mirror of
https://github.com/mcp-use/mcp-use.git
synced 2026-09-14 18:06:01 +08:00
Pietro Zullo
4973930df0
* chore(python): add DEPENDENCY_POLICY, ROADMAP, and SECURITY for Tier 1 compliance Required by the MCP SDK Tiering System: - DEPENDENCY_POLICY.md: Python version support, MCP SDK update policy, dependency cadence - ROADMAP.md: Q1-Q2 2026 plan with conformance status and upcoming features - SECURITY.md: Vulnerability reporting process and response timelines Ref: https://modelcontextprotocol.io/community/sdk-tiers * chore(python): scope ROADMAP to Python only, use GitHub security advisories - Remove TypeScript items from ROADMAP, focus on Python SDK 2.0 architecture - Remove non-SDK items (caching middleware, uvx template, MCP-UI) - Replace email-based security reporting with GitHub private vulnerability reporting * fix(python): correct CONTRIBUTING.md relative path in ROADMAP * chore(python): remove duplicate SECURITY.md, repo root already has one
2.2 KiB
2.2 KiB
Roadmap — Python SDK
This roadmap outlines planned work for the mcp-use Python SDK. It covers protocol compliance, SDK architecture, and core feature development.
For the latest status, see our GitHub Issues and MCP-1371 (Tier 1 tracking).
Current Status
- Server conformance: 30/30 (100%)
- Client conformance: 20/20 (100%)
- Latest stable release: v1.6.0
Q1 2026 — Protocol Compliance
- Full server conformance (30/30) — logging, completions, subscriptions, DNS rebinding
- Full client conformance (20/20) — OAuth flows, CIMD, scope step-up, SSE retry
- Resource subscription broadcasting (#1004)
logging/setLevelwith RFC 5424 level filtering (#1004)dns_rebinding_protectionserver parameter (#1004)- Replace deprecated
streamablehttp_client(#1017) - Conformance CI for server + client (GitHub Actions)
Q2 2026 — SDK 2.0 Architecture
Connector & Auth Redesign
- Define Connector protocol and Auth protocol interfaces (#943)
- Typed Auth classes: BearerAuth, OAuthAuth, BasicAuth, APIKeyAuth (#944)
- BaseConnector with lazy auto-connect (#945)
- TransformedConnector for middleware-style transformations (#946)
- Refactor HttpConnector and StdioConnector with per-connector config (#947)
- MCPClient as Connector with recursive composition (#948)
- Connector-to-Server transformation via
as_server()(#949) - Per-connector callbacks for sampling, elicitation, logging (#950)
Server
- Server-side OAuth authentication (#955)
MCPServer.mount()for composing servers (#951)- Dependency injection (Depends) for tools (#870)
Protocol
- Custom OAuth discovery URLs (#864)
- Sampling support in Python client (#863)
Release
- Clean public API exports for 2.0 (#953)
- Backward compatibility layer for 1.x config format (#952)
Future
- Adapter deduplication (#842)
How to Contribute
See CONTRIBUTING.md for guidelines. Issues labeled good first issue are a great starting point.