1.15.1

What's Changed

• fix(client): Some mcp server need default env(#393, #196) by @sunrabbit123 in #394
• feat: Add CORS configuration for browser-based MCP clients by @jerome3o-anthropic in #713
• Add onsessionclosed hook to StreamableHTTPServerTransport by @jerome3o-anthropic in #743
• add custom headers on initial _startOrAuth call by @anthonjn in #318
• Improve stdio test Windows compatibility and refactor command logic by @HoberMin in #284
• Add missing app.listen error handling to server examples by @ochafik in #749
• fix(server): validate expiresAt token value for non existence by @christian-bromann in #446
• [auth]: support oauth client_secret_basic / none / custom methods by @jaredhanson, @SightStudio, @ochafik in #720
• feat: support async callbacks for onsessioninitialized and onsessionclosed by @jerome3o-anthropic in #751
• Fix oauth well-known paths to retain path and query by @ihrpr in #756
• auth: fetch AS metadata in well-known subpath from serverUrl even when PRM returns external AS by @ochafik in #752

New Contributors

• @sunrabbit123 made their first contribution in #394
• @anthonjn made their first contribution in #318
• @HoberMin made their first contribution in #284

Full Changelog: 1.15.0...1.15.1