ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-20 04:24:17 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,289 commits 156 branches 116 tags 71 MiB
Commit graph

371 commits

Author SHA1 Message Date
William Easton
f5dbabff4e
 		Add ToolInjectionMiddleware + Tools for Read/List Resource/Prompt for Client Compat (#2142) 
* Add compatibility tools contrib module

Implements four standalone tools that expose resources and prompts
as callable tools for clients that only support the tools capability.

Features:
- list_resources: List all available resources
- get_resource: Read a resource by URI
- list_prompts: List all available prompts
- get_prompt: Get a prompt with optional arguments

The tools use Context to access the server instance and can be easily
added to any FastMCP server using the add_compatibility_tools helper
or by adding individual tool instances directly.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: William Easton <strawgate@users.noreply.github.com>

* Simplify compatibility tools to return raw MCP protocol objects

Return raw MCP protocol objects (ListResourcesResult, ReadResourceResult,
ListPromptsResult, GetPromptResult) instead of custom dictionaries. This
makes the tools simpler and more predictable by directly exposing what
the client methods return.

Co-authored-by: William Easton <strawgate@users.noreply.github.com>

* Add tool injection middleware

* cleanup contrib module

* More clean-up

* Clean up tool injection middleware.

* Update src/fastmcp/server/middleware/tool_injection.py

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Add tool injection docs

* Small cleanup of prompt middleware

* PR Feedback

* Fix tool injection tests

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: William Easton <strawgate@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-10-24 18:06:58 -04:00
Jeremiah Lowin
686082a5b5
 		Add platform-aware OAuth token persistence (#2218) 
* Add comprehensive keyring integration tests

Prevents OS keyring pollution during testing by adding a global mock in
conftest.py. Tests verify keyring behavior across platforms and fallback
scenarios without writing to the actual system keyring.

- Add global mock_keyring fixture to tests/conftest.py
- Add TestOAuthProxyKeyring class with 6 keyring-specific tests
- Remove try/except ImportError for keyring (now required dependency)
- Add keyring extra to py-key-value-aio dependency
- Clean up extraneous implementation comments in oauth_proxy.py

* Update OAuth keyring documentation

Update all OAuth-related documentation to reflect keyring-based key management:
- Add version badges to jwt_signing_key, token_encryption_key, and client_storage parameters
- Standardize "Default behavior (`None`):" formatting with backticks
- Ensure consistent messaging about development-only defaults across all docs
- Update oauth-proxy.mdx, oidc-proxy.mdx, http.mdx, storage-backends.mdx, and upgrade-guide.mdx
 2025-10-22 20:42:24 -04:00
claude[bot]
f127e33bbe Fix dead links to py-key-value repository 
Update documentation links from py-key-value-aio to py-key-value repository.
The py-key-value-aio package lives in the py-key-value monorepo.

Co-authored-by: William Easton <strawgate@users.noreply.github.com>
 2025-10-22 23:15:03 +00:00
Jeremiah Lowin
4d609ce74b
 		Move sampling fallback handler docs to server section (#2163) 2025-10-21 10:02:11 -04:00
Jeremiah Lowin
9987a456a0
 		Allow authorization consent screen to be disabled (#2172) 
* Add optional authorization consent screen for OAuth providers

Adds `require_authorization_consent` parameter (default True) to OAuthProxy and all providers. When disabled, authorization skips the consent screen for local development/testing. Logs security warning when disabled.

* Update warning message to use 'authorization consent screen'
 2025-10-21 10:00:39 -04:00
hyeonjae
24e2b09d95
 		Update content type in advanced_tool function (#2147) 2025-10-20 08:43:35 -04:00
Jeremiah Lowin
b362444ddf
 		Add storage backend documentation (#2137) 
* Add storage backend documentation

* Add storage patterns documentation for wrapper caching strategies

- Add PassthroughCacheWrapper section for multi-tier caching
- Document TTL clamping strategy for optimized memory usage
- Add example for wrapping custom storage implementations
- Explain how to combine fast in-memory caches with persistent remote stores

* Update docs
 2025-10-19 19:24:13 -04:00
Jeremiah Lowin
9e78d755c2
 		Support custom server name, icons, and link in OAuth Proxy consent page (#2135) 
* Implement icon support in fastmcp

* Fix icon feature tests

- Update snapshot for ResourceTemplate to include icons field
- Remove OAuth mounting tests (belong to PR #2119, not this feature)

* Update docs

* Customize consent screen

* Use server website link if available

* Anchor link shouldnt have trailing slash

* Remove 'a FastMCP server named' from consent page message

* Update docs
 2025-10-18 11:49:26 -04:00
Jeremiah Lowin
6f627b58fd
 		Implement icon support (#2121) 
* Implement icon support in fastmcp

* Fix icon feature tests

- Update snapshot for ResourceTemplate to include icons field
- Remove OAuth mounting tests (belong to PR #2119, not this feature)

* Update docs
 2025-10-17 17:28:08 -04:00
Jeremiah Lowin
330eaed11f
 		OAuth proxy issues its own tokens (#2109) 
* OAuth proxy issues its own tokens

Implement token factory pattern where proxy issues FastMCP JWTs
instead of forwarding upstream tokens. Tokens are minimal references
(JTI) that map to encrypted upstream credentials stored server-side.

* Update run-tests.yml

* Update secret generation and docs

* Add upgrade guide
 2025-10-17 14:31:53 -04:00
Jeremiah Lowin
d472e30765
 		Support mounting OAuth-protected servers under path prefixes (#2119) 
* Add issuer_url parameter to OAuth providers for mounting scenarios

* Add get_well_known_routes

* Update docs

* Improve docs and tests

* Trigger CI

* Fix conditional test execution for Windows
 2025-10-17 11:44:49 -04:00
William Easton
b713b5e4d0
 		Merge branch 'main' into responsecachingmiddleware 2025-10-16 21:59:20 -05:00
William Easton
5831c4bb60
 		PR Clean-up 2025-10-16 21:56:55 -05:00
Jeremiah Lowin
2f841c356e
 		Document container limitations for Image/Audio/File objects (#2118) 2025-10-16 18:03:29 -04:00
Jeremiah Lowin
52e9af1214
 		Add RFC 7662 token introspection provider (#2074) 2025-10-16 10:57:06 -04:00
Jeremiah Lowin
be73143960
 		Clarify context is scoped to single MCP request (#2099) 2025-10-15 06:00:03 -07:00
William Easton
67a19afe89
 		Merge branch 'main' into responsecachingmiddleware 2025-10-14 16:59:53 -05:00
Jeremiah Lowin
e036cba383
 		Add Pydantic-compatible input validation (#2073) 2025-10-14 11:49:30 -07:00
William Easton
1ec2bd7d92
 		Also push client messages (info/warn/debug) to server debug log (#2063) 
Co-authored-by: William Easton <strawgate@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-10-14 11:38:26 -07:00
William Easton
b0db7803d6
 		Merge branch 'main' into ankesh/mixin-add-meta 2025-10-12 10:47:38 -04:00
Jeremiah Lowin
82dc3bdff9
 		Merge branch 'main' into responsecachingmiddleware 2025-10-11 18:32:32 -04:00
Jeremiah Lowin
1f11b5e641
 		Refactor mounting logic from managers to server (#2069) 2025-10-11 18:28:21 -04:00
Jeremiah Lowin
7b7e277d5d
 		Prevent confused deputy attacks in OAuth proxy (#2056) 2025-10-11 10:53:54 -04:00
William Easton
28370827dc
 		Merge branch 'main' into responsecachingmiddleware 2025-10-10 17:37:34 -04:00
Ankesh
26e2414b48 feat: Add title, annotations and meta to mixin decorators 2025-10-10 14:23:02 +05:30
Jeremiah Lowin
aecf7f07c2
 		Support customizable env file location (#2036) 2025-10-09 16:12:23 -04:00
Jeremiah Lowin
9cb47e12dd
 		Add version badge to on_initialize docs (#2029) 2025-10-08 20:10:12 -04:00
Jeremiah Lowin
eac1cea6a4
 		Improve docs on prefix rules (#2028) 2025-10-08 19:57:14 -04:00
Jeremiah Lowin
ba1ba86a64
 		Support initialize requests in middleware (#1546) 2025-10-05 10:20:13 -04:00
Jeremiah Lowin
35a8c32f61
 		Add RFC 6570 query parameter support to resource templates (#1971) 2025-09-30 16:28:09 -04:00
Stephan Eberle
5486b5a3b9
 		Add AWS Cognito OAuth Provider for Enterprise Authentication (#1873) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-09-25 11:08:45 -04:00
Jeremiah Lowin
b3ea6ad384
 		docs: update OAuth and OIDC proxy documentation (#1880) 2025-09-21 11:02:36 -04:00
Jeremiah Lowin
7176d4f293
 		Add persistent storage for OAuth client registrations (#1879) 2025-09-21 10:56:08 -04:00
Anvi Banga
59e250a98e
 		feat: Add support for Descope Authentication (#1853) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-09-19 13:46:44 -04:00
William Easton
a9113d0c9a
 		Refactor cache, add Elasticsearch cache backend as a contrib module with docs 2025-09-18 13:47:42 -05:00
William Easton
d5f01dae15
 		Add docs 2025-09-17 19:46:15 -05:00
Ruhul Alam
972521146f
 		feat: Add support for OIDC configuration (#1817) 2025-09-14 14:54:48 -04:00
Didier Durand
6ece5462db
 		[Doc]: fixing typos in multiple files (#1804) 2025-09-11 18:07:02 -04:00
Jeremiah Lowin
3dd7373680
 		feat: Add flexible parameter forwarding to OAuth proxy (#1771) 2025-09-06 15:50:29 -04:00
Jeremiah Lowin
46a5187398
 		Add token_endpoint_auth_method parameter to OAuthProxy (#1736) 2025-09-03 12:21:40 -04:00
Jeremiah Lowin
1045eb47c2
 		OAuth proxy PKCE forwarding (#1733) 2025-09-03 12:11:38 -04:00
Jeremiah Lowin
d36ea42b92
 		Fix OAuth resource URL handling and WWW-Authenticate header (#1706) 2025-09-02 15:14:05 -04:00
Jeremiah Lowin
deff09fe07
 		refactor: replace auth provider registry with ImportString (#1710) 2025-09-02 08:31:52 -04:00
William Easton
22ba63491d
 		Merge branch 'main' into claude/issue-1583-20250829-1824 2025-09-01 13:58:06 -05:00
William Easton
67d933abcf
 		Small edits 2025-09-01 13:57:40 -05:00
Jeremiah Lowin
8c678b552b
 		Add resource_server_url parameter to OAuth proxy providers (#1682) 2025-08-30 08:33:13 -04:00
marvin-context-protocol[bot]
66252018ed docs: add performance warnings for mounted servers and proxies 
- Add warning about performance impact in mounted servers section
- Explain that list_tools() operations are affected by slowest mounted server
- Note that HTTP-based servers can introduce 300-400ms latency vs 1-2ms for local
- Recommend import_server() for performance-critical applications
- Add performance considerations section to proxy documentation
- Reference composition documentation for alternatives

Co-authored-by: William Easton <strawgate@users.noreply.github.com>
 2025-08-29 18:25:53 +00:00
romanusyk
210e9cc5ca
 		Add default scope handling in OAuth proxy (#1667) 2025-08-29 09:58:45 -04:00
Jeremiah Lowin
6d9088704e
 		Fix OAuth redirect URI validation for DCR compatibility (#1661) 2025-08-28 15:19:56 -04:00
Jeremiah Lowin
c730aaa6b0
 		Document symmetric key JWT verification support (#1586) 2025-08-22 19:35:08 -04:00