Seven new checks, 138 in all: notification acknowledgement, reply content types, session enforcement, JSON Schema validity, a stable tool order, resource URIs and prompt argument validation.
Older servers graded, not refused: a server on MCP 2024-11-05 is accepted and warned about, with checks for features it predates skipped by name, and the old HTTP+SSE transport named instead of failing opaquely.
New ways to look closer: passmcp read and passmcp prompt, latency and availability in watch, and explain --curl to reproduce a finding with every credential redacted.
A clear message for a login page: a reply that is not JSON now names its content type instead of failing to decode.