UPinar/contrastapi

v1.33.13 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 13d MCP Security & Auth

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-security api claude cve security

+13 more

domain-recon email-security email-validation llm-tools mcp mitre-atlas mitre-d3fend model-context-protocol osint sigma-rules threat-intelligence vulnerability-management web-intel

ReleasePort's take

Light signal

editorial:auto 13d

The `tools/list` RPC payload size dropped from ~309 KB to ~81 KB after removing `outputSchema`. This reduces network traffic and latency for clients.

Why it matters: Payload reduction of ~73% improves performance; update integrations that parse the response to handle the smaller size immediately.

Summary

AI summary

Removed outputSchema from the tools/list response, reducing payload size from ~309 KB to ~81 KB.

Changes in this release

Type	Severity	Summary	CVE
Performance	Medium	tools/list response size reduced from ~309 KB to ~81 KB (~73% reduction). tools/list response size reduced from ~309 KB to ~81 KB (~73% reduction). Source: llm_adapter@2026-05-22 Confidence: high	—
Refactor	Low	Removed _slim_output_schema helper as it became orphaned. Removed _slim_output_schema helper as it became orphaned. Source: granite4.1:30b@2026-05-22-audit Confidence: low	—

Full changelog

Performance / contract — MCP `tools/list`

Symptom: Smithery Observability reported tools/list 100% Unavailable (transport-level drop, 0% server/client errors) while tools/call worked normally. RPC traffic via Smithery collapsed.

Root cause: the tools/list response had grown to ~309 KB, of which ~73% was outputSchema (FastMCP-derived from Pydantic return models). The catalog gateway could not buffer the oversized body and dropped it.

Fix: stop emitting outputSchema on the wire. It is OPTIONAL per the MCP spec; the call contract (name + description + inputSchema) is fully preserved, and tools/call runtime validation + structuredContent are unaffected. Removed the now-orphaned _slim_output_schema helper (the earlier annotation-only slim kept the 231 KB structure).

Result: tools/list payload 309 KB → 81 KB (~73% reduction), 53 tools, 0 with outputSchema. Production verified.

VERSION 1.33.12 → 1.33.13 (cache-prefix invalidation)
Tests: 2467 passed (test invariant flipped: outputSchema must be absent + payload < 120 KB on fast-path and cache-None paths)
MCP tools/Resources/Prompts counts unchanged (53 / 7 / 3)

Breaking Changes

Removed optional `outputSchema` field from `tools/list` response (MCP spec)
Dropped internal `_slim_output_schema` helper

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track UPinar/contrastapi

Get notified when new releases ship.

About UPinar/contrastapi

Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.

All releases →

Related context

Related tools

Earlier breaking changes

v1.33.11 `bulk_sigma_rule_lookup` now costs 1 credit per `rule_id`, changing from flat 1 credit/call.