ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-28 02:10:38 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,550 commits 158 branches 117 tags 75 MiB
Commit graph

742 commits

Author SHA1 Message Date
Jeremiah Lowin
4036fa178f
 		Harden OAuth proxy redirect defaults 2026-06-27 12:47:04 -04:00
Jeremiah Lowin
a8bb1b08c2
 		Raise fastmcp.ValidationError for invalid tool arguments (#4392) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
 2026-06-27 11:14:20 -04:00
Jacky Su
0668eb7b80
 		Fix/cimd flow issue (#4206) 2026-06-27 10:57:58 -04:00
Jeremiah Lowin
0cffe41115
 		fix: validate task tool arguments against declared types (#4373) 2026-06-27 10:03:59 -04:00
Jeremiah Lowin
a612846224
 		fix: bound default OIDC discovery timeout and expose it on provider wrappers (#4374) 2026-06-24 17:16:18 -04:00
Jeremiah Lowin
ade2b3ff46
 		fix: bracket IPv6 hosts in server startup log URL (#4372) 2026-06-24 17:15:40 -04:00
Bobby Davidson
7f2d034f4d
 		Forward IdP auth errors to MCP client instead of showing HTML error page (#4293) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-06-24 12:09:09 -04:00
Tomasz Czochański
4ce8e2a5d0
 		Fix: async rate limiting middleware get_client_id callbacks (#4319) 
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-06-24 10:27:30 -04:00
Jeremiah Lowin
3b8538e242
 		Allow private JWT headers (#4290) 2026-06-06 02:23:48 +01:00
Jeremiah Lowin
e58f386bac
 		Log refresh-token misses in OAuthProxy instead of failing silently (#4276) 2026-06-03 11:22:35 -04:00
René Mulder
0f4f78c464
 		Fix resource templates with query params on proxied servers (#4251) 
Co-authored-by: René Mulder <rene@silverflow.com>
 2026-05-31 14:03:49 -04:00
Jeremiah Lowin
58e0f5320b
 		Decouple FastMCP access token lifetime from upstream expires_in (#4254) 2026-05-30 11:48:23 -04:00
Jeremiah Lowin
53b20168c8
 		Close upstream OAuth clients (#4248) 2026-05-27 19:45:45 -04:00
Jeremiah Lowin
140d96aadd
 		Forward proxy initialize as bridge behavior (#4228) 2026-05-27 10:41:49 -04:00
Bill Easton
802ceaaa6b
 		Add targeted coverage tests (#4230) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-25 18:57:28 -04:00
Jeremiah Lowin
2bff3725bf
 		Surface proxy upstream failures (#4227) 2026-05-23 14:56:10 -04:00
Jeremiah Lowin
59223f6e89
 		Allow pre-bound HTTP sockets (#4222) 2026-05-23 10:08:49 -04:00
Jeremiah Lowin
b8c9d58d61
 		Migrate auth JWTs to joserfc (#4221) 2026-05-23 09:29:04 -04:00
Jeremiah Lowin
e242abee7d
 		Let ToolResult return an error result via is_error (#4217) 2026-05-22 20:20:52 -04:00
rgillinlz
81a16ed27f
 		fix(auth): unprefix Azure scopes echoed back to MCP clients (#4130) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-20 12:22:24 -04:00
mohanram
0022d8518f
 		Add token_expiry_threshold_seconds for proactive token refresh (#4142) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-20 10:47:26 -04:00
Shigechika AIKAWA
2a262438fa
 		fix(auth): add /.well-known/openid-configuration alias for OAuth server metadata (#4167) 
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-20 10:36:01 -04:00
Bill Easton
1c4069efa3
 		fix(proxy): restore _current_server in _restore_request_context (#4168) 2026-05-20 10:34:00 -04:00
Tiago Surjus Kaneta
b0fb2c3ae6
 		Add valid_scopes and extra_authorize_params to WorkOSProvider (#4135) 2026-05-20 10:31:48 -04:00
Bill Easton
2d61d8a46b
 		fix: add OTEL spans to sampling step and tool execution (#4059) 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-20 09:38:58 -04:00
Bill Easton
344a4f81b5
 		fix(auth): disambiguate auth-denied vs missing component messages (#4165) 2026-05-20 09:36:27 -04:00
Bill Easton
11951585c0
 		fix(tests): hoist azure-identity import out of the OBO test timeout window (#4176) 2026-05-20 09:35:56 -04:00
Bill Easton
24b594b1e3
 		fix: VersionSpec eq matching normalizes versions and selects deterministically (#4058) 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-20 09:35:25 -04:00
Sarthak Bhardwaj
8209093871
 		fix(http): terminate active streamable-HTTP transports before lifespan shutdown (#4118) 2026-05-10 10:58:13 -04:00
Kiran Thakkar
cf59a4511f
 		Fix OCI Provider issue in 3.x version. Add OCI auth provider example … (#4116) 
* Fix OCI Provider issue in 3.x version. Add OCI auth provider example and test

* Fix OCI Provider issue in 3.x version. Add OCI auth provider example and test. Fixed a couple of minor issues in README.

* Rerun CI
 2026-05-10 10:08:00 -04:00
Craig Ringer
89b99ecfb9
 		fix(proxy): fall back to live identifier for backend_* span attributes (#4109) 
🤖 Generated with Claude Code (Opus 4.7) on behalf of @ringerc

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-10 10:07:57 -04:00
sergeykad
28722f846a
 		fix: drop exc_info for expected tool failures, remove unreachable ValidationError (#4029) 2026-05-09 14:56:17 -04:00
Shaik Mohammed Kaif
6b6db33c4a
 		#4084 [Issues] Windows startup crash due to UnicodeDecodeError when l… (#4092) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-07 15:30:56 -04:00
Jeremiah Lowin
4719f3055a
 		Make Docket reentrant; mounted servers enter their own lifespan (#4095) 2026-05-04 17:36:50 -04:00
Taylor Wilsdon
61e56c683e
 		enh: Add public API for updating OAuthProxy scopes after initialization (#4091) 2026-05-04 15:49:12 -04:00
cuyua9
0b59af9489
 		Fix sampling from background tasks (#4068) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-04 12:52:35 -04:00
Mukunda Rao Katta
20359de953
 		Fix #4056: keep blank query values, add token bucket regression test (#4069) 
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-05-04 12:44:38 -04:00
Jeremiah Lowin
0fe01372f0
 		Partition ResponseCachingMiddleware cache by access token (#4041) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-04-25 12:09:11 -04:00
Carlos Rian
eebdc8c031
 		feat: add AzureB2CProvider for Azure AD B2C user flows (#3995) 2026-04-22 09:24:09 -04:00
Jeremiah Lowin
2d6143c6d8
 		fix: honor upstream refresh token expiry in OAuthProxy (#3990) 2026-04-20 14:03:57 -04:00
Jeremiah Lowin
801385df44
 		fix: bound _refresh_locks with LRU eviction to prevent memory leak (#3968) 2026-04-18 11:07:38 -04:00
Jeremiah Lowin
97bff96ef1
 		Revert "Forward backend capabilities in ProxyProvider (#3956)" (#3964) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-04-17 17:51:27 -04:00
Jeremiah Lowin
1e67c53a17
 		Reject dot-segments in redirect URI allowlist matching (#3963) 2026-04-17 17:49:25 -04:00
Jeremiah Lowin
7fb037f20c
 		Harden OAuth Proxy silent consent against AS-in-the-middle (#3960) 2026-04-17 16:39:50 -04:00
Jeremiah Lowin
eb1426251c
 		Allow upstream client_id to be used directly without DCR (#3957) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-04-17 15:22:44 -04:00
Jeremiah Lowin
98f69bdba0
 		Forward backend capabilities in ProxyProvider (#3956) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-04-17 15:22:08 -04:00
Chris Guidry
34313ea112
 		Restore task snapshot via a worker-level dependency (#3945) 
* Restore task snapshot via a worker-level dependency

`get_access_token()` returned `None` inside background tasks whenever
`FASTMCP_DOCKET_URL` pointed at a `redis+cluster://` URL. The write side
was fine — it went through `docket.redis()`, which is cluster-aware —
but fastmcp kept a parallel sync Redis client just to read the snapshot
back, and `Redis.from_url()` rejects the cluster scheme.

Docket 0.19.1 ships worker-level dependencies that resolve per task in
the same asyncio.Task as user code, so ContextVars propagate cleanly.
That lets us load the snapshot once via `restore_task_snapshot` and
drop the sync Redis path entirely. Sync helpers like
`get_access_token()` and `get_http_request()` now just read a
ContextVar; Docket is the sole Redis consumer.

Closes #3897

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Revert TaskKey stub to a plain return

NotImplementedError would fire at module import if anything evaluated
the default; a no-op stub keeps the module usable without the
fastmcp[tasks] extra, which is what we want.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-17 08:24:42 -04:00
Jeremiah Lowin
ac1416bd2e
 		fix tests that relied on task=True returning error results (#3954) 2026-04-17 07:48:46 -04:00
Bill Easton
39b421a464
 		OTEL: Instrument all MCP list operations and enrich delegate spans (#3890) 
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-16 18:45:50 -04:00
Bill Easton
7184a4ca21
 		OTEL: Fix attribute compliance with MCP semantic conventions (#3889) 
* OTEL: Fix attribute compliance and improve telemetry helpers

Attribute compliance:
- Remove rpc.system/service/method (MCP is not traditional RPC)
- Add gen_ai.tool.name on tools/call spans
- Add gen_ai.prompt.name on prompts/get spans
- Fix session_id check (truthy -> is not None)

Telemetry helper improvements:
- Add is_recording() guards to skip work on non-recording spans
- Add error.type attribute with __qualname__ on error spans
- Use isinstance check for ToolError to set "tool_error" error type
- Include exception message in span status description
- Add tool_name/prompt_name params to server_span and client_span

Client call_tool enrichment:
- Reflect tool-level errors (result.isError) on client span status
  so callers see ERROR even though the MCP protocol call succeeded

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: remove resource URI from span names to avoid high-cardinality

Per MCP semantic conventions, resource URIs SHOULD NOT be included in
span names by default since they can be unbounded (especially with
templates like users://{id}/profile). The URI remains available via
the mcp.resource.uri attribute.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: add missing gen_ai/mcp attributes to proxy and delegate spans

- Proxy tool spans: add gen_ai.tool.name
- Proxy prompt spans: add gen_ai.prompt.name
- All delegate spans: add mcp.method.name
- Docs: remove rpc.* references, update span names and attributes table

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Hoist ToolError imports to module level, add rpc.* migration note

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-14 16:28:47 -04:00