Merge branch 'main' into feature/elicitation

Author: siwachabhi

docs/clients.mdx

@@ -262,6 +262,11 @@
           "anchor": "C# SDK",
           "href": "https://github.com/modelcontextprotocol/csharp-sdk",
           "icon": "square-c"
+        },
+        {
+          "anchor": "Swift SDK",
+          "href": "https://github.com/modelcontextprotocol/swift-sdk",
+          "icon": "swift"
         }
       ]
     }

docs/docs.json

@@ -51,6 +51,7 @@ These MCP servers are maintained by companies for their platforms:
 - **[Qdrant](https://github.com/qdrant/mcp-server-qdrant/)** - Implement semantic memory using the Qdrant vector search engine
 - **[Raygun](https://github.com/MindscapeHQ/mcp-server-raygun)** - Access crash reporting and monitoring data
 - **[Search1API](https://github.com/fatwang2/search1api-mcp)** - Unified API for search, crawling, and sitemaps
+- **[Snyk](https://github.com/snyk/snyk-ls/tree/main/mcp_extension)** - Enhance security posture by embedding [Snyk](https://snyk.io) vulnerability scanning directly into agentic workflows.
 - **[Stripe](https://github.com/stripe/agent-toolkit)** - Interact with the Stripe API
 - **[Tinybird](https://github.com/tinybirdco/mcp-tinybird)** - Interface with the Tinybird serverless ClickHouse platform
 - **[Weaviate](https://github.com/weaviate/mcp-server-weaviate)** - Enable Agentic RAG through your Weaviate collection(s)

docs/examples.mdx

@@ -169,6 +169,11 @@ sequenceDiagram
     M->>C: HTTP 401 Unauthorized with WWW-Authenticate header
     Note over C: Extract resource_metadata URL from WWW-Authenticate
 
+    C->>M: Request Protected Resource Metadata
+    M->>C: Return metadata
+
+    Note over C: Parse metadata and extract authorization server(s)<br/>Client determines AS to use
+
     C->>A: GET /.well-known/oauth-authorization-server
     A->>C: Authorization server metadata response
 

docs/specification/draft/basic/authorization.mdx

@@ -0,0 +1,8 @@
+
+#feature-support-matrix-wrapper {
+    overflow-x: auto;
+}
+
+#feature-support-matrix-wrapper table {
+    min-width: 800px;
+}

docs/style.css

@@ -2213,9 +2213,30 @@
                     "type": "string"
                 },
                 "outputSchema": {
-                    "additionalProperties": true,
                     "description": "An optional JSON Schema object defining the structure of the tool's output.\n\nIf set, a CallToolResult for this Tool MUST contain a structuredContent field whose contents validate against this schema.\nIf not set, a CallToolResult for this Tool MUST contain a content field.",
-                    "properties": {},
+                    "properties": {
+                        "properties": {
+                            "additionalProperties": {
+                                "additionalProperties": true,
+                                "properties": {},
+                                "type": "object"
+                            },
+                            "type": "object"
+                        },
+                        "required": {
+                            "items": {
+                                "type": "string"
+                            },
+                            "type": "array"
+                        },
+                        "type": {
+                            "const": "object",
+                            "type": "string"
+                        }
+                    },
+                    "required": [
+                        "type"
+                    ],
                     "type": "object"
                 }
             },

schema/draft/schema.json

@@ -857,7 +857,11 @@ export interface Tool {
    * If set, a CallToolResult for this Tool MUST contain a structuredContent field whose contents validate against this schema.
    * If not set, a CallToolResult for this Tool MUST contain a content field.
    */
-  outputSchema?: object;
+  outputSchema?: {
+    type: "object";
+    properties?: { [key: string]: object };
+    required?: string[];
+  };
 
   /**
    * Optional additional tool information.