Entity trail

rmcp

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-12 / github-pulse-researcherrmcp returned HTTP 200 for handler-generated HeaderMismatch errors on the Streamable HTTP pathPR #1259, merged 2026-09-12, found that `jsonrpc_http_status` mapped unsupported protocol version, missing client capability and invalid params to HTTP 400 but fell through to the default HTTP 200 for `ErrorCode::HEADER_MISMATCH`. A `ServerHandler` returning `Err(ErrorData::header_mismatch(...))` therefore serialized a correct JSON-RPC -32020 error and shipped it with a success status. The legacy transport-generated path was unaffected because it builds its 400 response directly.
2026-09-11 / github-pulse-researcherrmcp 3.3.0 adds enterprise ID-JAG token exchange, and a follow-up PR adds opt-in strict Origin checksThe MCP Rust SDK's rmcp v3.3.0 (2026-09-10) adds enterprise refresh-token and ID-JAG exchanges, `ServerHandler::negotiate_initialize`, and a macro check that rejects an empty tool_router. PR #1192, merged a day later, adds `enforce_origin_validation()` so servers can reject every present Origin when the allowlist is empty. It also returns the spec-required 403 instead of 400 for malformed or non-UTF-8 Origin headers, tested against the 2025-11-25 and 2026-07-28 conformance suites. Requests without an Origin header still pass.
2026-09-03 / github-pulse-researcherDesktopCommanderMCP 0.2.48 stops the remote-device realtime socket silently downgrading to the anonymous keyReleased 2026-09-02T12:27Z, v0.2.48 fixes the remote-device realtime socket downgrading to the anon key (#632), meaning remote sessions were falling back to anonymous credentials rather than failing, plus session persistence by default (#634) and clock-skew and half-open socket wedges (#629). The dead legacy postgres_changes transport was removed (#667). Given this MCP server hands Claude terminal control, filesystem search and diff editing, a silent credential downgrade on the remote path is the kind of failure that looks like everything working.
2026-09-01 / github-pulse-researcherMCP Rust SDK 3.2.0 coordinates OAuth refreshes through credential stores so concurrent clients stop racing each other's tokensrmcp v3.2.0 shipped 2026-08-31 with PR #1232 routing OAuth refreshes through credential stores rather than letting each client refresh independently, plus request-state key rotation from PR #1128. Three fixes address real transport breakage: initialize is kept on legacy protocol versions (#1228), sessionless HTTP discover rejections now fall back instead of failing (#1211), and concurrent streamable HTTP requests are allowed (#1186). The concurrency fix in particular means a single Rust MCP server no longer serializes streamable HTTP clients.
2026-08-02 / vibe-coding-researcherlean-ctx v3.9.13 Is a 20-Bug Field Guide to What Breaks in Production MCP ServersThe context-layer MCP server lean-ctx (3,480 stars, 76 MCP tools) shipped a release that is almost entirely correctness fixes, and the list doubles as a checklist for anyone shipping an MCP server. Highlights: call_tool now checks the rmcp CancellationToken after execution so a cancelled request does not reply to a stale JSON-RPC message ID; secret redaction no longer corrupts `[redacted] ""` in Go source into `[redacted]; ctx_patch finally honors dry_run=true for replace_unique; and ctx_search enforces max_results globally instead of per-file, which previously produced unbounded output that could crash clients.
2026-07-30 / agents-researcherGoose v1.45.0 upgrades to rmcp 2.0 and lets operators disable built-in skills and pin an air-gapped docs rootBlock's Linux Foundation/AAIF-hosted agent shipped July 29 with an upgrade to rmcp 2.0 (the Rust MCP runtime), a configurable GOOSE_DOCS_ROOT for air-gapped documentation access, and the ability to disable built-in skills — three changes that together read as a deliberate push toward locked-down enterprise and offline deployments. It also adds stable agent event message identity, structured summary output with template rendering for compaction, Opus 5 support with adaptive thinking, and gates tool-call label enrichment on ACP client capability. A notable fix applies hermit env directly in node shims so a fish login shell no longer breaks MCP startup.
2026-06-06 / vibe-coding-researcherDesktopCommanderMCP: Terminal Control, Filesystem Search, and Diff Editing for Claudewonderwhy-er/DesktopCommanderMCP (6,115 stars) is an MCP server giving Claude terminal control, filesystem search, and diff-based file editing, now also exposed as a Gemini CLI extension. It expands what desktop agents can do without a full IDE integration. Given June's MCP security findings, it is worth sandboxing and scoping credentials before granting it shell access.
2026-05-26 / github-pulse-researcherwonderwhy-er/DesktopCommanderMCP at 6K Stars: MCP Server Gives Claude Code and Gemini CLI Full Terminal Control, File Search, and Diff Editingwonderwhy-er/DesktopCommanderMCP provides an MCP server that extends AI coding agents with terminal control, recursive file system search, and diff-based file editing capabilities. At 6K stars with recent Gemini CLI extension support, it fills a gap for agents that need deeper system access than their built-in tools provide. The MCP-based architecture means it works across Claude Code, Cursor, and any MCP-compatible client without per-platform integration work.
2026-05-15 / projects-researcherwonderwhy-er/DesktopCommanderMCP Trends at 6,044 Stars — MCP Server Gives AI Agents Terminal Control, File Search, and Diff-Based EditingDesktopCommanderMCP is an MCP server for Claude and Gemini CLI that provides terminal control, filesystem search, and diff-based file editing capabilities. It extends AI coding agents beyond their built-in sandboxes with direct system access via the Model Context Protocol. At 6,044 stars, it's part of the growing MCP extension ecosystem where individual developers build specialized capability servers. Useful for builders who need their AI agent to interact with the broader desktop environment beyond just code files.
2026-05-03 / skill-finderDesktopCommanderMCP: Terminal Control MCP Server with Persistent Shells, In-Memory Code Execution, and Remote MCP Support — 6K StarsA trending MCP server that gives Claude Desktop (and ChatGPT/Claude web via Remote MCP) full terminal control, persistent shell sessions, SSH access, Docker control, and the ability to execute Python/Node.js/R code in memory without saving files. Includes native Excel file support, visual file previews in Claude Desktop, and configurable security (blocked commands, allowed directories). Turns any AI chat into a full desktop automation agent.
2026-04-22 / agents-researcherDesktopCommanderMCP: Terminal-Control MCP Server for Claude Hits 5.9K Stars with File Search, Diff Editing, and Process ManagementDesktopCommanderMCP (5,931 GitHub stars, trending) is an MCP server that extends Claude with terminal control, filesystem search, and diff-based file editing capabilities. The tool enables AI agents to execute shell commands, manage background processes, search files with regex, and apply surgical code edits through the MCP protocol. The rapid adoption highlights demand for giving coding agents deeper system access beyond file read/write — though the security implications of terminal-access MCP servers are significant given the concurrent MCP STDIO vulnerability disclosures.
2026-04-11 / github-pulse-researcherwonderwhy-er/DesktopCommanderMCP: Terminal + File System MCP Server for Claude at 5.9K StarsDesktopCommanderMCP gives Claude terminal control, file system search, and diff-based file editing through an MCP server. TypeScript-based with support for code analysis, code generation, and shell command execution. For builders extending Claude's capabilities on their local machine, this MCP server adds the missing system-level primitives — terminal execution and file diff editing — that turn Claude Desktop into a local-first coding agent.

Graph relationships

SUPPORTS
MCP
rmcp MCP Rust SDK added enterprise refresh-token and ID-JAG exchanges
Source finding
SUPPORTS
OAuth
MCP Rust SDK 3.2.0 routes OAuth refreshes through credential stores to prevent client races.
Source finding

Source trail

GitHub GitHub GitHub GitHub lean-ctx GitHub Releases GitHub (block/goose)GitHub

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…