Qeravio
Canonical AI event

Model Context Protocol SDK 2.2.0 restricts HTTP client redirects to same-origin.

Streamable HTTP sessions now expire after 30 minutes of inactivity.

7 Sept 20261 verified claims1 sources1 observations
What happened

The official source reports this update: v2.2.0. pip install -U mcp . Docs: https://py.sdk.modelcontextprotocol.io/ A few defaults changed in this release. If you run a server or client on 2.x, skim these first: Behaviour changes HTTP client redirects are only followed within the endpoint's origin ( #3397 ) Client("https://...") , streamable_http_client and sse_client follow a redirect only if it stays on the same scheme, host and port (or upgrades http to https on the same host). A redirect anywhere else is not followed: the call fails with MCPError and the session stays usable (an SSE connect fails with httpx2.HTTPStatusError ).

Why it matters

This official update documents a development concerning v2.2.0. Its practical significance depends on the scope and evidence stated by the source.

What to watch next

Read the official source update and verify its stated scope, evidence and timing before acting on it.

Connected knowledge

Entities affected by this event

Evidence trail

Sources behind the event