2.0.0

Author: ihor-sokoliuk

.mcp/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/ihor-sokoliuk/mcp-searxng",
     "source": "github"
   },
-  "version": "1.16.0",
+  "version": "2.0.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "mcp-searxng",
-      "version": "1.16.0",
+      "version": "2.0.0",
       "transport": {
         "type": "stdio"
       },

CHANGELOG.md

@@ -5,6 +5,30 @@ Versions follow [Semantic Versioning](https://semver.org/).
 
 ## Unreleased
 
+## [2.0.0] - 2026-08-20
+
+### Breaking Changes
+
+- **Node.js 22 or later is now required:** Node.js 20 is no longer supported, and the PDF extraction runtime now uses `unpdf` 1.8.1 with loading-task teardown. Consumers and deployments must upgrade to Node.js 22 or a newer supported release before installing mcp-searxng 2.0.0. ([#251](https://github.com/ihor-sokoliuk/mcp-searxng/pull/251), [#253](https://github.com/ihor-sokoliuk/mcp-searxng/pull/253))
+
+- **STDIO post-connect logging notifications were removed:** The modern protocol deprecates MCP logging notifications, so clients must no longer rely on the former post-connect version, log-level, environment, or configured-instance notices. Interactive launches retain version and configured-instance connection diagnostics on sanitized stderr; non-TTY launches retain configured-instance status there. Tool and resource behavior is unchanged. ([#255](https://github.com/ihor-sokoliuk/mcp-searxng/pull/255))
+
+- **The npm package is now executable-only:** The accidental programmatic module entry point has been removed, and direct package imports such as `createMcpServer` are no longer a supported integration surface. Run mcp-searxng through its CLI, `npx`, or container and communicate with it through MCP. Standard MCP client configuration, tool calls, resources, CLI usage, and container deployments are unchanged. ([#255](https://github.com/ihor-sokoliuk/mcp-searxng/pull/255))
+
+- **HTTP requests now use the modern protocol's validation and capacity boundaries:** Every `POST /mcp` requires `Content-Type: application/json` or receives HTTP 415. When HTTP hardening enables Host validation, it now covers retained stateful as well as stateless requests. Modern sessionless POSTs require the matching `MCP-Protocol-Version: 2026-07-28` header, use the initialization rate-limit bucket, and are bounded by `MCP_HTTP_STATELESS_MAX_IN_FLIGHT`, `MCP_HTTP_STATELESS_MAX_IN_FLIGHT_PER_IP`, and `MCP_HTTP_STATELESS_REQUEST_TIMEOUT_MS` even when legacy `MCP_HTTP_STATELESS` mode is disabled; overload and timeout responses are HTTP 503 and 504. Before upgrading, custom HTTP clients must send the required content type and protocol header, hardened deployments must allow the intended Host values, and operators should tune the documented capacity limits for expected modern traffic. STDIO users are unaffected. ([#255](https://github.com/ihor-sokoliuk/mcp-searxng/pull/255))
+
+### Added
+
+- **Modern MCP protocol serving with the official split SDK v2 packages:** HTTP and STDIO now support the modern `2026-07-28` protocol while retaining the documented legacy transports, tool and resource contracts, admission controls, credential-safe diagnostics, and bounded HTTP cleanup. Modern HTTP requests are sessionless POST operations; legacy stateful and stateless behavior keeps its documented session boundaries. ([#255](https://github.com/ihor-sokoliuk/mcp-searxng/pull/255))
+
+### Security
+
+- **Process-wide tool invocation admission now protects every transport:** STDIO, stateful HTTP, and stateless HTTP share a bounded fixed-window tool-call rate and a hard no-queue in-flight ceiling. Operators can tune `MCP_TOOL_RATE_WINDOW_MS`, `MCP_TOOL_RATE_MAX`, and `MCP_TOOL_MAX_IN_FLIGHT`; exhausted calls receive a sanitized retryable result while initialization, discovery, resources, logging, and health checks remain available. ([#254](https://github.com/ihor-sokoliuk/mcp-searxng/pull/254))
+
+### Contributors
+
+- @app/dependabot - [#252](https://github.com/ihor-sokoliuk/mcp-searxng/pull/252) chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in the github-actions group across 1 directory
+
 ## [1.16.0] - 2026-08-19
 
 ### Added

__tests__/integration/http-server.test.ts

@@ -260,22 +260,33 @@ async function runTests() {
     assert.equal(await isLegacyRequest(webRequest, body), false);
   }, results);
 
-  await testFunction('non-JSON legacy POST returns 415 before classification or server construction', async () => {
+  await testFunction('non-JSON POST uses the init limiter and returns 415 before server construction', async () => {
+    envManager.set('MCP_RATE_INIT_MAX', '1');
     let constructions = 0;
-    const app = await createHttpServer(() => {
-      constructions += 1;
-      return createTestMcpServer();
-    });
-    const response = await request(app).post('/mcp')
-      .set('Content-Type', 'text/plain')
-      .send(JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'initialize', params: {} }));
-    assert.equal(response.status, 415);
-    assert.deepEqual(response.body, {
-      jsonrpc: '2.0',
-      error: { code: -32000, message: 'Unsupported Media Type' },
-      id: null,
-    });
-    assert.equal(constructions, 0);
+    try {
+      const app = await createHttpServer(() => {
+        constructions += 1;
+        return createTestMcpServer();
+      });
+      const response = await request(app).post('/mcp')
+        .set('Content-Type', 'text/plain')
+        .send(JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'initialize', params: {} }));
+      assert.equal(response.status, 415);
+      assert.equal(response.headers['ratelimit-limit'], '1');
+      assert.deepEqual(response.body, {
+        jsonrpc: '2.0',
+        error: { code: -32000, message: 'Unsupported Media Type' },
+        id: null,
+      });
+
+      const exhausted = await request(app).post('/mcp')
+        .set('Content-Type', 'text/plain')
+        .send('{}');
+      assert.equal(exhausted.status, 429);
+      assert.equal(constructions, 0);
+    } finally {
+      envManager.restore();
+    }
   }, results);
 
   await testFunction('temporary missing-version guard is pinned to the published server 2.0.0 package', () => {
@@ -677,6 +688,31 @@ async function runTests() {
     }
   }, results);
 
+  await testFunction('hardened stateful GET and DELETE reject disallowed Host values', async () => {
+    envManager.set('MCP_HTTP_HARDEN', 'true');
+    envManager.set('MCP_HTTP_AUTH_TOKEN', 'stateful-host-test-token');
+    envManager.set('MCP_HTTP_ALLOWED_ORIGINS', 'https://client.example');
+    envManager.set('MCP_HTTP_ALLOWED_HOSTS', 'allowed.example');
+
+    try {
+      const app = await createHttpServer(() => createTestMcpServer());
+      const expected = {
+        jsonrpc: '2.0',
+        error: { code: -32000, message: 'Invalid Host header' },
+        id: null,
+      };
+      for (const method of ['get', 'delete'] as const) {
+        const response = await request(app)[method]('/mcp')
+          .set('Authorization', 'Bearer stateful-host-test-token')
+          .set('Host', 'attacker.example');
+        assert.equal(response.status, 403);
+        assert.deepEqual(response.body, expected);
+      }
+    } finally {
+      envManager.restore();
+    }
+  }, results);
+
 
   await testFunction('stateless POST limiter selection uses the request body and ignores session headers', async () => {
     envManager.set('MCP_HTTP_STATELESS', 'true');
@@ -932,6 +968,57 @@ async function runTests() {
     }
   }, results);
 
+  await testFunction('modern default-mode timeout returns 504 and restores capacity', async () => {
+    envManager.delete('MCP_HTTP_STATELESS');
+    envManager.set('MCP_HTTP_STATELESS_MAX_IN_FLIGHT', '1');
+    envManager.set('MCP_HTTP_STATELESS_MAX_IN_FLIGHT_PER_IP', '1');
+    envManager.set('MCP_HTTP_STATELESS_REQUEST_TIMEOUT_MS', '1000');
+    const never = new Promise<void>(() => undefined);
+    let constructions = 0;
+
+    try {
+      const app = await createHttpServer(() => {
+        constructions += 1;
+        const server = createTestMcpServer();
+        if (constructions === 1) {
+          server.connect = async () => {
+            await never;
+          };
+        }
+        return server;
+      });
+      const modernBody = (id: number) => ({
+        jsonrpc: '2.0', id, method: 'tools/list',
+        params: {
+          _meta: {
+            'io.modelcontextprotocol/protocolVersion': '2026-07-28',
+            'io.modelcontextprotocol/clientCapabilities': {},
+          },
+        },
+      });
+      const postModern = (id: number) => request(app).post('/mcp')
+        .set('Content-Type', 'application/json')
+        .set('Accept', 'application/json')
+        .set('MCP-Protocol-Version', '2026-07-28')
+        .set('MCP-Method', 'tools/list')
+        .send(modernBody(id));
+
+      const timedOut = await postModern(1).timeout({ deadline: 2000 });
+      assert.equal(timedOut.status, 504);
+      assert.deepEqual(timedOut.body, {
+        jsonrpc: '2.0',
+        error: { code: -32000, message: 'Stateless request timed out' },
+        id: null,
+      });
+
+      const recovered = await postModern(2);
+      assert.equal(recovered.status, 200);
+      assert.equal(constructions, 2);
+    } finally {
+      envManager.restore();
+    }
+  }, results);
+
   await testFunction('stateless capacity rejections consume the selected rate-limit bucket', async () => {
     envManager.set('MCP_HTTP_STATELESS', 'true');
     envManager.set('MCP_HTTP_STATELESS_MAX_IN_FLIGHT', '1');
@@ -1824,7 +1911,7 @@ async function runTests() {
   }, results);
 
   await testFunction('Rate limiting: modern POSTs cannot borrow a live legacy session bucket', async () => {
-    envManager.set('MCP_RATE_INIT_MAX', '2');
+    envManager.set('MCP_RATE_INIT_MAX', '3');
     envManager.set('MCP_RATE_SESSION_MAX', '11');
     envManager.set('MCP_RATE_WINDOW_MS', '60000');
     const app = await createHttpServer((modern) => createMcpServer(new ToolAdmissionController({
@@ -1865,13 +1952,29 @@ async function runTests() {
       .send(modernBody(id));
 
     const accepted = await modernPost(2);
-    const blocked = await modernPost(3);
+    const unsupportedClaim = await request(app)
+      .post('/mcp')
+      .set('Content-Type', 'application/json')
+      .set('Accept', 'application/json')
+      .set('mcp-session-id', sessionId)
+      .send({
+        jsonrpc: '2.0', id: 3, method: 'server/discover',
+        params: {
+          _meta: {
+            'io.modelcontextprotocol/protocolVersion': '2099-01-01',
+            'io.modelcontextprotocol/clientCapabilities': {},
+          },
+        },
+      });
+    const blocked = await modernPost(4);
     envManager.restore();
 
     assert.equal(accepted.status, 200);
-    assert.equal(accepted.headers['ratelimit-limit'], '2');
+    assert.equal(accepted.headers['ratelimit-limit'], '3');
+    assert.notEqual(unsupportedClaim.status, 429);
+    assert.equal(unsupportedClaim.headers['ratelimit-limit'], '3');
     assert.equal(blocked.status, 429);
-    assert.equal(blocked.headers['ratelimit-limit'], '2');
+    assert.equal(blocked.headers['ratelimit-limit'], '3');
     assert.equal(blocked.body.error.code, -32029);
   }, results);
 

__tests__/unit/documentation.test.ts

@@ -153,7 +153,7 @@ function hasDependabotIgnoreEntry(source: string, dependencyName: string): boole
 function assertPackageMetadata(): void {
   const packageManifest = JSON.parse(readText(new URL('../../package.json', import.meta.url))) as PackageManifest;
   const packageLock = JSON.parse(readText(new URL('../../package-lock.json', import.meta.url))) as PackageLock;
-  assert.equal(packageManifest.version, '1.16.0');
+  assert.equal(packageManifest.version, '2.0.0');
   assert.equal(packageManifest.engines?.node, '>=22');
   assert.equal(packageManifest.dependencies?.unpdf, '1.8.1');
   assert.equal(packageLock.packages?.[''].engines?.node, '>=22');

__tests__/unit/packed-consumer.test.ts

@@ -226,6 +226,7 @@ async function runWorkflowContractTests(): Promise<void> {
         },
         {
           name: 'mcp-searxng',
+          exports: {},
           dependencies: {
             '@modelcontextprotocol/server': '2.0.0',
           },
@@ -242,7 +243,7 @@ async function runWorkflowContractTests(): Promise<void> {
             { path: 'npm-shrinkwrap.json' },
           ],
         },
-        { name: 'mcp-searxng', dependencies: {} },
+        { name: 'mcp-searxng', exports: {}, dependencies: {} },
       ),
       /artifact_metadata:.*shrinkwrap/,
     );
@@ -254,6 +255,7 @@ async function runWorkflowContractTests(): Promise<void> {
         },
         {
           name: 'mcp-searxng',
+          exports: {},
           dependencies: { '@modelcontextprotocol/sdk': '1.30.0' },
         },
       ),
@@ -262,7 +264,7 @@ async function runWorkflowContractTests(): Promise<void> {
     assert.throws(
       () => assertArtifactMetadata(
         { filename: 'mcp-searxng-1.12.0.tgz', files: [null] },
-        { name: 'mcp-searxng', dependencies: {} },
+        { name: 'mcp-searxng', exports: {}, dependencies: {} },
       ),
       /artifact_metadata:.*file entry/,
     );
@@ -272,10 +274,38 @@ async function runWorkflowContractTests(): Promise<void> {
           filename: 'mcp-searxng-1.12.0.tgz',
           files: [{ path: 'package.json' }, { path: 'dist/cli.js' }],
         },
-        { name: 'mcp-searxng', dependencies: {} },
+        { name: 'mcp-searxng', exports: {}, dependencies: {} },
       ),
       /artifact_metadata:.*pdf-worker\.js/,
     );
+    assert.throws(
+      () => assertArtifactMetadata(
+        {
+          filename: 'mcp-searxng-1.12.0.tgz',
+          files: [{ path: 'package.json' }, { path: 'dist/pdf-worker.js' }],
+        },
+        {
+          name: 'mcp-searxng',
+          main: 'dist/index.js',
+          exports: {},
+          dependencies: {},
+        },
+      ),
+      /artifact_metadata:.*main entrypoint/,
+    );
+    assert.throws(
+      () => assertArtifactMetadata(
+        {
+          filename: 'mcp-searxng-1.12.0.tgz',
+          files: [{ path: 'package.json' }, { path: 'dist/pdf-worker.js' }],
+        },
+        {
+          name: 'mcp-searxng',
+          dependencies: {},
+        },
+      ),
+      /artifact_metadata:.*exports/,
+    );
   }, results);
 
   await testFunction('the public npm release workflow enforces the packed-consumer gate', () => {
@@ -339,6 +369,7 @@ async function runOrchestrationTests(): Promise<void> {
           path.join(installedPackageDirectory, 'package.json'),
           JSON.stringify({
             name: 'mcp-searxng',
+            exports: {},
             dependencies: { '@modelcontextprotocol/server': '2.0.0' },
           }),
         );
@@ -457,6 +488,7 @@ async function runOrchestrationTests(): Promise<void> {
           path.join(installedPackageDirectory, 'package.json'),
           JSON.stringify({
             name: 'mcp-searxng',
+            exports: {},
             dependencies: { '@modelcontextprotocol/server': '2.0.0' },
           }),
         );

package-lock.json

@@ -1,6 +1,6 @@
 {
     "name": "mcp-searxng",
-    "version": "1.16.0",
+    "version": "2.0.0",
     "mcpName": "io.github.ihor-sokoliuk/mcp-searxng",
     "description": "MCP server for SearXNG integration",
     "license": "MIT",
@@ -27,7 +27,7 @@
     "bin": {
         "mcp-searxng": "dist/cli.js"
     },
-    "main": "dist/index.js",
+    "exports": {},
     "files": [
         "dist"
     ],

package.json

@@ -150,6 +150,17 @@ function assertInstalledPackageSafe(installedPackage) {
   if (!installedPackage || typeof installedPackage !== 'object') {
     fail('artifact_metadata', 'installed package manifest is missing');
   }
+  if (installedPackage.main !== undefined) {
+    fail('artifact_metadata', 'programmatic main entrypoint is forbidden');
+  }
+  if (
+    !installedPackage.exports
+    || typeof installedPackage.exports !== 'object'
+    || Array.isArray(installedPackage.exports)
+    || Object.keys(installedPackage.exports).length !== 0
+  ) {
+    fail('artifact_metadata', 'package exports must block programmatic imports');
+  }
   if (installedPackage.dependencies?.['@modelcontextprotocol/sdk'] !== undefined) {
     fail('artifact_metadata', 'legacy monolithic SDK dependency is forbidden');
   }

scripts/packed-consumer-contracts.mjs

@@ -154,6 +154,14 @@ function packedPdfSmokeScript() {
   return [
     "import path from 'node:path';",
     "import { pathToFileURL } from 'node:url';",
+    "for (const target of ['mcp-searxng', 'mcp-searxng/dist/index.js']) {",
+    "  let blocked = false;",
+    "  try { await import(target); } catch (error) {",
+    "    if (error?.code !== 'ERR_PACKAGE_PATH_NOT_EXPORTED') throw error;",
+    "    blocked = true;",
+    "  }",
+    "  if (!blocked) process.exit(1);",
+    "}",
     "const moduleUrl = pathToFileURL(path.resolve('node_modules/mcp-searxng/dist/pdf-reader.js')).href;",
     "const { extractPdfText } = await import(moduleUrl);",
     `const bytes = new Uint8Array(Buffer.from('${fixture}', 'base64'));`,