In December 2025, delivered a security-conscious multimedia enhancement to MCP Apps by introducing the media-src directive to the CSP in the modelcontextprotocol/ext-apps repository, enabling video and audio playback while maintaining strict security controls. The update includes documentation and type annotations aligned with the change, ensuring teams can rely on consistent policies and clear guidance. This work strengthens content delivery capabilities and reinforces our commitment to performance, security, and developer experience.

July 2025 Performance Summary: Delivered two high-impact improvements across Goose and the Rust SDK, delivering measurable business value through improved UX and MCP-aligned data interchange. Key outcomes include a native Cmd+Up/Down cursor navigation fix in ChatInput for Goose, and MCP-conformant mimeType serialization in the Rust SDK with accompanying tests for images and audio, strengthening cross-system compatibility and test coverage.