MCP Python SDK 发布: v1.30.0

来源摘要

Maintenance release of the 1.x line. 2.x is the current line; 1.x docs are at https://py.sdk.modelcontextprotocol.io/v1/. A few defaults changed in this release. If you run a server or client on 1.x, skim these first: ## Behaviour changes **HTTP client redirects are only followed within the endpoint's origin** (#3448) - `streamable_http_client` and `sse_client` follow a redirect only if it stays on the same scheme, host and port (or upgrades `http` to `https` on the same host). - A redirect anywhere else now fails the request with `httpx.HTTPStatusError`. If that other URL is the server you meant, use it as the endpoint URL. - The `follow_redirects` setting on an `httpx.AsyncClient` you pass in is no longer used for MCP requests, so you don't need it for the trailing-slash redirect any more. - `OAuthClientProvider` applies the same rule to its own requests. **Idle Streamable HTTP sessions now expire** (#3426) - A stateful session with nothing in flight for 30 minutes is closed. The client's next request gets a 404 and it has to initialize again. - Clients that keep the GET stream open (the SDK's client does) are not affected. - A server also holds at most 10 000 sessions at once; beyond that, new sessions get a 503. - To turn either off: `FastMCP(..., session_idle_timeout=None, max_sessions=None)`. **The OAuth client checks the authorization server's `issuer`** (#3431) - Authorization server metadata whose `issuer` doesn't match the server it was fetched for is now rejected with `OAuthFlowError: Authorization server metadata issuer mismatch`. - Client registrations are now remembered per issuer; if the server later points at a different authorization server, the client registers again. - If protected resource metadata can't be fetched because of a 5xx/429, the flow now