v6.5.1

6.5.1 (2026-05-20)

Bug Fixes

• return 405 for stateless clients without sessionId (bf7d464)

v6.5.0

6.5.0 (2026-05-12)

Features

• add --corsAddAllowedHeader CLI flag (10c3a08)

v6.4.6

6.4.6 (2026-04-13)

Bug Fixes

• force build (79386de)
• skip onUnhandledRequest for MCP protocol endpoints (a2243b0)
• skip onUnhandledRequest for MCP protocol endpoints (5a7a152), closes #59 #59

v6.4.5

6.4.5 (2026-04-08)

Bug Fixes

• move onUnhandledRequest before auth middleware (4c532c3), closes #58

v6.4.4

6.4.4 (2026-03-13)

Bug Fixes

• update mcp sdk (b72cf36)
• update mcp sdk (753f512)

v6.4.3

6.4.3 (2026-03-13)

Bug Fixes

• extracts JSON from lines with non-JSON prefixes (#55) (d4bdd40)
• extracts JSON from lines with non-JSON prefixes (#55) (7cd526e)

v6.4.2

6.4.2 (2026-03-07)

Bug Fixes

• prevent double cleanup on DELETE request causing ECONNRESET (f1497e0)

v6.4.1

6.4.1 (2026-03-06)

Bug Fixes

• add Mcp-Protocol-Version to default CORS allowed headers (ae66528), closes punkpeye/fastmcp#240
• ignore session ID header in stateless mode (f5cb2ad)

v6.4.0

6.4.0 (2026-01-20)

Bug Fixes

• validate authentication on every request in stateful mode (1ddf5d2)

Features

• update session auth context on every request (cd9b7fd)

v6.3.0

6.3.0 (2026-01-19)

Features

• add tunnel (5dbded5)