This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryAdded auto-discovery endpoint for MCP servers via /.well-known/mcp/server-card.json
Full changelog
MCP Server Card: Auto-Discovery Endpoint (SEP-1649)
Standard /.well-known/mcp/server-card.json endpoint enabling AI clients (Claude, Cursor, ChatGPT) to automatically discover, inspect, and configure MCP servers — zero manual configuration required.
Highlights
compileServerCard()— Pure-function compiler that aggregates registry metadata (tools, prompts, resources) into the SEP-1649ServerCardPayloadformatstartServer({ serverCard })— Acceptstrue(auto-generate) or customServerCardConfig. Pre-compiled once at startup as a static JSON string — zero per-request overhead- HTTP headers —
Content-Type: application/json,Cache-Control: public, max-age=300,X-Content-Type-Options: nosniff,Access-Control-Allow-Origin: * - Types —
ServerCardConfig,ServerCardPayload,ServerCardToolEntry,SERVER_CARD_PATH - Barrel exports — Available from
@vurb/coreroot and@vurb/core/server
Quick Start
await startServer({
name: 'billing-api',
version: '2.1.0',
registry,
transport: 'http',
serverCard: {
title: 'Billing API',
description: 'Financial operations and invoice management',
documentationUrl: 'https://docs.example.com/billing',
},
});
Test Suite
55 tests covering: happy path (16), JSON compliance (5), adversarial inputs (11), edge cases (9), scale/stress (4), idempotency (3), type contracts (6).
Changed
- All
@vurb/*cross-dependencies updated to^3.18.0 llms.txtupdated with feature docs and API reference
Full Changelog: https://github.com/vinkius-labs/vurb.ts/blob/main/CHANGELOG.md#3180---2026-05-01
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About vinkius-labs/mcp-fusion
A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.
Related context
Related tools
Beta — feedback welcome: [email protected]