ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-09 23:29:10 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,289 commits 152 branches 114 tags 96 MiB
Commit graph

110 commits

Author SHA1 Message Date
Jeremiah Lowin
8bc31360e8
 		Restructure docs navigation: CLI section, Composition, More (#3361) 
* WIP: Move mounting docs to servers/composition, remove deprecated import_server content

* WIP: Add CLI section under More, move testing to Features, restructure nav

* WIP: Rename querying to client, remove factory functions from CLI overview

* WIP: Promote CLI to top-level section, move Upgrading to More

* WIP: Rename CLI installing page to install-mcp

* WIP

* Add Google Gemini sampling handler docs, fix version badges
 2026-03-02 21:09:48 -05:00
Andrew Israel
5fb72c7200 Adds PropelAuth as an AuthProvider 
Adds the PropelAuthProvider which delegates to the IntrospectionTokenVerifier
and optionally does an additional resource check.
Adds an example server and client which makes an authenticated request
and gets information from the token.
Updates the documentation (but only for v3 as this isn't in v2).
 2026-03-02 16:18:22 -05:00
Jeremiah Lowin
a8b100eb8c
 		Add JWT audience validation and RFC 8707 warnings to auth providers (#3204) 
* Add JWT audience validation and RFC 8707 warnings to auth providers

* chore: Update SDK documentation

* Update AuthKit example README env var name

* Move RFC 8707 warnings inside default verifier guard

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-17 18:16:05 -05:00
Jeremiah Lowin
45af482e73
 		Add Azure OBO dependencies, auth token injection, and documentation (#2918) 2026-02-09 20:06:57 -05:00
Jeremiah Lowin
b076b2154c
 		Add AzureJWTVerifier for Managed Identity token verification (#3058) 2026-02-02 19:59:13 -05:00
Bill Easton
6b1394ebf8
 		Merge branch 'main' into fix-typos-b 2026-01-31 15:01:57 -06:00
Jeremiah Lowin
1bbbee37a6
 		feat: add fastmcp install goose command (#3040) 2026-01-31 10:53:24 -05:00
Jonas Krüger Svensson
8b3010825e
 		fix: automatically include offline_access as a scope in the Azure provider to enable automatic token refreshing (#3001) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-01-29 09:15:09 -05:00
Didier Durand
96280b3d2c
 		[Doc]: fixing spelling issues in multiple files 2026-01-23 07:17:38 +01:00
Jeremiah Lowin
27d318810f
 		Fix FastAPI mounting examples in docs (#2962) 2026-01-20 17:58:39 -05:00
Jeremiah Lowin
3af9de197a
 		Restructure documentation for FastMCP 3.0 (#2951) 2026-01-19 21:33:35 -05:00
Jeremiah Lowin
53e220a99e
 		Rename _fastmcp metadata namespace to fastmcp and make non-optional (#2895) 2026-01-16 21:35:53 -05:00
Jeremiah Lowin
3163e61ee4
 		Replace FastMCP.as_proxy() with create_proxy() function (#2829) 2026-01-10 11:39:06 -05:00
Jeremiah Lowin
d8351993f7
 		Add composable lifespans (#2828) 2026-01-10 11:16:50 -05:00
Eloi Zalczer
fb11282e9b
 		Feature/supabase custom auth route (#2632) 
Co-authored-by: Eloi Zalczer <eloi@entropia.io>
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-12-26 16:14:56 -05:00
Jeremiah Lowin
568300e8b5
 		Remove automatic environment variable loading from auth providers (#2752) 2025-12-26 15:37:59 -05:00
Jeremiah Lowin
4de06d7f73
 		Fix documentation to use 'meta' instead of '_meta' for MCP spec field (#2735) 2025-12-25 21:05:11 -05:00
Jeremiah Lowin
1d17334803
 		Reorganize docs around provider architecture (#2723) 2025-12-25 09:00:20 -05:00
Jeremiah Lowin
707d664541
 		Add supabase docs (#2030) 
* Add supabase docs

* Update supabase version badge to 2.13.0
 2025-12-04 18:25:57 -05:00
Jeremiah Lowin
b501f05794
 		Switch to new OpenAPI parser as default (#2513) 
* Switch to new OpenAPI parser as default

Remove the legacy OpenAPI parser and make the experimental parser the
default. The experimental parser (introduced in 2.11) offers better
performance, improved compatibility, and a more maintainable architecture.

- Delete legacy parser (server/openapi.py, utilities/openapi.py)
- Move experimental parser to main locations
- Remove enable_new_openapi_parser feature flag
- Update documentation to remove experimental references

* Add deprecation stubs for experimental OpenAPI imports

* Add deprecated enable_new_openapi_parser setting and deprecation tests

* SDK docs

* REview comments

* Fix docstrings

* Update docstring

* Review comments

* Fix broken links
 2025-12-01 20:29:18 -05:00
Jeremiah Lowin
9c21754a45
 		Fix Azure provider OIDC scope handling (#2506) 
* Fix Azure provider to handle OIDC scopes correctly

OIDC scopes (openid, profile, email, offline_access) were being
incorrectly prefixed with identifier_uri, causing Azure to reject
authorization requests. This fix:

- Detects OIDC scopes and sends them unprefixed to Azure
- Filters OIDC scopes from token validation (Azure doesn't include
  them in access token scp claims)
- Still advertises OIDC scopes to clients via valid_scopes
- Also handles dot-notation scopes (e.g., User.Read) correctly

Fixes #2451, #2420

* Fix dot-notation scopes to be prefixed (custom scopes can have dots)

* Improve Azure scope handling docs with clear examples
 2025-12-01 13:42:36 -05:00
Jeremiah Lowin
83085c3cd3
 		Fix version badges for icons and website_url; add Discord example (#2509) 
* Fix version badges and remove redundant badges from Discord doc

* Add Discord OAuth example
 2025-12-01 13:39:43 -05:00
Jeremiah Lowin
aa53bdf53e
 		Add Discord OAuth integration documentation (#2508) 2025-12-01 13:34:33 -05:00
Akshay Parihar
a57a155c2e
 		Scalekit provider updates (#2413) 
* sk-provider updates - aud not enforce, scopes enforce if present

* updating env_prefix, adding debug logs

* updating docs

* ruff formatting

* not changing prefix for backward compatiblity

* backward compatibility changes

* give more preference to base_url than mcp_url if both passed

* updating docs

* refactor

* updating example server

* updating readme of example

* updating docs

* updating tests to reflect what should ideally go in the parameter
 2025-11-22 12:22:13 -05:00
Kevin J Gao
05db547d86
 		feat: Made Changes to DescopeProvider to Support New Well Known URLs (#2392) 
* added new DescopeProvider for Agentic Identity Hub

* fixed formatting with ruff

* made coderabbit change

* changed wording in descope.mdx

* added backwards compatibility

* ran ruff

* added scopes_supported to protected metadata resource

* empty commit to re-run tests
 2025-11-22 12:20:50 -05:00
Kiran Thakkar
ab683f178b
 		OCI Provider with Docs (#2389) 
* OCI Provider with Docs

* Addressing feedback and adding improvements

* Addressing feedback and adding improvements

* Fixed Step Typo and Images

* Fixed Language Identifier

* Fixed Code Check Issues

* Fixed Identity Propagation Trust Command

* Renamed ociprovider to oci and fixed documentation

* Renamed ociprovider to oci

* Fixed Config URL

* Fixed TokenExchange variable

* Fixed Environment Variables

* Fixed Environment Variables

* Fixed Ruff Check

* Fixed Code Rabbit Comments

* Fixed Code Rabbit Comments
 2025-11-15 11:04:47 -05:00
Jeremiah Lowin
1ca53b4134
 		Add base_authority parameter to AzureProvider for Azure Government support (#2306) 2025-10-29 14:06:21 -04:00
Jeremiah Lowin
6d600e36db
 		Remove trailing slashes from MCP endpoint URLs in docs (#2277) 2025-10-27 10:36:47 -04:00
Jeremiah Lowin
8bd3a308c9
 		Update Azure sidebar title to include Entra ID (#2266) 
* Update Azure sidebar title to include Entra ID

Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>

* Update Azure title to emphasize Microsoft Entra ID

Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>

* Update Azure title to emphasize Azure over Entra ID

Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>
 2025-10-26 19:49:40 -04:00
Jeremiah Lowin
ba47db9b8c
 		Fix Azure scope validation (#2269) 
* Update docs for required scopes

* add scopes

* Fix Azure scope validation

Azure returns unprefixed scopes in JWT tokens but requires prefixed scopes in authorization requests. The previous implementation incorrectly validated tokens against prefixed scopes, causing "invalid_token" errors.

Simplified AzureProvider to use standard JWTVerifier with unprefixed scopes for validation. Scopes are only prefixed when building the Azure authorization URL via _build_upstream_authorize_url() override.

Closes #2263
 2025-10-26 11:41:22 -04:00
William Easton
063ffe9f64
 		Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 
* Checkpoint progress

* Checkpoint progress

* add derive b64 method

* PR clean-up

* refactor da proxy

* Updates to tests

* Make jwt_signing_key required for oauth proxy

* use typing_extensions and fix tests

* PR Cleanup

* also adjust integration tests

* Update docs, use client secret to derive jwt signing key

* You win some you lose some, gg claude

* check for both in derive

* update documentation / clean up

* Update http.mdx

---------

Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-10-24 19:08:58 -04:00
Jeremiah Lowin
980d0516a7
 		Expose OAuth token management parameters in all providers (#2222) 
All OAuth providers and OIDCProxy now expose jwt_signing_key,
token_encryption_key, and client_storage parameters for production
deployments requiring persistent token management across server restarts.
 2025-10-22 21:51:37 -04:00
Jeremiah Lowin
09e899a699
 		docs: Add AWS Cognito resource server requirement and CORS guidance (#2149) 2025-10-20 15:28:16 -04:00
Jeremiah Lowin
d472e30765
 		Support mounting OAuth-protected servers under path prefixes (#2119) 
* Add issuer_url parameter to OAuth providers for mounting scenarios

* Add get_well_known_routes

* Update docs

* Improve docs and tests

* Trigger CI

* Fix conditional test execution for Windows
 2025-10-17 11:44:49 -04:00
Jeremiah Lowin
4f5aebe59b
 		Update version badge for azure auth docs (#2120) 
* Update version badge for azure auth docs

* Revert "Update version badge for azure auth docs"

This reverts commit 8b0537e295.
 2025-10-17 09:38:59 -04:00
Anders Julton
82cf3888dd
 		Azure (Entra) OAuth: Validate token against FastMCP app, not Graph. (#1891) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-10-08 09:06:35 -04:00
Jeremiah Lowin
6a8c443d95
 		Update ChatGPT docs for Chat mode with Developer Mode (#1936) 2025-09-26 18:57:03 -04:00
Jeremiah Lowin
863b1a1711
 		Update fastapi.mdx (#1934) 2025-09-26 17:15:52 -04:00
Akshay Parihar
7bcf8b562c
 		Add Scalekit Provider for Enterprise Authentication (#1927) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Ravi Madabhushi <ravi.madabhushi@scalekit.com>
Co-authored-by: Ravi Madabhushi <innovativeravi@gmail.com>
Co-authored-by: saif-at-scalekit <saif.shaik@scalekit.com>
 2025-09-26 16:58:03 -04:00
Stephan Eberle
5486b5a3b9
 		Add AWS Cognito OAuth Provider for Enterprise Authentication (#1873) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-09-25 11:08:45 -04:00
Anvi Banga
0a8f8bbeb8
 		descope icon (#1912) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-09-25 10:38:06 -04:00
Jeremiah Lowin
7e4aaa8696
 		Update descope version badges (#1870) 2025-09-19 13:48:13 -04:00
Anvi Banga
59e250a98e
 		feat: Add support for Descope Authentication (#1853) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-09-19 13:46:44 -04:00
Jack Wotherspoon
82f1602f71
 		docs: update NEW tags for AI assistant integrations (#1829) 2025-09-15 11:07:05 -04:00
Ruhul Alam
972521146f
 		feat: Add support for OIDC configuration (#1817) 2025-09-14 14:54:48 -04:00
Jeremiah Lowin
8eadaaa958
 		Improve language for route_map_fn tip (#1788) (#1792) 2025-09-08 21:03:05 -04:00
Jack Wotherspoon
e5e426279e
 		feat: add support for Gemini CLI integration (#1709) 2025-09-06 12:08:56 -04:00
Jeremiah Lowin
8ffed6a3d9
 		Hotfix: restore --transport streamable http at CLI (#1743) 2025-09-03 17:24:22 -04:00
Jeremiah Lowin
deff09fe07
 		refactor: replace auth provider registry with ImportString (#1710) 2025-09-02 08:31:52 -04:00
Jeremiah Lowin
bc25802a28
 		Update documentation around scopes for google (#1703) 2025-09-01 16:44:50 -04:00