github TypeScript analyzed b654261

modelcontextprotocol/typescript-sdk

github

The official TypeScript SDK for Model Context Protocol servers and clients

maintainer: modelcontextprotocol
licence: NOASSERTION
first seen: 2026-08-04
last seen: 2026-09-15
releases · 30d: 0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 2 tools

transport stdio · streamable-http · http · sse counts 2 tools · 0 res · 0 prompts permission surface via code analysis

tools

calculate-bmi
fetch-data

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit b654261 · analyzer v33 · 23h ago

skills & prompt files 3

agent-rules modelcontextprotocol-typescript-sdk-b654261/CLAUDE.md
prompt-file modelcontextprotocol-typescript-sdk-b654261/examples/prompts/README.md
agent-rules modelcontextprotocol-typescript-sdk-b654261/test/e2e/CLAUDE.md

danger signals1

credential in logs credential in log modelcontextprotocol-typescript-sdk-b654261/examples/shared/src/auth.ts :158 console.log(`[Auth] Password: ${DEMO_USER_CREDENTIALS.password}`);

code evidence v@modelcontextprotocol/fastify@2.0.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 693

filesystem 54

fs (weak) modelcontextprotocol-typescript-sdk-b654261/docs/.vitepress/config.mts :1 import { existsSync, readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/docs/.vitepress/llms.ts :1 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/docs/v1/.vitepress/config.mts :1 import { existsSync, readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/examples/cli-client/cli.ts :11 import { existsSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/examples/cli-client/host/config.ts :1 import { readFile } from 'node:fs/promises';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/servers/resources.examples.ts :92 import { readFile, realpath } from 'node:fs/promises';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/client/test/client/barrelClean.test.ts :1 import { readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/client/test/client/coreBoundary.test.ts :20 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/client/test/client/stdio.test.ts :1 import { existsSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/client/test/client/workerdSchemaPreload.test.ts :24 import { readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/client/test/helpers/ensureBuilt.ts :2 import { existsSync, mkdirSync, renameSync, rmSync, statSync } from 'node:fs';
fs modelcontextprotocol-typescript-sdk-b654261/packages/codemod/src/bin/batchTest.ts :4 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';

show 28 more

fs modelcontextprotocol-typescript-sdk-b654261/packages/codemod/src/cli.ts :3 import { existsSync, statSync } from 'node:fs';
fs modelcontextprotocol-typescript-sdk-b654261/packages/codemod/src/runner.ts :1 import { statSync } from 'node:fs';
fs modelcontextprotocol-typescript-sdk-b654261/packages/codemod/src/utils/detectFormatter.ts :1 import { existsSync, readFileSync } from 'node:fs';
fs modelcontextprotocol-typescript-sdk-b654261/packages/codemod/src/utils/packageJsonUpdater.ts :1 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
fs modelcontextprotocol-typescript-sdk-b654261/packages/codemod/src/utils/projectAnalyzer.ts :1 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/batchTest.test.ts :1 import { mkdtempSync, writeFileSync, readFileSync, rmSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/cli.test.ts :1 import { mkdtempSync, writeFileSync, readFileSync, rmSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/commentInsertion.test.ts :1 import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/detectFormatter.test.ts :1 import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/integration.test.ts :1 import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, rmSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/packageJsonUpdater.test.ts :1 import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/projectAnalyzer.test.ts :1 import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/v1-to-v2/authSchemaNames.test.ts :1 import { readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/v1-to-v2/packageJsonUpdater.test.ts :1 import { mkdirSync, mkdtempSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/codemod/test/v1-to-v2/specSchemaNames.test.ts :1 import { readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/corpus/specCorpus.test.ts :28 import { readdirSync, readFileSync, statSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/corpus/specCorpusDispatch.test.ts :21 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/packageTopologyPins.test.ts :14 import { existsSync, readdirSync, readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/schemaShims.test.ts :12 import { readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/spec.types.2025-11-25.test.ts :15 import fs from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/spec.types.2026-07-28.test.ts :19 import fs from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/types/wireOnlyHiding.test.ts :19 import { readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/validators/validators.test.ts :7 import { readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/wire/layeringInvariants.test.ts :15 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/wire/registryDiffOracle.test.ts :18 import fs from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core-internal/test/wire/schemaTwinConformance.test.ts :24 import { readdirSync, readFileSync, statSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/core/test/coreSchemas.test.ts :1 import { readFileSync } from 'node:fs';
fs (weak) modelcontextprotocol-typescript-sdk-b654261/packages/server/test/helpers/ensureBuilt.ts :6 import { existsSync, mkdirSync, rmSync, statSync } from 'node:fs';

14 more not shown — this panel samples each group; the count above is the real total.

shell / exec 15

shell (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/stdio.examples.ts :58 const { spawn } = await import('node:child_process');
shell modelcontextprotocol-typescript-sdk-b654261/packages/client/src/client/stdio.ts :1 import type { ChildProcess, IOType } from 'node:child_process';
shell (weak) modelcontextprotocol-typescript-sdk-b654261/packages/client/test/client/crossSpawn.test.ts :1 import type { ChildProcess } from 'node:child_process';
shell (weak) modelcontextprotocol-typescript-sdk-b654261/packages/client/test/client/stdio.test.ts :133 const { spawn } = require('child_process');
shell (weak) modelcontextprotocol-typescript-sdk-b654261/packages/client/test/helpers/ensureBuilt.ts :1 import { execFile } from 'node:child_process';
shell modelcontextprotocol-typescript-sdk-b654261/packages/codemod/src/bin/batchTest.ts :3 import { execSync } from 'node:child_process';
shell (weak) modelcontextprotocol-typescript-sdk-b654261/packages/server/test/helpers/ensureBuilt.ts :5 import { execFile } from 'node:child_process';
shell (weak) modelcontextprotocol-typescript-sdk-b654261/scripts/examples/run-examples.ts :24 import { spawn, type ChildProcess } from 'node:child_process';
shell (weak) modelcontextprotocol-typescript-sdk-b654261/scripts/fetch-spec-examples.ts :24 import { execFileSync } from 'node:child_process';
shell (weak) modelcontextprotocol-typescript-sdk-b654261/scripts/run-guide-examples.ts :25 import { spawn } from 'node:child_process';
shell (weak) modelcontextprotocol-typescript-sdk-b654261/scripts/smoke-dist-types.mjs :5 import { execFileSync } from 'node:child_process';
shell (weak) modelcontextprotocol-typescript-sdk-b654261/test/e2e/scenarios/stdio.test.ts :56 // Direct spawn (not npx) so transport.pid IS the server, with a thin wrapper

show 3 more

shell (weak) modelcontextprotocol-typescript-sdk-b654261/test/e2e/scenarios/transport-raw.test.ts :150 // Direct spawn (node --import tsx) so the spawned process IS the fixture server, as in the other stdio scenarios.
shell (weak) modelcontextprotocol-typescript-sdk-b654261/test/integration/test/client/versionNegotiation.test.ts :440 require('child_process').spawn(process.execPath, ['-e', 'setTimeout(() => {}, 2500)'], { stdio: 'inherit' });
shell (weak) modelcontextprotocol-typescript-sdk-b654261/test/integration/test/server/cloudflareWorkers.test.ts :8 import type { ChildProcess } from 'node:child_process';

network 114

net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/bearer-auth-web/client.ts :13 const unauth = await fetch(url, {
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/bearer-auth-web/server.ts :6 * composed as one `fetch(request)` handler.
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/bearer-auth/client.ts :12 const unauth = await fetch(url, {
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/caching/server.ts :101 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/cli-client/host/auth.ts :1 import { createServer } from 'node:http';
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/cli-client/test/auth.test.ts :17 await fetch(`http://127.0.0.1:${port}/callback?${query}`);
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/custom-methods/server.ts :40 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/custom-version/server.ts :38 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/dual-era/server.ts :54 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/elicitation/server.ts :22 import type { IncomingMessage, ServerResponse } from 'node:http';
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/extension-capabilities/server.ts :36 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/gateway/server.ts :9 import { createServer } from 'node:http';

show 28 more

net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/advanced/custom-transports.examples.ts :75 import type { Socket } from 'node:net';
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/advanced/gateway.examples.ts :58 if (new URL(request.url).host === 'localhost:3000') return handler.fetch(request);
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/clients/caching.examples.ts :70 return handler.fetch(new Request(url, init));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/clients/connect.examples.ts :47 if (new URL(request.url).host === 'localhost:3000') return handler.fetch(request);
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/clients/middleware.examples.ts :114 const serverFetch: AnyFetch = (url, init) => handler.fetch(new Request(url, init));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/clients/subscriptions.examples.ts :63 fetch: (url, init) => target.fetch(new Request(url, init))
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/get-started/firstServer.examples.ts :40 const res = await fetch(url, { headers: { 'User-Agent': 'mcp-weather-tutorial/1.0' } });
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/get-started/realHost.examples.ts :46 const res = await fetch(url, { headers: { 'User-Agent': 'mcp-weather-tutorial/1.0' } });
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/get-started/src/index.ts :40 const res = await fetch(url, { headers: { 'User-Agent': 'mcp-weather-tutorial/1.0' } });
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/protocolVersions.examples.ts :54 if (host === 'localhost:3000') return handler.fetch(request);
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/servers/logging-progress-cancellation.examples.ts :107 const response = await fetch(SOURCE_URLS[source], { signal: ctx.mcpReq.signal });
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/authorization.web.examples.ts :38 async fetch(request: Request): Promise<Response> {
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/express.examples.ts :70 // and `toNodeHandler` copies `handler.fetch(request)`'s status, headers, and
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/hono.examples.ts :33 app.all('/mcp', (c: Context) => handler.fetch(c.req.raw, { parsedBody: c.get('parsedBody') }));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/http.examples.ts :15 import { createServer } from 'node:http';
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/legacy-clients.examples.ts :55 return strict.fetch(request);
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/webStandard.examples.ts :38 async fetch(request: Request): Promise<Response> {
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/guides/testing.examples.ts :49 fetch: (url, init) => handler.fetch(new Request(url, init))
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/hono/server.ts :34 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/json-response/client.ts :21 const probe = await fetch(url, {
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/json-response/server.ts :34 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/mrtr/server.ts :119 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/oauth-client-credentials/client.ts :21 const unauth = await fetch(url, {
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/oauth/client.ts :20 * 2. Follow that URL with `fetch(..., { redirect: 'manual' })`, forwarding
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/oauth/simpleOAuthClient.ts :3 import { createServer } from 'node:http';
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/parallel-calls/server.ts :47 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/prompts/server.ts :52 app.all('/mcp', c => handler.fetch(c.req.raw));
net (weak) modelcontextprotocol-typescript-sdk-b654261/examples/resources/server.ts :96 app.all('/mcp', c => handler.fetch(c.req.raw));

74 more not shown — this panel samples each group; the count above is the real total.

secrets 9

secrets (weak) modelcontextprotocol-typescript-sdk-b654261/examples/cli-client/cli.ts :40 (process.env.ANTHROPIC_API_KEY || process.env.ANTHROPIC_AUTH_TOKEN
secrets (weak) modelcontextprotocol-typescript-sdk-b654261/examples/cli-client/providers/anthropic.ts :111 if (!process.env.ANTHROPIC_API_KEY && !process.env.ANTHROPIC_AUTH_TOKEN) {
secrets (weak) modelcontextprotocol-typescript-sdk-b654261/examples/cli-client/providers/gemini.ts :90 if (!process.env.GEMINI_API_KEY) {
secrets (weak) modelcontextprotocol-typescript-sdk-b654261/examples/cli-client/providers/openai.ts :106 if (!process.env.OPENAI_API_KEY) {
secrets (weak) modelcontextprotocol-typescript-sdk-b654261/examples/client-quickstart/src/index.ts :21 return this._anthropic ??= new Anthropic({ apiKey: process.env.ANTHROPIC_API_KEY });
secrets (weak) modelcontextprotocol-typescript-sdk-b654261/examples/oauth/dualModeAuth.ts :89 const session: HostSessionStore = { getMcpToken: () => process.env.MCP_TOKEN };
secrets (weak) modelcontextprotocol-typescript-sdk-b654261/examples/oauth/simpleTokenProvider.ts :24 const token = process.env.MCP_TOKEN;
secrets (weak) modelcontextprotocol-typescript-sdk-b654261/examples/todos-server/todos.ts :47 key: process.env.REQUEST_STATE_SECRET ?? crypto.getRandomValues(new Uint8Array(32))
secrets modelcontextprotocol-typescript-sdk-b654261/packages/client/src/client/auth.ts :73 * const authProvider: AuthProvider = { token: async () => process.env.API_KEY };

database 1

db (weak) modelcontextprotocol-typescript-sdk-b654261/examples/shared/src/auth.ts :15 import Database from 'better-sqlite3';

tool registrations 2

calculate-bmi modelcontextprotocol-typescript-sdk-b654261/packages/server/src/server/mcp.examples.ts :34
fetch-data modelcontextprotocol-typescript-sdk-b654261/packages/server/src/server/mcp.examples.ts :130

install hooks 10

prepare modelcontextprotocol-typescript-sdk-b654261/package.json :44 npx --no-install lefthook install
prepack modelcontextprotocol-typescript-sdk-b654261/packages/client/package.json :128 pnpm run build
prepack modelcontextprotocol-typescript-sdk-b654261/packages/codemod/package.json :46 pnpm run build
prepack modelcontextprotocol-typescript-sdk-b654261/packages/core/package.json :61 pnpm run build
prepack modelcontextprotocol-typescript-sdk-b654261/packages/middleware/express/package.json :45 npm run build
prepack modelcontextprotocol-typescript-sdk-b654261/packages/middleware/fastify/package.json :45 npm run build
prepack modelcontextprotocol-typescript-sdk-b654261/packages/middleware/hono/package.json :45 pnpm run build
prepack modelcontextprotocol-typescript-sdk-b654261/packages/middleware/node/package.json :44 pnpm run build
prepack modelcontextprotocol-typescript-sdk-b654261/packages/server-legacy/package.json :78 pnpm run build
prepack modelcontextprotocol-typescript-sdk-b654261/packages/server/package.json :128 pnpm run build

declared dependencies 34

@modelcontextprotocol/client@workspace:^
@modelcontextprotocol/node@workspace:^
@modelcontextprotocol/server@workspace:^
@cfworker/json-schema@catalog:runtimeShared
@changesets/changelog-github@^0.5.2
@changesets/cli@^2.29.8
@eslint/js@catalog:devTools
@types/content-type@catalog:devTools
@types/cors@catalog:devTools
@types/cross-spawn@catalog:devTools
@types/eventsource@catalog:devTools
@types/express@catalog:devTools

show 22 more

@types/express-serve-static-core@catalog:devTools
@types/node@^24.10.1
@types/supertest@catalog:devTools
@typescript/native-preview@catalog:devTools
eslint@catalog:devTools
eslint-config-prettier@catalog:devTools
eslint-plugin-n@catalog:devTools
fast-glob@^3.3.3
lefthook@^2.0.16
prettier@catalog:devTools
supertest@catalog:devTools
tsdown@catalog:devTools
tslib@^2.8.1
tsx@catalog:devTools
typedoc@catalog:devTools
typedoc-plugin-markdown@^4.12.0
typedoc-vitepress-theme@^1.1.3
typescript@catalog:devTools
typescript-eslint@catalog:devTools
vitepress@^1.6.4
vitest@catalog:devTools
zod@catalog:runtimeShared

transport_posture 14

network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/authorization.examples.ts :36 const app = createMcpExpressApp({ host: '0.0.0.0', allowedHosts: ['api.example.com'] });
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/express.examples.ts :39 const publicApp = createMcpExpressApp({ host: '0.0.0.0', allowedHosts: ['api.example.com'] });
binds all interfaces (0.0.0.0) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/fastify.examples.ts :40 const publicApp = createMcpFastifyApp({ host: '0.0.0.0', allowedHosts: ['api.example.com'] });
binds all interfaces (0.0.0.0) modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/hono.examples.ts :39 const publicApp = createMcpHonoApp({ host: '0.0.0.0', allowedHosts: ['api.example.com'] });
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/examples/guides/serving/legacy-clients.examples.ts :69 const sseApp = createMcpExpressApp({ host: '0.0.0.0', allowedHosts: ['sse.example.com'], jsonLimit: '4mb' });
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/packages/middleware/express/src/express.examples.ts :27 const appOpen = createMcpExpressApp({ host: '0.0.0.0' }); // No automatic DNS rebinding protection
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/packages/middleware/express/test/express.test.ts :170 const app = createMcpExpressApp({ host: '0.0.0.0', allowedHosts: ['myapp.local'] });
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/packages/middleware/express/test/originValidation.test.ts :123 host: '0.0.0.0',
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/packages/middleware/fastify/src/fastify.examples.ts :27 const appOpen = createMcpFastifyApp({ host: '0.0.0.0' }); // No automatic DNS rebinding protection
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/packages/middleware/fastify/test/fastify.test.ts :155 const app = createMcpFastifyApp({ host: '0.0.0.0', allowedHosts: ['myapp.local'] });
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/packages/middleware/fastify/test/originValidation.test.ts :86 const app = createMcpFastifyApp({ host: '0.0.0.0', allowedHosts: ['myapp.local'], allowedOrigins: ['myapp.local'] });
network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/packages/middleware/hono/test/hono.test.ts :44 const app = createMcpHonoApp({ host: '0.0.0.0', allowedHosts: ['myapp.local'] });

show 2 more

network-listening, binds all interfaces, no auth detected modelcontextprotocol-typescript-sdk-b654261/packages/middleware/hono/test/originValidation.test.ts :64 const app = createMcpHonoApp({ host: '0.0.0.0', allowedHosts: ['myapp.local'], allowedOrigins: ['myapp.local'] });
binds all interfaces (0.0.0.0) modelcontextprotocol-typescript-sdk-b654261/test/integration/test/server.test.ts :1966 const app = createMcpExpressApp({ host: '0.0.0.0' }); // Disable host validation for this test