ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-12 16:49:10 +02:00
Code Issues Projects Releases Packages Wiki Activity
2,822 commits 158 branches 115 tags 98 MiB
Commit graph

99 commits

Author SHA1 Message Date
Jeremiah Lowin
53e220a99e
 		Rename _fastmcp metadata namespace to fastmcp and make non-optional (#2895) 2026-01-16 21:35:53 -05:00
Jeremiah Lowin
3163e61ee4
 		Replace FastMCP.as_proxy() with create_proxy() function (#2829) 2026-01-10 11:39:06 -05:00
Jeremiah Lowin
d8351993f7
 		Add composable lifespans (#2828) 2026-01-10 11:16:50 -05:00
Eloi Zalczer
fb11282e9b
 		Feature/supabase custom auth route (#2632) 
Co-authored-by: Eloi Zalczer <eloi@entropia.io>
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-12-26 16:14:56 -05:00
Jeremiah Lowin
568300e8b5
 		Remove automatic environment variable loading from auth providers (#2752) 2025-12-26 15:37:59 -05:00
Jeremiah Lowin
4de06d7f73
 		Fix documentation to use 'meta' instead of '_meta' for MCP spec field (#2735) 2025-12-25 21:05:11 -05:00
Jeremiah Lowin
1d17334803
 		Reorganize docs around provider architecture (#2723) 2025-12-25 09:00:20 -05:00
Jeremiah Lowin
707d664541
 		Add supabase docs (#2030) 
* Add supabase docs

* Update supabase version badge to 2.13.0
 2025-12-04 18:25:57 -05:00
Jeremiah Lowin
b501f05794
 		Switch to new OpenAPI parser as default (#2513) 
* Switch to new OpenAPI parser as default

Remove the legacy OpenAPI parser and make the experimental parser the
default. The experimental parser (introduced in 2.11) offers better
performance, improved compatibility, and a more maintainable architecture.

- Delete legacy parser (server/openapi.py, utilities/openapi.py)
- Move experimental parser to main locations
- Remove enable_new_openapi_parser feature flag
- Update documentation to remove experimental references

* Add deprecation stubs for experimental OpenAPI imports

* Add deprecated enable_new_openapi_parser setting and deprecation tests

* SDK docs

* REview comments

* Fix docstrings

* Update docstring

* Review comments

* Fix broken links
 2025-12-01 20:29:18 -05:00
Jeremiah Lowin
9c21754a45
 		Fix Azure provider OIDC scope handling (#2506) 
* Fix Azure provider to handle OIDC scopes correctly

OIDC scopes (openid, profile, email, offline_access) were being
incorrectly prefixed with identifier_uri, causing Azure to reject
authorization requests. This fix:

- Detects OIDC scopes and sends them unprefixed to Azure
- Filters OIDC scopes from token validation (Azure doesn't include
  them in access token scp claims)
- Still advertises OIDC scopes to clients via valid_scopes
- Also handles dot-notation scopes (e.g., User.Read) correctly

Fixes #2451, #2420

* Fix dot-notation scopes to be prefixed (custom scopes can have dots)

* Improve Azure scope handling docs with clear examples
 2025-12-01 13:42:36 -05:00
Jeremiah Lowin
83085c3cd3
 		Fix version badges for icons and website_url; add Discord example (#2509) 
* Fix version badges and remove redundant badges from Discord doc

* Add Discord OAuth example
 2025-12-01 13:39:43 -05:00
Jeremiah Lowin
aa53bdf53e
 		Add Discord OAuth integration documentation (#2508) 2025-12-01 13:34:33 -05:00
Akshay Parihar
a57a155c2e
 		Scalekit provider updates (#2413) 
* sk-provider updates - aud not enforce, scopes enforce if present

* updating env_prefix, adding debug logs

* updating docs

* ruff formatting

* not changing prefix for backward compatiblity

* backward compatibility changes

* give more preference to base_url than mcp_url if both passed

* updating docs

* refactor

* updating example server

* updating readme of example

* updating docs

* updating tests to reflect what should ideally go in the parameter
 2025-11-22 12:22:13 -05:00
Kevin J Gao
05db547d86
 		feat: Made Changes to DescopeProvider to Support New Well Known URLs (#2392) 
* added new DescopeProvider for Agentic Identity Hub

* fixed formatting with ruff

* made coderabbit change

* changed wording in descope.mdx

* added backwards compatibility

* ran ruff

* added scopes_supported to protected metadata resource

* empty commit to re-run tests
 2025-11-22 12:20:50 -05:00
Kiran Thakkar
ab683f178b
 		OCI Provider with Docs (#2389) 
* OCI Provider with Docs

* Addressing feedback and adding improvements

* Addressing feedback and adding improvements

* Fixed Step Typo and Images

* Fixed Language Identifier

* Fixed Code Check Issues

* Fixed Identity Propagation Trust Command

* Renamed ociprovider to oci and fixed documentation

* Renamed ociprovider to oci

* Fixed Config URL

* Fixed TokenExchange variable

* Fixed Environment Variables

* Fixed Environment Variables

* Fixed Ruff Check

* Fixed Code Rabbit Comments

* Fixed Code Rabbit Comments
 2025-11-15 11:04:47 -05:00
Jeremiah Lowin
1ca53b4134
 		Add base_authority parameter to AzureProvider for Azure Government support (#2306) 2025-10-29 14:06:21 -04:00
Jeremiah Lowin
6d600e36db
 		Remove trailing slashes from MCP endpoint URLs in docs (#2277) 2025-10-27 10:36:47 -04:00
Jeremiah Lowin
8bd3a308c9
 		Update Azure sidebar title to include Entra ID (#2266) 
* Update Azure sidebar title to include Entra ID

Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>

* Update Azure title to emphasize Microsoft Entra ID

Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>

* Update Azure title to emphasize Azure over Entra ID

Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>
 2025-10-26 19:49:40 -04:00
Jeremiah Lowin
ba47db9b8c
 		Fix Azure scope validation (#2269) 
* Update docs for required scopes

* add scopes

* Fix Azure scope validation

Azure returns unprefixed scopes in JWT tokens but requires prefixed scopes in authorization requests. The previous implementation incorrectly validated tokens against prefixed scopes, causing "invalid_token" errors.

Simplified AzureProvider to use standard JWTVerifier with unprefixed scopes for validation. Scopes are only prefixed when building the Azure authorization URL via _build_upstream_authorize_url() override.

Closes #2263
 2025-10-26 11:41:22 -04:00
William Easton
063ffe9f64
 		Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) 
* Checkpoint progress

* Checkpoint progress

* add derive b64 method

* PR clean-up

* refactor da proxy

* Updates to tests

* Make jwt_signing_key required for oauth proxy

* use typing_extensions and fix tests

* PR Cleanup

* also adjust integration tests

* Update docs, use client secret to derive jwt signing key

* You win some you lose some, gg claude

* check for both in derive

* update documentation / clean up

* Update http.mdx

---------

Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-10-24 19:08:58 -04:00
Jeremiah Lowin
980d0516a7
 		Expose OAuth token management parameters in all providers (#2222) 
All OAuth providers and OIDCProxy now expose jwt_signing_key,
token_encryption_key, and client_storage parameters for production
deployments requiring persistent token management across server restarts.
 2025-10-22 21:51:37 -04:00
Jeremiah Lowin
09e899a699
 		docs: Add AWS Cognito resource server requirement and CORS guidance (#2149) 2025-10-20 15:28:16 -04:00
Jeremiah Lowin
d472e30765
 		Support mounting OAuth-protected servers under path prefixes (#2119) 
* Add issuer_url parameter to OAuth providers for mounting scenarios

* Add get_well_known_routes

* Update docs

* Improve docs and tests

* Trigger CI

* Fix conditional test execution for Windows
 2025-10-17 11:44:49 -04:00
Jeremiah Lowin
4f5aebe59b
 		Update version badge for azure auth docs (#2120) 
* Update version badge for azure auth docs

* Revert "Update version badge for azure auth docs"

This reverts commit 8b0537e295.
 2025-10-17 09:38:59 -04:00
Anders Julton
82cf3888dd
 		Azure (Entra) OAuth: Validate token against FastMCP app, not Graph. (#1891) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-10-08 09:06:35 -04:00
Jeremiah Lowin
6a8c443d95
 		Update ChatGPT docs for Chat mode with Developer Mode (#1936) 2025-09-26 18:57:03 -04:00
Jeremiah Lowin
863b1a1711
 		Update fastapi.mdx (#1934) 2025-09-26 17:15:52 -04:00
Akshay Parihar
7bcf8b562c
 		Add Scalekit Provider for Enterprise Authentication (#1927) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Ravi Madabhushi <ravi.madabhushi@scalekit.com>
Co-authored-by: Ravi Madabhushi <innovativeravi@gmail.com>
Co-authored-by: saif-at-scalekit <saif.shaik@scalekit.com>
 2025-09-26 16:58:03 -04:00
Stephan Eberle
5486b5a3b9
 		Add AWS Cognito OAuth Provider for Enterprise Authentication (#1873) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-09-25 11:08:45 -04:00
Anvi Banga
0a8f8bbeb8
 		descope icon (#1912) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-09-25 10:38:06 -04:00
Jeremiah Lowin
7e4aaa8696
 		Update descope version badges (#1870) 2025-09-19 13:48:13 -04:00
Anvi Banga
59e250a98e
 		feat: Add support for Descope Authentication (#1853) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2025-09-19 13:46:44 -04:00
Jack Wotherspoon
82f1602f71
 		docs: update NEW tags for AI assistant integrations (#1829) 2025-09-15 11:07:05 -04:00
Ruhul Alam
972521146f
 		feat: Add support for OIDC configuration (#1817) 2025-09-14 14:54:48 -04:00
Jeremiah Lowin
8eadaaa958
 		Improve language for route_map_fn tip (#1788) (#1792) 2025-09-08 21:03:05 -04:00
Jack Wotherspoon
e5e426279e
 		feat: add support for Gemini CLI integration (#1709) 2025-09-06 12:08:56 -04:00
Jeremiah Lowin
8ffed6a3d9
 		Hotfix: restore --transport streamable http at CLI (#1743) 2025-09-03 17:24:22 -04:00
Jeremiah Lowin
deff09fe07
 		refactor: replace auth provider registry with ImportString (#1710) 2025-09-02 08:31:52 -04:00
Jeremiah Lowin
bc25802a28
 		Update documentation around scopes for google (#1703) 2025-09-01 16:44:50 -04:00
Jeremiah Lowin
aef6d23fb9
 		refactor: move scope parser to utilities (#1642) 2025-08-26 10:50:54 -04:00
Jeremiah Lowin
1f3f82d245
 		Implement typed source system for FastMCP configuration (#1607) 2025-08-24 16:32:37 -04:00
Jeremiah Lowin
b34519c356
 		Update schema path (#1595) 2025-08-23 09:47:58 -04:00
Jeremiah Lowin
c3d1176a69
 		Add WorkOS and Azure OAuth providers (#1550) 2025-08-20 16:22:03 -04:00
Jeremiah Lowin
2d3d5392f1
 		feat: introduce fastmcp.json configuration system (#1517) 2025-08-19 16:06:04 -04:00
Jeremiah Lowin
108ad4b70d
 		feat: Add --workspace flag to fastmcp install cursor (#1522) 
Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com>
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2025-08-19 15:38:55 -04:00
Jeremiah Lowin
ec015de3b0
 		Add OAuth proxy that allows authentication with social IDPs without DCR support (#1434) 2025-08-18 13:39:58 -04:00
Jeremiah Lowin
5a87a4787d
 		Update AuthKit vocab (#1338) 2025-08-01 20:56:15 -04:00
Jeremiah Lowin
a965d0d836
 		Docs updates (#1336) 2025-08-01 20:39:55 -04:00
tommitt
1be7d98c1a
 		Eunomia authorization server can run embedded within the MCP server (#1317) 2025-08-01 17:08:10 -04:00
Jeremiah Lowin
b46d4934a8
 		Add comprehensive OAuth 2.1 authentication system with WorkOS integration (#1327) 2025-08-01 17:06:55 -04:00