@upstash/context7-mcp@3.2.0

coder/coder@upstash/context7-mcp@3.2.0Jun 11, 2026by github-actions[bot]

AI Summary

This minor release introduces a new MCP form elicitation mechanism for sign-in prompts and updates dependencies.

Key Highlights

  • Replaces text-based sign-in nudge with an MCP `elicitation/create` request for a better user experience
  • Displays a two-option dialog for user choice instead of injecting untrusted text into tool results
  • Updates runtime dependencies including `@modelcontextprotocol/sdk`, `undici`, and `zod`
  • Advertises empty `prompts` and `resources` capabilities to prevent fatal connection errors in MCP clients

New Features

  • New MCP elicitation mechanism for authentication prompts
  • Advertises empty `prompts` and `resources` capabilities

Full Release Notes

### Minor Changes

- c921c8b: Replace the in-result sign-in nudge with an MCP form elicitation. When the backend signals (via `X-Context7-Auth-Prompt: 1`) that an anonymous client has crossed the per-IP threshold, the MCP server now fires an `elicitation/create` request instead of appending instructions into the tool result.
  - Surfaces the `npx ctx7 setup --<client> --mcp[ --stdio] -y` command in a client-rendered dialog rather than as model-visible text. The previous text-injection approach was treated as untrusted instruction content by some agents; elicitations are delivered out-of-band to the user so they bypass that path entirely.
  - Gated on the client advertising the `elicitation` capability — clients without it see no nudge, which is a safe no-op.
  - Presents a two-option radio: "I'll run the command to sign in" or "Continue anonymously with smaller limits".
  - The server holds no suppression state: the backend emits the header at most once per MCP session, so the dialog is shown whenever the header is present. Frequency is owned entirely by the backend.
  - Fire-and-forget: the elicitation does not block or alter the surrounding tool response.

### Patch Changes

- cb6aee1: Bump runtime dependencies: `@modelcontextprotocol/sdk` 1.25 -> 1.29, `undici` 6 -> 7, and `zod` 4.3 -> 4.4.
- fcdc36e: Advertise empty `prompts` and `resources` capabilities with no-op `prompts/list`, `resources/list`, and `resources/templates/list` handlers. Some MCP clients (e.g. opencode) call these unconditionally and treat `-32601 Method not found` as a fatal connection error rather than honoring the negotiated capabilities, which previously prevented the server from loading.