Update ghcr.io/modelcontextprotocol/inspector Docker tag to v2

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/modelcontextprotocol/inspector	major	0.22.0 → 2.6.0

---

Release Notes

modelcontextprotocol/inspector (ghcr.io/modelcontextprotocol/inspector)

v2.6.0

Compare Source

What's Changed

• fix(web): reset pending OAuth slots during render, not in an effect by @​cliffhall in #​2237
• fix: terminate the OAuth connection-details refresh promise chain by @​cliffhall in #​2236
• fix: key the OAuth clear's active-session check on the storage key by @​cliffhall in #​2238
• chore(deps): npm audit fix before release bump; monthly npm-outdated issue by @​cliffhall in #​2232
• chore(deps): remove dependabot.yml, fold action bumps into the monthly sweep by @​cliffhall in #​2239
• chore(deps): sweep Dependabot alerts into board-tracked issues by @​cliffhall in #​2243
• test(auth): make the revocation fixture a real form-urldecoder by @​cliffhall in #​2246
• chore(deps): refresh fast-uri, qs and browserslist to clear npm audit by @​cliffhall in #​2249
• feat(skills): measure a skill reached from another skill by @​cliffhall in #​2245
• fix(web): remove the wall-clock race in the import-JSON debounce guard test by @​cliffhall in #​2255
• fix(auth): floor the shared revocation budget instead of racing zero by @​cliffhall in #​2256
• feat: support the Skills extension (SEP-2640) with digest verification by @​cliffhall in #​2251
• chore: grant artifact-metadata:write to the GHCR publish job by @​cliffhall in #​2258
• fix: type-discriminate progress toast ids, and a CSPRNG fallback for newAttemptId by @​cliffhall in #​2259
• chore: widen verify:dep-lockstep to declared cross-install copies by @​cliffhall in #​2260
• Reshape the testing → test-servers pointer into an imperative step by @​cliffhall in #​2261
• fix: cap the re-auth banner width and move its flat CSS into the Paper theme by @​cliffhall in #​2266
• feat: refactor the Skills detail pane into collapsible sections with an internally-scrolling file viewer by @​cliffhall in #​2265
• feat: watch the MCP SDK nightly and file an upgrade issue by @​cliffhall in #​2268
• fix: swap the toast ref Set on teardown instead of clearing it by @​cliffhall in #​2267
• docs: specify screenshot capture width and Monitor sidebar width in /pr-flow by @​cliffhall in #​2271
• docs: rule that a wait is a notification, never a tight poll loop by @​cliffhall in #​2272
• docs: reply to each review comment in its own thread, not in a rollup comment by @​cliffhall in #​2273
• docs: add a reusable CLI smoke-testing guide for v2 by @​cliffhall in #​2275
• fix: send an empty-string pagination cursor verbatim on every list adapter by @​cliffhall in #​2277
• fix: decline a union branch requiring a name it never declares by @​cliffhall in #​2276
• fix: strip ANSI from TUI test frames so FORCE_COLOR cannot break assertions by @​cliffhall in #​2279
• fix: key resource list rows by position so duplicate URIs cannot collide by @​cliffhall in #​2281
• feat: seed the MCP org example server as a remote first-run card by @​cliffhall in #​2283
• feat(web): collapse the schema-portability section by default by @​cliffhall in #​2285
• fix: preserve CIMD registration provenance across SDK issuer binding by @​cliffhall in #​2287
• docs: ALLOWED_ORIGINS recipe for a *.localhost proxy by @​cliffhall in #​2290
• fix: report a terminal OAuth token-endpoint refusal instead of a dead retry by @​cliffhall in #​2288
• fix: two load-dependent Storybook flakes — SkillsScreen geometry and the Ace-worker wait by @​cliffhall in #​2291
• feat: Skills extension phase 3 — CLI methods, TUI pane, resources/directory/read, and the frontmatter cross-check by @​cliffhall in #​2293
• docs(release): make the two-PR flow, the production smoke, the ledger and the UI tag explicit by @​cliffhall in #​2299
• chore(release): audit, hono advisory fix, and bump to 2.6.0 by @​cliffhall in #​2302
• chore: merge v2/main for the v2.6.0 milestone release by @​cliffhall in #​2304

Full Changelog: modelcontextprotocol/inspector@2.5.0...2.6.0
Smoke test ledger for milestone branch: v2/chore/milestone-merge-v2.6.0
SEP-2640 support added: Verifying Skills over MCP

v2.5.0

Compare Source

What's Changed

• test(smoke): run the headless web smokes in Firefox via the pre-push gate by @​cliffhall in #​2133
• fix: render tool schemas with root-level anyOf/oneOf composition by @​cliffhall in #​2137
• chore(web): move App.tsx's module-level block into files by @​cliffhall in #​2149
• chore(web): extract App.tsx's leaf hooks by @​cliffhall in #​2150
• chore(web): collapse App.tsx's six session refs into useSessionRef by @​cliffhall in #​2152
• fix(scripts): make smoke:tui assert the TUI survives its first frame (#​2147) by @​cliffhall in #​2158
• ci: run the coverage gate in a parallel job instead of serially after validate by @​cliffhall in #​2160
• chore(web): extract App.tsx's OAuth recovery cluster into useOAuthRecovery by @​cliffhall in #​2162
• chore(web): connected-flow smoke for the Tools, Resources and Prompts tabs by @​cliffhall in #​2164
• chore(web): extract App.tsx's MCP Apps wiring into useMcpApps by @​cliffhall in #​2166
• chore(scripts): rename the local pre-push gate off ci, and guard it out of CI (#​2146) by @​cliffhall in #​2167
• chore(web): extract App.tsx's connection lifecycle into useConnectionLifecycle by @​cliffhall in #​2169
• feat(web): use the Ace JSON editor everywhere, and restore the raw-JSON toggle by @​cliffhall in #​2170
• chore(web): extract App.tsx's server commands into useServerCommands by @​cliffhall in #​2173
• fix: say why a never-acknowledged subscriptions/listen ended, instead of retrying it eight times by @​cliffhall in #​2176
• fix(web): surface failed resource subscribe/unsubscribe by @​cliffhall in #​2179
• fix(web): refuse a raw-JSON tool argument the schema would retype by @​cliffhall in #​2175
• fix(scripts): give the render-smoke overlap test room for process startup by @​cliffhall in #​2178
• test(scripts): anchor the render-smoke overlap paint to the parent's clock by @​cliffhall in #​2181
• chore(web): collapse InspectorView's prop wall into domain bundles by @​cliffhall in #​2182
• fix: cancel a Streamable HTTP call by closing its stream (#​2140) by @​cliffhall in #​2185
• feat(auth): revoke OAuth tokens at the authorization server on clear (RFC 7009) by @​cliffhall in #​2186
• fix(auth): accept RFC 8414 metadata served at the OIDC well-known path by @​cliffhall in #​2184
• fix(core): read state stores during render instead of re-syncing in an effect by @​cliffhall in #​2193
• chore(web): resolve the react-hooks findings App.tsx's decomposition unmasked (#​2161) by @​cliffhall in #​2191
• fix(web): terminate the five void-discarded OAuth recovery promises by @​cliffhall in #​2190
• chore: lint core/react with eslint-plugin-react-hooks by @​cliffhall in #​2194
• chore: extract AGENTS.md recipes into agent skills by @​cliffhall in #​2189
• chore: consolidate duplicated runtime dependencies into the root package.json by @​cliffhall in #​2200
• chore: consolidate shared toolchain devDependencies into the root package.json by @​cliffhall in #​2199
• docs: tune skill eval cases and document how to write them by @​cliffhall in #​2203
• chore: bump version to 2.5.0 by @​cliffhall in #​2213
• chore: merge v2/main for the v2.5.0 milestone release by @​cliffhall in #​2215

Full Changelog: modelcontextprotocol/inspector@2.4.0...2.5.0
Smoke test ledger for milestone branch: v2/chore/milestone-merge-v2.5.0

v2.4.0

Compare Source

What's Changed

• ci: drop the redundant PR-head checkout from claude.yml by @​cliffhall in #​2070
• feat(apps): negotiated app-rendered form elicitations by @​cliffhall in #​2083
• feat(auth): file-backed and in-memory SecretStore for hosts with no keychain by @​cliffhall in #​2076
• chore(lint): fail lint on warnings (--max-warnings 0) by @​cliffhall in #​2090
• fix(web): roll a failed settings write back to what actually landed by @​cliffhall in #​2091
• chore: three small cleanups flagged in the v2.2.0 merge review by @​cliffhall in #​2092
• feat(auth): give the secrets file a real cross-process lock by @​cliffhall in #​2088
• feat: allow complex JSON values in request _meta by @​cliffhall in #​2094
• fix(web): surface a failed post-write server-list reload by @​cliffhall in #​2087
• fix(web): read MCP App UI resource metadata from _meta.ui by @​cliffhall in #​2098
• chore: remove the Claude Code GitHub Actions workflow by @​cliffhall in #​2103
• fix(proxy): route through undici's own fetch and keep undici external by @​cliffhall in #​2099
• fix(auth): don't answer token_expired from an unknowable local expiry by @​cliffhall in #​2105
• fix(web): state the expected shape when dropping a CSP source (#​2064) by @​cliffhall in #​2106
• fix(web): honor _meta.ui.domain with a dedicated app origin by @​cliffhall in #​2100
• chore(ci): render an MCP App from the installed tarball in pack:verify (#​2003) by @​cliffhall in #​2107
• fix(web): let tool string arguments be typed as multiline by @​cliffhall in #​2109
• fix(cli): apply a server's persisted mcp.json metadata by @​cliffhall in #​2112
• chore: pin esbuild past the GHSA-g7r4-m6w7-qqqr range in web/cli/tui by @​cliffhall in #​2116
• fix(auth): pass the challenge's resource_metadata URL to SDK auth() by @​cliffhall in #​2113
• fix(web): open the monitoring sidebar when a connect fails during OAuth by @​cliffhall in #​2115
• feat(oauth): make the refresh_token grant opt-out per server by @​cliffhall in #​2114
• chore(scripts): build test-servers unconditionally from one shared helper (#​2111) by @​cliffhall in #​2120
• feat: flag unportable tool schemas in all three clients by @​cliffhall in #​2121
• fix(oauth): persist the requested scope when the token response omits it by @​cliffhall in #​2118
• fix(web): carry a landed stdio env/cwd onto the config it connects with by @​cliffhall in #​2119
• fix: keep the pagination toggle on the last write across a server switch by @​cliffhall in #​2131
• fix(core): carry the in-progress SSE frame across chunk boundaries by @​cliffhall in #​2135
• fix(oauth): keep the server's path in the fallback authorization-server URL (#​2110) by @​cliffhall in #​2136
• fix(web): take the enlarge button out of the tab order by @​cliffhall in #​2139
• chore: bump version to 2.4.0 by @​cliffhall in #​2142
• chore: merge v2/main for the v2.4.0 milestone release by @​cliffhall in #​2145

Full Changelog: modelcontextprotocol/inspector@2.3.0...2.4.0

Smoke test ledger for milestone branch: v2/chore/milestone-merge-v2.4.0

v2.3.0

Compare Source

What's Changed

• fix: bind loopback by address and pin the sandbox port for containers by @​cliffhall in #​2009
• chore: sync v2/main to 2.2.0 + guidance to bump on v2/main before the milestone merge by @​cliffhall in #​2011
• fix: gate the connect-time logging/setLevel on the negotiated era (#​1990) by @​cliffhall in #​2017
• fix: add eol=lf policy to .gitattributes so Windows checkouts stay clean by @​olaservo in #​1994
• chore(deps): Bump the npm_and_yarn group across 4 directories with 6 updates by @​dependabot[bot] in #​2004
• fix: render nullable and union argument fields correctly in the web form and the TUI by @​cliffhall in #​2014
• build(deps): bump the github-actions group across 1 directory with 5 updates by @​dependabot[bot] in #​1976
• fix: gate submission on unsendable field text, and on required tool arguments by @​cliffhall in #​2024
• feat: per-server custom OAuth authorization-request parameters by @​cliffhall in #​2022
• feat: surface and decode the OAuth id_token in Connection Info by @​cliffhall in #​2023
• fix: salvage a list result's valid entries when one is malformed (#​1909) by @​cliffhall in #​2016
• test(web): pin the JSON editor's reported escaping reproductions (#​1853, #​1856, #​1885) by @​cliffhall in #​2025
• fix(web): stop a schema default from reverting the edit in progress by @​cliffhall in #​2027
• chore(scripts): derive dep-lockstep candidates from what enters each tsc program by @​cliffhall in #​2029
• fix: settle ink input handlers after frame waits so TUI coverage runs stop flaking on Windows by @​olaservo in #​1996
• fix: stop emitting a process-wide SIGINT in run-method.test so the CLI suite passes on Windows by @​olaservo in #​1995
• fix(web): read modern tasks support from the extension map by @​cliffhall in #​2032
• fix(web): accept CRLF-delimited SSE frames on the servers events stream by @​cliffhall in #​2036
• chore(lint): enable @​typescript-eslint/no-floating-promises in all five ESLint scopes by @​cliffhall in #​2039
• feat(auth): Auth URL and Token URL overrides in Server Settings by @​cliffhall in #​2037
• fix(web): name an empty tool result instead of "No results yet" (#​1860) by @​cliffhall in #​2034
• fix(web): correct the Custom Headers OAuth hint, name key/value rows for a11y (#​2040) by @​cliffhall in #​2038
• fix: resolve node bins via package.json instead of spawning npx .cmd shims so verify/smoke scripts run on Windows by @​olaservo in #​1997
• fix(web): expand resource templates per RFC 6570 by @​cliffhall in #​2035
• fix(web): key tool selection by row identity so duplicate tool names are individually inspectable by @​cliffhall in #​2041
• chore: ignore the web client's tsup build output in ESLint by @​cliffhall in #​2044
• fix: register SSE abort cleanup before the priming write by @​cliffhall in #​2045
• fix: surface list-fetch failures in paginated mode (#​1998) by @​cliffhall in #​2047
• fix: handle background command rejections in App (#​2049) by @​cliffhall in #​2050
• chore: bump version to 2.3.0 by @​cliffhall in #​2052
• chore(deps): sync the security fixes that landed on main by @​cliffhall in #​2059
• chore(deps): bump nanoid to 3.3.18 to clear the high-severity advisory by @​cliffhall in #​2061
• chore: merge v2/main for the v2.3.0 milestone release by @​cliffhall in #​2054

Full Changelog: modelcontextprotocol/inspector@2.2.0...2.3.0

Smoke test ledger for milestone branch: v2/chore/milestone-merge-v2.3.0

v2.2.0

Compare Source

What's Changed

• ci: sync the release workflow on v2/main with main's verbatim by @​cliffhall in #​1904
• fix: ship clients/web/static so the MCP Apps sandbox proxy loads by @​cliffhall in #​1934
• fix: surface list-fetch failures instead of swallowing them by @​cliffhall in #​1954
• fix: construct AsyncEntry inside the try so keychain degradation engages (#​1848) by @​cliffhall in #​1945
• fix: load @​napi-rs/keyring lazily so an unsupported platform degrades instead of crashing (#​1905) by @​cliffhall in #​1948
• fix: render a tool result's structuredContent in the Tools screen (#​1908) by @​cliffhall in #​1975
• fix(docker): publish on loopback by default; make a mounted state dir writable by @​cliffhall in #​1974
• fix(web): keep the text being typed in a schema number field (#​1888) by @​cliffhall in #​1972
• docs: rules for issue triage and board hygiene by @​cliffhall in #​1932
• fix: key tool rows by source position so duplicate names filter correctly by @​cliffhall in #​1961
• ci: gate claude.yml on same-repo PRs and pin actions to commit SHAs by @​cliffhall in #​1966
• chore(deps): align zod across installs and guard against version skew by @​cliffhall in #​1962
• chore: declare the MCP SDK packages only at the repo root (#​1970) by @​cliffhall in #​1971
• fix: forward the negotiated Mcp-Protocol-Version through the remote proxy by @​cliffhall in #​1963
• fix: settle the deliberately in-flight tool calls in the progress tests by @​cliffhall in #​1958
• chore(storybook): drop the redundant setProjectAnnotations setup file by @​cliffhall in #​1968
• fix: open the modern listen stream whenever the filter is non-empty (#​1920) by @​cliffhall in #​1967
• fix: prime SSE streams so Firefox resolves the events fetch by @​cliffhall in #​1946
• docs: add the v1 → v2 migration guide by @​cliffhall in #​1960
• chore(smoke): run the web smokes against a throwaway catalog by @​cliffhall in #​1978
• fix(tui): bundle React-rendering deps so a consumer install can't split React by @​cliffhall in #​1983
• fix(test): wait for the dead transport instead of sleeping 300ms by @​cliffhall in #​1987
• fix(test): clear leaked timers so one cannot fail an unrelated CI run by @​cliffhall in #​1986
• docs: document the DCO signoff requirement by @​cliffhall in #​1982
• chore: upgrade the MCP TypeScript SDK from 2.0.0-beta.5 to 2.0.0 by @​cliffhall in #​1989
• docs: six-month Inspector roadmap (Aug 2026 → Feb 2027) by @​cliffhall in #​1981
• chore: merge v2/main for the v2.2.0 milestone release by @​cliffhall in #​1993

Full Changelog: modelcontextprotocol/inspector@2.1.0...2.2.0

v2.1.0

Compare Source

What's Changed

• docs: restore SECURITY.md, lost in the v2 tree swap by @​cliffhall in #​1843
• fix(core): mirror SEP-2243 x-mcp-header args to Mcp-Param-* on tools/call by @​SamMorrowDrums in #​1847
• docs: post-swap branch model, PR policy, milestone rule, and Copilot review instructions by @​cliffhall in #​1866
• docs: converge README Test servers section with main's restructure by @​cliffhall in #​1880
• docs: rename CONTRIBUTORS.md to CONTRIBUTING.md so GitHub surfaces the policy by @​cliffhall in #​1884
• docs: unpin the branch-pinned CONTRIBUTORS.md links in the PR template by @​cliffhall in #​1879
• docs: restore SECURITY.md on v2/main, so the next tree swap can't drop it by @​cliffhall in #​1867
• ci: restore the Claude Code workflow and .mcp.json, lost in the v2 tree swap by @​cliffhall in #​1869
• chore: restore repo files dropped by the v2 tree swap by @​cliffhall in #​1871
• chore(deps): bring main's rc-series bumps to v2/main (@​hono/node-server 2.x, vite 8.1.5) by @​cliffhall in #​1881
• fix(scripts): await the pack:verify web child's exit before removing its work dir by @​cliffhall in #​1895
• docs: add Incoming to both boards, adopt the v2 Priority field, and document the triage rubric by @​cliffhall in #​1892
• docs: replace the markdown bug template with GitHub issue forms by @​cliffhall in #​1894
• chore(deps): untangle the vitest/Storybook exact-pin knot to clear GHSA-p63j-vcc4-9vmv by @​cliffhall in #​1899
• chore(deps): migrate to eslint 10 to clear the brace-expansion DoS advisory by @​cliffhall in #​1900
• chore: merge v2/main for the v2.1.0 milestone release by @​cliffhall in #​1903

New Contributors

• @​SamMorrowDrums made their first contribution in #​1847

Full Changelog: modelcontextprotocol/inspector@2.0.0...2.1.0

v2.0.0

Compare Source

The v2 Inspector is now the default release.

npx @modelcontextprotocol/inspector          # web UI
npx @modelcontextprotocol/inspector --cli    # CLI
npx @modelcontextprotocol/inspector --tui    # TUI

What's new

v2 ships as a single package with three clients — a Vite + React + Mantine web UI, a scriptable CLI, and an Ink-based TUI — over a shared @inspector/core runtime, so all three behave identically.

Upgrading from v1

• Node >= 22.19.0 is now required (was >= 22.7.5).
• CLI flags changed substantially. In particular --config now means a read-only session file; --catalog is the writable server list. See MCP server configuration.
• The v1 sub-packages (inspector-client, inspector-server, inspector-cli) are deprecated and not part of v2 — v2 publishes a single package.

v1

v1 is deprecated and receives security fixes only, published under the v1-latest tag:

npm i @modelcontextprotocol/inspector@v1-latest

v1.0.2

Compare Source

What's Changed

v1.x security and publishing fixes

• chore: pin v1 publishes to the v1 dist-tag by @​cliffhall in #​1828
• fix: v1 dist-tag must be v1-latest — npm rejects v1 by @​cliffhall in #​1829
• ci(v1): pin workflow branch filters to v1/main, re-enabling the e2e gate by @​cliffhall in #​2066
• fix: prevent DNS-rebinding TOCTOU in safeProxyFetch by pinning resolved IPs by @​manjunathbhaskar in #​1732
• fix(deps): bump js-yaml overrides to patched 3.15.1 / 4.3.1 by @​cliffhall in #​2073
• fix(deps): clear remaining npm audit advisories by @​cliffhall in #​2075
• chore: deny esbuild and fsevents install scripts by @​cliffhall in #​2077
• chore: bump version to 1.0.2 by @​cliffhall in #​2081

New Contributors

• @​manjunathbhaskar made their first contribution in #​1732

Full Changelog: modelcontextprotocol/inspector@1.0.1...1.0.2

v1.0.1: — v1 deprecated

Compare Source

v1 is deprecated. Use @​modelcontextprotocol/inspector@latest (v2). v1 receives security fixes only.

v1.0.0

Compare Source

Versioning Note

Since this should be the last release of the classic MCP Inspector, it is finally being promoted to 1.0.0, primarily so that it can be referred to as the V1 implementation. It fixes outstanding security warnings and includes a couple of bug fixes.

Along with the release of the the upcoming 2026-07-28 MCP specification, we will be publishing an entirely new Inspector with a completely different codebase. The V2 web-based inspector client, the CLI, and a new TUI — all of which have a shared code architecture — will all ship as a single npm package. The V1 Inspector package will be officially deprecated at that time, and no further work will be done on that line.

What's Changed

• fix: call tasks/result when task status is input_required by @​galagaevdc in #​1174
• Fix resource refresh button not triggering re-fetch by @​olaservo in #​1148
• chore: pin prettier to 3.9.5 and run format check after install by @​cliffhall in #​1716
• chore(deps): bump vitest to ^4.1.0 (CVE fix) by @​cliffhall in #​1707
• chore(deps): bump vite to ^7.3.5 (CVE fixes) by @​cliffhall in #​1709
• chore(deps): bump shell-quote to ^1.8.4 (CVE fix) by @​cliffhall in #​1711
• chore(deps): override hono to ^4.12.25 (CVE fixes) by @​cliffhall in #​1708
• chore(deps): override form-data to ^4.0.6 (CVE fix) by @​cliffhall in #​1710
• chore(deps): override @​babel/core to ^7.29.6 (CVE fix) by @​cliffhall in #​1712
• chore(deps): finalize security overrides and regenerate lockfile by @​cliffhall in #​1718
• fix(server): guard the /fetch proxy against SSRF to link-local/metadata (alert 53) by @​cliffhall in #​1717
• Bump to version 1.0.0 by @​cliffhall in #​1720

New Contributors

• @​galagaevdc made their first contribution in #​1174

Full Changelog: modelcontextprotocol/inspector@0.22.0...1.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.88%. Comparing base (b5854a2) to head (cb61a23).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6616      +/-   ##
==========================================
- Coverage   78.89%   78.88%   -0.01%     
==========================================
  Files         778      778              
  Lines       77598    77598              
==========================================
- Hits        61219    61217       -2     
- Misses      16374    16376       +2     
  Partials        5        5              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.