ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-09 07:09:11 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,820 commits 152 branches 114 tags 96 MiB
Commit graph

3,820 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jeremiah Lowin
d6b9daecb1
 		Read CLI-scanned MCP config files as UTF-8 explicitly (#4690) 2026-07-28 08:12:17 -04:00
Jeremiah Lowin
78c61415b5
 		Resolve review threads on fix, reply on decline (#4685) 
* Resolve review threads on fix, reply on decline

* Use a placeholder PR number in the resolve example
 2026-07-27 21:41:02 -04:00
Jeremiah Lowin
90ea26f337
 		Soften the review-comment reply guidance (#4683) 2026-07-27 21:06:12 -04:00
Jeremiah Lowin
f4ae8bb0af
 		Let maintenance releases publish without fastmcp-tasks (#4676) 2026-07-27 16:07:54 -04:00
Jeremiah Lowin
d382943012
 		Note that review comment threads should get an acknowledgement (#4678) 2026-07-27 16:07:39 -04:00
Jeremiah Lowin
7674645761
 		Flatten OpenAPI discriminator subtypes into request bodies (#4677) 
* Flatten OpenAPI discriminator subtypes into request bodies

* Resolve schema-name discriminator mappings and union conflicting variant fields

* Advertise discriminator values for propertyless variants and document the behavior
 2026-07-27 16:06:54 -04:00
Bill Easton
75b9f92504
 		feat: Add telemetry interop mode for FastMCP (#4046) 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-27 16:05:29 -04:00
苏紫辰
c3cbe8b9a3
 		Fix OpenAPI allOf reference fields (#4653) 
* Fix OpenAPI allOf reference fields

🤖 Generated with Codex

* Add allOf reference crash regression

🤖 Generated with Codex

* Handle OpenAPI component refs in allOf

🤖 Generated with Codex

---------

Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-27 15:25:22 -04:00
Jeremiah Lowin
ffea4d6a3e
 		Docs: add v3.4.5 changelog entries to main (#4674) 
* Docs: add v3.4.5 changelog entries

* Condense the 3.4.5 entries to patch-release length
 2026-07-27 15:13:03 -04:00
Eduardo Cruz Guedes
794bfe9567
 		Add valid_scopes parameter to OIDC proxy valid scopes (#4660) 
* Accept valid_scopes on OIDCProxy

* Keep valid_scopes when verify_id_token restores scopes

* Document valid_scopes on the OIDC proxy

---------

Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
 2026-07-27 15:12:15 -04:00
marvin-context-protocol[bot]
11ee46bf3b
 		chore: Update SDK documentation (#4647) 
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
 2026-07-27 15:03:41 -04:00
Jeremiah Lowin
cc02df94c5
 		Audit v4 docs: fix missing version badges, fill whats-new gaps (#4668) 
* Fix missing/wrong 4.0.0 version badges

* Fill v4 badge and whats-new gaps found in docs audit
 2026-07-27 15:03:18 -04:00
Jeremiah Lowin
ea7fb8cb2e
 		Remove 3.x-era compatibility shims (#4661) 
* Remove 3.x-era compatibility shims

* Require response_type in ctx.elicit()

* Name the utilities path for the two non-re-exported auth helpers

* Point sampling handler migration at its submodule
 2026-07-27 14:59:43 -04:00
Jeremiah Lowin
1550eea886
 		Copy schemas iteratively so deep nesting still compresses (#4671) 
* Copy schemas iteratively so deep nesting still compresses

* Keep $defs when the reference scan hits its depth limit
 2026-07-27 14:58:13 -04:00
Jeremiah Lowin
e4ccf06baf
 		Fix FAQ: sampling/roots/elicitation legacy-mode advice, SessionProvider registration (#4672) 
* Fix FAQ: narrow the legacy-mode recommendation, note SessionProvider registration

* Correct sampling's modern-protocol claim: guard pattern works, just isn't the recommended path
 2026-07-27 14:57:35 -04:00
Jeremiah Lowin
886c85e5f5
 		Cover require_roles in the v4 highlights (#4666) 
* Cover require_roles in whats-new

* Decouple require_roles from the SEP-990 example; require a claim-validating provider
 2026-07-27 14:57:23 -04:00
Jeremiah Lowin
95edc1d2f3
 		Record effective scopes on the OAuth transaction (#4670) 2026-07-27 14:33:57 -04:00
Jeremiah Lowin
4e136e60d6
 		Document the issuer_url identity change for upgraders (#4658) 
* Document the issuer_url identity change for upgraders

Adds an upgrade note covering the one-time re-authorization, fixes the MultiAuth examples that pointed issuer_url at the upstream IdP, and corrects the OCI docstring.

* Address review: valid docstring example, narrower reauth scope

* Scope the reauth checklist item to token-minting providers
 2026-07-27 12:45:24 -04:00
Jeremiah Lowin
27a5921bff
 		Expand the FAQ for the v4 transition (#4649) 2026-07-27 12:41:32 -04:00
Jeremiah Lowin
920cb47778
 		Add require_roles auth check (#4656) 
* Add require_roles auth check

* Make role docs runnable standalone and fully annotated

* Treat a scalar role claim as one role; correct step-up docs

* Add v4 version badge to require_roles docs
 2026-07-27 12:36:58 -04:00
Jeremiah Lowin
0c1c42f151
 		Bind CIMD assertion audience to the advertised token endpoint (#4659) 
A bare-authority base_url renders with a trailing slash, so the expected aud was https://host//token while the metadata advertised https://host/token.
 2026-07-27 11:46:03 -04:00
Jeremiah Lowin
6c4ba6b420
 		Use the snake_case field name in the task return-type test (#4657) 2026-07-27 10:56:03 -04:00
Jeremiah Lowin
a42faab783
 		Use issuer_url for OAuth issuer identity (#4652) 
* Use issuer_url for OAuth issuer identity, not base_url

* Apply ruff format to issuer identity tests

* Align ID-JAG audience docstring with issuer_url

* Make InMemoryOAuthProvider keyword-only like its parent

* Keep ID-JAG audience on base_url, out of scope for issuer identity

* Remove stray scratch script

* Make AuthorizationHandler keyword-only

* Bind ID-JAG audience to the issuer identifier

* Fix double slash in issuer_url well-known log hint
 2026-07-27 10:43:12 -04:00
Jeremiah Lowin
b1e0586d4e
 		Remove server-initiated sampling and roots from the server API (#4648) 
* Remove server-initiated sampling and roots from the server API

Deletes fastmcp/server/sampling/, Context.sample/sample_step/list_roots, and
FastMCP(sampling_handler=). The proxy's handshake-era relay now reaches the
front session through the SDK directly.

* Update tests for the removed sampling and roots server API

* Era-gate client.set_logging_level on modern connections

* Document that server-initiated sampling and roots are not in FastMCP 4

* Silence ty deprecation diagnostics and drop stale sampling doc mentions

* Baseline tools-call-sampling; fix removal leftovers flagged by ruff

* Document sampling handlers on both protocol routes; qualify log-level override

* Docs: sampling and roots work on modern via the guard pattern

The imperative ctx.sample()/ctx.list_roots() stay removed, but both
capabilities survive as input-required requests, as tests/conformance
exercises on 2026-07-28. Direct LLM calls remain the recommendation for
generation; roots has no round-trip-budget objection.

* Change register: record the guard route for sampling and roots

* Editorial pass on the sampling and roots docs

* Flag the sampling removal at the top of the page

* Restore the version badge and point sampling users at 3.x

* Keep the sampling conformance scenario live; fix roots example URIs

* Upgrade guide: staying on 3.x is an option for sampling servers

* Elicitation: state the era split once, not twice
 2026-07-27 10:32:31 -04:00
Jeremiah Lowin
9ea5a40728
 		Drop stale label-noting instructions from CLAUDE.md and review-pr skill (#4654) 
Labels are bot-assigned from title/body/code; noting a "suggested" label
in the PR body was a leftover from an unrelated PR (#4392) and doesn't
match how this repo actually labels things.
 2026-07-27 10:31:58 -04:00
Jeremiah Lowin
b2b2b0f918
 		Elicitation: state the era split once, not twice 2026-07-27 09:43:52 -04:00
Jeremiah Lowin
a2bec08e76
 		Fix double slash in issuer_url well-known log hint 2026-07-27 09:43:29 -04:00
Jeremiah Lowin
62afdca775
 		Bind ID-JAG audience to the issuer identifier 2026-07-27 09:37:38 -04:00
Jeremiah Lowin
c4dcf833ca
 		Upgrade guide: staying on 3.x is an option for sampling servers 2026-07-27 09:37:15 -04:00
Jeremiah Lowin
0172e4c4d4
 		Keep the sampling conformance scenario live; fix roots example URIs 2026-07-27 09:35:30 -04:00
Jeremiah Lowin
aaaca09a91
 		Make AuthorizationHandler keyword-only 2026-07-26 21:11:55 -04:00
Jeremiah Lowin
0e9cab86fd
 		Restore the version badge and point sampling users at 3.x 2026-07-26 21:10:41 -04:00
Jeremiah Lowin
4a616d6e39
 		Flag the sampling removal at the top of the page 2026-07-26 20:42:12 -04:00
Jeremiah Lowin
7fe3c1e8bd Editorial pass on the sampling and roots docs 2026-07-26 20:23:23 -04:00
Jeremiah Lowin
d5ff831602
 		Change register: record the guard route for sampling and roots 2026-07-26 19:33:40 -04:00
Jeremiah Lowin
cf7edc895c
 		Docs: sampling and roots work on modern via the guard pattern 
The imperative ctx.sample()/ctx.list_roots() stay removed, but both
capabilities survive as input-required requests, as tests/conformance
exercises on 2026-07-28. Direct LLM calls remain the recommendation for
generation; roots has no round-trip-budget objection.
 2026-07-26 19:22:37 -04:00
Jeremiah Lowin
46c3b74346
 		Remove stray scratch script 2026-07-26 17:48:11 -04:00
Jeremiah Lowin
98ac0402df
 		Keep ID-JAG audience on base_url, out of scope for issuer identity 2026-07-26 17:48:01 -04:00
Jeremiah Lowin
dec25ba6be
 		Merge remote-tracking branch 'origin/main' into r4648 
# Conflicts:
#	tests/conformance/expected-failures.yml
 2026-07-26 17:40:14 -04:00
Jeremiah Lowin
fecced2b5c
 		Merge pull request #4650 from PrefectHQ/claude/mcp-conformance-tests-7ec13f 
Pass the MCP conformance suite's draft and pending scenarios
 2026-07-26 17:38:13 -04:00
Jeremiah Lowin
5745323ecd
 		Cover trace propagation through the modern proxy relay 2026-07-26 17:15:30 -04:00
Jeremiah Lowin
46cd0c7933
 		Format the split guard-components test module 2026-07-26 17:03:04 -04:00
Jeremiah Lowin
f7eed91aa8
 		Forward guard asks through prompt, resource, and template proxies 
A proxy has no back-channel to the real user, so driving a backend ask inside
it failed outright. Surface it as a result for the parent, as ProxyTool does.
 2026-07-26 16:58:58 -04:00
Jeremiah Lowin
8768921fd9
 		Split guard caching tests into their own module 
Keeps test_caching.py under its size limit by topic rather than by
compressing the new tests.
 2026-07-26 16:46:21 -04:00
Jeremiah Lowin
2d3ad9ca0d
 		Make a contended tasks/update wait instead of dropping its answer 
Partial fulfillment means two in-flight updates can carry different answers,
so acknowledging the one that loses the update lock stranded the task on a key
the client had already sent.
 2026-07-26 16:40:33 -04:00
Jeremiah Lowin
4ef7d16419
 		Keep multi-round-trip asks out of the response cache 
Prompt and resource asks carry no content, so caching one stored an empty
result and the client never saw the question. Bypass the cache on
continuation legs and return asks unwrapped, as tool calls already did.
 2026-07-26 16:06:17 -04:00
Jeremiah Lowin
7ca58583fd
 		Document the guard pattern for prompts and resources 2026-07-26 15:49:45 -04:00
Jeremiah Lowin
96e12569b1
 		Address review: durable re-entry, resource guards, deterministic test 
Keep the final outstanding input marker until the next task leg is durable,
so a racing tasks/get cannot read a parked leg as complete. Let resources and
resource templates return InputRequiredResult like tools and prompts. Identify
parked requests by their question rather than sort order.
 2026-07-26 15:36:40 -04:00
Jeremiah Lowin
a7248480e2
 		Make InMemoryOAuthProvider keyword-only like its parent 2026-07-26 15:34:06 -04:00
Jeremiah Lowin
18aa6a09d6
 		Document sampling handlers on both protocol routes; qualify log-level override 2026-07-26 15:19:11 -04:00