Inspector V2 Scope

July 5, 2026 · View on GitHub

Brief | V1 Problems | V2 Scope | V2 Tech Stack | V2 UX | V2 Auth | V2 New Spec Impact

Table of Contents

Protocol Features

  • Tools
  • Resources
  • Resource Subscriptions
  • Resource Templates
  • Prompts
  • Elicitation
  • Sampling with stubbed response
  • Roots
  • Logging
  • Completions
  • Metadata
  • Pagination
    • resources/list
    • resources/templates/list
    • prompts/list
    • tools/list
  • Cancellation (of in progress requests)
  • Ping

OAuth Handling

  • authenticate() / completeOAuthFlow() (SDK-backed authorization-code flow)
  • Connection Info for auth debugging
  • Enterprise-managed authorization (EMA / XAA) — see EMA / XAA
  • Mid-session authorization (401 after connect: token refresh, step-up scopes, web remote reconnect) — see Mid-session auth
  • Authorization hardening (MCP 2026-07-28 SEPs: iss, DCR client type, issuer-bound credentials, step-up scope union) — see Auth hardening
  • OAuth runtime persistence — OAuthStorageBase + file/remote backends; shared oauth.json across web/CLI/TUI (#1548, #1549)
  • OAuth smoke testing (manual procedures against hosted servers) — see Smoke testing
  • STDIO
  • SSE
  • SHTTP

Logging Level Control

  • Present and synchronized when connecting to server with logging capability

Copy Server configuration

  • As config file server entry
  • As config file containing server entry
  • Custom headers
  • Client ID
  • Secret
  • Scope

Timeout management

  • Request timeout
  • Request timeout on progress (bool)
  • Maximum total timeout

Schema parsing for Elicitation, Tool Input Schemas

  • New enum types
  • anyOf /oneOf
  • $ref
  • $defs

Form inputs vs JSON editor for:

  • Elicitation, tool input, resource template, and prompt vars, sampling response
  • Field types of primitive, object, array
  • Nullable field types
  • Defaults

Proxy server

  • Required for testing STDIO servers and HTTP servers that can’t open up their CORS origin for testing
  • Implement a feature configuration file rather than disparate environment variables for everything
  • Handle auth flows instead of browser when "via proxy" connection type selected

Previous Security Fixes

  • Unique proxy server session token to prevent unauthorized access to the proxy server's ability to execute local processes and connect to MCP servers.
  • Bind to localhost by default to prevent DNS rebinding attacks (never 0.0.0.0)
  • Fix/validate redirect urls for http/https scheme only in auth flow

Server file maintenance

  • Opening screen similar to MCPJam servers list
  • Adding, changing, and deleting a server would hit endpoints on the proxy server update the inspector’s servers.json config file

Plugin architecture

  • Allow third parties to extend the Inspector with functionality we do not wish to maintain, but which would still be useful to developers within the context of the Inspector, e.g., LLMs, evals, OpenAI Apps SDK playground