MCP Python SDK v1.30.0 发布：安全与行为更新

AI 摘要

MCP Python SDK 发布 v1.30.0 维护版本，主要更改了默认行为：HTTP 客户端重定向仅限同源，空闲 Streamable HTTP 会话在 30 分钟后过期，OAuth 客户端校验授权服务器 issuer，并新增两个弃用警告。新增 AuthSettings.validate_token_resource、issuer 参数以及 FastMCP 的 session_idle_timeout 和 max_sessions 选项。

正文节选

Maintenance release of the 1.x line. 2.x is the current line; 1.x docs are at https://py.sdk.modelcontextprotocol.io/v1/. A few defaults changed in this release. If you run a server or client on 1.x, skim these first: ## Behaviour changes **HTTP client redirects are only followed within the endpoint's origin** (#3448) - `streamable_http_client` and `sse_client` follow a redirect only if it stays on the same scheme, host and port (or upgrades `http` to `https` on the same host). - A re

发布时间：2026-09-07 22:03

抓取时间：2026-09-07 22:16

来源机构：MCP