ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-09 07:09:11 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,863 commits 152 branches 114 tags 96 MiB
Commit graph

1,099 commits

Author SHA1 Message Date
marvin-context-protocol[bot]
8a1820f1c3
 		chore: Update SDK documentation (#4782) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-08-07 15:49:36 -05:00
Chris Guidry
1ac8fc6060
 		Encrypt task context snapshots at rest (#4772) 
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-08-06 20:01:40 -04:00
marvin-context-protocol[bot]
803da5319c
 		chore: Update SDK documentation (#4679) 2026-08-06 19:56:40 -04:00
Jake Kaplan
9feb1f378b
 		Forward proxy server metadata across protocol eras (#4776) 
* Forward proxy negotiation metadata

🤖 Generated with OpenAI Codex

* Limit forwarded proxy metadata

🤖 Generated with OpenAI Codex

* Tighten negotiation metadata forwarding

🤖 Generated with OpenAI Codex

* Tighten proxy metadata docs

🤖 Generated with OpenAI Codex

* Keep proxy metadata middleware with provider

🤖 Generated with OpenAI Codex

* Simplify proxy negotiation middleware API

🤖 Generated with OpenAI Codex

* Name proxy metadata middleware directly

🤖 Generated with OpenAI Codex

* Preserve discovery middleware contracts

🤖 Generated with OpenAI Codex

* Clarify proxy metadata ownership

🤖 Generated with OpenAI Codex

* Align proxy metadata wording

🤖 Generated with OpenAI Codex

* Call forwarded values server metadata

🤖 Generated with OpenAI Codex

* Harden proxy metadata reads

🤖 Generated with OpenAI Codex

* Expose configured discovery result

🤖 Generated with OpenAI Codex

* Preserve proxy discovery compatibility

🤖 Generated with OpenAI Codex

* Preserve deprecated initialization middleware

🤖 Generated with OpenAI Codex

* Harden proxy metadata boundaries

🤖 Generated with OpenAI Codex

* Restore deprecated middleware location

🤖 Generated with OpenAI Codex

* Simplify proxy metadata client lifecycle

🤖 Generated with OpenAI Codex

* Clarify proxy metadata lifecycle

🤖 Generated with OpenAI Codex

* Preserve proxy factory errors

🤖 Generated with OpenAI Codex

* Detach forwarded proxy metadata

🤖 Generated with OpenAI Codex

* Simplify proxy metadata implementation

🤖 Generated with OpenAI Codex

* Distinguish proxy metadata failures

🤖 Generated with OpenAI Codex

* Narrow proxy metadata validation fallback

🤖 Generated with OpenAI Codex

* Retrigger CI

🤖 Generated with OpenAI Codex
 2026-08-06 19:09:05 -04:00
nate nowack
75fb116e36
 		Support EdDSA verification in JWTVerifier (#4752) 2026-08-06 14:09:37 -04:00
Jeremiah Lowin
6fb34e9383
 		Document MCP protocol support and conformance (#4781) 2026-08-06 11:15:38 -04:00
Jeremiah Lowin
875e8e18bd
 		Preserve legacy httpx compatibility without importing it (#4766) 2026-08-05 18:09:16 -04:00
Jake Kaplan
959daf2321
 		Sanitize forwarded request metadata where the proxy copies it (#4770) 
* Separate proxy protocol policy from client construction

🤖 Generated with OpenAI Codex

* Strip connection-owned request metadata at the proxy backend boundary

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* Sanitize forwarded request metadata where the proxy copies it

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* Forward hop-safe request metadata for proxied resources, templates, and prompts

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-08-05 15:46:10 -04:00
Jeremiah Lowin
2c2f98691f
 		Docs: mirror v3.4.6 release notes (#4764) 2026-08-05 10:53:15 -04:00
Jeremiah Lowin
d267792653
 		docs: clarify external OAuth consent mode (#4746) 2026-08-03 18:02:09 -04:00
Jeremiah Lowin
bcef61d806
 		Route published docs through pull requests (#4713) 2026-07-30 10:18:03 -04:00
Nicholas Brown
0f18a258d4
 		add language dropdown (#4716) 2026-07-30 09:32:58 -04:00
Jeremiah Lowin
a22f778dbf
 		Rewrite the FastMCP docs welcome page (#4709) 2026-07-29 09:51:22 -04:00
Jeremiah Lowin
0792ac812c
 		Improve the v4 docs (#4707) 2026-07-29 09:51:13 -04:00
Jeremiah Lowin
7339936980
 		Rewrite the v4 What's New page and document server extensions (#4698) 
* Rewrite the v4 What's New page

Teach the headline features with code instead of asserting them, drop the
major-version throat-clearing and SEP list, and correct the elicitation
claim: ctx.elicit() is unchanged and handshake-only, while sampling and
roots are removed outright.

* Fix broken doc links and stale version references

Repoint five dead links and anchors, refresh v3-era version examples on the
v4 docs, and add the missing FastMCP 3 entry to the installation page's
upgrade section.

* Document server extensions

add_extension() shipped in v4 with no documentation page. Covers the
extension interface, request methods, tool-call interception, lifespan
ownership, and the client half.

* Link the FastMCP TypeScript library

* Address Codex review feedback

Gate the extension interceptor on the client's per-request opt-in rather
than claiming negotiation does it; show the v4 beta pin on the install
page instead of a version a reader cannot get; note that UserSession
requires authentication.
 2026-07-28 20:05:45 -04:00
Jeremiah Lowin
7a77805159
 		Use mcp.types directly instead of aliasing to mcp_types in docs (#4696) 2026-07-28 19:08:44 -04:00
Jeremiah Lowin
baced6281c
 		Always emit a tool title, derived from name when unset (#4694) 
* Always emit a tool title, derived from name when unset

Some MCP clients (e.g. ChatGPT) drop tools with no `title` instead of
falling back to `name` for display as the spec allows. Deriving a
default title in Tool.to_mcp_tool() fixes this for every tool built on
top of it, including the search-transform, code-mode, and session
proxy tools that never set one explicitly.

Fixes #4414

* Derive fallback title from the overridden name, document it

Addresses Codex review on #4694.

* Resolve title precedence from effective overrides

* Normalize mapping annotations before deriving the title
 2026-07-28 17:30:20 -04:00
Jeremiah Lowin
5a98ceb5ca
 		Add v4.0.0b1 changelog and updates entries (#4681) 
* Add v4.0.0b1 changelog and updates entries

* Drop meta note from b1 intro; add #4682 under enhancements

* File #4682 under fixes

* Correct the camelCase rename claim: Python model fields, not the wire

* Baseline the b1 changelog on v3.4.5

* Simplify the beta banner
 2026-07-28 17:15:48 -04:00
Jeremiah Lowin
8b76710e66
 		Move to the stable MCP Python SDK 2.0.0 (#4655) 2026-07-28 16:31:49 -04:00
Jeremiah Lowin
81b1e818e5
 		Apply app visibility where no host can (#4692) 2026-07-28 16:12:38 -04:00
Jeremiah Lowin
a8b5da9770
 		Late-bind app tool names so UIs survive composition (#4682) 2026-07-28 10:54:19 -04:00
Jeremiah Lowin
0175bc9235
 		Split the SDK upgrade guides by SDK version (#4684) 2026-07-28 10:47:39 -04:00
Jeremiah Lowin
7674645761
 		Flatten OpenAPI discriminator subtypes into request bodies (#4677) 
* Flatten OpenAPI discriminator subtypes into request bodies

* Resolve schema-name discriminator mappings and union conflicting variant fields

* Advertise discriminator values for propertyless variants and document the behavior
 2026-07-27 16:06:54 -04:00
Bill Easton
75b9f92504
 		feat: Add telemetry interop mode for FastMCP (#4046) 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-27 16:05:29 -04:00
Jeremiah Lowin
ffea4d6a3e
 		Docs: add v3.4.5 changelog entries to main (#4674) 
* Docs: add v3.4.5 changelog entries

* Condense the 3.4.5 entries to patch-release length
 2026-07-27 15:13:03 -04:00
Eduardo Cruz Guedes
794bfe9567
 		Add valid_scopes parameter to OIDC proxy valid scopes (#4660) 
* Accept valid_scopes on OIDCProxy

* Keep valid_scopes when verify_id_token restores scopes

* Document valid_scopes on the OIDC proxy

---------

Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-27 15:12:15 -04:00
marvin-context-protocol[bot]
11ee46bf3b
 		chore: Update SDK documentation (#4647) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-07-27 15:03:41 -04:00
Jeremiah Lowin
cc02df94c5
 		Audit v4 docs: fix missing version badges, fill whats-new gaps (#4668) 
* Fix missing/wrong 4.0.0 version badges

* Fill v4 badge and whats-new gaps found in docs audit
 2026-07-27 15:03:18 -04:00
Jeremiah Lowin
ea7fb8cb2e
 		Remove 3.x-era compatibility shims (#4661) 
* Remove 3.x-era compatibility shims

* Require response_type in ctx.elicit()

* Name the utilities path for the two non-re-exported auth helpers

* Point sampling handler migration at its submodule
 2026-07-27 14:59:43 -04:00
Jeremiah Lowin
e4ccf06baf
 		Fix FAQ: sampling/roots/elicitation legacy-mode advice, SessionProvider registration (#4672) 
* Fix FAQ: narrow the legacy-mode recommendation, note SessionProvider registration

* Correct sampling's modern-protocol claim: guard pattern works, just isn't the recommended path
 2026-07-27 14:57:35 -04:00
Jeremiah Lowin
886c85e5f5
 		Cover require_roles in the v4 highlights (#4666) 
* Cover require_roles in whats-new

* Decouple require_roles from the SEP-990 example; require a claim-validating provider
 2026-07-27 14:57:23 -04:00
Jeremiah Lowin
4e136e60d6
 		Document the issuer_url identity change for upgraders (#4658) 
* Document the issuer_url identity change for upgraders

Adds an upgrade note covering the one-time re-authorization, fixes the MultiAuth examples that pointed issuer_url at the upstream IdP, and corrects the OCI docstring.

* Address review: valid docstring example, narrower reauth scope

* Scope the reauth checklist item to token-minting providers
 2026-07-27 12:45:24 -04:00
Jeremiah Lowin
27a5921bff
 		Expand the FAQ for the v4 transition (#4649) 2026-07-27 12:41:32 -04:00
Jeremiah Lowin
920cb47778
 		Add require_roles auth check (#4656) 
* Add require_roles auth check

* Make role docs runnable standalone and fully annotated

* Treat a scalar role claim as one role; correct step-up docs

* Add v4 version badge to require_roles docs
 2026-07-27 12:36:58 -04:00
Jeremiah Lowin
a42faab783
 		Use issuer_url for OAuth issuer identity (#4652) 
* Use issuer_url for OAuth issuer identity, not base_url

* Apply ruff format to issuer identity tests

* Align ID-JAG audience docstring with issuer_url

* Make InMemoryOAuthProvider keyword-only like its parent

* Keep ID-JAG audience on base_url, out of scope for issuer identity

* Remove stray scratch script

* Make AuthorizationHandler keyword-only

* Bind ID-JAG audience to the issuer identifier

* Fix double slash in issuer_url well-known log hint
 2026-07-27 10:43:12 -04:00
Jeremiah Lowin
b2b2b0f918
 		Elicitation: state the era split once, not twice 2026-07-27 09:43:52 -04:00
Jeremiah Lowin
62afdca775
 		Bind ID-JAG audience to the issuer identifier 2026-07-27 09:37:38 -04:00
Jeremiah Lowin
c4dcf833ca
 		Upgrade guide: staying on 3.x is an option for sampling servers 2026-07-27 09:37:15 -04:00
Jeremiah Lowin
0172e4c4d4
 		Keep the sampling conformance scenario live; fix roots example URIs 2026-07-27 09:35:30 -04:00
Jeremiah Lowin
0e9cab86fd
 		Restore the version badge and point sampling users at 3.x 2026-07-26 21:10:41 -04:00
Jeremiah Lowin
4a616d6e39
 		Flag the sampling removal at the top of the page 2026-07-26 20:42:12 -04:00
Jeremiah Lowin
7fe3c1e8bd Editorial pass on the sampling and roots docs 2026-07-26 20:23:23 -04:00
Jeremiah Lowin
cf7edc895c
 		Docs: sampling and roots work on modern via the guard pattern 
The imperative ctx.sample()/ctx.list_roots() stay removed, but both
capabilities survive as input-required requests, as tests/conformance
exercises on 2026-07-28. Direct LLM calls remain the recommendation for
generation; roots has no round-trip-budget objection.
 2026-07-26 19:22:37 -04:00
Jeremiah Lowin
dec25ba6be
 		Merge remote-tracking branch 'origin/main' into r4648 
# Conflicts:
#	tests/conformance/expected-failures.yml
 2026-07-26 17:40:14 -04:00
Jeremiah Lowin
fecced2b5c
 		Merge pull request #4650 from PrefectHQ/claude/mcp-conformance-tests-7ec13f 
Pass the MCP conformance suite's draft and pending scenarios
 2026-07-26 17:38:13 -04:00
Jeremiah Lowin
7ca58583fd
 		Document the guard pattern for prompts and resources 2026-07-26 15:49:45 -04:00
Jeremiah Lowin
18aa6a09d6
 		Document sampling handlers on both protocol routes; qualify log-level override 2026-07-26 15:19:11 -04:00
Jeremiah Lowin
c4c72ac240
 		Use issuer_url for OAuth issuer identity, not base_url 2026-07-26 15:10:15 -04:00
Jeremiah Lowin
90f2e190d0
 		Silence ty deprecation diagnostics and drop stale sampling doc mentions 2026-07-26 14:45:55 -04:00
Jeremiah Lowin
1a43a3b8e9
 		Document that server-initiated sampling and roots are not in FastMCP 4 2026-07-26 14:43:18 -04:00