docs: update download link of mcp-publisher in GitHub Actions to 1.1.0 (#565)

This pull request makes a minor update to the documentation for
installing the MCP Publisher in GitHub Actions workflows. The change
updates the installation command to use version 1.1.0 of the MCP
Publisher instead of version 1.0.0.

The `mcp-publisher` version in GitHub Actions has to be updated so it
can publish the MCP server to the newest version of MCP Registry.

Documentation update only. No test needed.

No

- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [x] Documentation update

<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [x] I have added or updated documentation as needed

None

Author: yuna0x0

docs/reference/server-json/generic-server-json.md

@@ -672,3 +672,116 @@ For MCP servers that follow a custom installation path or are embedded in applic
 }
 ```
 
+
+### Remote Server with URL Templating
+
+This example demonstrates URL templating for remote servers, useful for multi-tenant deployments where each instance has its own endpoint. Unlike Package transports (which reference parent arguments/environment variables), Remote transports define their own variables:
+
+```json
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
+  "name": "io.modelcontextprotocol.anonymous/multi-tenant-server",
+  "description": "MCP server with configurable remote endpoint",
+  "title": "Multi-Tenant Server",
+  "version": "1.0.0",
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://anonymous.modelcontextprotocol.io/mcp/{tenant_id}",
+      "variables": {
+        "tenant_id": {
+          "description": "Tenant identifier (e.g., 'us-cell1', 'emea-cell1')",
+          "isRequired": true
+        }
+      }
+    }
+  ]
+}
+```
+
+Clients configure the tenant identifier, and the `{tenant_id}` variable in the URL gets replaced with the provided variable value to connect to the appropriate tenant endpoint (e.g., `https://anonymous.modelcontextprotocol.io/mcp/us-cell1` or `https://anonymous.modelcontextprotocol.io/mcp/emea-cell1`).
+
+### Local Server with URL Templating
+
+This example demonstrates URL templating for local/package servers, where variables reference parent Package arguments or environment variables:
+
+```json
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
+  "name": "io.github.example/configurable-server",
+  "description": "Local MCP server with configurable port",
+  "title": "Configurable Server",
+  "version": "1.0.0",
+  "packages": [
+    {
+      "registryType": "npm",
+      "registryBaseUrl": "https://registry.npmjs.org",
+      "identifier": "@example/mcp-server",
+      "version": "1.0.0",
+      "transport": {
+        "type": "streamable-http",
+        "url": "http://localhost:{port}/mcp"
+      },
+      "packageArguments": [
+        {
+          "type": "named",
+          "name": "--port",
+          "description": "Port for the server to listen on",
+          "default": "3000",
+          "valueHint": "port"
+        }
+      ]
+    }
+  ]
+}
+```
+
+The `{port}` variable in the URL references either the `--port` argument name or the `port` valueHint from packageArguments. When the package runs with `--port 8080`, the URL becomes `http://localhost:8080/mcp`.
+
+### Deprecated Server Example
+
+```json
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
+  "name": "io.github.example/old-weather",
+  "description": "Legacy weather server - DEPRECATED: Use weather-v2 instead for new projects",
+  "title": "Old Weather (Deprecated)",
+  "repository": {
+    "url": "https://github.com/example/old-weather",
+    "source": "github",
+    "id": "legacy-abc123-def456-789012-345678-901234567890"
+  },
+  "version": "0.9.5",
+  "packages": [
+    {
+      "registryType": "npm",
+      "registryBaseUrl": "https://registry.npmjs.org",
+      "identifier": "@legacy/old-weather-server",
+      "version": "0.9.5",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "name": "WEATHER_API_KEY",
+          "description": "Weather API key",
+          "isRequired": true,
+          "isSecret": true
+        }
+      ]
+    }
+  ],
+  "_meta": {
+    "io.modelcontextprotocol.registry/publisher-provided": {
+      "tool": "legacy-publisher",
+      "version": "0.8.1",
+      "build_info": {
+        "timestamp": "2023-06-15T09:30:00Z",
+        "deprecation_notice": "This publisher is deprecated. Use npm-publisher v2.0+ for new projects.",
+        "maintenance_mode": true,
+        "final_version": true
+      }
+    }
+  }
+}
+```

internal/validators/validators.go

@@ -374,6 +374,20 @@ func collectAvailableVariables(pkg *model.Package) []string {
 	return variables
 }
 
+// collectRemoteTransportVariables extracts available variable names from a remote transport
+func collectRemoteTransportVariables(transport *model.Transport) []string {
+	var variables []string
+
+	// Add variable names from the Variables map
+	for variableName := range transport.Variables {
+		if variableName != "" {
+			variables = append(variables, variableName)
+		}
+	}
+
+	return variables
+}
+
 // validatePackageTransport validates a package's transport with templating support
 func validatePackageTransport(transport *model.Transport, availableVariables []string) error {
 	// Validate transport type is supported
@@ -405,7 +419,7 @@ func validatePackageTransport(transport *model.Transport, availableVariables []s
 	}
 }
 
-// validateRemoteTransport validates a remote transport (no templating allowed)
+// validateRemoteTransport validates a remote transport with optional templating
 func validateRemoteTransport(obj *model.Transport) error {
 	// Validate transport type is supported - remotes only support streamable-http and sse
 	switch obj.Type {
@@ -414,7 +428,22 @@ func validateRemoteTransport(obj *model.Transport) error {
 		if obj.URL == "" {
 			return fmt.Errorf("url is required for %s transport type", obj.Type)
 		}
-		// Validate URL format (no templates allowed for remotes, no localhost)
+
+		// Collect available variables from the transport's Variables field
+		availableVariables := collectRemoteTransportVariables(obj)
+
+		// Validate URL format with template variable support
+		if !IsValidTemplatedURL(obj.URL, availableVariables, true) { // true = allow templates for remotes
+			// Check if it's a template variable issue or basic URL issue
+			templateVars := extractTemplateVariables(obj.URL)
+			if len(templateVars) > 0 {
+				return fmt.Errorf("%w: template variables in URL %s reference undefined variables. Available variables: %v",
+					ErrInvalidRemoteURL, obj.URL, availableVariables)
+			}
+			return fmt.Errorf("%w: %s", ErrInvalidRemoteURL, obj.URL)
+		}
+
+		// Additional check: reject localhost URLs for remotes (like the old IsValidRemoteURL did)
 		if !IsValidRemoteURL(obj.URL) {
 			return fmt.Errorf("%w: %s", ErrInvalidRemoteURL, obj.URL)
 		}
@@ -540,8 +569,11 @@ func validateWebsiteURLNamespaceMatch(serverJSON apiv0.ServerJSON) error {
 
 // validateRemoteURLMatchesNamespace checks if a remote URL's hostname matches the publisher domain from the namespace
 func validateRemoteURLMatchesNamespace(remoteURL, namespace string) error {
+	// Replace template variables with placeholders before parsing
+	testURL := replaceTemplateVariables(remoteURL)
+
 	// Parse the URL to extract the hostname
-	parsedURL, err := url.Parse(remoteURL)
+	parsedURL, err := url.Parse(testURL)
 	if err != nil {
 		return fmt.Errorf("invalid URL format: %w", err)
 	}

pkg/model/types.go

@@ -9,11 +9,20 @@ const (
 	StatusDeleted    Status = "deleted"
 )
 
-// Transport represents transport configuration with optional URL templating
+// Transport represents transport configuration for Package context
 type Transport struct {
-	Type    string          `json:"type"`
-	URL     string          `json:"url,omitempty"`
-	Headers []KeyValueInput `json:"headers,omitempty"`
+	Type      string           `json:"type"`
+	URL       string           `json:"url,omitempty"`
+	Headers   []KeyValueInput  `json:"headers,omitempty"`
+	Variables map[string]Input `json:"variables,omitempty"`
+}
+
+// RemoteTransport represents transport configuration for Remote context with variables support
+type RemoteTransport struct {
+	Type      string           `json:"type"`
+	URL       string           `json:"url,omitempty"`
+	Headers   []KeyValueInput  `json:"headers,omitempty"`
+	Variables map[string]Input `json:"variables,omitempty"`
 }
 
 // Package represents a package configuration.