The official Python SDK for Model Context Protocol servers and clients
COMMITS
/ tests/client/test_auth.py February 9, 2026
F
fix: pass conformance auth scenarios, add RFC 8707 resource validation (#2010)
Felix Weinberger committed
January 23, 2026
M
ci: add strict-no-cover to detect unnecessary coverage pragmas (#1897)
Max Isbey committed
January 16, 2026
F
chore: add D212 lint rule to enforce Google-style docstrings (#1892)
Felix Weinberger committed
M
refactor: move inline imports to module level (#1893)
Max Isbey committed
December 19, 2025
J
fix: accept HTTP 201 status code in token exchange (#1503)
jnjpng committed
December 8, 2025
M
refactor(auth): remove unused _register_client method (#1748)
Max Isbey committed
November 24, 2025
P
feat: implement SEP-991 URL-based client ID (CIMD) support (#1652)
Paul Carleton committed
November 20, 2025
J
Add client_secret_basic authentication support (#1334)
Jon Shea committed
November 13, 2025
M
Fix OAuth discovery fallback and URL ordering (#1624)
Max Isbey committed
M
refactor: extract OAuth helper functions and simplify provider state (#1586)
Max Isbey committed
November 11, 2025
M
Get baseline 100% clean coverage (#1553)
Max Isbey committed
November 5, 2025
C
Implement SEP-985: OAuth Protected Resource Metadata discovery fallback (#1548)
Chris Coutinho committed
October 29, 2025
L
Implement RFC 7523 JWT flows (#1247)
Luca Chang committed
October 13, 2025
D
[client] Implement MCP OAuth scope selection and step-up authorization (#1324)
Dogacan Colak committed
August 22, 2025
K
fix: avoid uncessary retries in OAuth authenticated requests (#1206)
keurcien committed
August 11, 2025
M
Add pyright strict mode on the whole project (#1254)
Marcelo Trylesinski committed
July 24, 2025
L
fix: perform auth server metadata discovery fallbacks on any 4xx (#1193)
Luca Chang committed
July 21, 2025
C
fix: fix OAuth flow request object handling (#1174)
Clare Liguori committed
July 17, 2025
L
Support falling back to OIDC metadata for auth (#1061)
Luca Chang committed
July 15, 2025
Y
Implement RFC9728 - Support WWW-Authenticate header by MCP client (#1071)
yurikunash committed
July 14, 2025
M
tests: use `inline_snapshot.Is` on parametrized test (#945)
Marcelo Trylesinski committed
July 10, 2025
J
Ensure failed oauth registration response is read before accessing response.text (#1118)
Jeremiah Lowin committed
June 25, 2025
D
Make "resource" optional on earlier protocols (#1017)
dr3s committed
June 24, 2025
I
Fix `/.well-known/oauth-authorization-server` dropping path (#1014)
Inna Harper committed
June 23, 2025
June 11, 2025
M
Use 120 characters instead of 88 (#856)
Marcelo Trylesinski committed
June 9, 2025
D
relax validation (#879)
dr3s committed
June 7, 2025
S
Support Cursor OAuth client registration (#895)
Sam Tombury committed
May 27, 2025
I
Fix auth tests and ruff format (#818)
ihrpr committed
May 26, 2025
P
Fix building auth metadata paths (#779)
Pedro Rodrigues committed
May 19, 2025
I
Add OAuth authentication client for HTTPX (#751)
ihrpr committed