@upstash/context7-mcp@3.2.0
labring/sealos@upstash/context7-mcp@3.2.0Jun 11, 2026by github-actions[bot]
AI Summary
A minor release that replaces in-result sign-in nudges with MCP form elicitation, providing a more secure and user-friendly authentication flow when anonymous clients cross per-IP thresholds.
Key Highlights
- Replaced text-injection with MCP form elicitation
- Surfaces npx ctx7 setup command in client-rendered dialog
- Gated on client advertising elicitation capability
- Two-option radio for sign-in vs anonymous continuation
New Features
- MCP form elicitation for authentication prompts
- Out-of-band user communication bypassing agent trust issues
Full Release Notes
### Minor Changes - c921c8b: Replace the in-result sign-in nudge with an MCP form elicitation. When the backend signals (via `X-Context7-Auth-Prompt: 1`) that an anonymous client has crossed the per-IP threshold, the MCP server now fires an `elicitation/create` request instead of appending instructions into the tool result. - Surfaces the `npx ctx7 setup --<client> --mcp[ --stdio] -y` command in a client-rendered dialog rather than as model-visible text. The previous text-injection approach was treated as untrusted instruction content by some agents; elicitations are delivered out-of-band to the user so they bypass that path entirely. - Gated on the client advertising the `elicitation` capability — clients without it see no nudge, which is a safe no-op. - Presents a two-option radio: "I'll run the command to sign in" or "Continue anonymously with smaller limits". - The server holds no suppression state: the backend emits the header at most once per MCP session, so the dialog is shown whenever the header is present. Frequency is owned entirely by the backend. - Fire-and-forget: the elicitation does not block or alter the surrounding tool response. ### Patch Changes - cb6aee1: Bump runtime dependencies: `@modelcontextprotocol/sdk` 1.25 -> 1.29, `undici` 6 -> 7, and `zod` 4.3 -> 4.4. - fcdc36e: Advertise empty `prompts` and `resources` capabilities with no-op `prompts/list`, `resources/list`, and `resources/templates/list` handlers. Some MCP clients (e.g. opencode) call these unconditionally and treat `-32601 Method not found` as a fatal connection error rather than honoring the negotiated capabilities, which previously prevented the server from loading.