ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-09 15:19:10 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,673 commits 152 branches 114 tags 96 MiB
Commit graph

144 commits

Author SHA1 Message Date
marvin-context-protocol[bot]
0781e723c2
 		chore: Update SDK documentation (#4442) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-07-19 15:06:18 -04:00
marvin-context-protocol[bot]
874425a113
 		chore: Update SDK documentation (#4427) 2026-07-05 19:16:03 -04:00
marvin-context-protocol[bot]
4d5627ba5d
 		chore: Update SDK documentation (#4360) 2026-06-27 10:36:03 -04:00
marvin-context-protocol[bot]
0445c31fef
 		chore: Update SDK documentation (#4223) 2026-06-06 02:23:33 +01:00
marvin-context-protocol[bot]
6acacf2191
 		chore: Update SDK documentation (#4155) 2026-05-23 08:54:28 -04:00
marvin-context-protocol[bot]
73df4dcaee
 		chore: Update SDK documentation (#4096) 2026-05-14 22:06:38 -04:00
marvin-context-protocol[bot]
074189265d
 		chore: Update SDK documentation (#3988) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-05-04 15:34:27 -04:00
marvin-context-protocol[bot]
34f6e68826
 		chore: Update SDK documentation (#3969) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-20 13:00:37 -04:00
marvin-context-protocol[bot]
b4c4cfd3d5
 		chore: Update SDK documentation (#3917) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-17 18:29:09 -04:00
marvin-context-protocol[bot]
5c2ff1bd7b
 		chore: Update SDK documentation (#3914) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-13 21:23:43 -04:00
marvin-context-protocol[bot]
3117846176
 		chore: Update SDK documentation (#3909) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-13 20:08:29 -04:00
marvin-context-protocol[bot]
c2dafc1c88
 		chore: Update SDK documentation (#3901) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-13 14:00:07 -04:00
marvin-context-protocol[bot]
e8f2fefb06
 		chore: Update SDK documentation (#3876) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-12 21:23:37 -04:00
marvin-context-protocol[bot]
56456cb188
 		chore: Update SDK documentation (#3808) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-12 13:53:38 -04:00
marvin-context-protocol[bot]
a3c5cc12d3
 		chore: Update SDK documentation (#3757) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-07 19:49:20 -04:00
Jeremiah Lowin
eac646e744
 		chore: split SDK navigation into standalone $ref file (#3773) 2026-04-06 11:18:14 -04:00
marvin-context-protocol[bot]
697426b39e
 		chore: Update SDK documentation (#3755) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-04-03 10:44:08 -04:00
marvin-context-protocol[bot]
4f7668807a
 		chore: Update SDK documentation (#3712) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-31 12:02:59 -04:00
marvin-context-protocol[bot]
dd8816c6cc
 		chore: Update SDK documentation (#3701) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-30 09:33:47 -04:00
marvin-context-protocol[bot]
85b7efd746
 		chore: Update SDK documentation (#3694) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-29 21:03:58 -04:00
marvin-context-protocol[bot]
3354c40992
 		chore: Update SDK documentation (#3670) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-28 21:15:58 -04:00
marvin-context-protocol[bot]
1d8a8bcf36
 		chore: Update SDK documentation (#3668) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-27 21:48:45 -04:00
Jeremiah Lowin
3e1aadb282
 		Docs: showcase hero, narrative improvements, panel closed by default (#3657) 2026-03-27 14:39:32 -04:00
marvin-context-protocol[bot]
145dbbfb4c
 		chore: Update SDK documentation (#3615) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-25 10:58:34 -04:00
marvin-context-protocol[bot]
c04c9d0ce5
 		chore: Update SDK documentation (#3592) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-24 20:26:38 -04:00
marvin-context-protocol[bot]
352525c8e5
 		chore: Update SDK documentation (#3573) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-22 19:59:33 -04:00
marvin-context-protocol[bot]
55094fd49b
 		chore: Update SDK documentation (#3551) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-18 18:48:36 -04:00
marvin-context-protocol[bot]
754fb01088
 		chore: Update SDK documentation (#3541) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-18 10:38:33 -04:00
marvin-context-protocol[bot]
25d550caf1
 		chore: Update SDK documentation (#3478) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-15 16:51:51 -04:00
marvin-context-protocol[bot]
2c451bf6ba
 		chore: Update SDK documentation (#3378) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-13 18:07:14 -04:00
marvin-context-protocol[bot]
d8e6540f24 chore: Update SDK documentation 2026-03-03 17:03:23 -05:00
Bill Easton
49534ce91d
 		Add Google GenAI Sampling Handler (#2977) 
* Add Google GenAI sampling handler

Co-authored-by: Bill Easton <strawgate@users.noreply.github.com>

* chore: Update SDK documentation

* Filter non-Gemini model hints in _get_model

Match the Anthropic/OpenAI handler pattern of only selecting
provider-compatible models from hints.

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Bill Easton <strawgate@users.noreply.github.com>
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-03-02 18:00:03 -05:00
marvin-context-protocol[bot]
902b63f676
 		chore: Update SDK documentation (#3313) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-03-02 17:27:38 -05:00
marvin-context-protocol[bot]
80efbd3d57
 		chore: Update SDK documentation (#3273) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-26 11:19:53 -05:00
Jeremiah Lowin
bb3e159bc6
 		Fix decorator overload return types for function mode (#3258) 
* Fix TypeVar placement to satisfy ruff E402

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-20 20:30:39 -05:00
Jeremiah Lowin
43e9cdd275
 		Fix ty compatibility with upgraded deps (#3257) 
* Fix ty compatibility with upgraded deps

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-20 19:51:44 -05:00
Jeremiah Lowin
f84b2dae04
 		Add verify_id_token option to OIDCProxy (#3248) 
* Add verify_id_token option to OIDCProxy

Closes #3240

* chore: Update SDK documentation

* Preserve raw_token_data fields across token refresh

* chore: Update SDK documentation

* Use client_id as verifier audience in verify_id_token mode

* chore: Update SDK documentation

* Return upstream access_token in AccessToken when verifying id_token

* chore: Update SDK documentation

* Skip verifier scope checks in verify_id_token mode

* chore: Update SDK documentation

* Recompute derived scope state after restoring required_scopes in verify_id_token mode

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-20 14:20:47 -05:00
Jeremiah Lowin
ea1328660e
 		Fix NameError with future annotations and Context/Depends parameters (#3243) 
* Fix NameError with future annotations and Context/Depends parameters

Closes #3238, closes #905

* chore: Update SDK documentation

* Drop unnecessary pre-resolution of annotations

Pydantic (even 2.11.7) uses __module__ not __globals__ to resolve
annotations, so setting __module__ alone is sufficient.

* chore: Update SDK documentation

* Restore annotation pre-resolution for Pydantic compat

The wrapper's __globals__ is read-only and points to dependencies.py,
so some Pydantic versions use it instead of __module__ when resolving
string annotations. Pre-resolving via get_type_hints on the original
function ensures annotations are type objects before Pydantic sees them.

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-20 09:22:10 -05:00
Jeremiah Lowin
1caf40eee8
 		Fix circular reference crash in OpenAPI schemas (#3245) 
* Fix circular reference crash in OpenAPI schemas (#3242, #1206, #1016)

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-20 09:21:54 -05:00
Jeremiah Lowin
aa7946d353
 		Preserve skill metadata through provider wrapping (#3237) 
* Preserve computed _meta through provider wrapping; add skill identity to _meta

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-19 12:24:39 -05:00
Jeremiah Lowin
b894a0b747
 		Accept callables in Tool.from_tool() (#3235) 
* Accept callables in Tool.from_tool()

* chore: Update SDK documentation

* Add end-to-end client test for decorated function transform

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-19 11:31:13 -05:00
Jeremiah Lowin
3f2090f10a
 		Fix non-serializable state lost between middleware and tools (#3234) 
* Fix non-serializable state lost between middleware and tools

Inherit _request_state dict from parent Context in __aenter__ so
middleware and tool contexts share the same in-memory state.

Closes #3228

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-19 10:57:59 -05:00
Jeremiah Lowin
657298112b
 		Fix MDX parsing error and update card images (#3213) 
* Fix MDX parsing error and add broken link CI check

Escape curly braces in docstring example that broke MDX parsing,
update card images, and add docs broken link check to CI.

* Revert CI broken link check — Mintlify runs this already

* Use code fence instead of inline backticks for MDX escaping

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-18 13:04:45 -05:00
Jeremiah Lowin
7aba0df323
 		Cache OBO credentials on AzureProvider for token reuse (#3212) 
* Cache OBO credentials on AzureProvider for token reuse

* chore: Update SDK documentation

* Close evicted OBO credentials properly

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-18 11:43:36 -05:00
Jeremiah Lowin
9b248a15b3
 		Update repository references for transfer to prefecthq (#3207) 
* Update repository references from jlowin/fastmcp to prefecthq/fastmcp

* Retrigger CI after repo transfer

* chore: Update SDK documentation

* Only run deep triage on bug issues for jlowin

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-18 10:33:56 -05:00
Jeremiah Lowin
a8b100eb8c
 		Add JWT audience validation and RFC 8707 warnings to auth providers (#3204) 
* Add JWT audience validation and RFC 8707 warnings to auth providers

* chore: Update SDK documentation

* Update AuthKit example README env var name

* Move RFC 8707 warnings inside default verifier guard

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-17 18:16:05 -05:00
Jeremiah Lowin
016b9f90e0
 		Fix confused deputy attack via consent binding cookie (#3201) 
* Add consent binding cookie to prevent confused deputy attacks (GHSA-rww4-4w9c-7733)

The OAuthProxy's consent page verified user intent but didn't bind the
consenting browser to the IdP callback. An attacker could intercept the
upstream authorization URL after consent and send it to a victim, whose
browser would complete the flow without having the consent cookie.

This adds a signed consent binding cookie set during consent approval
(both manual and auto-approve paths) and verified in the IdP callback
handler. A different browser won't have this cookie and gets a 403.

* Use startswith for URL assertion in consent binding test

* Store consent bindings as per-transaction map to support parallel flows

* Only accept __Host- consent binding cookie on HTTPS

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-17 10:24:07 -05:00
Jeremiah Lowin
5dd8cde2f9
 		Drop diskcache dependency (CVE-2025-69872) (#3185) 
* Drop diskcache dependency (CVE-2025-69872)

Switch default OAuth proxy storage from DiskStore (backed by diskcache,
which uses pickle serialization) to FileTreeStore (file-per-key JSON).
This removes diskcache from the dependency tree entirely, resolving
CVE-2025-69872 for pip-audit and similar scanners.

* chore: Update SDK documentation

* Add comments explaining FileTreeStore warning suppression

* chore: Update SDK documentation

* Isolate storage by encryption key, gracefully handle decryption failures

* chore: Update SDK documentation

* Bump py-key-value-aio lower bound to 0.4.2 for FileTreeStore security hardening

* chore: Update SDK documentation

* Document storage backend change and update DiskStore references

* Bump py-key-value-aio lower bound to 0.4.3

* Bump py-key-value-aio to 0.4.4, remove warning suppression

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-16 16:43:15 -05:00
marvin-context-protocol[bot]
edac1e5427 chore: Update SDK documentation 2026-02-14 03:43:26 +00:00
Jeremiah Lowin
ccfe5047bf
 		Fix include_tags/exclude_tags ignored without tools in MCPConfig (#3186) 
* Fix include_tags/exclude_tags ignored without tools in MCPConfig

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-02-13 20:38:56 -05:00