@upstash/context7-mcp@3.2.0
vadimdemedes/ink@upstash/context7-mcp@3.2.0Jun 11, 2026by github-actions[bot]
AI Summary
This release replaces in-result sign-in nudges with a client-rendered MCP form elicitation dialog to improve UX and bypass untrusted instruction content.
Key Highlights
- Replaced in-result sign-in nudge with a client-rendered 'MCP form elicitation' dialog.
- Server signals auth prompts via `X-Context7-Auth-Prompt` header instead of text injection.
- Advertised empty `prompts` and `resources` capabilities to fix compatibility with MCP clients like opencode.
Full Release Notes
### Minor Changes - c921c8b: Replace the in-result sign-in nudge with an MCP form elicitation. When the backend signals (via `X-Context7-Auth-Prompt: 1`) that an anonymous client has crossed the per-IP threshold, the MCP server now fires an `elicitation/create` request instead of appending instructions into the tool result. - Surfaces the `npx ctx7 setup --<client> --mcp[ --stdio] -y` command in a client-rendered dialog rather than as model-visible text. The previous text-injection approach was treated as untrusted instruction content by some agents; elicitations are delivered out-of-band to the user so they bypass that path entirely. - Gated on the client advertising the `elicitation` capability — clients without it see no nudge, which is a safe no-op. - Presents a two-option radio: "I'll run the command to sign in" or "Continue anonymously with smaller limits". - The server holds no suppression state: the backend emits the header at most once per MCP session, so the dialog is shown whenever the header is present. Frequency is owned entirely by the backend. - Fire-and-forget: the elicitation does not block or alter the surrounding tool response. ### Patch Changes - cb6aee1: Bump runtime dependencies: `@modelcontextprotocol/sdk` 1.25 -> 1.29, `undici` 6 -> 7, and `zod` 4.3 -> 4.4. - fcdc36e: Advertise empty `prompts` and `resources` capabilities with no-op `prompts/list`, `resources/list`, and `resources/templates/list` handlers. Some MCP clients (e.g. opencode) call these unconditionally and treat `-32601 Method not found` as a fatal connection error rather than honoring the negotiated capabilities, which previously prevented the server from loading.