chore(mcp): update MCP client and server to 2.2.0 and SDK to 1.31.0

[mattzcarey]

Updates @modelcontextprotocol/client and @modelcontextprotocol/server to 2.2.0 and @modelcontextprotocol/sdk to 1.31.0 across agents, codemode, the examples and the docs. The agents dev and peer pins change, so it has a changeset. Supersedes #2515, #2516, #2535 and #2536.

The Dependabot PRs couldn't be merged as they were:

• chore(deps): bump @modelcontextprotocol/client from 2.0.0 to 2.2.0 #2515 bumped client without server, which leaves client on core@2.2.0 and server on core@2.0.0. mcp/client/x402.ts and mcp/server/legacy-agent.ts use both packages.
• chore(deps): bump @modelcontextprotocol/client from 2.0.0 to 2.2.0 #2515 and chore(deps): bump @modelcontextprotocol/sdk from 1.30.0 to 1.31.0 #2516 conflict with each other, and chore(deps-dev): bump @modelcontextprotocol/sdk from 1.30.0 to 1.31.0 in /packages/codemode #2535 and chore(deps-dev): bump @modelcontextprotocol/client from 2.0.0 to 2.2.0 in /packages/agents #2536 don't update the lockfile.
• Upstream changes that matter here: stored OAuth credentials now carry an issuer stamp, which DurableObjectOAuthClientProvider already saves unchanged; list calls now fetch every page, which catalog.ts's cursor loop handles.
• The conformance fixture stays on the 2.0.0 source. The 2.2.0 fixture only adds scope-challenge registrations for conformance 0.2.0-alpha.11, and we run alpha.10.

Tests ran: the full agents and codemode suites, pnpm run test:conformance (client and every server mode, including the auth/iss-* and auth/authorization-server-migration scenarios), and a typecheck of the whole repo.

---

[changeset-bot]

🦋 Changeset detected

Latest commit: 409a460

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
agents	Patch
@cloudflare/agent-think	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[agent-think]

🟡 agents import sizes: 6 entry points grew

	Entry point	Exports	Largest gzip change	Size now
🟡	agents/mcp	15 resized	up to +3.8 KiB (+0.98%)	396.8 KiB
🟡	agents/mcp/server	1 resized	+2.3 KiB (+2.8%)	82.8 KiB
🟡	agents/chat-sdk	5 resized	up to +1.3 KiB (+0.49%)	267 KiB
🟡	agents	30 resized	up to +1.3 KiB (+0.49%)	264.5 KiB
🟡	agents/workflows	2 resized	up to +1.3 KiB (+0.49%)	265.8 KiB
🟡	agents/mcp/client	1 resized	+1.3 KiB (+0.81%)	160.1 KiB

Changed exports (54)

	Import	Gzip change	Size now
🟡	agents/mcp#createMcpHandler	+3.8 KiB (+0.98%)	396.8 KiB
🟡	agents/mcp#experimental_createMcpHandler	+2.3 KiB (+0.61%)	383.1 KiB
🟡	agents/mcp#createLegacyMcpHandler	+2.3 KiB (+0.6%)	383 KiB
🟡	agents/mcp/server#createMcpHandler	+2.3 KiB (+2.8%)	82.8 KiB
🟡	agents/mcp#WorkerTransport	+2.2 KiB (+0.63%)	352.9 KiB
🟡	agents/mcp#SSEEdgeClientTransport	+1.9 KiB (+0.54%)	349.2 KiB
🟡	agents/mcp#StreamableHTTPEdgeClientTransport	+1.9 KiB (+0.53%)	349.2 KiB
🟡	agents/mcp#getMcpAuthContext	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/mcp#MCP_SERVER_ID_MAX_LENGTH	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/mcp#RPCClientTransport	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/mcp#normalizeServerId	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/mcp#RPCServerTransport	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/mcp#DurableObjectEventStore	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/mcp#McpAgent	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/mcp#ElicitRequestSchema	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/mcp#RPC_DO_PREFIX	+1.8 KiB (+0.53%)	349.1 KiB
🟡	agents/chat-sdk#ChatSdkStateAdapter	+1.3 KiB (+0.49%)	267 KiB
🟡	agents/chat-sdk#createChatSdkState	+1.3 KiB (+0.49%)	267.1 KiB
🟡	agents#getCurrentAgent	+1.3 KiB (+0.49%)	264.5 KiB
🟡	agents#__DO_NOT_USE_WILL_BREAK__withInvocationScope	+1.3 KiB (+0.49%)	264.5 KiB
🟡	agents#isDurableObjectStorageReset	+1.3 KiB (+0.49%)	264.5 KiB
🟡	agents/workflows#AgentWorkflow	+1.3 KiB (+0.49%)	265.8 KiB
🟡	agents/chat-sdk#ChatSdkStateAgent	+1.3 KiB (+0.49%)	266.3 KiB
🟡	agents/mcp/client#MCPClientManager	+1.3 KiB (+0.81%)	160.1 KiB
🟡	agents#unstable_callable	+1.3 KiB (+0.49%)	264.6 KiB
🟡	agents#routeAgentRequest	+1.3 KiB (+0.48%)	265.2 KiB
🟡	agents#normalizeServerId	+1.3 KiB (+0.48%)	264.5 KiB
🟡	agents#isPlatformTransientError	+1.3 KiB (+0.48%)	264.5 KiB
🟡	agents#buildAgentUrl	+1.3 KiB (+0.48%)	265.2 KiB
🟡	agents#buildAgentPath	+1.3 KiB (+0.48%)	265 KiB
🟡	agents#getAgentByName	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#camelCaseToKebabCase	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#__DO_NOT_USE_WILL_BREAK__agentContext	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#DEFAULT_AGENT_STATIC_OPTIONS	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#isDurableObjectCodeUpdateReset	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#MCP_SERVER_ID_MAX_LENGTH	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#SqlError	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#routeAgentEmail	+1.3 KiB (+0.48%)	264.7 KiB
🟡	agents#parseSubAgentPath	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#isDurableObjectMemoryLimitReset	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents/chat-sdk#defaultThreadShard	+1.3 KiB (+0.48%)	264.5 KiB
🟡	agents/chat-sdk#defaultKeyShard	+1.3 KiB (+0.48%)	264.6 KiB
🟡	agents#DurableObjectOAuthClientProvider	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#AGENT_TOOL_MILESTONE_PART	+1.3 KiB (+0.48%)	264.4 KiB
🟡	agents#Agent	+1.3 KiB (+0.47%)	264.4 KiB
🟡	agents#StreamingResponse	+1.2 KiB (+0.47%)	264.4 KiB
🟡	agents#SUB_PREFIX	+1.2 KiB (+0.47%)	264.4 KiB
🟡	agents#createHeaderBasedEmailResolver	+1.2 KiB (+0.47%)	264.6 KiB
🟡	agents#MessageType	+1.2 KiB (+0.47%)	264.6 KiB
🟡	agents#AGENT_TOOL_PROGRESS_PART	+1.2 KiB (+0.47%)	264.4 KiB

…and 4 more exports in the workflow artifact.

How this works

Each runtime export is bundled on its own, minified, and gzipped. Changes smaller than 100 B, or smaller than 1% and 1 KiB, are ignored. Growth over 10% or 5 KiB is marked 🔴. This report is informational and does not fail CI. The workflow artifact contains every measurement.

_{Compared 7945da9c → 409a460d · workflow run · reported by agent-think[bot]}

[pkg-pr-new]

Open in StackBlitz

agents

npm i https://pkg.pr.new/agents@2573

@cloudflare/ai-chat

npm i https://pkg.pr.new/@cloudflare/ai-chat@2573

@cloudflare/codemode

npm i https://pkg.pr.new/@cloudflare/codemode@2573

hono-agents

npm i https://pkg.pr.new/hono-agents@2573

@cloudflare/shell

npm i https://pkg.pr.new/@cloudflare/shell@2573

@cloudflare/think

npm i https://pkg.pr.new/@cloudflare/think@2573

@cloudflare/voice

npm i https://pkg.pr.new/@cloudflare/voice@2573

@cloudflare/worker-bundler

npm i https://pkg.pr.new/@cloudflare/worker-bundler@2573

commit: 409a460