ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-09 07:09:11 +02:00
Code Issues Projects Releases Packages Wiki Activity
3,808 commits 152 branches 114 tags 96 MiB
Commit graph

3,808 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jeremiah Lowin
ea7fb8cb2e
 		Remove 3.x-era compatibility shims (#4661) 
* Remove 3.x-era compatibility shims

* Require response_type in ctx.elicit()

* Name the utilities path for the two non-re-exported auth helpers

* Point sampling handler migration at its submodule
 2026-07-27 14:59:43 -04:00
Jeremiah Lowin
1550eea886
 		Copy schemas iteratively so deep nesting still compresses (#4671) 
* Copy schemas iteratively so deep nesting still compresses

* Keep $defs when the reference scan hits its depth limit
 2026-07-27 14:58:13 -04:00
Jeremiah Lowin
e4ccf06baf
 		Fix FAQ: sampling/roots/elicitation legacy-mode advice, SessionProvider registration (#4672) 
* Fix FAQ: narrow the legacy-mode recommendation, note SessionProvider registration

* Correct sampling's modern-protocol claim: guard pattern works, just isn't the recommended path
 2026-07-27 14:57:35 -04:00
Jeremiah Lowin
886c85e5f5
 		Cover require_roles in the v4 highlights (#4666) 
* Cover require_roles in whats-new

* Decouple require_roles from the SEP-990 example; require a claim-validating provider
 2026-07-27 14:57:23 -04:00
Jeremiah Lowin
95edc1d2f3
 		Record effective scopes on the OAuth transaction (#4670) 2026-07-27 14:33:57 -04:00
Jeremiah Lowin
4e136e60d6
 		Document the issuer_url identity change for upgraders (#4658) 
* Document the issuer_url identity change for upgraders

Adds an upgrade note covering the one-time re-authorization, fixes the MultiAuth examples that pointed issuer_url at the upstream IdP, and corrects the OCI docstring.

* Address review: valid docstring example, narrower reauth scope

* Scope the reauth checklist item to token-minting providers
 2026-07-27 12:45:24 -04:00
Jeremiah Lowin
27a5921bff
 		Expand the FAQ for the v4 transition (#4649) 2026-07-27 12:41:32 -04:00
Jeremiah Lowin
920cb47778
 		Add require_roles auth check (#4656) 
* Add require_roles auth check

* Make role docs runnable standalone and fully annotated

* Treat a scalar role claim as one role; correct step-up docs

* Add v4 version badge to require_roles docs
 2026-07-27 12:36:58 -04:00
Jeremiah Lowin
0c1c42f151
 		Bind CIMD assertion audience to the advertised token endpoint (#4659) 
A bare-authority base_url renders with a trailing slash, so the expected aud was https://host//token while the metadata advertised https://host/token.
 2026-07-27 11:46:03 -04:00
Jeremiah Lowin
6c4ba6b420
 		Use the snake_case field name in the task return-type test (#4657) 2026-07-27 10:56:03 -04:00
Jeremiah Lowin
a42faab783
 		Use issuer_url for OAuth issuer identity (#4652) 
* Use issuer_url for OAuth issuer identity, not base_url

* Apply ruff format to issuer identity tests

* Align ID-JAG audience docstring with issuer_url

* Make InMemoryOAuthProvider keyword-only like its parent

* Keep ID-JAG audience on base_url, out of scope for issuer identity

* Remove stray scratch script

* Make AuthorizationHandler keyword-only

* Bind ID-JAG audience to the issuer identifier

* Fix double slash in issuer_url well-known log hint
 2026-07-27 10:43:12 -04:00
Jeremiah Lowin
b1e0586d4e
 		Remove server-initiated sampling and roots from the server API (#4648) 
* Remove server-initiated sampling and roots from the server API

Deletes fastmcp/server/sampling/, Context.sample/sample_step/list_roots, and
FastMCP(sampling_handler=). The proxy's handshake-era relay now reaches the
front session through the SDK directly.

* Update tests for the removed sampling and roots server API

* Era-gate client.set_logging_level on modern connections

* Document that server-initiated sampling and roots are not in FastMCP 4

* Silence ty deprecation diagnostics and drop stale sampling doc mentions

* Baseline tools-call-sampling; fix removal leftovers flagged by ruff

* Document sampling handlers on both protocol routes; qualify log-level override

* Docs: sampling and roots work on modern via the guard pattern

The imperative ctx.sample()/ctx.list_roots() stay removed, but both
capabilities survive as input-required requests, as tests/conformance
exercises on 2026-07-28. Direct LLM calls remain the recommendation for
generation; roots has no round-trip-budget objection.

* Change register: record the guard route for sampling and roots

* Editorial pass on the sampling and roots docs

* Flag the sampling removal at the top of the page

* Restore the version badge and point sampling users at 3.x

* Keep the sampling conformance scenario live; fix roots example URIs

* Upgrade guide: staying on 3.x is an option for sampling servers

* Elicitation: state the era split once, not twice
 2026-07-27 10:32:31 -04:00
Jeremiah Lowin
9ea5a40728
 		Drop stale label-noting instructions from CLAUDE.md and review-pr skill (#4654) 
Labels are bot-assigned from title/body/code; noting a "suggested" label
in the PR body was a leftover from an unrelated PR (#4392) and doesn't
match how this repo actually labels things.
 2026-07-27 10:31:58 -04:00
Jeremiah Lowin
b2b2b0f918
 		Elicitation: state the era split once, not twice 2026-07-27 09:43:52 -04:00
Jeremiah Lowin
a2bec08e76
 		Fix double slash in issuer_url well-known log hint 2026-07-27 09:43:29 -04:00
Jeremiah Lowin
62afdca775
 		Bind ID-JAG audience to the issuer identifier 2026-07-27 09:37:38 -04:00
Jeremiah Lowin
c4dcf833ca
 		Upgrade guide: staying on 3.x is an option for sampling servers 2026-07-27 09:37:15 -04:00
Jeremiah Lowin
0172e4c4d4
 		Keep the sampling conformance scenario live; fix roots example URIs 2026-07-27 09:35:30 -04:00
Jeremiah Lowin
aaaca09a91
 		Make AuthorizationHandler keyword-only 2026-07-26 21:11:55 -04:00
Jeremiah Lowin
0e9cab86fd
 		Restore the version badge and point sampling users at 3.x 2026-07-26 21:10:41 -04:00
Jeremiah Lowin
4a616d6e39
 		Flag the sampling removal at the top of the page 2026-07-26 20:42:12 -04:00
Jeremiah Lowin
7fe3c1e8bd Editorial pass on the sampling and roots docs 2026-07-26 20:23:23 -04:00
Jeremiah Lowin
d5ff831602
 		Change register: record the guard route for sampling and roots 2026-07-26 19:33:40 -04:00
Jeremiah Lowin
cf7edc895c
 		Docs: sampling and roots work on modern via the guard pattern 
The imperative ctx.sample()/ctx.list_roots() stay removed, but both
capabilities survive as input-required requests, as tests/conformance
exercises on 2026-07-28. Direct LLM calls remain the recommendation for
generation; roots has no round-trip-budget objection.
 2026-07-26 19:22:37 -04:00
Jeremiah Lowin
46c3b74346
 		Remove stray scratch script 2026-07-26 17:48:11 -04:00
Jeremiah Lowin
98ac0402df
 		Keep ID-JAG audience on base_url, out of scope for issuer identity 2026-07-26 17:48:01 -04:00
Jeremiah Lowin
dec25ba6be
 		Merge remote-tracking branch 'origin/main' into r4648 
# Conflicts:
#	tests/conformance/expected-failures.yml
 2026-07-26 17:40:14 -04:00
Jeremiah Lowin
fecced2b5c
 		Merge pull request #4650 from PrefectHQ/claude/mcp-conformance-tests-7ec13f 
Pass the MCP conformance suite's draft and pending scenarios
 2026-07-26 17:38:13 -04:00
Jeremiah Lowin
5745323ecd
 		Cover trace propagation through the modern proxy relay 2026-07-26 17:15:30 -04:00
Jeremiah Lowin
46cd0c7933
 		Format the split guard-components test module 2026-07-26 17:03:04 -04:00
Jeremiah Lowin
f7eed91aa8
 		Forward guard asks through prompt, resource, and template proxies 
A proxy has no back-channel to the real user, so driving a backend ask inside
it failed outright. Surface it as a result for the parent, as ProxyTool does.
 2026-07-26 16:58:58 -04:00
Jeremiah Lowin
8768921fd9
 		Split guard caching tests into their own module 
Keeps test_caching.py under its size limit by topic rather than by
compressing the new tests.
 2026-07-26 16:46:21 -04:00
Jeremiah Lowin
2d3ad9ca0d
 		Make a contended tasks/update wait instead of dropping its answer 
Partial fulfillment means two in-flight updates can carry different answers,
so acknowledging the one that loses the update lock stranded the task on a key
the client had already sent.
 2026-07-26 16:40:33 -04:00
Jeremiah Lowin
4ef7d16419
 		Keep multi-round-trip asks out of the response cache 
Prompt and resource asks carry no content, so caching one stored an empty
result and the client never saw the question. Bypass the cache on
continuation legs and return asks unwrapped, as tool calls already did.
 2026-07-26 16:06:17 -04:00
Jeremiah Lowin
7ca58583fd
 		Document the guard pattern for prompts and resources 2026-07-26 15:49:45 -04:00
Jeremiah Lowin
96e12569b1
 		Address review: durable re-entry, resource guards, deterministic test 
Keep the final outstanding input marker until the next task leg is durable,
so a racing tasks/get cannot read a parked leg as complete. Let resources and
resource templates return InputRequiredResult like tools and prompts. Identify
parked requests by their question rather than sort order.
 2026-07-26 15:36:40 -04:00
Jeremiah Lowin
a7248480e2
 		Make InMemoryOAuthProvider keyword-only like its parent 2026-07-26 15:34:06 -04:00
Jeremiah Lowin
18aa6a09d6
 		Document sampling handlers on both protocol routes; qualify log-level override 2026-07-26 15:19:11 -04:00
Jeremiah Lowin
66d842d6e9
 		Align ID-JAG audience docstring with issuer_url 2026-07-26 15:13:58 -04:00
Jeremiah Lowin
681d5a7120
 		Apply ruff format to issuer identity tests 2026-07-26 15:12:50 -04:00
Jeremiah Lowin
c4c72ac240
 		Use issuer_url for OAuth issuer identity, not base_url 2026-07-26 15:10:15 -04:00
Jeremiah Lowin
b9fcef1889
 		Baseline tools-call-sampling; fix removal leftovers flagged by ruff 2026-07-26 15:07:24 -04:00
Jeremiah Lowin
7699deb99c
 		Pass the MCP conformance suite's draft and pending scenarios 
Pin the suite, build out the fixture, and fix the protocol gaps it found.
 2026-07-26 15:00:08 -04:00
Jeremiah Lowin
1593257f2a
 		Merge remote-tracking branch 'origin/main' into modern-merge 
# Conflicts:
#	tests/client/test_roots.py
 2026-07-26 14:53:31 -04:00
Jeremiah Lowin
90f2e190d0
 		Silence ty deprecation diagnostics and drop stale sampling doc mentions 2026-07-26 14:45:55 -04:00
Shuying
2a93404e8c
 		fix: accept callable roots handlers (#4639) 
* Accept callable roots handlers

🤖 Generated with OpenAI Codex

* fix: cover callable object roots handlers

🤖 Generated with OpenAI Codex

---------

Co-authored-by: Shuying <zsy@u.northwestern.edu>
 2026-07-26 14:43:41 -04:00
Jeremiah Lowin
1a43a3b8e9
 		Document that server-initiated sampling and roots are not in FastMCP 4 2026-07-26 14:43:18 -04:00
Jeremiah Lowin
fca339084b
 		Era-gate client.set_logging_level on modern connections 2026-07-26 14:39:31 -04:00
Jeremiah Lowin
704b74b3ab
 		Update tests for the removed sampling and roots server API 2026-07-26 14:38:26 -04:00
Jeremiah Lowin
e056a3946e
 		Remove server-initiated sampling and roots from the server API 
Deletes fastmcp/server/sampling/, Context.sample/sample_step/list_roots, and
FastMCP(sampling_handler=). The proxy's handshake-era relay now reaches the
front session through the SDK directly.
 2026-07-26 14:34:21 -04:00