List view

[Server] Add DNS rebinding protection feature with middleware

improves spec complianceImproves consistency with other SDKs such as TyepScriptImproves consistency with other SDKs such as TyepScript

ServerIssues & PRs related to the Server componentIssues & PRs related to the Server component

Status: Open (in progress).

modelcontextprotocol/php-sdknumber 260

#260 In modelcontextprotocol/php-sdk;

· chr-hertel opened on Mar 10, 2026

[Server] Extract CORS handling into CorsMiddleware

breaking changeBreaking the Backwards Compatibility PromiseBreaking the Backwards Compatibility Promise

ServerIssues & PRs related to the Server componentIssues & PRs related to the Server component

Status: Open (in progress).

modelcontextprotocol/php-sdknumber 277

#277 In modelcontextprotocol/php-sdk;

· chr-hertel opened on Apr 11, 2026

[Schema][Server] Add MCP Apps extension (io.modelcontextprotocol/ui) support

improves spec complianceImproves consistency with other SDKs such as TyepScriptImproves consistency with other SDKs such as TyepScript

SchemaIssues & PRs related to the Schema componentIssues & PRs related to the Schema component

ServerIssues & PRs related to the Server componentIssues & PRs related to the Server component

Status: Open (in progress).

modelcontextprotocol/php-sdknumber 281

#281 In modelcontextprotocol/php-sdk;

· chr-hertel opened on Apr 11, 2026

[Server] Allow runtime-resolved element handlers

enhancementRequest for a new feature that's not currently supportedRequest for a new feature that's not currently supported

needs more workNot ready to be merged yet, needs additional follow-up from the author(s).Not ready to be merged yet, needs additional follow-up from the author(s).

ServerIssues & PRs related to the Server componentIssues & PRs related to the Server component

Status: Open (in progress).

modelcontextprotocol/php-sdknumber 294

#294 In modelcontextprotocol/php-sdk;

· e0ipso opened on Apr 29, 2026

[Server] Untangle origin tracking from Registry

ServerIssues & PRs related to the Server componentIssues & PRs related to the Server component

Status: Open (in progress).

modelcontextprotocol/php-sdknumber 302

#302 In modelcontextprotocol/php-sdk;

· chr-hertel opened on May 11, 2026

[Server] Compose StreamableHttpTransport security middleware via defaultMiddleware() factory

Status: Open (in progress).

modelcontextprotocol/php-sdknumber 307

#307 In modelcontextprotocol/php-sdk;

· sveneld opened on May 13, 2026

[Client][Server][Schema] Bump protocol version to nov 25

breaking changeBreaking the Backwards Compatibility PromiseBreaking the Backwards Compatibility Promise

ClientIssues & PRs related to the Client componentIssues & PRs related to the Client component

improves spec complianceImproves consistency with other SDKs such as TyepScriptImproves consistency with other SDKs such as TyepScript

SchemaIssues & PRs related to the Schema componentIssues & PRs related to the Schema component

ServerIssues & PRs related to the Server componentIssues & PRs related to the Server component

Status: Open (in progress).

modelcontextprotocol/php-sdknumber 308

#308 In modelcontextprotocol/php-sdk;

· chr-hertel opened on May 15, 2026