MCP TypeScript SDK 2.3.0 Enforces One Server Per Request, Limits Redirects to the Same Origin and Adds Opt-In Tool Input and Token Audience Checks
The Model Context Protocol TypeScript SDK shipped 2.3.0 on October 2 and 1.32.0 the same day, with same-origin redirect handling by default and two off-by-default options; 2.3.1 followed on October 5.