ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-09 07:09:11 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,844 commits 152 branches 114 tags 96 MiB
Commit graph

3,844 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jeremiah Lowin
886776f5fc
 		Canonicalize response cache arguments (#4753) 
Co-authored-by: LHMQ878 <LHMQ878@users.noreply.github.com>
 2026-08-04 15:25:46 -04:00
Jeremiah Lowin
d267792653
 		docs: clarify external OAuth consent mode (#4746) 2026-08-03 18:02:09 -04:00
nate nowack
a7e9b70919
 		Fix static analysis with latest ty (#4739) 
* Fix upgrade static analysis

Generated with Codex

* Preserve concrete transport return types

Generated with Codex

* Avoid widening transport return types

Generated with Codex

* Model transforming transport return types

Generated with Codex

* Exclude standalone screenshot examples from ty

Generated with Codex
 2026-08-03 10:53:23 -05:00
Jeremiah Lowin
022547ad8c
 		Preserve string-compatible prompt arguments (#4730) 2026-08-02 14:56:05 -04:00
Jeremiah Lowin
34bdd480c9
 		Improve HTTP server startup performance (#4729) 2026-08-02 14:11:26 -04:00
Shuying
c428a08fea
 		fix: preserve valid servers during CLI discovery (#4714) 
Co-authored-by: Shuying <zsy@u.northwestern.edu>
 2026-08-02 09:42:26 -04:00
Martin Styk
10b158baf3
 		Forward enable_cimd to Auth0, AWS Cognito and OCI providers (#4719) 
Signed-off-by: Martin Styk <mart.styk@gmail.com>
 2026-08-02 09:42:06 -04:00
YAO_001
9034a2eb4b
 		Fix CodeMode tool error propagation (#4704) 
Co-authored-by: nate nowack <thrast36@gmail.com>
 2026-08-02 09:41:36 -04:00
nate nowack
40c3e122e8
 		Write downloaded skill text as UTF-8 (#4715) 2026-08-02 09:33:32 -04:00
Jake Kaplan
bc07264529
 		Fix self-referential connection error causes (#4720) 
🤖 Generated with OpenAI Codex
 2026-07-30 16:23:33 -04:00
Jeremiah Lowin
bcef61d806
 		Route published docs through pull requests (#4713) 2026-07-30 10:18:03 -04:00
Nicholas Brown
0f18a258d4
 		add language dropdown (#4716) 2026-07-30 09:32:58 -04:00
nate nowack
44c0907dda
 		Give parallel Windows CI more timeout headroom (#4680) 
pytest-timeout falls back to its thread method on Windows, which os._exit()s
the process instead of failing the test. A single slow test therefore kills an
xdist worker and fails whichever unrelated test it was running.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-07-29 10:22:17 -05:00
Jeremiah Lowin
07f6eafd99
 		Add comprehensive Codex code review rules (#4710) 2026-07-29 09:51:36 -04:00
Jeremiah Lowin
a22f778dbf
 		Rewrite the FastMCP docs welcome page (#4709) 2026-07-29 09:51:22 -04:00
Jeremiah Lowin
0792ac812c
 		Improve the v4 docs (#4707) 2026-07-29 09:51:13 -04:00
Jeremiah Lowin
7339936980
 		Rewrite the v4 What's New page and document server extensions (#4698) 
* Rewrite the v4 What's New page

Teach the headline features with code instead of asserting them, drop the
major-version throat-clearing and SEP list, and correct the elicitation
claim: ctx.elicit() is unchanged and handshake-only, while sampling and
roots are removed outright.

* Fix broken doc links and stale version references

Repoint five dead links and anchors, refresh v3-era version examples on the
v4 docs, and add the missing FastMCP 3 entry to the installation page's
upgrade section.

* Document server extensions

add_extension() shipped in v4 with no documentation page. Covers the
extension interface, request methods, tool-call interception, lifespan
ownership, and the client half.

* Link the FastMCP TypeScript library

* Address Codex review feedback

Gate the extension interceptor on the client's per-request opt-in rather
than claiming negotiation does it; show the v4 beta pin on the install
page instead of a version a reader cannot get; note that UserSession
requires authentication.
 2026-07-28 20:05:45 -04:00
Jeremiah Lowin
7a77805159
 		Use mcp.types directly instead of aliasing to mcp_types in docs (#4696) 2026-07-28 19:08:44 -04:00
Jeremiah Lowin
baced6281c
 		Always emit a tool title, derived from name when unset (#4694) 
* Always emit a tool title, derived from name when unset

Some MCP clients (e.g. ChatGPT) drop tools with no `title` instead of
falling back to `name` for display as the spec allows. Deriving a
default title in Tool.to_mcp_tool() fixes this for every tool built on
top of it, including the search-transform, code-mode, and session
proxy tools that never set one explicitly.

Fixes #4414

* Derive fallback title from the overridden name, document it

Addresses Codex review on #4694.

* Resolve title precedence from effective overrides

* Normalize mapping annotations before deriving the title
 2026-07-28 17:30:20 -04:00
Jeremiah Lowin
5a98ceb5ca
 		Add v4.0.0b1 changelog and updates entries (#4681) v4.0.0b1 
* Add v4.0.0b1 changelog and updates entries

* Drop meta note from b1 intro; add #4682 under enhancements

* File #4682 under fixes

* Correct the camelCase rename claim: Python model fields, not the wire

* Baseline the b1 changelog on v3.4.5

* Simplify the beta banner
 2026-07-28 17:15:48 -04:00
Jeremiah Lowin
8b76710e66
 		Move to the stable MCP Python SDK 2.0.0 (#4655) 2026-07-28 16:31:49 -04:00
Jeremiah Lowin
81b1e818e5
 		Apply app visibility where no host can (#4692) 2026-07-28 16:12:38 -04:00
Jeremiah Lowin
a8b5da9770
 		Late-bind app tool names so UIs survive composition (#4682) 2026-07-28 10:54:19 -04:00
Jeremiah Lowin
0175bc9235
 		Split the SDK upgrade guides by SDK version (#4684) 2026-07-28 10:47:39 -04:00
Jeremiah Lowin
d6b9daecb1
 		Read CLI-scanned MCP config files as UTF-8 explicitly (#4690) 2026-07-28 08:12:17 -04:00
Jeremiah Lowin
78c61415b5
 		Resolve review threads on fix, reply on decline (#4685) 
* Resolve review threads on fix, reply on decline

* Use a placeholder PR number in the resolve example
 2026-07-27 21:41:02 -04:00
Jeremiah Lowin
90ea26f337
 		Soften the review-comment reply guidance (#4683) 2026-07-27 21:06:12 -04:00
Jeremiah Lowin
f4ae8bb0af
 		Let maintenance releases publish without fastmcp-tasks (#4676) 2026-07-27 16:07:54 -04:00
Jeremiah Lowin
d382943012
 		Note that review comment threads should get an acknowledgement (#4678) 2026-07-27 16:07:39 -04:00
Jeremiah Lowin
7674645761
 		Flatten OpenAPI discriminator subtypes into request bodies (#4677) 
* Flatten OpenAPI discriminator subtypes into request bodies

* Resolve schema-name discriminator mappings and union conflicting variant fields

* Advertise discriminator values for propertyless variants and document the behavior
 2026-07-27 16:06:54 -04:00
Bill Easton
75b9f92504
 		feat: Add telemetry interop mode for FastMCP (#4046) 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-27 16:05:29 -04:00
苏紫辰
c3cbe8b9a3
 		Fix OpenAPI allOf reference fields (#4653) 
* Fix OpenAPI allOf reference fields

🤖 Generated with Codex

* Add allOf reference crash regression

🤖 Generated with Codex

* Handle OpenAPI component refs in allOf

🤖 Generated with Codex

---------

Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-27 15:25:22 -04:00
Jeremiah Lowin
ffea4d6a3e
 		Docs: add v3.4.5 changelog entries to main (#4674) 
* Docs: add v3.4.5 changelog entries

* Condense the 3.4.5 entries to patch-release length
 2026-07-27 15:13:03 -04:00
Eduardo Cruz Guedes
794bfe9567
 		Add valid_scopes parameter to OIDC proxy valid scopes (#4660) 
* Accept valid_scopes on OIDCProxy

* Keep valid_scopes when verify_id_token restores scopes

* Document valid_scopes on the OIDC proxy

---------

Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-27 15:12:15 -04:00
marvin-context-protocol[bot]
11ee46bf3b
 		chore: Update SDK documentation (#4647) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-07-27 15:03:41 -04:00
Jeremiah Lowin
cc02df94c5
 		Audit v4 docs: fix missing version badges, fill whats-new gaps (#4668) 
* Fix missing/wrong 4.0.0 version badges

* Fill v4 badge and whats-new gaps found in docs audit
 2026-07-27 15:03:18 -04:00
Jeremiah Lowin
ea7fb8cb2e
 		Remove 3.x-era compatibility shims (#4661) 
* Remove 3.x-era compatibility shims

* Require response_type in ctx.elicit()

* Name the utilities path for the two non-re-exported auth helpers

* Point sampling handler migration at its submodule
 2026-07-27 14:59:43 -04:00
Jeremiah Lowin
1550eea886
 		Copy schemas iteratively so deep nesting still compresses (#4671) 
* Copy schemas iteratively so deep nesting still compresses

* Keep $defs when the reference scan hits its depth limit
 2026-07-27 14:58:13 -04:00
Jeremiah Lowin
e4ccf06baf
 		Fix FAQ: sampling/roots/elicitation legacy-mode advice, SessionProvider registration (#4672) 
* Fix FAQ: narrow the legacy-mode recommendation, note SessionProvider registration

* Correct sampling's modern-protocol claim: guard pattern works, just isn't the recommended path
 2026-07-27 14:57:35 -04:00
Jeremiah Lowin
886c85e5f5
 		Cover require_roles in the v4 highlights (#4666) 
* Cover require_roles in whats-new

* Decouple require_roles from the SEP-990 example; require a claim-validating provider
 2026-07-27 14:57:23 -04:00
Jeremiah Lowin
95edc1d2f3
 		Record effective scopes on the OAuth transaction (#4670) 2026-07-27 14:33:57 -04:00
Jeremiah Lowin
4e136e60d6
 		Document the issuer_url identity change for upgraders (#4658) 
* Document the issuer_url identity change for upgraders

Adds an upgrade note covering the one-time re-authorization, fixes the MultiAuth examples that pointed issuer_url at the upstream IdP, and corrects the OCI docstring.

* Address review: valid docstring example, narrower reauth scope

* Scope the reauth checklist item to token-minting providers
 2026-07-27 12:45:24 -04:00
Jeremiah Lowin
27a5921bff
 		Expand the FAQ for the v4 transition (#4649) 2026-07-27 12:41:32 -04:00
Jeremiah Lowin
920cb47778
 		Add require_roles auth check (#4656) 
* Add require_roles auth check

* Make role docs runnable standalone and fully annotated

* Treat a scalar role claim as one role; correct step-up docs

* Add v4 version badge to require_roles docs
 2026-07-27 12:36:58 -04:00
Jeremiah Lowin
0c1c42f151
 		Bind CIMD assertion audience to the advertised token endpoint (#4659) 
A bare-authority base_url renders with a trailing slash, so the expected aud was https://host//token while the metadata advertised https://host/token.
 2026-07-27 11:46:03 -04:00
Jeremiah Lowin
6c4ba6b420
 		Use the snake_case field name in the task return-type test (#4657) 2026-07-27 10:56:03 -04:00
Jeremiah Lowin
a42faab783
 		Use issuer_url for OAuth issuer identity (#4652) 
* Use issuer_url for OAuth issuer identity, not base_url

* Apply ruff format to issuer identity tests

* Align ID-JAG audience docstring with issuer_url

* Make InMemoryOAuthProvider keyword-only like its parent

* Keep ID-JAG audience on base_url, out of scope for issuer identity

* Remove stray scratch script

* Make AuthorizationHandler keyword-only

* Bind ID-JAG audience to the issuer identifier

* Fix double slash in issuer_url well-known log hint
 2026-07-27 10:43:12 -04:00
Jeremiah Lowin
b1e0586d4e
 		Remove server-initiated sampling and roots from the server API (#4648) 
* Remove server-initiated sampling and roots from the server API

Deletes fastmcp/server/sampling/, Context.sample/sample_step/list_roots, and
FastMCP(sampling_handler=). The proxy's handshake-era relay now reaches the
front session through the SDK directly.

* Update tests for the removed sampling and roots server API

* Era-gate client.set_logging_level on modern connections

* Document that server-initiated sampling and roots are not in FastMCP 4

* Silence ty deprecation diagnostics and drop stale sampling doc mentions

* Baseline tools-call-sampling; fix removal leftovers flagged by ruff

* Document sampling handlers on both protocol routes; qualify log-level override

* Docs: sampling and roots work on modern via the guard pattern

The imperative ctx.sample()/ctx.list_roots() stay removed, but both
capabilities survive as input-required requests, as tests/conformance
exercises on 2026-07-28. Direct LLM calls remain the recommendation for
generation; roots has no round-trip-budget objection.

* Change register: record the guard route for sampling and roots

* Editorial pass on the sampling and roots docs

* Flag the sampling removal at the top of the page

* Restore the version badge and point sampling users at 3.x

* Keep the sampling conformance scenario live; fix roots example URIs

* Upgrade guide: staying on 3.x is an option for sampling servers

* Elicitation: state the era split once, not twice
 2026-07-27 10:32:31 -04:00
Jeremiah Lowin
9ea5a40728
 		Drop stale label-noting instructions from CLAUDE.md and review-pr skill (#4654) 
Labels are bot-assigned from title/body/code; noting a "suggested" label
in the PR body was a leftover from an unrelated PR (#4392) and doesn't
match how this repo actually labels things.
 2026-07-27 10:31:58 -04:00
Jeremiah Lowin
b2b2b0f918
 		Elicitation: state the era split once, not twice 2026-07-27 09:43:52 -04:00