218 commits

Author	SHA1	Message	Date
Jeremiah Lowin	4d609ce74b	Move sampling fallback handler docs to server section (#2163)	2025-10-21 10:02:11 -04:00
Jeremiah Lowin	9987a456a0	Allow authorization consent screen to be disabled (#2172) ... * Add optional authorization consent screen for OAuth providers Adds `require_authorization_consent` parameter (default True) to OAuthProxy and all providers. When disabled, authorization skips the consent screen for local development/testing. Logs security warning when disabled. * Update warning message to use 'authorization consent screen'	2025-10-21 10:00:39 -04:00
hyeonjae	24e2b09d95	Update content type in advanced_tool function (#2147)	2025-10-20 08:43:35 -04:00
Jeremiah Lowin	b362444ddf	Add storage backend documentation (#2137) ... * Add storage backend documentation * Add storage patterns documentation for wrapper caching strategies - Add PassthroughCacheWrapper section for multi-tier caching - Document TTL clamping strategy for optimized memory usage - Add example for wrapping custom storage implementations - Explain how to combine fast in-memory caches with persistent remote stores * Update docs	2025-10-19 19:24:13 -04:00
Jeremiah Lowin	9e78d755c2	Support custom server name, icons, and link in OAuth Proxy consent page (#2135) ... * Implement icon support in fastmcp * Fix icon feature tests - Update snapshot for ResourceTemplate to include icons field - Remove OAuth mounting tests (belong to PR #2119, not this feature) * Update docs * Customize consent screen * Use server website link if available * Anchor link shouldnt have trailing slash * Remove 'a FastMCP server named' from consent page message * Update docs	2025-10-18 11:49:26 -04:00
Jeremiah Lowin	6f627b58fd	Implement icon support (#2121) ... * Implement icon support in fastmcp * Fix icon feature tests - Update snapshot for ResourceTemplate to include icons field - Remove OAuth mounting tests (belong to PR #2119, not this feature) * Update docs	2025-10-17 17:28:08 -04:00
Jeremiah Lowin	330eaed11f	OAuth proxy issues its own tokens (#2109) ... * OAuth proxy issues its own tokens Implement token factory pattern where proxy issues FastMCP JWTs instead of forwarding upstream tokens. Tokens are minimal references (JTI) that map to encrypted upstream credentials stored server-side. * Update run-tests.yml * Update secret generation and docs * Add upgrade guide	2025-10-17 14:31:53 -04:00
Jeremiah Lowin	d472e30765	Support mounting OAuth-protected servers under path prefixes (#2119) ... * Add issuer_url parameter to OAuth providers for mounting scenarios * Add get_well_known_routes * Update docs * Improve docs and tests * Trigger CI * Fix conditional test execution for Windows	2025-10-17 11:44:49 -04:00
William Easton	b713b5e4d0	Merge branch 'main' into responsecachingmiddleware	2025-10-16 21:59:20 -05:00
William Easton	5831c4bb60	PR Clean-up	2025-10-16 21:56:55 -05:00
Jeremiah Lowin	2f841c356e	Document container limitations for Image/Audio/File objects (#2118)	2025-10-16 18:03:29 -04:00
Jeremiah Lowin	52e9af1214	Add RFC 7662 token introspection provider (#2074)	2025-10-16 10:57:06 -04:00
Jeremiah Lowin	be73143960	Clarify context is scoped to single MCP request (#2099)	2025-10-15 06:00:03 -07:00
William Easton	67a19afe89	Merge branch 'main' into responsecachingmiddleware	2025-10-14 16:59:53 -05:00
Jeremiah Lowin	e036cba383	Add Pydantic-compatible input validation (#2073)	2025-10-14 11:49:30 -07:00
William Easton	1ec2bd7d92	Also push client messages (info/warn/debug) to server debug log (#2063) ... Co-authored-by: William Easton <strawgate@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-10-14 11:38:26 -07:00
William Easton	b0db7803d6	Merge branch 'main' into ankesh/mixin-add-meta	2025-10-12 10:47:38 -04:00
Jeremiah Lowin	82dc3bdff9	Merge branch 'main' into responsecachingmiddleware	2025-10-11 18:32:32 -04:00
Jeremiah Lowin	1f11b5e641	Refactor mounting logic from managers to server (#2069)	2025-10-11 18:28:21 -04:00
Jeremiah Lowin	7b7e277d5d	Prevent confused deputy attacks in OAuth proxy (#2056)	2025-10-11 10:53:54 -04:00
William Easton	28370827dc	Merge branch 'main' into responsecachingmiddleware	2025-10-10 17:37:34 -04:00
Ankesh	26e2414b48	feat: Add title, annotations and meta to mixin decorators	2025-10-10 14:23:02 +05:30
Jeremiah Lowin	aecf7f07c2	Support customizable env file location (#2036)	2025-10-09 16:12:23 -04:00
Jeremiah Lowin	9cb47e12dd	Add version badge to on_initialize docs (#2029)	2025-10-08 20:10:12 -04:00
Jeremiah Lowin	eac1cea6a4	Improve docs on prefix rules (#2028)	2025-10-08 19:57:14 -04:00
Jeremiah Lowin	ba1ba86a64	Support initialize requests in middleware (#1546)	2025-10-05 10:20:13 -04:00
Jeremiah Lowin	35a8c32f61	Add RFC 6570 query parameter support to resource templates (#1971)	2025-09-30 16:28:09 -04:00
Stephan Eberle	5486b5a3b9	Add AWS Cognito OAuth Provider for Enterprise Authentication (#1873) ... Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-09-25 11:08:45 -04:00
Jeremiah Lowin	b3ea6ad384	docs: update OAuth and OIDC proxy documentation (#1880)	2025-09-21 11:02:36 -04:00
Jeremiah Lowin	7176d4f293	Add persistent storage for OAuth client registrations (#1879)	2025-09-21 10:56:08 -04:00
Anvi Banga	59e250a98e	feat: Add support for Descope Authentication (#1853) ... Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-09-19 13:46:44 -04:00
William Easton	a9113d0c9a	Refactor cache, add Elasticsearch cache backend as a contrib module with docs	2025-09-18 13:47:42 -05:00
William Easton	d5f01dae15	Add docs	2025-09-17 19:46:15 -05:00
Ruhul Alam	972521146f	feat: Add support for OIDC configuration (#1817)	2025-09-14 14:54:48 -04:00
Didier Durand	6ece5462db	[Doc]: fixing typos in multiple files (#1804)	2025-09-11 18:07:02 -04:00
Jeremiah Lowin	3dd7373680	feat: Add flexible parameter forwarding to OAuth proxy (#1771)	2025-09-06 15:50:29 -04:00
Jeremiah Lowin	46a5187398	Add token_endpoint_auth_method parameter to OAuthProxy (#1736)	2025-09-03 12:21:40 -04:00
Jeremiah Lowin	1045eb47c2	OAuth proxy PKCE forwarding (#1733)	2025-09-03 12:11:38 -04:00
Jeremiah Lowin	d36ea42b92	Fix OAuth resource URL handling and WWW-Authenticate header (#1706)	2025-09-02 15:14:05 -04:00
Jeremiah Lowin	deff09fe07	refactor: replace auth provider registry with ImportString (#1710)	2025-09-02 08:31:52 -04:00
William Easton	22ba63491d	Merge branch 'main' into claude/issue-1583-20250829-1824	2025-09-01 13:58:06 -05:00
William Easton	67d933abcf	Small edits	2025-09-01 13:57:40 -05:00
Jeremiah Lowin	8c678b552b	Add resource_server_url parameter to OAuth proxy providers (#1682)	2025-08-30 08:33:13 -04:00
marvin-context-protocol[bot]	66252018ed	docs: add performance warnings for mounted servers and proxies ... - Add warning about performance impact in mounted servers section - Explain that list_tools() operations are affected by slowest mounted server - Note that HTTP-based servers can introduce 300-400ms latency vs 1-2ms for local - Recommend import_server() for performance-critical applications - Add performance considerations section to proxy documentation - Reference composition documentation for alternatives Co-authored-by: William Easton <strawgate@users.noreply.github.com>	2025-08-29 18:25:53 +00:00
romanusyk	210e9cc5ca	Add default scope handling in OAuth proxy (#1667)	2025-08-29 09:58:45 -04:00
Jeremiah Lowin	6d9088704e	Fix OAuth redirect URI validation for DCR compatibility (#1661)	2025-08-28 15:19:56 -04:00
Jeremiah Lowin	c730aaa6b0	Document symmetric key JWT verification support (#1586)	2025-08-22 19:35:08 -04:00
Jeremiah Lowin	839a022b07	Add configurable redirect URI validation for OAuth providers (#1582)	2025-08-22 15:52:56 -04:00
Sebastian Kalisz	fe8056fe30	Added import of AuthProxy to auth __init__ (#1568)	2025-08-21 16:28:02 -04:00
Jeremiah Lowin	c3d1176a69	Add WorkOS and Azure OAuth providers (#1550)	2025-08-20 16:22:03 -04:00