All pull requests

Pull requests

• fix(pdf-server): keep CLI-arg directories across client roots refreshes

  #805·cpruijsen opened Oct 12, 2026·

  ·
  1

• Fix listener snapshots before singular event handlers

  #804·er-s-an opened Oct 11, 2026·

  ·

• fix(transport): make debug logging opt-in for message privacy

  #803·gabrieledellamalva opened Oct 9, 2026·

  ·
  1

• docs(csp-cors): document CORS headers for the MCP endpoint in browser-based hosts

  #801·sja-thedude opened Oct 9, 2026·

  ·

• docs(csp-cors): add a pre-publish checklist for the declared CSP

  #800·shteynu opened Oct 8, 2026·

  ·
  1

• Extend UI resource permissions

  #799·jmsn opened Oct 6, 2026·7 of 9 tasks·

  ·

• Prototype WebMCP for View-exposed tools, to illustrate #797

  #798·ochafik opened Sep 30, 2026Contributor·

  ·
  2

• fix(map-server): patch Cesium for sandboxed iframes and handle undefined coordinates

  #795·pjm4 opened Sep 28, 2026·3 tasks done·

  ·

• fix: let version managers take precedence over system Node in pre-commit hook

  #791·DLeibner opened Sep 25, 2026·6 of 9 tasks·

  ·

• Create generator-generic-ossf-slsa3-publish.yml

  #785·zskbot opened Sep 23, 2026·9 tasks done·

  ·

• docs: clarify host handling of tool error results

  #784·minwookshin opened Sep 22, 2026·

  ·

• fix(pdf-server): return read_pdf_bytes payload as JSON text content

  #782·DLeibner opened Sep 22, 2026·6 of 9 tasks·

  ·
  1

• docs: clarify PostMessageTransport target origin

  #777·flowtrader2016 opened Sep 17, 2026·5 of 9 tasks·

  ·

• fix(server): don't crash registerAppTool when config._meta is omitted

  #775·er-s-an opened Sep 10, 2026·

  ·

• feat: add UI preload and result-driven close controls

  #751·sunnymitramsft opened Aug 21, 2026·

  ·
  1

• fix: prefer tool title in app view chrome

  #749·Chipagosfinest opened Aug 17, 2026·

  ·
  1

• feat: add app homepage resource metadata

  #748·Chipagosfinest opened Aug 17, 2026·

  ·
  1

• spec(draft): add split display mode

  #739·caseprince opened Aug 4, 2026·

  ·
  4

• docs: add contextual launch pattern

  #736·Chipagosfinest opened Jul 31, 2026·

  ·
  6

• docs(csp-cors): note that a rejected ui.domain stops the app rendering

  #735·Booyaka101 opened Jul 31, 2026·

  ·

• Support MCP Apps-rendered Elicitations

  #733·krubenok opened Jul 29, 2026·

  ·
  9

• Add conformance-server + importable conformance runner (addresses #674)

  #726·qchuchu opened Jul 23, 2026Contributor·

  ·

• feat: MCP App validator (library + CLI) — reference implementation for #673

  #722·RyanAlberts opened Jul 21, 2026·

  ·

• Move basic-host and infra, to single sandboxed iframe architecture

  #718·domfarolino opened Jul 17, 2026Contributor·6 of 9 tasks·

  ·
  1

• Relax double sandboxed iframe architecture requirements

  #717·domfarolino opened Jul 16, 2026Contributor·5 of 9 tasks·

  ·
  2

  10