Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
modelcontextprotocol
python-sdk
Repository navigation
Code
Issues
247
(247)
Pull requests
109
(109)
Actions
Projects
Security and quality
12
(12)
Insights
More
items
Actions: modelcontextprotocol/python-sdk
Actions
All workflows
Workflows
GitHub Actions Security Analysis
GitHub Actions Security Analysis
.github/workflows/validate-pr-title.yaml
.github/workflows/validate-pr-title.yaml
CI
CI
CI Black Duck security scan
CI Black Duck security scan
Claude Code
Claude Code
CodeQL
CodeQL
Conformance Tests
Conformance Tests
Copilot
Copilot
Copilot cloud agent
Copilot cloud agent
Copilot code review
Copilot code review
Dependabot Updates
Dependabot Updates
Show more workflows...
Management
Caches
Deployments
GitHub Actions Security Analysis
GitHub Actions Security Analysis
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
zizmor.yml
will be ignored since log searching is not yet available
2,279 workflow runs
2,279 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Reject a tool with an invalid x-mcp-header annotation at registration
GitHub Actions Security Analysis
#2217:
Pull request
#3620
synchronize by
maxisbey
27s
3484-reject-invalid-x-mcp-header
3484-reject-invalid-x-mcp-header
27s
View #3620
View workflow file
Document the timeout a hand-built httpx2 client needs (#3618)
GitHub Actions Security Analysis
#2216:
Commit
ebf6e5a
pushed by
maxisbey
30s
main
main
30s
View workflow file
Reject a tool with an invalid x-mcp-header annotation at registration
GitHub Actions Security Analysis
#2215:
Pull request
#3620
opened by
maxisbey
23s
3484-reject-invalid-x-mcp-header
3484-reject-invalid-x-mcp-header
23s
View #3620
View workflow file
Document when a caller-supplied request id can be minted again (#3619)
GitHub Actions Security Analysis
#2214:
Commit
c8fcfc8
pushed by
maxisbey
18s
main
main
18s
View workflow file
Document when a caller-supplied request id can be minted again
GitHub Actions Security Analysis
#2213:
Pull request
#3619
opened by
maxisbey
30s
3126-request-id-docstring
3126-request-id-docstring
30s
View #3619
View workflow file
Document the timeout a hand-built httpx2 client needs
GitHub Actions Security Analysis
#2212:
Pull request
#3618
opened by
maxisbey
29s
3238-docs-http-client-timeout
3238-docs-http-client-timeout
29s
View #3618
View workflow file
Omit an unset experimental capability from the initialize result (#3614)
GitHub Actions Security Analysis
#2211:
Commit
449070c
pushed by
maxisbey
23s
main
main
23s
View workflow file
docs: add a middleware tutorial that refuses tool calls (#3613)
GitHub Actions Security Analysis
#2210:
Commit
86ec15f
pushed by
maxisbey
21s
main
main
21s
View workflow file
Omit an unset experimental capability from the initialize result
GitHub Actions Security Analysis
#2209:
Pull request
#3614
opened by
maxisbey
30s
3254-omit-empty-experimental
3254-omit-empty-experimental
30s
View #3614
View workflow file
docs: add a middleware tutorial that refuses tool calls
GitHub Actions Security Analysis
#2208:
Pull request
#3613
opened by
maxisbey
22s
3272-middleware-refuse-tutorial
3272-middleware-refuse-tutorial
22s
View #3613
View workflow file
Bump httpx2 from 2.10.0 to 2.12.0
GitHub Actions Security Analysis
#2207:
Pull request
#3481
synchronize by
dependabot
Bot
27s
dependabot/uv/httpx2-2.12.0
dependabot/uv/httpx2-2.12.0
27s
View #3481
View workflow file
Bump the github-actions group with 5 updates (#3612)
GitHub Actions Security Analysis
#2206:
Commit
17aaf25
pushed by
Kludex
31s
main
main
31s
View workflow file
Expose an SSE event size limit in Streamable HTTP clients (#3600)
GitHub Actions Security Analysis
#2205:
Commit
7fdc944
pushed by
Kludex
27s
main
main
27s
View workflow file
Expose an SSE event size limit in Streamable HTTP clients
GitHub Actions Security Analysis
#2204:
Pull request
#3600
synchronize by
Kludex
23s
codex/add-sse-event-size
codex/add-sse-event-size
23s
View #3600
View workflow file
Expose an SSE event size limit in Streamable HTTP clients
GitHub Actions Security Analysis
#2203:
Pull request
#3600
synchronize by
Kludex
26s
codex/add-sse-event-size
codex/add-sse-event-size
26s
View #3600
View workflow file
Bump the github-actions group with 5 updates
GitHub Actions Security Analysis
#2202:
Pull request
#3612
opened by
dependabot
Bot
28s
dependabot/github_actions/github-actions-708b7d4600
dependabot/github_actions/github-actions-708b7d4600
28s
View #3612
View workflow file
Group Dependabot security updates for uv dependencies (#3611)
GitHub Actions Security Analysis
#2201:
Commit
772ecf2
pushed by
Kludex
22s
main
main
22s
View workflow file
Group Dependabot security updates for uv dependencies
GitHub Actions Security Analysis
#2200:
Pull request
#3611
opened by
Kludex
30s
group-dependabot-security-updates
group-dependabot-security-updates
30s
View #3611
View workflow file
Fall back to an NTFS junction when the symlink escape test can't crea…
GitHub Actions Security Analysis
#2199:
Commit
94e18d9
pushed by
maxisbey
32s
main
main
32s
View workflow file
Make the deeply nested body test independent of stack size (#3610)
GitHub Actions Security Analysis
#2198:
Commit
7fcaad0
pushed by
maxisbey
27s
main
main
27s
View workflow file
Make the deeply nested body test independent of stack size
GitHub Actions Security Analysis
#2197:
Pull request
#3610
opened by
maxisbey
31s
3146-nested-body-test
3146-nested-body-test
31s
View #3610
View workflow file
Fall back to an NTFS junction when the symlink escape test can't create a symlink
GitHub Actions Security Analysis
#2196:
Pull request
#3609
opened by
maxisbey
22s
3408-symlink-test-windows
3408-symlink-test-windows
22s
View #3609
View workflow file
Bump urllib3 from 2.7.0 to 2.8.0
GitHub Actions Security Analysis
#2195:
Pull request
#3607
opened by
dependabot
Bot
24s
dependabot/uv/urllib3-2.8.0
dependabot/uv/urllib3-2.8.0
24s
View #3607
View workflow file
Bump pyjwt from 2.13.0 to 2.15.0
GitHub Actions Security Analysis
#2194:
Pull request
#3608
opened by
dependabot
Bot
29s
dependabot/uv/pyjwt-2.15.0
dependabot/uv/pyjwt-2.15.0
29s
View #3608
View workflow file
Bump anyio from 4.10.0 to 4.14.2 (#3547)
GitHub Actions Security Analysis
#2193:
Commit
6a0fe02
pushed by
Kludex
23s
main
main
23s
View workflow file
Previous
1
2
3
4
5
6
…
91
92
Next
You can’t perform that action at this time.