{"id":11619051,"name":"mcp-handler","ecosystem":"npm","description":"Vercel MCP Adapter for Next.js and other frameworks","homepage":"https://github.com/vercel/mcp-handler#readme","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/vercel/mcp-handler","keywords_array":["mcp","vercel","next.js","ai"],"namespace":null,"versions_count":16,"first_release_published_at":"2025-08-13T18:11:35.194Z","latest_release_published_at":"2026-03-24T00:12:56.732Z","latest_release_number":"1.1.0","last_synced_at":"2026-05-18T10:52:15.887Z","created_at":"2025-05-08T18:07:02.978Z","updated_at":"2026-05-18T13:39:23.228Z","registry_url":"https://www.npmjs.com/package/mcp-handler","install_command":"npm install mcp-handler","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.1.0","snapshot":"0.0.0-1eb6f79c-20260323204624"}},"repo_metadata":{"id":293500582,"uuid":"980866938","full_name":"vercel/mcp-handler","owner":"vercel","description":"Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more","archived":false,"fork":false,"pushed_at":"2026-03-24T00:13:04.000Z","size":420,"stargazers_count":589,"open_issues_count":26,"forks_count":77,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-04-26T05:02:32.307Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://www.npmjs.com/package/mcp-handler","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/vercel.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-05-09T21:19:44.000Z","updated_at":"2026-04-25T14:19:39.000Z","dependencies_parsed_at":"2025-07-01T01:21:53.025Z","dependency_job_id":"fc35a7f0-23fa-44ce-8509-eeafd9033bb1","html_url":"https://github.com/vercel/mcp-handler","commit_stats":null,"previous_names":["vercel/mcp-adapter"],"tags_count":26,"template":false,"template_full_name":null,"purl":"pkg:github/vercel/mcp-handler","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/vercel","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32339402,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-26T23:26:28.701Z","status":"online","status_checked_at":"2026-04-27T02:00:06.769Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"vercel","name":"Vercel","uuid":"14985020","kind":"organization","description":"Develop. Preview. Ship. Creators of Next.js.","email":"contactus@vercel.com","website":"https://vercel.com","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/14985020?v=4","repositories_count":147,"last_synced_at":"2024-04-14T07:01:26.655Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/vercel","funding_links":[],"total_stars":390396,"followers":14338,"following":0,"created_at":"2022-11-02T16:19:59.831Z","updated_at":"2024-04-14T07:01:59.842Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/vercel","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/vercel/repositories"},"tags":[{"name":"v1.0.5","sha":"11d62499f32151464de547ce7953700ee0bbe9c8","kind":"tag","published_at":"2026-01-03T21:17:33.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v1.0.5","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"aa280be4d4fd7a43ce7334f703d2332ad9e620e7","kind":"tag","published_at":"2025-11-20T03:23:05.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v1.0.4","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"6e81c81678b7b6f85fac28a83e469da29be992a8","kind":"tag","published_at":"2025-10-10T22:24:53.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v1.0.3","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"eda4ae25b30be84975f0e6757cc24ee6a41970ba","kind":"tag","published_at":"2025-08-25T19:33:53.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v1.0.2","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"0b92b2e915108e24cefb9df5667f6befff840737","kind":"tag","published_at":"2025-07-19T21:56:20.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v1.0.1","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"a535d129db6492dd80c2e7bffeabe77a5c67fe46","kind":"tag","published_at":"2025-07-11T20:53:12.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v1.0.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v1.0.0/manifests"},{"name":"v0.11.2","sha":"1a5d56cc132b447140be3eb885d5d614bb7cb3e9","kind":"tag","published_at":"2025-07-07T17:19:40.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.11.2","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.11.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.11.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.11.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.11.2/manifests"},{"name":"v0.11.1","sha":"8922c0f6722128c6b0460cf025990d0bf0d9fb72","kind":"tag","published_at":"2025-06-12T22:53:06.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.11.1","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"871afc4ad86349f5f63aedb3e228a967116da6d0","kind":"tag","published_at":"2025-06-12T20:20:06.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.11.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0a47065b59b03e9cbbd547586037f7e92b497a35","kind":"tag","published_at":"2025-06-09T17:30:19.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.10.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.10.0/manifests"},{"name":"v0.9.1","sha":"4b9d6d0d43265434816ba11b34ac60a20e848f2e","kind":"tag","published_at":"2025-06-06T01:07:45.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.9.1","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"d3eddda38ba7e525f1ce5ba40c3f1df4a3b31b86","kind":"tag","published_at":"2025-06-06T01:00:54.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.9.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.9.0/manifests"},{"name":"v0.8.2","sha":"c8b91c07af10dc61b0fabcf7b55e21ff1696ddfa","kind":"tag","published_at":"2025-06-04T22:03:40.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.8.2","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.8.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.8.2/manifests"},{"name":"v0.8.1","sha":"3d70ff71c45af4c6ddb74313629858dae89db710","kind":"tag","published_at":"2025-06-04T19:51:58.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.8.1","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.8.1/manifests"},{"name":"v0.8.0","sha":"9a2d00e3bdde23d0cdd54b7b851332aa77c6266a","kind":"tag","published_at":"2025-06-04T18:31:28.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.8.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.8.0/manifests"},{"name":"v0.7.3","sha":"6988c2ca1ab7061d566edc9958beaf0b2400c952","kind":"tag","published_at":"2025-05-29T11:47:20.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.7.3","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.7.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.7.3/manifests"},{"name":"v0.7.2","sha":"1015be761ce8f2730e74dd39fdfa2f4e0c27e40b","kind":"tag","published_at":"2025-05-29T11:41:28.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.7.2","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.7.2/manifests"},{"name":"v0.7.1","sha":"4513571473769cd15f7a5674db1817d75b875dd1","kind":"tag","published_at":"2025-05-29T11:35:16.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.7.1","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"335ed2c8e66a50403b5d05c3975b5f53339d5b6b","kind":"tag","published_at":"2025-05-28T20:34:26.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.7.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.7.0/manifests"},{"name":"v0.6.2","sha":"30c6355b65628f4649046705ff727fac5a14fee4","kind":"tag","published_at":"2025-05-23T21:25:28.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.6.2","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.6.2/manifests"},{"name":"v0.6.1","sha":"daac405630966d3891df5c9a281f55e5160e164d","kind":"tag","published_at":"2025-05-23T20:59:23.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.6.1","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.6.1/manifests"},{"name":"v0.6.0","sha":"4d9fdf851da73c7b0ff10715afdaaf3289a4e65e","kind":"tag","published_at":"2025-05-21T06:00:58.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.6.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"8603cbde5be2c2167a393a2e5b11af68557f0351","kind":"tag","published_at":"2025-05-20T18:40:13.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.5.1","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"9de5497ca14a9810251653833c8128f3526e184f","kind":"tag","published_at":"2025-05-19T19:50:39.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.5.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"1aa28eb5825c496f63127f4f3e2c534871700a88","kind":"tag","published_at":"2025-05-15T20:37:06.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.4.1","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"47101612b477afd282a2fe63a5e47eacd4bd9317","kind":"tag","published_at":"2025-05-15T17:28:57.000Z","download_url":"https://codeload.github.com/vercel/mcp-handler/tar.gz/v0.4.0","html_url":"https://github.com/vercel/mcp-handler/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vercel/mcp-handler@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/tags/v0.4.0/manifests"}]},"repo_metadata_updated_at":"2026-05-18T13:39:23.199Z","dependent_packages_count":0,"downloads":1036642,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":24.68153497635502,"dependent_packages_count":35.626142370599766,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":30.153838673477395},"purl":"pkg:npm/mcp-handler","advisories":[{"uuid":"GSA_kwCzR0hTQS13MmZtLTI1dnctdmg3Zs4ABUmY","url":"https://github.com/advisories/GHSA-w2fm-25vw-vh7f","title":"mcp-handler has a tool response leak across concurrent client sessions ('Race Condition')","description":"`mcp-handler` versions prior to 1.1.0 accepted `@modelcontextprotocol/sdk` \u003c 1.26.0 as a peer dependency. That SDK version contains a vulnerability [[CVE-2026-25536](https://nvd.nist.gov/vuln/detail/CVE-2026-25536)] that causes concurrent requests from different clients to share server-side state including authentication context and tool execution results when a `StreamableHTTPServerTransport` instance is reused across requests.\n\n**Note:** This is _not_ a vulnerability in `mcp-handler` itself. The root cause is in the peer dependency `@modelcontextprotocol/sdk`. \n\n### Impact\n\nA low-privileged attacker making concurrent requests to an `mcp-handler` endpoint can read another client's session data, including authentication information and tool execution state. This is a confidentiality breach with potential for limited integrity impact.\n\n**Root Cause:** [CVE-2026-25536](https://nvd.nist.gov/vuln/detail/CVE-2026-25536) in `@modelcontextprotocol/sdk` \u003c 1.26.0. The SDK did not prevent reuse of stateless transports across client connections.\n\n### Patches\n\nUpgrade to `mcp-handler@1.1.0`. This release raises the minimum peer dependency to `@modelcontextprotocol/sdk@\u003e=1.26.0`, which contains the fix for CVE-2026-25536. \n\n### Workarounds\n\n- Upgrade `@modelcontextprotocol/sdk` to `\u003e=1.26.0` (note: the SDK will throw on transport reuse, which will break `mcp-handler` \u003c 1.1.0 which effectively forces the upgrade)\n- Alternatively, manually create fresh `McpServer` and transport instances per request in your handler code","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-04-01T23:58:50.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","references":["https://github.com/vercel/mcp-handler/security/advisories/GHSA-w2fm-25vw-vh7f","https://nvd.nist.gov/vuln/detail/CVE-2026-25536","https://github.com/advisories/GHSA-345p-7cg4-v4c7","https://github.com/advisories/GHSA-w2fm-25vw-vh7f"],"source_kind":"github","identifiers":["GHSA-w2fm-25vw-vh7f"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-02T00:00:09.167Z","updated_at":"2026-04-05T20:00:13.038Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13MmZtLTI1dnctdmg3Zs4ABUmY","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13MmZtLTI1dnctdmg3Zs4ABUmY","packages":[{"ecosystem":"npm","package_name":"mcp-handler","versions":[{"first_patched_version":"1.1.0","vulnerable_version_range":"\u003c 1.1.0"}],"purl":"pkg:npm/mcp-handler"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13MmZtLTI1dnctdmg3Zs4ABUmY/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/mcp-handler","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/mcp-handler","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/mcp-handler/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-04-05T19:11:21.002Z","issues_count":15,"pull_requests_count":16,"avg_time_to_close_issue":1709912.0,"avg_time_to_close_pull_request":19610.833333333332,"issues_closed_count":2,"pull_requests_closed_count":6,"pull_request_authors_count":11,"issue_authors_count":15,"avg_comments_per_issue":1.5333333333333332,"avg_comments_per_pull_request":0.1875,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":15,"past_year_pull_requests_count":16,"past_year_avg_time_to_close_issue":1709912.0,"past_year_avg_time_to_close_pull_request":19610.833333333332,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":6,"past_year_pull_request_authors_count":11,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":1.5333333333333332,"past_year_avg_comments_per_pull_request":0.1875,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":6,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/vercel%2Fmcp-handler/issues","maintainers":[{"login":"quuu","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quuu"},{"login":"atinux","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/atinux"}],"active_maintainers":[{"login":"quuu","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quuu"},{"login":"atinux","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/atinux"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/mcp-handler/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/mcp-handler/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/mcp-handler/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/mcp-handler/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/mcp-handler/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/mcp-handler/codemeta","maintainers":[{"uuid":"vercel-release-bot","login":"vercel-release-bot","name":null,"email":"infra+release@vercel.com","url":null,"packages_count":531,"html_url":"https://www.npmjs.com/~vercel-release-bot","role":null,"created_at":"2025-07-08T16:27:04.271Z","updated_at":"2025-07-08T16:27:04.271Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/vercel-release-bot/packages"},{"uuid":"matt.straka","login":"matt.straka","name":null,"email":"matt.j.straka@gmail.com","url":null,"packages_count":453,"html_url":"https://www.npmjs.com/~matt.straka","role":null,"created_at":"2025-07-08T16:27:04.223Z","updated_at":"2025-07-08T16:27:04.223Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/matt.straka/packages"},{"uuid":"zeit-bot","login":"zeit-bot","name":null,"email":"team@zeit.co","url":null,"packages_count":264,"html_url":"https://www.npmjs.com/~zeit-bot","role":null,"created_at":"2025-07-08T16:27:04.439Z","updated_at":"2025-07-08T16:27:04.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/zeit-bot/packages"},{"uuid":"quuu","login":"quuu","name":null,"email":"qual1337@gmail.com","url":null,"packages_count":78,"html_url":"https://www.npmjs.com/~quuu","role":null,"created_at":"2025-05-08T20:07:18.266Z","updated_at":"2025-05-08T20:07:18.266Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/quuu/packages"}]}