real-time Updates**: Server can push notifications and updates to connected clients
 - **🛡️ Error Handling**: Graceful error handling for malformed requests
@@ -190,7 +193,7 @@ Creates a new HTTP transport instance.
 ```typescript
 interface HttpTransportOptions {
 	getSessionId: () => string; // Custom session ID generator
-	path?: string; // MCP endpoint path (default: '/mcp')
+	path?: string | null; // MCP endpoint path (default: '/mcp', null responds on every path)
 	oauth?: OAuth; // an oauth provider generated from @tmcp/auth
 	sessionManager?: SessionManager; // Custom session manager (default: InMemorySessionManager)
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tmcp/transport-http",
-  "version": "0.6.3",
+  "version": "0.7.1",
   "description": "Transport for TMCP using HTTP",
   "type": "module",
   "main": "src/index.js",
@@ -16,7 +16,7 @@
     "src/**/*"
   ],
   "peerDependencies": {
-    "tmcp": "^1.14.0"
+    "tmcp": "^1.15.3"
   },
   "keywords": [
     "tmcp",
@@ -29,19 +29,20 @@
     "directory": "packages/transport-http"
   },
   "dependencies": {
+    "esm-env": "^1.2.2",
     "@tmcp/session-manager": "^0.1.2"
   },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.17.1",
-    "@remix-run/node-fetch-server": "^0.8.0",
+    "@remix-run/node-fetch-server": "^0.11.0",
     "@types/node": "^24.0.15",
     "dts-buddy": "^0.6.2",
     "publint": "^0.3.12",
     "valibot": "^1.1.0",
-    "vitest": "^3.2.4",
+    "vitest": "^4.0.0",
+    "@tmcp/adapter-valibot": "^0.1.4",
     "@tmcp/auth": "^0.3.3",
-    "tmcp": "^1.14.0",
-    "@tmcp/adapter-valibot": "^0.1.4"
+    "tmcp": "^1.15.3"
   },
   "publishConfig": {
     "access": "public"

package/src/index.js

@@ -18,7 +18,7 @@
 /**
  * @typedef {{
  * 	getSessionId?: () => string
- * 	path?: string
+ * 	path?: string | null
  * 	oauth?: OAuth<"built">
  * 	cors?: CorsConfig | boolean,
  * 	sessionManager?: SessionManager
@@ -27,6 +27,7 @@
 
 import { AsyncLocalStorage } from 'node:async_hooks';
 import { InMemorySessionManager } from '@tmcp/session-manager';
+import { DEV } from 'esm-env';
 
 /**
  * @template {Record<string, unknown> | undefined} [TCustom=undefined]
@@ -43,7 +44,7 @@ export class HttpTransport {
 	#options;
 
 	/**
-	 * @type {string}
+	 * @type {string | null}
 	 */
 	#path;
 
@@ -76,6 +77,13 @@ export class HttpTransport {
 			getSessionId: () => crypto.randomUUID(),
 		};
 
+		if (options?.path === undefined && DEV) {
+			// TODO: remove on 1.0.0 release
+			console.warn(
+				"[tmcp][transport-http] `options.path` is undefined, in future versions passing `undefined` will default to respond on all paths. To keep the current behavior, explicitly set `path` to '/mcp' or your desired path.",
+			);
+		}
+
 		if (oauth) {
 			this.#oauth = oauth;
 		}
@@ -205,6 +213,7 @@ export class HttpTransport {
 	 */
 	async #handle_get(session_id) {
 		const sessions = this.#options.sessionManager;
+		const text_encoder = this.#text_encoder;
 		// If session already exists, return error
 		const existing_session = await sessions.has(session_id);
 		if (existing_session) {
@@ -232,6 +241,8 @@ export class HttpTransport {
 		const stream = new ReadableStream({
 			async start(controller) {
 				await sessions.create(session_id, controller);
+				// send a comment to flush the headers immediately
+				controller.enqueue(text_encoder.encode(': connected\n\n'));
 			},
 			async cancel() {
 				await sessions.delete(session_id);
@@ -317,18 +328,21 @@ export class HttpTransport {
 
 			const messages = Array.isArray(body) ? body : [body];
 
+			const has_request = messages.some((message) => message.id != null);
+
 			// Determine status code based on response type
 			// 202 Accepted for notifications/responses, 200 OK for standard requests
-			const status = !messages.some((message) => message.id != null)
-				? 202
-				: 200;
-
-			return new Response(stream, {
-				headers: {
-					'Content-Type': 'text/event-stream',
-					'Cache-Control': 'no-cache',
-					'mcp-session-id': session_id,
-				},
+			const status = !has_request ? 202 : 200;
+
+			return new Response(has_request ? stream : null, {
+				headers: has_request
+					? {
+							'Content-Type': 'text/event-stream',
+							'Cache-Control': 'no-cache',
+							connection: 'keep-alive',
+							'mcp-session-id': session_id,
+						}
+					: undefined,
 				status,
 			});
 		} catch (error) {
@@ -415,7 +429,7 @@ export class HttpTransport {
 		}
 
 		// Check if the request path matches the configured MCP path
-		if (url.pathname !== this.#path) {
+		if (url.pathname !== this.#path && this.#path !== null) {
 			return null;
 		}
 

package/src/types/index.d.ts

@@ -19,7 +19,7 @@ declare module '@tmcp/transport-http' {
 	};
 	export type HttpTransportOptions = {
 		getSessionId?: () => string;
-		path?: string;
+		path?: string | null;
 		oauth?: OAuth<"built">;
 		cors?: CorsConfig | boolean;
 		sessionManager?: SessionManager;

package/src/types/index.d.ts.map

@@ -10,6 +10,6 @@
 	"sourcesContent": [
 		null
 	],
-	"mappings": ";;;;cAiCaA,aAAaA",
+	"mappings": ";;;;cAkCaA,aAAaA",
 	"ignoreList": []
 }