Fix: server/discover answers with server identity on the modern lane

Web-audit fix skill for the mcp-server-discover check (MCP, SHOULD).

Goal

Answer server/discover with supported versions, capabilities, and server identity.

Fix

Implement server/discover (protocol revision 2026-07-28): return a result carrying supportedVersions (the modern revisions you serve) and your advertised capabilities, and identify the server in the result's _meta under io.modelcontextprotocol/serverInfo (name plus version). The request arrives header-routed (MCP-Protocol-Version: 2026-07-28, Mcp-Method: server/discover) with the params._meta envelope, whose io.modelcontextprotocol/clientCapabilities key is mandatory. No initialize precedes it: server/discover is how a modern client learns what the server offers before any session state exists. Answering it is also what brings the rest of the modern-lane checks into scoring, so serve the 2026-07-28 revision behind it rather than this one method on its own.

Resources

• MCP lifecycle (2026-07-28)

Copy-paste prompt

Paste this into your coding agent. Your audit adds what it observed for this check:

Verify

Re-run the audit at https://anc.dev/audit or call the audit_website MCP tool; the mcp-server-discover check should report pass.