This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryAll tools migrated from server.tool() to server.registerTool() and now support READ_ONLY, WRITE, DESTRUCTIVE annotations with standardized error responses.
Full changelog
What's New
MCP SDK 1.28.0 — registerTool() API Migration
All 33 tools migrated from deprecated server.tool() to the new server.registerTool() config object pattern introduced in MCP SDK 1.28.0.
Tool Annotations
Every tool now has semantic annotations that inform AI clients (Claude, ChatGPT) about tool behavior:
- READ_ONLY —
readOnlyHint: truefor all read/search/list/get tools - WRITE —
readOnlyHint: falsefor send, edit, pin, mark-as-read, join, reaction tools - DESTRUCTIVE —
destructiveHint: truefor delete-message
Clients can use these hints to show confirmation dialogs, batch read-only calls, or warn users before destructive operations.
Better Error Handling
All error responses now include isError: true, allowing LLMs to distinguish errors from normal data responses and handle them appropriately (retry, ask for clarification, etc.).
Internal
- Added
ok(text)/fail(error)helpers for consistent response formatting - Annotation presets (
READ_ONLY,WRITE,DESTRUCTIVE) for easy categorization
Breaking Changes
- Deprecated `server.tool()` removed; all tools must use new `server.registerTool()` config object pattern introduced in MCP SDK 1.28.0.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About overpod/mcp-telegram
Telegram MCP server via MTProto/GramJS — 20 tools for reading chats, searching messages, downloading media, managing contacts. QR code login, npx zero-install. Hosted version at mcp-telegram.com.
Related context
Beta — feedback welcome: [email protected]