Source: github.com/modelcontextprotocol/servers/releases/tag/v2.3.0
The release updates four npm packages and three PyPI packages in the modelcontextprotocol/servers repository, published on 4 November by maintainer cliffhall. The filesystem server 2.2.0 gains append_file and copy_file tools, an optional depth for directory_tree, and file:// template resources. It also adds a --read-only mode that serves only read tools, and --confine-roots to keep client Roots inside the command-line directories.
The fetch server 2026.11.4 adds --allowed-hosts for an operator host allowlist and a configurable HTTP request timeout. The git server adds a git_merge tool and a read-only git_remote tool, and git_diff now accepts revision ranges such as main..feature. The time server adds get_time_ago and defaults omitted timezone arguments to the local timezone.
The memory server 2.1.0 declares idempotentHint on create_entities, create_relations and add_observations. The sequential thinking server 2.1.1 caps the thought history each connection keeps. Security fixes include moving minimatch to ^11.0.4 for GHSA-g3hv-75wg-m249 and raising the qs override to at least 6.16.1.
Why it matters if you build agents
Agents that call the filesystem server can now run it read-only or confine it to set directories, which limits what a model can change. Teams that fetch web pages can restrict requests to an allowlist of hosts. Pinned dependencies should be updated to pick up the minimatch and qs fixes.
Get stories like this every weekday
One short email with the day's agent tooling news.