[JanGoebel]

Summary

The readme and the VIPM package description had fallen behind the changes since v3.0.0. The readme now has an installation section, the name rules, the changed protocol fallback, and says which release changed the access-control default. The package description names the new features, and the .vipb version no longer lags behind the last release.

Changes

• readme.md (modified):
  • new Installation section: VIPM, LabVIEW 2020 or newer 64-bit, the palette and its Advanced sub-palette, where the examples go;
  • name rules under Datatypes: lowercase a-z0-9_-, error 5010 for empty, longer than 64 characters or clashing names (from Make tool and prompt names valid MCP keys and refuse clashing names #21);
  • Protocol versions: replaced "served exactly as before" by the actual change, the fallback for an unknown version is now 2025-11-25 (was 2025-06-18);
  • Access control: "Since this version" now says the default changed after v3.0.0;
  • the client config example is a real code fence instead of ''', the dangling "where:" is gone, typos fixed (purpouse ×2, ouputs, Resoruces).
• src/LabVIEW MCP Server SDK.vipb (modified):
  • Description: typos fixed (Promps, informations) and one paragraph added on elicitation, progress and cancellation, structured results and access control;
  • Library_Version 2.2.6.37 → 3.0.0.0, so a local build is no longer older than the released 3.0.0. The release workflow still overwrites it from the tag. Release_Notes is left alone, the workflow writes it from the tag message.

Verified

• The .vipb parses as XML, is still ASCII with CRLF throughout, and only the three lines above differ.
• Every statement added to the readme was checked against the merged pull requests (Make tool and prompt names valid MCP keys and refuse clashing names #21, Serve MCP 2026-07-28 next to the initialize handshake, with elicitation #31, Refuse other computers by default and add an optional bearer token #34, Put the new API VIs into an Advanced sub-palette and keep repo docs out of the package #40) and Test-InstalledPackage.ps1 (example install path).

Not verified

• The .vipb was not opened in VIPM and no package was built from this branch. The CI test build of this pull request covers that.
• The readme was not rendered on GitHub before opening; check the new anchor link #dependencies.

Known rough edges

• The readme does not name the next version number, since that is the maintainer's decision. Once the tag exists, "the release after v3.0.0" in Access control can name it.

🤖 Generated with Claude Code

[github-actions]

Tests

✅ All 64 tests passed.

Per-test results

Test	VI	Result	Checks
Test 1: Initialize	Test Initialize.vi	✅ pass	Assert True: pass
Test 2: Initialized	Test Initialized.vi	✅ pass	Assert True: pass
Test 3: tools/list	Test tools list.vi	✅ pass	Assert True: pass
Test 4: prompts/list	test prompts list.vi	✅ pass	Assert True: pass
Test 5: resources/list	test resources list.vi	✅ pass	Assert True: pass
Test 6: tools call	test tools call.vi	✅ pass	Assert True: pass
Test 7: empty JSON object is an invalid request	test empty msg.vi	✅ pass	Assert True: pass
Test 8: call broken tool	test broken tool.vi	✅ pass	Assert True: pass
Test 6: tools call	test tools call array.vi	✅ pass	Assert True: pass
Test 9: GET is rejected with 405	test http get rejected.vi	✅ pass	GET -> 405 with Allow: POST and error -32600: pass
Test 10: Origin validation	test http origin.vi	✅ pass	Origin http://evil.example -> 403 with error -32600: pass Origin http://localhost:6274 -> 200 with result: pass
Test 11: MCP-Protocol-Version validation	test http protocol version.vi	✅ pass	MCP-Protocol-Version 1999-01-01 -> 400 with error -32022 (Unsupported protocol version, the MCP 2026-07-28 code in both eras): pass MCP-Protocol-Version 2025-06-18 -> 200 with result: pass
Test 12: notification answered with 202	test notification accepted.vi	✅ pass	notifications/initialized -> 202 with empty body: pass
Test 13: request with id answered with 200	test request status.vi	✅ pass	tools/list with id 1 -> 200 with result and id 1: pass
Test 14: unknown method	test unknown method.vi	✅ pass	does/not/exist with id 5 -> 200 with error -32601 and id 5: pass
Test 15: unknown notification	test unknown notification.vi	✅ pass	notifications/cancelled -> 202 with empty body: pass
Test 16: ping	test ping.vi	✅ pass	ping with id 3 -> 200 with result {} and id 3: pass
Test 17: string request id	test string id.vi	✅ pass	tools/list with id "abc-1" -> 200 with result and id "abc-1": pass
Test 18: unknown prompt	test unknown prompt.vi	✅ pass	prompts/get no-such-prompt with id 7 -> JSON-RPC error -32602 with id 7, no status/source: pass
Test 19: unknown resource	test unknown resource.vi	✅ pass	resources/read of an unknown uri with id 8 -> JSON-RPC error -32002 with id 8, no status/source: pass
Test 20: resources/read returns UTF-8 text unchanged	test resource text utf8.vi	✅ pass	text of labview://fixture_utf8 decodes to the bytes of fixture_utf8.txt: pass
Test 21: resources/read returns a binary file as Base64	test resource blob.vi	✅ pass	blob of labview://fixture_binary is the Base64 of the bytes of fixture_binary.png: pass
Test 22: unknown tool	test unknown tool.vi	✅ pass	tools/call no_such_tool -> error -32602 with message Unknown tool: no_such_tool and id 22: pass
Test 23: tools/call with arguments that are not an object	test tool call without arguments.vi	✅ pass	tools/call fake_tool_add with arguments 5 -> error -32602 with message Invalid arguments... and id 23: pass
Test 24: broken tool is a tool execution error	test broken tool message.vi	✅ pass	tools/call fake_tool_broken_vi -> result with isError true and a text that says not executable: pass
Test 25: prompts/get without arguments	test prompt without arguments.vi	✅ pass	prompts/get fake_prompt_concatanate_strings without arguments -> result with messages: pass
Test 26: request without method	test request without method.vi	✅ pass	a message with id 26 and no method -> error -32600 with id 26: pass
Test 27: malformed JSON	test malformed json.vi	✅ pass	truncated JSON -> error -32700 with id null: pass
Test 28: array inputs say what their items are	test tools list array items.vi	✅ pass	fake_tool_arrays: pass
Test 29: protocol version negotiation	test protocol version negotiation.vi	✅ pass	initialize asking for 2024-11-05 -> protocolVersion 2024-11-05: pass initialize asking for 1999-01-01 -> protocolVersion 2025-11-25 (the newest legacy version): pass
Test 30: resources/templates/list	test resource templates list.vi	✅ pass	resources/templates/list -> result with resourceTemplates []: pass
Test 31: tools/call without arguments	test tool call default arguments.vi	✅ pass	tools/call fake_tool_add without arguments -> result with the sum 0, no error, id 31: pass
Test 32: a tool that returns an error sets isError	test tool error result.vi	✅ pass	fake_tool_return_error with status true -> result with isError true, code and source still in the content: pass fake_tool_return_error with status false -> result without isError: pass
Test 33: internal errors show no LabVIEW internals	test internal error message.vi	✅ pass	prompts/get fake_prompt_broken_vi -> error -32603 with a message without call chain, markup, tags or path: pass
Test 34: prompts/list says which arguments are required	test prompts list required.vi	✅ pass	fake_prompt_required_argument: pass
Test 35: prompts/get checks required arguments	test prompt required argument.vi	✅ pass	prompts/get fake_prompt_required_argument without topic -> error -32602 that names topic, id 36: pass prompts/get fake_prompt_required_argument with topic -> result whose text contains both argument values: pass
Test 36: JSON-RPC batch	test batch.vi	✅ pass	batch of ping (id 38), a notification and tools/list (id b) -> 200 with an array of two answers in that order: pass batch of two notifications -> 202 with empty body: pass empty batch -> error -32600 with id null: pass
Test 37: a JSON value that is not an object	test non object message.vi	✅ pass	body 5 -> error -32600 with id null: pass body "text" -> error -32600 with id null: pass body null -> error -32600 with id null: pass
Test 38: tools/call checks required arguments	test tool required arguments.vi	✅ pass	tools/call fake_tool_required_input without arguments -> result with isError true and the text Missing required argument(s): b, a (the order of inputSchema.required), no JSON-RPC error, id 40: pass tools/call fake_tool_required_input with arguments {} -> result with isError true naming b and a, no JSON-RPC error, id 41: pass tools/call fake_tool_required_input with only a -> result with isError true naming only b, no JSON-RPC error, id 42: pass tools/call fake_tool_required_input with a 2 and b 3 -> result 6, no error, id 43: pass
Test 39: initialize with an unknown protocol version	test protocol version fallback.vi	✅ pass	initialize asking for 1999-01-01 -> protocolVersion is the first entry of Supported Protocol Versions.vi: pass
Test 40: initialize reports the LabVIEW version	test labview version.vi	✅ pass	initialize -> serverInfo.additionalDetails.labviewVersion equals the Version Number of this LabVIEW: pass
Test 41: tools/list shows the MCP names of special labels	test tools list mcp names.vi	✅ pass	tools/list fake_tool_special_labels -> Length (mm) and Factor #1 & 50% are listed as length__mm_ and factor__1___50_ in properties and in required, id 44: pass tools/list fake_tool_special_labels -> every name in properties and required matches ^[a-zA-Z0-9_-]{1,64}$: pass
Test 42: tools/call reaches special labels by their MCP names	test tools call mcp names.vi	✅ pass	tools/call fake_tool_special_labels with length__mm_ 2.5 and factor__1___50_ 4 -> result {"result__mm_":10}, no error, id 45: pass
Test 43: Add Tool refuses inputs whose MCP names clash	test add tool name clash.vi	✅ pass	Add Tool fake tool name clash.vi with the inputs a b and a_b -> error 5010 naming both controls and the MCP name a_b: pass tools/list after the refused Add Tool -> fake_tool_name_clash is not listed, id 46: pass
Test 44: Add Prompt refuses arguments whose MCP names clash	test add prompt name clash.vi	✅ pass	Add Prompt fake prompt name clash.vi with the arguments a b and a_b -> error 5010 naming both controls and the MCP name a_b: pass prompts/list after the refused Add Prompt -> fake_prompt_name_clash is not listed, id 47: pass
Test 45: 3D arrays and arrays of paths, enums and clusters say what their items are	test tools list array shapes.vi	✅ pass	fake_tool_array_shapes: pass fake_tool_array_shapes: pass fake_tool_array_shapes: pass fake_tool_array_shapes: pass
Test 46: timestamps, clusters and types without a JSON type are described in tools/list	test tools list schema details.vi	✅ pass	fake_tool_array_shapes: pass fake_tool_array_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass
Test 47: tools/call converts timestamps, clusters, enums and 2D and 3D arrays	test tools call schema shapes.vi	✅ pass	fake_tool_array_shapes with a 3D array [[[1,2],[3,4]],[[5,6],[7,8]]] -> no isError, the tool gets all 8 elements: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes with timestamp 2026-10-17T12:34:56Z -> no isError, time out 2026-10-17T12:34:56.000Z: pass fake_tool_schema_shapes: pass
Test 48: every array schema in tools/list says what its items are	test tools list every array has items.vi	✅ pass	tools/list of the test server: pass
Test 49: tools/list gives element descriptions, integer ranges, data entry limits, units and defaults	test tools list descriptions defaults ranges.vi	✅ pass	fake_tool_schema_shapes: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass
Test 50: tools/call returns structuredContent without picture outputs, and none on isError results	test tools call structured content.vi	✅ pass	tools/call fake_tool_required_input without arguments (id 503) -> isError true and no structuredContent: pass tools/call fake_tool_return_error with status false (id 502) -> structuredContent carries the error cluster output as an ordinary object: pass fake_tool_picture_outputs: pass fake_tool_picture_outputs: pass tools/call fake_tool_picture_outputs (id 50) -> structuredContent is present and equals the text JSON without its picture placeholder: pass tools/call fake_tool_return_error with status true (id 501) -> isError true and no structuredContent: pass
Test 51: tools/list gives an outputSchema that matches structuredContent	test tools list output schema.vi	✅ pass	fake_tool_picture_outputs: pass fake_tool_picture_outputs: pass fake_tool_picture_outputs: pass tools/list fake_tool_no_inputs_outputs (no outputs) -> no outputSchema: pass tools/list fake_tool_picture_outputs -> outputSchema is an object schema whose properties and required are count, label, mode and time: pass
Test 52: tools/list sends title and annotations only when they are set	test tools list title annotations.vi	✅ pass	tools/list fake_tool_add (registered without title and annotations) -> neither title nor annotations: pass tools/list fake_tool_annotated (registered with a title) -> title "Annotated Fixture Tool": pass fake_tool_annotated (readOnlyHint true, destructiveHint false, the others not set) -> annotations with exactly readOnlyHint true and destructiveHint false: pass
Test 53: modern results carry resultType, cache hints and serverInfo; legacy results do not	test modern tools list.vi	✅ pass	modern tools/list -> _meta io.modelcontextprotocol/serverInfo with name and version: pass modern tools/list (id 53, MCP 2026-07-28 headers and _meta) -> 200 with tools, resultType complete, ttlMs 60000 and cacheScope public: pass legacy tools/list (id 531, no _meta) -> tools without resultType, ttlMs, cacheScope or _meta: pass
Test 54: server/discover, and initialize never negotiates 2026-07-28	test server discover.vi	✅ pass	initialize asking for 2025-11-25 (id 542) -> 2025-11-25: pass server/discover (id 54) -> 200, resultType complete, supportedVersions with 2026-07-28 and 2025-11-25: pass server/discover -> capabilities tools, prompts and resources (as initialize), _meta serverInfo, ttlMs 60000, cacheScope public: pass initialize asking for 2026-07-28 (id 541) -> the newest legacy version 2025-11-25, never 2026-07-28: pass
Test 55: modern requests are refused when their headers do not match the body	test modern headers.vi	✅ pass	tools/call with an Mcp-Name that is not params.name (id 554) -> 400 with error -32020: pass MCP-Protocol-Version 2025-11-25 while _meta says 2026-07-28 (id 553) -> 400 with error -32020: pass tools/call with Mcp-Name =?base64?...?= of fake_tool_add, lower-case header names (id 552) -> 200 with the tool result: pass Mcp-Method prompts/list on a tools/list request (id 55) -> 400 with error -32020: pass tools/call without an Mcp-Name header (id 551) -> 400 with error -32020: pass
Test 56: unsupported versions, missing capabilities and unknown methods in the modern era	test modern errors.vi	✅ pass	modern request with the unknown method foo/bar (id 563) -> 404 with error -32601: pass modern request with the legacy version 2025-11-25 in _meta (id 561) -> 400, error -32022, data.supported with 2025-11-25: pass unknown version 2027-01-01 in header and _meta (id 56) -> 400, error -32022, data.supported with 2026-07-28, data.requested 2027-01-01: pass modern ping (id 564), which MCP 2026-07-28 removed -> 404 with error -32601: pass modern request without io.modelcontextprotocol/clientCapabilities (id 562) -> 400 with error -32602: pass modern resources/read of an unknown uri (id 565) -> error -32602 (legacy keeps -32002): pass
Test 57: elicitation by input_required and retry with inputResponses	test elicitation.vi	✅ pass	legacy tools/call (id 574) -> outcome not supported: pass modern tools/call without the elicitation capability (id 573) -> outcome not supported, no input_required: pass modern tools/call of fake_tool_confirm with the elicitation capability (id 57) -> resultType input_required with inputRequests.confirm_action: pass retry with inputResponses confirm_action accept (id 571) -> complete result with outcome confirmed: pass retry with inputResponses confirm_action decline (id 572) -> outcome declined: pass
Test 58: progress notifications as Server-Sent Events for tools/call	test progress notifications.vi	✅ pass	id 581: exactly 10 notifications/progress events, each with progressToken "t58" and total 10, progress 1..10 in increasing order: pass id 581: the JSON-RPC result is the last data event, after progress 10: pass the same call without progressToken (id 582) -> plain application/json, no progress events: pass legacy tools/call with progressToken "t58" and Accept text/event-stream (id 581) -> HTTP 200, text/event-stream: pass modern tools/call with the numeric progressToken 583 (id 583) -> text/event-stream, 10 events with "progressToken":583 in order, then the complete result: pass the tool finished all 10 steps (fixture record): pass
Test 59: closing the stream cancels a streamed tools/call	test progress cancel by close.vi	✅ pass	modern streamed tools/call over raw TCP (id 591) -> text/event-stream, the first progress event arrives: pass after the client closed the connection the tool stopped early (fewer than 10 steps) and saw cancelled? TRUE: pass
Test 60: legacy notifications/cancelled stops a streamed tools/call	test progress legacy cancel.vi	✅ pass	legacy streamed tools/call over raw TCP (id 601) -> text/event-stream, the first progress event arrives: pass the tool stopped early (fewer than 10 steps) and saw cancelled? TRUE: pass the stream ended without a result for id 601: pass notifications/cancelled for id 601 on a second connection -> HTTP 202 within 1 s, while the call runs: pass
Test 61: a client that is not in Allowed clients gets 403	test access allowed clients.vi	✅ pass	tools/list from this computer to a server that allows only 192.0.2.1 -> HTTP 403, application/json: pass the second server (port 37061, Allowed clients = [192.0.2.1]) started: pass the 403 body is the JSON-RPC error -32600 "Forbidden: client not allowed." with id null: pass
Test 62: Access token requires Authorization: Bearer	test access bearer token.vi	✅ pass	the token never appears in a response: pass Authorization: bearer test-token-62 (lower-case scheme) -> HTTP 200 with the tools/list result, no WWW-Authenticate: pass authorization: Bearer test-token-62 (lower-case header name) -> HTTP 200 with the tools/list result: pass the 401 body is the JSON-RPC error -32600 "Unauthorized: missing or invalid bearer token." with id null: pass Authorization: Bearer wrong-token -> HTTP 401 with WWW-Authenticate: Bearer: pass no Authorization header -> HTTP 401 with WWW-Authenticate: Bearer (header names compared case-insensitively): pass the second server (port 37062, Access token set) started: pass
Test 63: tools/list leaves out LabVIEW's default error cluster descriptions	test tools list error descriptions.vi	✅ pass	fake_tool_error_descriptions: pass tools/list fake_tool_error_descriptions -> error in (no error) and error out are in inputSchema and outputSchema without a description key, and so are their status, code and source; their type is still there: pass

Protocol tests

✅ Test-McpServer.ps1 passed against the test server.

Protocol tester output (0 failed required checks)

Testing MCP server at http://127.0.0.1:36987/mcp/server

[PASS] (required) Lifecycle - initialize answers 200 with a JSON result
[PASS] (required) Lifecycle - initialize answer is JSON-RPC 2.0 with the request id
[PASS] (required) Lifecycle - initialize result has protocolVersion, capabilities and serverInfo.name
[PASS] (required) Lifecycle - Content-Type of the answer is application/json
[PASS] (advisory) Lifecycle - a client asking for 2024-11-05 gets that version back
[PASS] (required) Lifecycle - notifications/initialized is accepted with 202 and no body
[PASS] (required) Transport - GET answers 405 or opens an event stream
[PASS] (advisory) Transport - 405 answer names the allowed method in an Allow header
[PASS] (required) Transport - a request from a foreign Origin is rejected (403)
[PASS] (required) Transport - a request from a localhost Origin is accepted
[PASS] (required) Transport - an unsupported MCP-Protocol-Version header is rejected (400)
[PASS] (required) Transport - the negotiated MCP-Protocol-Version header is accepted
[PASS] (required) JSON-RPC - ping is answered with an empty result
[PASS] (required) JSON-RPC - an unknown method gets error -32601 with the request id
[PASS] (required) JSON-RPC - an unknown notification is not answered
[PASS] (required) JSON-RPC - a string request id is returned unchanged
[PASS] (required) JSON-RPC - malformed JSON gets error -32700
[PASS] (advisory) JSON-RPC - a request without a method gets error -32600
[PASS] (required) Tools - tools/list returns a tools array
[PASS] (required) Tools - every tool has a name and an inputSchema of type object (1 tools)
[PASS] (advisory) Tools - array parameters say what their items are
[PASS] (required) Tools - calling an unknown tool is answered with an error
[PASS] (required) Prompts - prompts/list returns a prompts array
[PASS] (required) Prompts - every prompt has a name (1 prompts)
[PASS] (required) Prompts - getting an unknown prompt is answered with an error
[PASS] (required) Resources - resources/list returns a resources array
[PASS] (required) Resources - every resource has a uri and a name (2 resources)
[PASS] (required) Resources - reading an unknown resource is answered with an error
[PASS] (advisory) Resources - resources/templates/list returns a resourceTemplates array

Required: 24 of 24 passed. Advisory: 0 failed.

VI diff report

No VI, VIM or CTL files changed in this pull request.

Report for commit ad1b9c0. The installable test package is under Artifacts of this run once the build job has finished.