# Fix: server/discover answers with server identity on the modern lane

> Web-audit fix skill for the `mcp-server-discover` check (MCP, SHOULD).

## Goal

Answer server/discover with supported versions, capabilities, and server identity.

## Fix

Implement `server/discover` (protocol revision `2026-07-28`): return a result carrying
`supportedVersions` (the modern revisions you serve) and your advertised `capabilities`,
and identify the server in the result's `_meta` under
`io.modelcontextprotocol/serverInfo` (`name` plus `version`). The request arrives
header-routed (`MCP-Protocol-Version: 2026-07-28`, `Mcp-Method: server/discover`) with the
`params._meta` envelope, whose `io.modelcontextprotocol/clientCapabilities` key is
mandatory. No `initialize` precedes it: `server/discover` is how a modern client learns
what the server offers before any session state exists. Answering it is also what brings
the rest of the modern-lane checks into scoring, so serve the `2026-07-28` revision behind
it rather than this one method on its own.

## Resources

- [MCP lifecycle (2026-07-28)](https://modelcontextprotocol.io/specification/2026-07-28/basic/lifecycle)

## Copy-paste prompt

Paste this into your coding agent. [Your audit](https://anc.dev/audit) adds what it observed for this check:

```text
Goal: Answer server/discover with supported versions, capabilities, and server identity
Fix: Implement `server/discover` (protocol revision `2026-07-28`): return a result carrying `supportedVersions` (the modern revisions you serve) and your advertised `capabilities`, and identify the server in the result's `_meta` under `io.modelcontextprotocol/serverInfo` (`name` plus `version`). The request arrives header-routed (`MCP-Protocol-Version: 2026-07-28`, `Mcp-Method: server/discover`) with the `params._meta` envelope, whose `io.modelcontextprotocol/clientCapabilities` key is mandatory. No `initialize` precedes it: `server/discover` is how a modern client learns what the server offers before any session state exists. Answering it is also what brings the rest of the modern-lane checks into scoring, so serve the `2026-07-28` revision behind it rather than this one method on its own.
Skill: https://anc.dev/fix/mcp-server-discover
Docs: https://modelcontextprotocol.io/specification/2026-07-28/basic/lifecycle
```

## Verify

Re-run the audit at [https://anc.dev/audit](https://anc.dev/audit) or call the `audit_website` MCP tool; the `mcp-server-discover` check should report `pass`.