modelcontextprotocol/typescript-sdk v2.3.1 on GitHub

Package	Version
`@modelcontextprotocol/client`	2.3.1
`@modelcontextprotocol/server`	2.3.1
`@modelcontextprotocol/core`	2.3.1
`@modelcontextprotocol/server-legacy`	2.3.1
`@modelcontextprotocol/codemod`	2.3.1
`@modelcontextprotocol/node`, `express`, `hono`, `fastify`	unchanged

Changes

requireBearerAuth in @modelcontextprotocol/server-legacy takes the optional expectedResource that @modelcontextprotocol/server 2.3.0 added: it accepts only tokens issued for this server (the token's audience). Off unless you set it. (#2952)
The npm pages of @modelcontextprotocol/server and @modelcontextprotocol/client now open with one note that links the documentation, the migration guide and the issue form. (#2955)