Skip to content

Releases: studiomeyer-io/mcp-protocol-conformance

v0.1.1 — MCP Registry claim

27 Apr 22:04
@madetocreate madetocreate
v0.1.1
13d5e51

Choose a tag to compare

View all tags
v0.1.1 — MCP Registry claim Latest
Latest

Patch release. No code changes — same dist, same tests, same surface as v0.1.0.

Changes

  • Added mcpName: io.studiomeyer/protocol-conformance to package.json — required by the official MCP Registry to claim the npm package as the source of truth for the Registry server-name.

MCP Registry

io.studiomeyer/protocol-conformance@0.1.1 — LIVE since 2026-04-28.

mcp-protocol-conformance@0.1.1 — npm.

Assets 2
Loading

v0.1.0 — Initial release

27 Apr 21:51
@madetocreate madetocreate
v0.1.0
cccb357

Choose a tag to compare

View all tags
v0.1.0 — Initial release

First public release of mcp-protocol-conformance.

What this is

Conformance test harness for Model Context Protocol servers. Validates JSON-RPC 2.0 wire compliance, spec-version handshake, transport behaviour, OAuth 2.1 PKCE, tool schemas, capability advertisement, smoke roundtrip, and annotation hygiene against MCP spec 2024-11-05, 2025-03-26, and 2025-06-18.

Highlights

  • 12 read-only MCP tools + 8 test suites (jsonrpc, version, transport, oauth, schema, capability, smoke, annotations).
  • CLI binary mcp-conformance with run, compare, assert-no-breaking subcommands. Output formats: terminal, JSON, JUnit, SARIF.
  • Library entry: import { runSuites } from "mcp-protocol-conformance".
  • stdio + Streamable HTTP transports.
  • OAuth 2.1 PKCE flow validation against an in-process mock authorization server.
  • Annotation hygiene check with destructive-hint heuristic (regex /(delete|remove|drop|reset|clear|destroy|purge)/i triggers destructiveHint=true).

Install

```bash
npm install --save-dev mcp-protocol-conformance

or

npx -y mcp-protocol-conformance --version
```

Security

  • SSRF guard on HTTP target URLs (loopback, RFC1918, link-local, IPv6 ULA, IPv6-mapped-IPv4, multicast). Opt-out via `MCP_CONFORMANCE_ALLOW_PRIVATE_TARGETS=1`.
  • Mock-AS body-size cap (4 KB).
  • Mock-AS RFC 6749 §4.1.3 redirect-uri match check.
  • Suite selector validated against allowlist.

See CHANGELOG.md and SECURITY.md.

npm

`mcp-protocol-conformance@0.1.0`

Loading