Add MCP003 analyzer: warn when WithHttpTransport doesn't set Stateless - #1471

Closed

halter73 wants to merge 41 commits into

mainfrom

halter73/stateless-analyzer

Commits on Mar 26, 2026

Add sessions doc and prefer stateless mode in docs, samples, and error messages

halter73
and
Copilot
committed
c04f198
Fix relative links and address PR review feedback

halter73
and
Copilot
committed
e63ec21
Remove flaky stateless progress test

halter73
and
Copilot
committed
1a8bf45
Add decision tree, backpressure warning, and normalize xrefs
halter73
committed
c9e8ea9
Explicitly set Stateless in all WithHttpTransport calls

halter73
and
Copilot
committed
7e703f3
Document DI service lifetimes and scoping behavior

halter73
and
Copilot
committed
20c6816
Reorganize sessions.md for better flow

halter73
and
Copilot
committed
ad14237
Fix idle session docs and clean up DI scope language

halter73
and
Copilot
committed
2d14019
Elevate backpressure warning to top-level security callout

halter73
and
Copilot
committed
7f9aae0
Refine client compatibility and activity tracking in sessions doc

halter73
and
Copilot
committed
b856d84
Tone down ScopeRequests=false guidance

halter73
and
Copilot
committed
040d26a
Soften sessions doc wording

halter73
and
Copilot
committed
26e3bb5
Fix ScopeRequests guidance for pre-scoped providers

halter73
and
Copilot
committed
d13e0f3
Replace ScopeRequests sample with McpServer.Create example

halter73
and
Copilot
committed
083cf5b
Split DI scopes guidance for stdio vs custom transports

halter73
and
Copilot
committed
5735987
Fix docfx xref namespaces for McpServer.Services and McpServer.Create

halter73
and
Copilot
committed
5737a99
Update InMemoryTransport link to pinned lines

halter73
and
Copilot
committed
6dd7a5c
Spruce up transports.md with per-mode comparison table

halter73
and
Copilot
committed
9e85bd7
Add in-memory transport section and fix SSE comment wording

halter73
and
Copilot
committed
b9fe994
Fix SSE session ID mechanism in transport comparison table

halter73
and
Copilot
committed
bed9aec
Fix StreamClientTransport xref namespace

halter73
and
Copilot
committed
e1625cc
Apply suggestion from @halter73
halter73
authored
5f0051e
Add legacy SSE transport coverage to sessions.md

halter73
and
Copilot
committed
841a3aa
Add cancellation and disposal section to sessions.md

halter73
and
Copilot
committed
04d825d
Reorder sessions.md: practical sections first, deep-dives last

halter73
and
Copilot
committed
4c9c8fb
Apply suggestion
halter73
authored
b8f4034
Add tasks, cancellation, and observability coverage to sessions doc

halter73
and
Copilot
committed
93eecaa
Apply suggestion
halter73
authored
4763a04

Commits on Mar 27, 2026

Refine backpressure warning with technical nuance

halter73
and
Copilot
committed
c8159bb
Move backpressure analysis from top-level warning to detailed section

halter73
and
Copilot
committed
22b4dc1
Add SSE to request backpressure section

halter73
and
Copilot
committed
b5a47b5
Disable legacy SSE endpoints by default (MCP9003)

halter73
and
Copilot
committed
88bad8b
Use generic HTTP server terminology instead of Kestrel-specific

halter73
and
Copilot
committed
62a11b9
Add SSE backpressure remarks to doc comments

halter73
and
Copilot
committed
4062b23
Improve session docs, client behavior, and observability guidance

halter73
and
Copilot
committed
b7e68dc
Clarify session intro: recommend stateless, spec-required client behavior

halter73
and
Copilot
committed
3f71fce
Reorganize sessions.md and use endpoint filter with Activity tag

halter73
and
Copilot
committed
4f885d2
Add MCP003 analyzer: warn when WithHttpTransport doesn't set Stateless

halter73
and
Copilot
committed
61b7172

Commits on Jul 26, 2026

Revert documentation changes

jeffhandley
and
Copilot
committed
096dcfa
Merge remote-tracking branch 'origin/main' into halter73/stateless-analyzer
jeffhandley
committed
45b34b2
Handle conditional HTTP transport calls

jeffhandley
and
Copilot
committed
a1dc6d2