Hono 2.0.1 now limits HTTP request bodies to 4 MiB by default, returning 413 errors for larger payloads. JSON-RPC batch arrays are capped at 100 messages.
The new version of @modelcontextprotocol/node adds OAuth scope challenges for various tools and resources. It also enforces a 4 MiB default size limit on HTTP request bodies.