fix(fetch): cap mcp dependency below 2.0

src/fetch/pyproject.toml

@@ -18,7 +18,7 @@ classifiers = [
 dependencies = [
     "httpx>=0.27",
     "markdownify>=0.13.1",
-    "mcp>=1.1.3",
+    "mcp>=1.1.3,<2",
     "protego>=0.3.1",
     "pydantic>=2.0.0",
     "readabilipy>=0.2.0",

src/fetch/tests/test_dependencies.py

@@ -0,0 +1,20 @@
+"""Tests for the fetch MCP server's declared dependencies."""
+
+import tomllib
+from pathlib import Path
+
+from packaging.requirements import Requirement
+from packaging.version import Version
+
+PYPROJECT = Path(__file__).parent.parent / "pyproject.toml"
+
+
+def test_mcp_requirement_excludes_2_x():
+    """The server uses the mcp 1.x low-level API, which mcp 2.0 removed.
+
+    Without an upper bound, `uvx mcp-server-fetch` resolves mcp 2.x and the
+    server dies on import.
+    """
+    dependencies = tomllib.loads(PYPROJECT.read_text())["project"]["dependencies"]
+    mcp = next(r for r in map(Requirement, dependencies) if r.name == "mcp")
+    assert not mcp.specifier.contains(Version("2.0.0"))