Issues

• Server logs full JSON-RPC payloads, tool arguments included, at info level

  modelcontextprotocol/php-sdk#524 · Filter by author mglaman opened on Oct 1, 2026

• Let a framework integration opt out of the HTTP edge middleware without a warning

  modelcontextprotocol/php-sdk#523 · Filter by author mglaman opened on Oct 1, 2026
  2

• Validate Host and Origin independently in DnsRebindingProtectionMiddleware

  bug
  modelcontextprotocol/php-sdk#522 · Filter by author ausi opened on Sep 30, 2026

• [Server] Allow tools to return structured content without text content

  enhancement
  modelcontextprotocol/php-sdk#521 · Filter by author andreybolonin opened on Sep 30, 2026

• [Client] Support cancellation and per-call deadlines in Client::callTool()

  enhancement
  modelcontextprotocol/php-sdk#517 · Filter by author ineersa opened on Sep 28, 2026

• [Server] Connections to Github Copilot CLI time out on subscriptions/listen

  bug
  modelcontextprotocol/php-sdk#516 · Filter by author willsprodpad opened on Sep 28, 2026

• Allow a RequestEvent listener to reject a request with a JSON-RPC error

  modelcontextprotocol/php-sdk#513 · Filter by author mglaman opened on Sep 23, 2026

• [Server] Decode JSON-RPC objects as stdClass, not associative arrays

  enhancement
  modelcontextprotocol/php-sdk#510 · Filter by author steffans opened on Sep 14, 2026
  1

• [Client] HttpTransport resumes an Amp-suspended Fiber with a JSON-RPC error

  bug
  modelcontextprotocol/php-sdk#504 · Filter by author ineersa opened on Sep 9, 2026

• [Server] Concurrent requests corrupt the session file in FileSessionStore, crashing Session::readData() with JsonException

  bugP2Server
  modelcontextprotocol/php-sdk#498 · Filter by author Inso2008 opened on Sep 4, 2026
  2

• [Server][Capability] Element sources should return values, and RegistryInterface should be sliced by role

  ADRbreaking changeneeds designServer
  modelcontextprotocol/php-sdk#495 · Filter by author chr-hertel opened on Sep 3, 2026

• Slicing the SDK into Multiple Packages

  needs confirmationneeds maintainer action
  modelcontextprotocol/php-sdk#489 · Filter by author chr-hertel opened on Aug 29, 2026 · 1.0
  3

  

• One placeholder-less resource template makes the whole server unserviceable

  Server
  modelcontextprotocol/php-sdk#476 · Filter by author wachterjohannes opened on Aug 23, 2026
  3

• [Server] McpResourceTemplate throws 500 error when uriTemplate variable is undefined

  bugP2Server
  modelcontextprotocol/php-sdk#469 · Filter by author ferromariano opened on Aug 21, 2026
  2

• [Server] Handler type uses bare Closure, hard to decorate RegistryInterface under strict PHPStan

  Server
  modelcontextprotocol/php-sdk#468 · Filter by author shahinataei-ts opened on Aug 20, 2026
  2

• StreamableHttpTransport returns a JSON array in the response body when parallel POST requests arrive concurrently (PHP-FPM)

  bugP1Server
  modelcontextprotocol/php-sdk#467 · Filter by author gregordhimahi opened on Aug 20, 2026
  1

• Builder::build() silently skips configured file-based discovery when symfony/finder is missing — should fail loudly

  needs confirmationneeds maintainer actionServer
  modelcontextprotocol/php-sdk#398 · Filter by author laticrete-pimcore opened on Jul 17, 2026

• [Client][Auth] SEP-2351: Use RFC 8414 well-known URI suffix for AS metadata discovery

  2026-07-28authClientenhancementimproves spec compliance
  modelcontextprotocol/php-sdk#377 · Filter by author localden opened on Jun 6, 2026

• [Client][Auth] SEP-837: Specify OIDC application_type during Dynamic Client Registration

  2026-07-28authClientenhancementimproves spec compliance
  modelcontextprotocol/php-sdk#376 · Filter by author localden opened on Jun 6, 2026

• [Schema] No support for additonalProperties in tool input schema

  enhancement
  modelcontextprotocol/php-sdk#370 · Filter by author harker777 opened on May 31, 2026

• [Conformance] SEP-2484: Wire SEP traceability files into conformance test runner; surface per-SEP pass rates

  2026-07-28conformance-weeklyenhancementimproves spec compliance
  modelcontextprotocol/php-sdk#367 · Filter by author chr-hertel opened on May 26, 2026
  1

• [Client][Auth] SEP-2207: Request offline_access scope against OIDC-flavored AS for refresh tokens

  2026-07-28authClientenhancementimproves spec compliance
  modelcontextprotocol/php-sdk#363 · Filter by author chr-hertel opened on May 26, 2026

• [Client][Auth] SEP-2352: Key DCR registrations and tokens by AS issuer; reject cross-AS credential reuse

  2026-07-28authClientenhancementimproves spec compliance
  modelcontextprotocol/php-sdk#361 · Filter by author chr-hertel opened on May 26, 2026

• [Client][Auth] SEP-2468: Validate iss parameter in authorization response (RFC 9207)

  2026-07-28authClientenhancementimproves spec compliance
  modelcontextprotocol/php-sdk#360 · Filter by author chr-hertel opened on May 26, 2026

• [Schema] SEP-2106: Harden SchemaValidator against external $ref SSRF and composition DoS

  2026-07-28enhancementimproves spec complianceSchema
  modelcontextprotocol/php-sdk#358 · Filter by author chr-hertel opened on May 26, 2026