Release / 11 Oct 2026

Model Context Protocol servers v1.0.0

Edit existing files while preserving their hard links, permissions, and line endings.

Before you upgrade to v1.0.0

6 to fix

Existing-file writes are no longer crash-atomic. Withdrawing all active client roots now denies every path until roots are exposed again.

Behavior changedRead, write, edit, search, and organize files in allowed directories.Affects: Users overwriting files or changing client roots.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/filesystem/CHANGELOG.md

Make files writable before using `write_file` or `edit_file`; read-only files are now refused. Supply directories or client Roots support: startup without either exits with status 1.

Action requiredRead, write, edit, search, and organize files in allowed directories.Affects: Read-only file workflows and servers started without directories.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/filesystem/CHANGELOG.md

Create both endpoint entities before `create_relations`; keep `search_nodes` queries at most 2048 characters. Make the memory file writable before mutations.

Action requiredStore, search, and update entities, observations, and relationships across chats.Affects: Clients creating dangling relations, sending long searches, or using read-only storage.Inferred

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/memory/index.ts

Add `--allow-private-ips` only when access to local or internal hosts is needed; Fetch now refuses non-public addresses, including redirects and robots.txt requests, by default.

Action requiredRetrieve web pages as Markdown or raw content and read long pages in chunks.Affects: Fetch configurations accessing local, private, link-local or other non-public addresses.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/fetch/README.md

Pass a nonempty `files` array to `git_add`; stage changes before `git_commit` outside a merge. Empty commits are refused. Update parsers for `git_show`'s Git-style output.

Action requiredInspect changes and commit history, stage files, commit changes, and manage Git branches.Affects: Clients sending empty staging requests, creating empty commits, or parsing commit output.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/git/README.md

`git_add` reports unchanged indexes; checkout reports detached HEAD; invalid branch types and existing branch names yield errors. `--repository` resolves subdirectories to the enclosing repository root.

Behavior changedInspect changes and commit history, stage files, commit changes, and manage Git branches.Affects: Git clients relying on success messages or subdirectory access boundaries.Inferred

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/git/src/mcp_server_git/server.py

Use exact, case-sensitive IANA keys in tools and `--local-timezone`, including on macOS; e.g. replace `europe/warsaw` with `Europe/Warsaw`.

Action requiredLook up the current time and convert times between IANA timezones.Affects: Configurations using non-exact timezone spellings.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/time/README.md

`sequentialthinking` advertises `readOnlyHint: false` and `idempotentHint: false`, reflecting that calls append to thought history.

Behavior changedBreak problems into steps and record revisions or alternative reasoning branches.Affects: Clients using tool annotations to control permissions or retries.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/sequentialthinking/CHANGELOG.md

Dynamic blob resources use `application/octet-stream`; form elicitation tools are listed only for form-capable clients. Unknown HTTP sessions receive 404, missing SSE session IDs 400, duplicate SSE streams 409.

Behavior changedExercise MCP client support for tools, prompts, resources, sampling, and progress notifications.Affects: Client tests validating MIME types, tool availability, or HTTP session errors.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/everything/CHANGELOG.md

Use `@modelcontextprotocol/sdk` 1.31.0 or later within 1.x for these legacy releases; the minimum was raised from 1.30.0.

Action requiredAffects: Users pinning TypeScript server SDK dependencies.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/filesystem/CHANGELOG.md

What changed in v1.0.0

Filesystem overwrites existing files in place and waits for roots refreshes. Memory locks shared storage, Fetch supports SOCKS proxies, Git completes merges, and Time validates exact timezone names and nonexistent local times.

Also: Shared memory writes retain both clients' changes; Fetch blocks private addresses by default; Git and Time reject misleading results.

TypeScript packages 1.0.0 on npm; Fetch, Git and Time 2026.10.10 on PyPI. Python servers require Python 3.10+ and MCP SDK 1.x.

Fixed and improved

`edit_file` preserves CRLF and multiline indentation; overwrites retain inode, hard links and permissions, including files held open on Windows. UNC share-root allow-lists admit descendants.

Now worksRead, write, edit, search, and organize files in allowed directories.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/filesystem/CHANGELOG.md

Tool calls wait for initial and refreshed roots; stale refresh answers cannot restore revoked access. JSON Schema 2020-12 clients can accept the advertised tool schemas.

Now worksRead, write, edit, search, and organize files in allowed directories.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/filesystem/CHANGELOG.md

Processes sharing a memory file serialize writes with a lock; saves preserve permission bits and retain unreadable lines unchanged outside the graph.

Now worksStore, search, and update entities, observations, and relationships across chats.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/memory/CHANGELOG.md

`create_entities` reports skipped names in `skipped`; use `add_observations` to extend them. Deletions report missing names or actual deletion counts.

ImprovedStore, search, and update entities, observations, and relationships across chats.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/memory/README.md

Fetch through HTTP(S) or SOCKS5 proxies; `socks://` is accepted as `socks5://`. Unusable proxy settings return tool errors.

ImprovedRetrieve web pages as Markdown or raw content and read long pages in chunks.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/fetch/README.md

`max_length` advertises inclusive integer bounds for schema compatibility; an empty simplified page is reported as a simplification failure even without Node.

Now worksRetrieve web pages as Markdown or raw content and read long pages in chunks.Inferred

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/fetch/src/mcp_server_fetch/server.py

`git_show` accepts `<revision>:<path>` for file contents or directory listings, formats commits like Git, and decodes non-UTF-8 patches with replacement characters.

ImprovedInspect changes and commit history, stage files, commit changes, and manage Git branches.Inferred

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/git/src/mcp_server_git/server.py

`git_commit` concludes an in-progress merge with all parents, clears merge state, and reapplies the merge autostash; conflicts preserve the stash and are reported.

Now worksInspect changes and commit history, stage files, commit changes, and manage Git branches.Inferred

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/git/src/mcp_server_git/server.py

`convert_time` rejects wall-clock times skipped by a clock change; an invalid `--local-timezone` exits with one explanatory line instead of a traceback.

Now worksLook up the current time and convert times between IANA timezones.Inferred

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/time/src/mcp_server_time/server.py

Branch IDs such as `constructor` and `proto` work; failed calls leave thought history unchanged. Thought-log headers no longer contain unintended `undefined` values.

Now worksBreak problems into steps and record revisions or alternative reasoning branches.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/sequentialthinking/CHANGELOG.md

Session resources no longer evict another session's same-named resource; async elicitation respects task TTL, and async tools report already-finished task status messages.

Now worksExercise MCP client support for tools, prompts, resources, sampling, and progress notifications.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/everything/CHANGELOG.md

Streamable HTTP replays only the resumed stream's events, rejects unknown event IDs, and closes sessions on shutdown; occupied ports produce an error and nonzero exit.

Now worksExercise MCP client support for tools, prompts, resources, sampling, and progress notifications.

Read the evidence

modelcontextprotocol/servers/blob/v1.0.0/src/everything/CHANGELOG.md

Seeded by @iluxav with Codex, from the release's public sources. Each change links to its evidence.

Before you upgrade to v1.0.0

Existing-file writes are no longer crash-atomic. Withdrawing all active client roots now denies every path until roots are exposed again.

Make files writable before using `write_file` or `edit_file`; read-only files are now refused. Supply directories or client Roots support: startup without either exits with status 1.

Create both endpoint entities before `create_relations`; keep `search_nodes` queries at most 2048 characters. Make the memory file writable before mutations.

Add `--allow-private-ips` only when access to local or internal hosts is needed; Fetch now refuses non-public addresses, including redirects and robots.txt requests, by default.

Pass a nonempty `files` array to `git_add`; stage changes before `git_commit` outside a merge. Empty commits are refused. Update parsers for `git_show`'s Git-style output.

`git_add` reports unchanged indexes; checkout reports detached HEAD; invalid branch types and existing branch names yield errors. `--repository` resolves subdirectories to the enclosing repository root.

Use exact, case-sensitive IANA keys in tools and `--local-timezone`, including on macOS; e.g. replace `europe/warsaw` with `Europe/Warsaw`.

`sequentialthinking` advertises `readOnlyHint: false` and `idempotentHint: false`, reflecting that calls append to thought history.

Dynamic blob resources use `application/octet-stream`; form elicitation tools are listed only for form-capable clients. Unknown HTTP sessions receive 404, missing SSE session IDs 400, duplicate SSE streams 409.

Use `@modelcontextprotocol/sdk` 1.31.0 or later within 1.x for these legacy releases; the minimum was raised from 1.30.0.

What changed in v1.0.0

Fixed and improved

`edit_file` preserves CRLF and multiline indentation; overwrites retain inode, hard links and permissions, including files held open on Windows. UNC share-root allow-lists admit descendants.

Tool calls wait for initial and refreshed roots; stale refresh answers cannot restore revoked access. JSON Schema 2020-12 clients can accept the advertised tool schemas.

Processes sharing a memory file serialize writes with a lock; saves preserve permission bits and retain unreadable lines unchanged outside the graph.

`create_entities` reports skipped names in `skipped`; use `add_observations` to extend them. Deletions report missing names or actual deletion counts.

Fetch through HTTP(S) or SOCKS5 proxies; `socks://` is accepted as `socks5://`. Unusable proxy settings return tool errors.

`max_length` advertises inclusive integer bounds for schema compatibility; an empty simplified page is reported as a simplification failure even without Node.

`git_show` accepts `<revision>:<path>` for file contents or directory listings, formats commits like Git, and decodes non-UTF-8 patches with replacement characters.

`git_commit` concludes an in-progress merge with all parents, clears merge state, and reapplies the merge autostash; conflicts preserve the stash and are reported.

`convert_time` rejects wall-clock times skipped by a clock change; an invalid `--local-timezone` exits with one explanatory line instead of a traceback.

Branch IDs such as `constructor` and `__proto__` work; failed calls leave thought history unchanged. Thought-log headers no longer contain unintended `undefined` values.

Session resources no longer evict another session's same-named resource; async elicitation respects task TTL, and async tools report already-finished task status messages.

Streamable HTTP replays only the resumed stream's events, rejects unknown event IDs, and closes sessions on shutdown; occupied ports produce an error and nonzero exit.

Branch IDs such as `constructor` and `proto` work; failed calls leave thought history unchanged. Thought-log headers no longer contain unintended `undefined` values.