Skip to content

Actions: modelcontextprotocol/python-sdk

Actions

GitHub Actions Security Analysis

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
zizmor.yml
1,982 workflow runs
1,982 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
docs: stop presenting the in-memory client as the way to connect GitHub Actions Security Analysis #2008: Pull request #3443 synchronize by maxisbey
26s docs/client-connect-framing
docs/client-connect-framing
26s
docs: stop presenting the in-memory client as the way to connect GitHub Actions Security Analysis #2007: Pull request #3443 synchronize by maxisbey
29s docs/client-connect-framing
docs/client-connect-framing
29s
Exercise the SEP-2575 stateless probes and SEP-2243 resource/prompt h… GitHub Actions Security Analysis #2006: Commit 10dc173 pushed by maxisbey
21s main
main
21s
Follow redirects only within the MCP endpoint's origin GitHub Actions Security Analysis #2005: Pull request #3397 synchronize by maxisbey
24s same-origin-redirects
same-origin-redirects
24s
docs: stop presenting the in-memory client as the way to connect GitHub Actions Security Analysis #2004: Pull request #3443 opened by maxisbey
22s docs/client-connect-framing
docs/client-connect-framing
22s
Exercise the SEP-2575 stateless probes and SEP-2243 resource/prompt headers in the conformance fixtures GitHub Actions Security Analysis #2003: Pull request #3442 opened by maxisbey
25s conformance-fixture-depth
conformance-fixture-depth
25s
Let a token verifier gate the server without AuthSettings GitHub Actions Security Analysis #2002: Pull request #3292 synchronize by maxisbey
20s token-verifier-without-auth-settings
token-verifier-without-auth-settings
20s
Deprecate constructing the pre-provisioned OAuth clients without an i… GitHub Actions Security Analysis #2001: Commit 979208c pushed by maxisbey
19s main
main
19s
Deprecate constructing the pre-provisioned OAuth clients without an issuer GitHub Actions Security Analysis #2000: Pull request #3435 synchronize by maxisbey
26s m2m-issuer-warning
m2m-issuer-warning
26s
Deprecate constructing the pre-provisioned OAuth clients without an issuer GitHub Actions Security Analysis #1999: Pull request #3435 synchronize by maxisbey
24s m2m-issuer-warning
m2m-issuer-warning
24s
Deprecate constructing the pre-provisioned OAuth clients without an issuer GitHub Actions Security Analysis #1998: Pull request #3435 synchronize by maxisbey
25s m2m-issuer-warning
m2m-issuer-warning
25s
Fix substring matches in WWW-Authenticate parsing GitHub Actions Security Analysis #1997: Pull request #3041 synchronize by Whning0513
31s Whning0513:fix-www-auth-substring-match-3009
Whning0513:fix-www-auth-substring-match-3009
31s
fix(server): compare allowed_hosts and allowed_origins case-insensitively GitHub Actions Security Analysis #1996: Pull request #3440 opened by EngineerOnTravel
21s EngineerOnTravel:fix/case-insensitive-transport-security-hosts
EngineerOnTravel:fix/case-insensitive-transport-security-hosts
21s
fix(client): support forwarding custom headers to streamable_http_client GitHub Actions Security Analysis #1995: Pull request #3438 opened by AnandkumarMall
25s AnandkumarMall:fix-streamable-http-headers
AnandkumarMall:fix-streamable-http-headers
25s
fix: prevent in-process callback failures from breaking calls GitHub Actions Security Analysis #1994: Pull request #3436 opened by 1fanwang
26s 1fanwang:1fannnw/fix-direct-dispatcher-callback-containment
1fanwang:1fannnw/fix-direct-dispatcher-callback-containment
26s
Deprecate constructing the pre-provisioned OAuth clients without an issuer GitHub Actions Security Analysis #1993: Pull request #3435 synchronize by maxisbey
28s m2m-issuer-warning
m2m-issuer-warning
28s
Deprecate constructing the pre-provisioned OAuth clients without an issuer GitHub Actions Security Analysis #1992: Pull request #3435 opened by maxisbey
27s m2m-issuer-warning
m2m-issuer-warning
27s
fix(dispatcher): advance mint counter past caller-supplied request ids GitHub Actions Security Analysis #1991: Pull request #3433 opened by w1977-0
22s w1977-0:fix/dispatcher-mint-past-supplied-ids
w1977-0:fix/dispatcher-mint-past-supplied-ids
22s
Validate the authorization server metadata issuer on every discovery … GitHub Actions Security Analysis #1990: Commit d060b36 pushed by maxisbey
21s main
main
21s
Feature/simple dice server GitHub Actions Security Analysis #1989: Pull request #3430 opened by Praj-17
19s Praj-17:feature/simple-dice-server
Praj-17:feature/simple-dice-server
19s
fix(server): forward tool args under the real parameter name, not the… GitHub Actions Security Analysis #1988: Pull request #3119 synchronize by jayzuccarelli
27s jayzuccarelli:fix/forward-args-real-param-name
jayzuccarelli:fix/forward-args-real-param-name
27s
fix(server): generate tool output schema in serialization mode GitHub Actions Security Analysis #1987: Pull request #3118 synchronize by jayzuccarelli
19s jayzuccarelli:fix/output-schema-serialization-mode
jayzuccarelli:fix/output-schema-serialization-mode
19s
Extend the interaction suite to the 2026-07-28 spec GitHub Actions Security Analysis #1986: Pull request #3018 synchronize by maxisbey
31s interaction-2026-requirements
interaction-2026-requirements
31s
fix(server): serialize non-finite floats as null in text content blocks GitHub Actions Security Analysis #1985: Pull request #3429 opened by pylrn
28s pylrn:fix/non-finite-floats-json-serialization
pylrn:fix/non-finite-floats-json-serialization
28s
fix(client): handle empty servers in ClientSessionGroup without KeyError or leaked stacks GitHub Actions Security Analysis #1984: Pull request #3428 opened by pylrn
23s pylrn:fix/session-group-empty-server
pylrn:fix/session-group-empty-server
23s