Overview · modelcontextprotocol/python-sdk · GitHub Skip to content Navigation Menu Sign in Appearance settings * Platform * AI CODE CREATION * GitHub Copilot Write better code with AI * GitHub Copilot app Direct agents from issue to merge * MCP Registry Integrate external tools * DEVELOPER WORKFLOWS * Actions Automate any workflow * Codespaces Instant dev environments * Issues Plan and track work * Code Review Manage code changes * Code Quality Enforce quality at merge * APPLICATION SECURITY * GitHub Advanced Security Find and fix vulnerabilities * Code security Secure your code as you build * Secret protection Stop leaks before they start * EXPLORE * Why GitHub * Documentation * Blog * Changelog * Marketplace View all features * Solutions * BY COMPANY SIZE * Enterprises * Small and medium teams * Startups * Nonprofits * BY USE CASE * App Modernization * DevSecOps * DevOps * CI/CD * View all use cases * BY INDUSTRY * Healthcare * Financial services * Manufacturing * Government * View all industries View all solutions * Resources * EXPLORE BY TOPIC * AI * Software Development * DevOps * Security * View all topics * EXPLORE BY TYPE * Customer stories * Events & webinars * Ebooks & reports * Business insights * GitHub Skills * SUPPORT & SERVICES * Documentation * Customer support * Community forum * Trust center * Partners View all resources * Open Source * COMMUNITY * GitHub Sponsors Fund open source developers * PROGRAMS * Security Lab * Maintainer Community * GitHub Stars * Archive Program * REPOSITORIES * Topics * Trending * Collections * Enterprise * ENTERPRISE SOLUTIONS * Enterprise platform AI-powered developer platform * AVAILABLE ADD-ONS * GitHub Advanced Security Enterprise-grade security features * Copilot for Business Enterprise-grade AI features * Premium Support Enterprise-grade 24/7 support * Pricing Search / Sign in Sign up Appearance settings You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert Uh oh! There was an error while loading. Please reload this page . modelcontextprotocol / python-sdk Public * Notifications You must be signed in to change notification settings * Fork 3.9k * Star 24.3k * Code * Issues 225 * Pull requests 184 * Actions * Projects * Security and quality 6 * Insights Additional navigation options * Code * Issues * Pull requests * Actions * Projects * Security and quality * Insights Security: modelcontextprotocol/python-sdk Security Report a vulnerability SECURITY.md Security Policy Thank you for helping keep the Model Context Protocol and its ecosystem secure. Supported Versions Version Line Support 2.x (newest release) current stable ( main ) bug fixes, security fixes, new features 1.x newest release ( v1.x branch) maintenance critical bug fixes and security fixes older 1.x releases, and all pre-releases unsupported upgrade to the newest 1.x release or to 2.x Only the newest release of a supported line receives fixes, so reproduce against it before reporting. If your project depends on mcp and is not yet ready for 2.x, keep a <2 upper bound on your mcp requirement and follow the migration guide when you migrate. Reporting Security Issues If you discover a security vulnerability in this repository, please report it through the GitHub Security Advisory process for this repository. Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests. What to Include To help us triage and respond quickly, please include: * A description of the vulnerability * Steps to reproduce the issue * The potential impact * Any suggested fixes (optional) * Experimental task handlers allow any client to access and cancel other clients' tasks GHSA-hvrp-rf83-w775 published Jun 5, 2026 by maxisbey High * WebSocket server transport does not support Host/Origin validation GHSA-vj7q-gjh5-988w published Jul 7, 2026 by maxisbey High * HTTP transports serve session requests without verifying the authenticated principal GHSA-jpw9-pfvf-9f58 published Jun 5, 2026 by maxisbey High * DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost GHSA-9h52-p55h-vw2f published Dec 2, 2025 by pcarleton High * MCP SDK FastMCP Server Validation Error Leading to Denial of Service GHSA-3qhf-m339-9g5v published Jul 4, 2025 by jenn-newton High * Unhandled Exception in Streamable HTTP Transport Leading to Denial of Service GHSA-j975-95f5-7wqh published Jul 4, 2025 by jenn-newton High Learn more about advisories related to modelcontextprotocol/python-sdk in the GitHub Advisory Database Footer (c) 2026 GitHub, Inc. Footer navigation * Terms * Privacy * Security * Status * Community * Docs * Contact * Manage cookies * Do not share my personal information You can’t perform that action at this time.