mcp-use 1.34.0 → 1.34.1

package/dist/src/browser.js

@@ -2,22 +2,22 @@ import {
   BrowserMCPClient,
   BrowserOAuthClientProvider,
   onMcpAuthorization
-} from "../chunk-3UOADQDZ.js";
+} from "../chunk-2EBW4344.js";
 import {
   HttpConnector,
   MCPSession
-} from "../chunk-BOFDVMBT.js";
+} from "../chunk-YQIRNTLE.js";
 import "../chunk-URE3PRDB.js";
 import {
   BaseConnector
-} from "../chunk-7MKAP6XK.js";
+} from "../chunk-VYDFQS24.js";
 import {
   Tel,
   Telemetry,
   VERSION,
   getPackageVersion,
   setTelemetrySource
-} from "../chunk-XS2ZMBOG.js";
+} from "../chunk-XIAP7CEH.js";
 import {
   Logger,
   logger

package/dist/src/client.cjs

@@ -215,7 +215,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = "1.34.0";
+    VERSION = "1.34.1";
     __name(getPackageVersion, "getPackageVersion");
   }
 });

package/dist/src/client.js

@@ -13,12 +13,12 @@ import {
   isVMAvailable,
   reject,
   validate
-} from "../chunk-U6UCVQKQ.js";
+} from "../chunk-D7SEH5RU.js";
 import "../chunk-GKPKUKD6.js";
-import "../chunk-2J3FVMZ5.js";
-import "../chunk-4KP3757O.js";
+import "../chunk-TAPTQKI4.js";
+import "../chunk-YZ22J43K.js";
 import "../chunk-LG5NSHEL.js";
-import "../chunk-WEMFZYUR.js";
+import "../chunk-PSOT2YDT.js";
 import "../chunk-BXZHMYMM.js";
 import "../chunk-MTHLLDCX.js";
 import "../chunk-QWQYAQCK.js";

package/dist/src/react/index.cjs

@@ -1110,7 +1110,7 @@ var ClientRemoveServerEvent = class extends BaseTelemetryEvent {
 };
 
 // src/version.ts
-var VERSION = "1.34.0";
+var VERSION = "1.34.1";
 function getPackageVersion() {
   return VERSION;
 }
@@ -4023,6 +4023,41 @@ var BrowserOAuthClientProvider = class {
   getKey(keySuffix) {
     return this.session.getKey(keySuffix);
   }
+  /**
+   * Re-anchor an SDK-derived OAuth discovery URL from the MCP connection
+   * (proxy) origin onto the actual MCP server.
+   *
+   * When MCP traffic is tunneled through a gateway/inspector proxy, the SDK
+   * transport derives `/.well-known/*` URLs from the URL it connected to (the
+   * proxy) whenever no `resource_metadata` hint is available — the SSE
+   * transport's EventSource cannot read `WWW-Authenticate`, and token refresh
+   * runs without a 401 response at hand. The proxy origin serves no OAuth
+   * metadata, so discovery would fail and the server would be misclassified
+   * as "does not support OAuth". Rewriting reproduces what a direct
+   * connection would have requested: the same well-known document, anchored
+   * on the server origin, with the RFC 8414 §3.1 / RFC 9728 §3.1 path
+   * insertion using the server's path instead of the proxy's.
+   */
+  reanchorWellKnownUrl(url) {
+    if (!this.connectionUrl) return url;
+    try {
+      const requested = new URL(url);
+      const connection = new URL(this.connectionUrl);
+      if (requested.origin !== connection.origin) return url;
+      if (!requested.pathname.startsWith("/.well-known/")) return url;
+      const target = new URL(this.serverUrl);
+      const rest = requested.pathname.slice("/.well-known/".length);
+      const [doc, ...suffixParts] = rest.split("/");
+      if (!doc) return url;
+      const suffix = suffixParts.length ? `/${suffixParts.join("/")}` : "";
+      const connectionPath = connection.pathname.replace(/\/+$/, "");
+      const targetPath = target.pathname.replace(/\/+$/, "");
+      const newSuffix = suffix && suffix === connectionPath ? targetPath : suffix;
+      return `${target.origin}/.well-known/${doc}${newSuffix}${requested.search}`;
+    } catch {
+      return url;
+    }
+  }
   /**
    * Returns a `fetch` function, scoped to this provider, that routes OAuth
    * requests (`.well-known` metadata, token, register, authorize) through the
@@ -4052,7 +4087,8 @@ var BrowserOAuthClientProvider = class {
     const connectionUrl = this.connectionUrl;
     const serverUrl = this.serverUrl;
     return async (input, init) => {
-      const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+      const requestedUrl = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+      const url = this.reanchorWellKnownUrl(requestedUrl);
       const isOAuthRequest = url.includes("/.well-known/") || url.match(/\/(register|token|authorize)$/);
       if (!isOAuthRequest) {
         return await base(input, init);
@@ -4122,7 +4158,7 @@ var BrowserOAuthClientProvider = class {
           "[OAuth Proxy] Request failed, falling back to direct fetch:",
           error
         );
-        return await base(input, init);
+        return url !== requestedUrl ? await base(url, init) : await base(input, init);
       }
     };
   }

package/dist/src/react/index.js

@@ -6,16 +6,16 @@ import {
   onMcpAuthorization,
   runAuthPopup,
   sanitizeUrl
-} from "../../chunk-3UOADQDZ.js";
-import "../../chunk-BOFDVMBT.js";
+} from "../../chunk-2EBW4344.js";
+import "../../chunk-YQIRNTLE.js";
 import "../../chunk-URE3PRDB.js";
-import "../../chunk-7MKAP6XK.js";
+import "../../chunk-VYDFQS24.js";
 import {
   Tel,
   Telemetry,
   getPackageVersion,
   setTelemetrySource
-} from "../../chunk-XS2ZMBOG.js";
+} from "../../chunk-XIAP7CEH.js";
 import {
   clearRpcLogs,
   getAllRpcLogs,

package/dist/src/server/index.cjs

@@ -661,7 +661,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = "1.34.0";
+    VERSION = "1.34.1";
     __name(getPackageVersion, "getPackageVersion");
   }
 });

package/dist/src/server/index.js

@@ -17,7 +17,7 @@ import {
   findSessionContext,
   isValidLogLevel,
   supportsApps
-} from "../../chunk-EIYWOJYK.js";
+} from "../../chunk-NXLY2JS7.js";
 import {
   getRequestContext,
   hasRequestContext,
@@ -59,7 +59,7 @@ import {
   Telemetry,
   VERSION,
   getPackageVersion
-} from "../../chunk-WEMFZYUR.js";
+} from "../../chunk-PSOT2YDT.js";
 import "../../chunk-BXZHMYMM.js";
 import {
   fsHelpers,
@@ -3332,7 +3332,7 @@ function registerPrompt(promptDefinition, callback) {
   }
   const wrappedCallback = /* @__PURE__ */ __name(async (params, extra) => {
     const { getRequestContext: getRequestContext2, runWithContext: runWithContext2 } = await import("../../context-storage-KMOAHEL7.js");
-    const { findSessionContext: findSessionContext2, createClientCapabilityChecker } = await import("../../tool-execution-helpers-GEQBGCKR.js");
+    const { findSessionContext: findSessionContext2, createClientCapabilityChecker } = await import("../../tool-execution-helpers-J4XLCZBU.js");
     const initialRequestContext = getRequestContext2();
     const sessions = this.sessions || /* @__PURE__ */ new Map();
     const { requestContext, session } = findSessionContext2(
@@ -3537,7 +3537,7 @@ function registerResource(resourceDefinition, callback) {
   const explicitMimeType = resourceDefinition.mimeType;
   const wrappedCallback = /* @__PURE__ */ __name(async () => {
     const { getRequestContext: getRequestContext2, runWithContext: runWithContext2 } = await import("../../context-storage-KMOAHEL7.js");
-    const { findSessionContext: findSessionContext2, createClientCapabilityChecker } = await import("../../tool-execution-helpers-GEQBGCKR.js");
+    const { findSessionContext: findSessionContext2, createClientCapabilityChecker } = await import("../../tool-execution-helpers-J4XLCZBU.js");
     const initialRequestContext = getRequestContext2();
     const sessions = this.sessions || /* @__PURE__ */ new Map();
     const { requestContext, session } = findSessionContext2(
@@ -3626,7 +3626,7 @@ function registerResourceTemplate(resourceTemplateDefinition, callback) {
     async (uri) => {
       const params = this.parseTemplateUri(uriTemplate, uri.toString());
       const { getRequestContext: getRequestContext2, runWithContext: runWithContext2 } = await import("../../context-storage-KMOAHEL7.js");
-      const { findSessionContext: findSessionContext2 } = await import("../../tool-execution-helpers-GEQBGCKR.js");
+      const { findSessionContext: findSessionContext2 } = await import("../../tool-execution-helpers-J4XLCZBU.js");
       const initialRequestContext = getRequestContext2();
       const sessions = this.sessions || /* @__PURE__ */ new Map();
       const { requestContext } = findSessionContext2(
@@ -6988,7 +6988,7 @@ var MCPServerClass = class _MCPServerClass {
       onSampling: /* @__PURE__ */ __name(async (params) => {
         try {
           const { getRequestContext: getRequestContext2 } = await import("../../context-storage-KMOAHEL7.js");
-          const { findSessionContext: findSessionContext2 } = await import("../../tool-execution-helpers-GEQBGCKR.js");
+          const { findSessionContext: findSessionContext2 } = await import("../../tool-execution-helpers-J4XLCZBU.js");
           const ctx = getRequestContext2();
           if (!ctx) throw new Error("No request context");
           const { session } = findSessionContext2(
@@ -7016,7 +7016,7 @@ var MCPServerClass = class _MCPServerClass {
       onElicitation: /* @__PURE__ */ __name(async (params) => {
         try {
           const { getRequestContext: getRequestContext2 } = await import("../../context-storage-KMOAHEL7.js");
-          const { findSessionContext: findSessionContext2 } = await import("../../tool-execution-helpers-GEQBGCKR.js");
+          const { findSessionContext: findSessionContext2 } = await import("../../tool-execution-helpers-J4XLCZBU.js");
           const ctx = getRequestContext2();
           if (!ctx) throw new Error("No request context");
           const { session } = findSessionContext2(

package/dist/src/version.d.ts

@@ -1,4 +1,4 @@
-export declare const VERSION = "1.34.0";
+export declare const VERSION = "1.34.1";
 /**
  * Get the package version.
  * The version is embedded at build time via scripts/generate-version.mjs

package/dist/{stdio-QIYDKXTT.js → stdio-ECCMBHYL.js}

@@ -1,9 +1,9 @@
 import {
   StdioConnector
-} from "./chunk-AOZBHAT7.js";
+} from "./chunk-LZOTKOYW.js";
 import "./chunk-GKPKUKD6.js";
-import "./chunk-4KP3757O.js";
-import "./chunk-WEMFZYUR.js";
+import "./chunk-YZ22J43K.js";
+import "./chunk-PSOT2YDT.js";
 import "./chunk-BXZHMYMM.js";
 import "./chunk-MTHLLDCX.js";
 import "./chunk-QWQYAQCK.js";

package/dist/{stdio-NRH7PMXI.js → stdio-VYJBFXTQ.js}

@@ -1,8 +1,8 @@
 import {
   BaseConnector,
   ConnectionManager
-} from "./chunk-7MKAP6XK.js";
-import "./chunk-XS2ZMBOG.js";
+} from "./chunk-VYDFQS24.js";
+import "./chunk-XIAP7CEH.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";

package/dist/{tool-execution-helpers-GEQBGCKR.js → tool-execution-helpers-J4XLCZBU.js}

@@ -7,10 +7,10 @@ import {
   findSessionContext,
   isValidLogLevel,
   supportsApps
-} from "./chunk-EIYWOJYK.js";
+} from "./chunk-NXLY2JS7.js";
 import "./chunk-G7JEMXJW.js";
 import "./chunk-KUEVOU4M.js";
-import "./chunk-WEMFZYUR.js";
+import "./chunk-PSOT2YDT.js";
 import "./chunk-BXZHMYMM.js";
 import "./chunk-MTHLLDCX.js";
 import "./chunk-QWQYAQCK.js";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mcp-use",
   "type": "module",
-  "version": "1.34.0",
+  "version": "1.34.1",
   "description": "Opinionated MCP Framework for TypeScript (@modelcontextprotocol/sdk compatible) - Build MCP Agents, Clients and Servers with support for ChatGPT Apps, Code Mode, OAuth, Notifications, Sampling, Observability and more.",
   "author": "mcp-use, Inc.",
   "license": "MIT",
@@ -158,8 +158,8 @@
     "node-mocks-http": "1.17.2",
     "posthog-js": "1.351.3",
     "posthog-node": "5.24.17",
-    "@mcp-use/cli": "3.6.1",
-    "@mcp-use/inspector": "12.0.0"
+    "@mcp-use/cli": "3.6.2",
+    "@mcp-use/inspector": "12.0.1"
   },
   "optionalDependencies": {
     "cli-highlight": "2.1.11",