This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+3 more
Affected surfaces
Summary
AI summaryFixed /message POST endpoint to properly forward JSON-RPC messages through SSE for standard MCP clients.
Full changelog
Bug fix
The /message POST endpoint was a stub that returned {status:"ok"} without forwarding JSON-RPC messages to the SSE transport. Standard MCP-over-SSE clients (e.g. mcp-remote, used by Claude Desktop) connected successfully but observed zero tools because their initialize and tools/list requests vanished — the responses were never streamed back through the SSE channel.
What changed
Active SSEServerTransport instances are now tracked by sessionId, and /message?sessionId=... POSTs are routed through transport.handlePostMessage() — the canonical SDK pattern.
This bug had been present since SSE support was added and silently broke any client using the standard flow. The custom POST /sse shortcut still works as before, so clients that hit that path were unaffected.
Affected versions
All prior 1.x releases.
Upgrade
docker compose pull && docker compose up -d
Or pin the new image: ghcr.io/smith-and-web/obsidian-mcp-server:v1.3.1.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About smith-and-web/obsidian-mcp-server
SSE-enabled MCP server for remote Obsidian vault management with 29 tools for notes, directories, frontmatter, tags, search, and link operations. Docker-ready with health monitoring.
Related context
Beta — feedback welcome: [email protected]