fastmcp/docs/apps
Jeremiah Lowin c35fa5b9e4
[3.x] Require a startup-URL session for the fastmcp dev apps preview (#5418)
Backports `security/dev-apps-preview-server` from main. The `fastmcp dev apps` UI runs as a session started from the printed startup URL, checks Host and origin, opens only launches the picker created, sandboxes tool UI resources in an opaque origin, escapes picker errors, and starts the MCP server with `FASTMCP_HTTP_HOST_ORIGIN_PROTECTION=auto` unless that variable is set. Behavior and compatibility effects match main.

Co-authored-by: Bill Easton <williamseaston@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
2026-10-04 10:51:29 -04:00
..
demos Fix docs app demo iframe assets (#4194) 2026-05-20 13:18:45 -04:00
images Overhaul apps docs (#3915) 2026-04-13 21:24:00 -04:00
providers Overhaul apps docs (#3915) 2026-04-13 21:24:00 -04:00
architecture.mdx [3.x] Apply transforms, enabled state, and auth to hashed tool lookups (#5416) 2026-10-04 10:27:02 -04:00
development.mdx [3.x] Require a startup-URL session for the fastmcp dev apps preview (#5418) 2026-10-04 10:51:29 -04:00
examples.mdx Overhaul apps docs (#3915) 2026-04-13 21:24:00 -04:00
fastmcp-app.mdx Fix docs app demo iframe assets (#4194) 2026-05-20 13:18:45 -04:00
generative.mdx Overhaul apps docs (#3915) 2026-04-13 21:24:00 -04:00
low-level.mdx Overhaul apps docs (#3915) 2026-04-13 21:24:00 -04:00
overview.mdx Fix docs app demo iframe assets (#4194) 2026-05-20 13:18:45 -04:00
prefab.mdx Fix docs app demo iframe assets (#4194) 2026-05-20 13:18:45 -04:00
quickstart.mdx Fix docs app demo iframe assets (#4194) 2026-05-20 13:18:45 -04:00