@modelcontextprotocol/express

2.0.0-alpha.3

#1907 7cccc2a Thanks @felixweinberger! - Add OAuth Resource-Server glue to the Express adapter: requireBearerAuth middleware (token verification + RFC 6750 WWW-Authenticate challenges), mcpAuthMetadataRouter (serves RFC 9728 Protected Resource Metadata and mirrors RFC 8414 AS metadata at the resource origin), the getOAuthProtectedResourceMetadataUrl helper, and the OAuthTokenVerifier interface. These restore the v1 src/server/auth Resource-Server pieces as first-class v2 API so MCP servers can plug into an external Authorization Server with a few lines of Express wiring.

#1898 2a7611d Thanks @felixweinberger! - Add top-level types field (and typesVersions on client/server for their subpath exports) so consumers on legacy moduleResolution: "node" can resolve type declarations. The exports map remains the source of truth for nodenext/bundler resolution. The typesVersions map includes entries for subpaths added by sibling PRs in this series (zod-schemas, stdio); those entries are no-ops until the corresponding dist/*.d.mts files exist.
Updated dependencies [434b2f1, db83829, 42cb6b2, df4b6cc, 2a7611d, e15a8ef, 9fc9070, 55b1f06, b256546]:
- @modelcontextprotocol/server@2.0.0-alpha.3

#1534 69a0626 Thanks @josefaidt! - remove npm references, use pnpm
#1534 69a0626 Thanks @josefaidt! - clean up package manager usage, all pnpm
#1625 1fe9eda Thanks @rameshreddy-adutla! - Add jsonLimit option to createMcpExpressApp
Updated dependencies [e86b183, 0a75810, 3466a9e, fcde488, 462c3fc, 01954e6, 78bae74, 689148d, f1ade75, 108f2f3, dcf708d, f66a55b, 69a0626, 69a0626, dcf708d, 0784be1, 71ae3ac]:
- @modelcontextprotocol/server@2.0.0-alpha.1