Org MCP servers as ext_* tools over Streamable HTTP and legacy SSE; STDIO retired

Shipped

September 27, 2026 at 10:32 AM UTC

Author

Kamo

Commit

091d69e

A server's own words reach a caller only inside the untrusted wrap; nothing sent is definitive (D45); the URL guard runs on every use; one session and one tool load per server however many requests race; SSE events are capped in memory; the 10-minute refresh tests servers in parallel; the transitional execute keeps its PHI boundary (ruling SP05-T13).