mirror of
https://github.com/PrefectHQ/fastmcp.git
synced 2026-08-23 14:04:18 +02:00
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Jeremiah Lowin <jlowin@users.noreply.github.com> Co-authored-by: Marvin Context Protocol <41898282+Marvin Context Protocol@users.noreply.github.com> Co-authored-by: voidborne-d <voidborne-d@users.noreply.github.com> Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: d 🔹 <258577966+voidborne-d@users.noreply.github.com> Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com> Co-authored-by: nightcityblade <nightcityblade@gmail.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: Bill Easton <strawgate@users.noreply.github.com> Co-authored-by: Sumanshu Nankana <sumanshunankana@gmail.com> Co-authored-by: Eric Robinson <ericrobinson@indeed.com> Co-authored-by: Martim Santos <martimfasantos@gmail.com> Co-authored-by: d 🔹 <liusway405@gmail.com> Co-authored-by: Matthieu B <66959271+mtthidoteu@users.noreply.github.com> Co-authored-by: Sascha Buehrle <47737812+saschabuehrle@users.noreply.github.com> Co-authored-by: Hakancan <142545736+hkc5@users.noreply.github.com> Co-authored-by: nightcityblade <jackchen@haloailabs.com> Co-authored-by: Matt Hallowell <17804673+mhallo@users.noreply.github.com> Co-authored-by: nate nowack <thrast36@gmail.com> Co-authored-by: Bill Easton <williamseaston@gmail.com> Co-authored-by: Marcus Shu <46469249+shulkx@users.noreply.github.com> Co-authored-by: Rushabh Doshi <radoshi@gmail.com> Co-authored-by: AIKAWA Shigechika <shige@aikawa.jp> Co-authored-by: Jeremy Simon <simonjer805@gmail.com> Co-authored-by: Miguel Miranda Dias <7780875+pandego@users.noreply.github.com> Co-authored-by: Anthony James Padavano <padavano.anthony@gmail.com> Co-authored-by: Mostafa Kamal <hiremostafa@gmail.com> Fix auto-close MRE script posting comment without closing (#3386) Fix WorkOS token scope verification bypass 🤖 Generated with Codex (#3407) Fix initialize McpError fallthrough 🤖 Generated with Codex (#3413) Fix transform arg collisions with passthrough params (#3431) Fix get_* returning None when latest version is disabled (#3439) Fix get_* returning None when latest version is disabled (#3421) Fix server lifespan overlap teardown (#3415) Fix $ref output schema object detection regression (#3420) resolved annotations (#3429) Fix async partial callables rejected by iscoroutinefunction (#3438) Fix async partial callables rejected by iscoroutinefunction (#3423) fix: add version to components (#3458) fix: use intent-based flag for OIDC scope patch in load_access_token (#3465) Fixes #3461 fix: normalize Google scope shorthands and surface valid_scopes (#3477) fix: resolve ty 0.0.23 type-checking errors and bump pin (#3481) fix: shield lifespan teardown from cancellation (#3480) fix: forward custom_route endpoints from mounted servers (#3462) fix updates _get_additional_http_routes() to traverse providers, Fixes #3457 fix: remove hardcoded version from CLI help text (#3456) fix: monty 0.0.8 compatibility, drop external_functions from constructor (#3468) fix: task test teardown hanging 5s per test (#3499) Closes #3498 fix: validate workspace path is a directory before cursor install (#3440) Fixes #3426 fix: handle re.error from malformed URI templates in build_regex (#3501) fix: reject empty/OIDC-only required_scopes in AzureProvider (#3503) fix: restrict $ref resolution to local refs only (SSRF/LFI) (#3502) fix warnings and timeouts (#3504) close upgrade check issue when build passes (#3505) Closes #3484 fix: URL-encode path params to prevent SSRF/path traversal (GHSA-vv7q-7jx5-f767) (#3507) fix: prevent path traversal in skill download (#3493) fix: prefer IdP-granted scopes over client-requested scopes in OAuthProxy (#3492) fix: remove unrelated transform and http.py changes from PR scope fix: remove forced follow_redirects from httpx_client_factory calls (#3496) fix: stop passing follow_redirects to httpx_client_factory fix: restore follow_redirects=True for custom httpx client factories Closes #3509 fix: CSRF double-submit cookie check in consent flow (#3519) fix: validate server names in install commands (#3522) fix: use raw strings for regex in pytest.raises match (#3523) fix: reject refresh tokens used as Bearer access tokens (#3524) fix: route ResourcesAsTools/PromptsAsTools through server middleware (#3495) fix: resolve Pyright "Module is not callable" on @tool, @resource, @prompt decorators (#3540) fix: filter warnings by message in KEY_PREFIX test (#3549) fix: suppress output schema for ToolResult subclass annotations (#3548) fix: increase sleep duration in proxy cache tests (#3567) fix: store absolute token expiry to prevent stale expires_in on reload (#3572) fix: preserve tool properties named 'title' during schema compression (#3582) Fix loopback redirect URI port matching per RFC 8252 §7.3 (#3589) Fix app tool routing: visibility check and middleware propagation (#3591) Fix query parameter serialization to respect OpenAPI explode/style settings (#3595) Fix dev apps form: union types, textarea support, JSON parsing (#3597) fix(google): replace deprecated /oauth2/v1/tokeninfo with /oauth2/v3/userinfo (#3603) fix: resolve EntraOBOToken dependency injection through MultiAuth (#3609) fix(docs): correct misleading stateless_http header (#3622) fix: filesystem provider import machinery (#3626) Closes #3625 (issues 2, 3, 6) fix: recover StdioTransport after subprocess exits (#3630) fix(server): preserve mounted tool task metadata (#3632) fix: scope deprecation warning filter to FastMCPDeprecationWarning (#3649) fix imports, add PrefabAppConfig (#3650) fix: resolve CurrentFastMCP/ctx.fastmcp to child server in mounted background tasks (#3651) Fix blocking docs issues: chart imports, Select API, Rx consistency (#3652) closed by default (#3657) Fix prompt caching middleware missing wrap/unwrap round-trip (#3666) fix: serialize object query params per OpenAPI style/explode rules (#3662) Fixes #2857 fix: HTTP request headers not accessible in background task workers (#3631) fix: restore HTTP headers in worker execution path for background tasks (#3681) fix: strip discriminator after dereferencing schemas (#3682) fix: remove stale ty:ignore directives for ty 0.0.26 (#3684) Fix docs gaps in app provider pages (#3690) fix: dev apps log panel UX improvements (#3698) fix dev server empty string args (#3700)
202 lines
No EOL
5.9 KiB
TOML
202 lines
No EOL
5.9 KiB
TOML
[project]
|
|
name = "fastmcp"
|
|
dynamic = ["version"]
|
|
description = "The fast, Pythonic way to build MCP servers and clients."
|
|
authors = [{ name = "Jeremiah Lowin" }]
|
|
dependencies = [
|
|
"python-dotenv>=1.1.0",
|
|
"exceptiongroup>=1.2.2",
|
|
"httpx>=0.28.1,<1.0",
|
|
"mcp>=1.24.0,<2.0",
|
|
"openapi-pydantic>=0.5.1",
|
|
"opentelemetry-api>=1.20.0",
|
|
"packaging>=24.0",
|
|
"platformdirs>=4.0.0",
|
|
"rich>=13.9.4",
|
|
"cyclopts>=4.0.0",
|
|
"authlib>=1.6.5",
|
|
"pydantic[email]>=2.11.7",
|
|
"pyyaml>=6.0,<7.0",
|
|
"pyperclip>=1.9.0",
|
|
"py-key-value-aio[filetree,keyring,memory]>=0.4.4,<0.5.0",
|
|
"uvicorn>=0.35",
|
|
"websockets>=15.0.1",
|
|
"jsonschema-path>=0.3.4",
|
|
"jsonref>=1.1.0",
|
|
"uncalled-for>=0.2.0",
|
|
"watchfiles>=1.0.0",
|
|
]
|
|
|
|
requires-python = ">=3.10"
|
|
readme = "README.md"
|
|
license = "Apache-2.0"
|
|
|
|
keywords = [
|
|
"mcp",
|
|
"mcp server",
|
|
"mcp client",
|
|
"model context protocol",
|
|
"fastmcp",
|
|
"llm",
|
|
"agent",
|
|
]
|
|
classifiers = [
|
|
"Intended Audience :: Developers",
|
|
"License :: OSI Approved :: Apache Software License",
|
|
"Topic :: Scientific/Engineering :: Artificial Intelligence",
|
|
"Programming Language :: Python :: 3.10",
|
|
"Programming Language :: Python :: 3.11",
|
|
"Programming Language :: Python :: 3.12",
|
|
"Programming Language :: Python :: 3.13",
|
|
"Typing :: Typed",
|
|
]
|
|
|
|
[project.optional-dependencies]
|
|
anthropic = ["anthropic>=0.48.0"]
|
|
apps = ["prefab-ui>=0.18.0"]
|
|
# PyJWT floor: transitive via msal; CVE-2026-32597 affects <= 2.11.0
|
|
azure = ["azure-identity>=1.16.0", "PyJWT>=2.12.0"]
|
|
code-mode = ["pydantic-monty==0.0.9"]
|
|
gemini = ["google-genai>=1.18.0"]
|
|
openai = ["openai>=1.102.0"]
|
|
tasks = ["pydocket>=0.18.0"]
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"dirty-equals>=0.9.0",
|
|
"fastmcp[anthropic,apps,azure,code-mode,gemini,openai,tasks]",
|
|
# add optional dependencies for fastmcp dev
|
|
"fastapi>=0.115.12",
|
|
"opentelemetry-sdk>=1.20.0",
|
|
"inline-snapshot[dirty-equals]>=0.27.2",
|
|
"ipython>=8.12.3",
|
|
"pdbpp>=0.11.7",
|
|
"psutil>=7.0.0",
|
|
"pyinstrument>=5.0.2",
|
|
"pyperclip>=1.9.0",
|
|
"pytest>=8.3.3",
|
|
"pytest-asyncio>=1.2.0",
|
|
"pytest-cov>=6.1.1",
|
|
"pytest-env>=1.1.5",
|
|
"pytest-flakefinder>=1.1.0",
|
|
"pytest-httpx>=0.35.0",
|
|
"pytest-report>=0.2.1",
|
|
"pytest-retry>=1.7.0",
|
|
"pytest-timeout>=2.4.0",
|
|
"pytest-xdist>=3.6.1",
|
|
"ruff>=0.12.8",
|
|
"ty>=0.0.26",
|
|
"prek>=0.2.12",
|
|
"loq>=0.1.0a3",
|
|
"opentelemetry-exporter-otlp-proto-grpc>=1.39.0",
|
|
]
|
|
|
|
[project.scripts]
|
|
fastmcp = "fastmcp.cli:app"
|
|
|
|
[project.urls]
|
|
Homepage = "https://gofastmcp.com"
|
|
Repository = "https://github.com/PrefectHQ/fastmcp"
|
|
Documentation = "https://gofastmcp.com"
|
|
|
|
[build-system]
|
|
requires = ["hatchling", "uv-dynamic-versioning>=0.7.0"]
|
|
build-backend = "hatchling.build"
|
|
|
|
[tool.hatch.version]
|
|
source = "uv-dynamic-versioning"
|
|
|
|
[tool.hatch.metadata]
|
|
allow-direct-references = true
|
|
|
|
|
|
[tool.uv-dynamic-versioning]
|
|
vcs = "git"
|
|
style = "pep440"
|
|
bump = true
|
|
fallback-version = "0.0.0"
|
|
|
|
|
|
[tool.pytest.ini_options]
|
|
asyncio_mode = "auto"
|
|
asyncio_default_fixture_loop_scope = "function"
|
|
# filterwarnings = ["error::DeprecationWarning"]
|
|
filterwarnings = [
|
|
# Suppress OAuth in-memory token storage warnings in tests
|
|
# Tests intentionally use ephemeral storage; this warning is for end users
|
|
"ignore:Using in-memory token storage:UserWarning",
|
|
# Treat unawaited coroutine warnings as errors - these are almost always bugs
|
|
"error:coroutine .* was never awaited:RuntimeWarning",
|
|
"error:Exception ignored in.*coroutine:pytest.PytestUnraisableExceptionWarning",
|
|
]
|
|
timeout = 5
|
|
env = [
|
|
"FASTMCP_TEST_MODE=1",
|
|
'D:FASTMCP_LOG_LEVEL=DEBUG',
|
|
'D:FASTMCP_ENABLE_RICH_TRACEBACKS=0',
|
|
|
|
]
|
|
markers = [
|
|
"integration: marks tests as integration tests (deselect with '-m \"not integration\"')",
|
|
"client_process: marks tests that spawn client processes via stdio transport. These can create issues when run in the same CI environment as other subprocess-based tests.",
|
|
"conformance: marks MCP conformance tests (require Node.js/npx)",
|
|
]
|
|
# Automatically mark all tests in integration_tests folder
|
|
pythonpath = ["."]
|
|
testpaths = ["tests"]
|
|
python_files = ["test_*.py", "*_test.py"]
|
|
python_classes = ["Test*"]
|
|
python_functions = ["test_*"]
|
|
addopts = ["--inline-snapshot=disable"]
|
|
|
|
[tool.ty.src]
|
|
include = ["src", "tests"]
|
|
exclude = ["**/node_modules", "**/__pycache__", ".venv", ".git", "dist"]
|
|
|
|
[tool.ty.environment]
|
|
python-version = "3.10"
|
|
|
|
[tool.ty.rules]
|
|
# NOTE: ty currently doesn't support type narrowing with isinstance() on unions
|
|
# See: https://github.com/astral-sh/ty/issues/122 and https://github.com/astral-sh/ty/issues/1113
|
|
# Some code uses `# ty: ignore[invalid-argument-type]` for this limitation.
|
|
# TODO: Remove these ignores once ty supports union narrowing
|
|
|
|
[tool.ty.terminal]
|
|
error-on-warning = true
|
|
|
|
[tool.ruff.lint]
|
|
fixable = ["ALL"]
|
|
ignore = [
|
|
"COM812",
|
|
"PLR0913", # Too many arguments, MCP Servers have a lot of arguments, OKAY?!
|
|
"SIM102", # Dont require combining if statements
|
|
]
|
|
extend-select = [
|
|
"B", # flake8-bugbear: Catches actual bugs like mutable default arguments
|
|
"C4", # flake8-comprehensions: More efficient/readable comprehensions
|
|
"I", # flake8-builtins: Catches builtins that are not explicitly imported
|
|
"PIE", # flake8-pie: More idiomatic Python code
|
|
"RUF", # Ruff-specific: Modern best practices unique to Ruff
|
|
"SIM", # flake8-simplify: Simplifies verbose code patterns
|
|
"UP", # flake8-unused-imports: Catches unused imports
|
|
]
|
|
|
|
[tool.ruff.lint.isort]
|
|
known-first-party = ["fastmcp"]
|
|
|
|
[tool.ruff.lint.per-file-ignores]
|
|
"__init__.py" = ["F401", "I001", "RUF013"]
|
|
# allow imports not at the top of the file
|
|
"src/fastmcp/__init__.py" = ["E402"]
|
|
"!src/**.py" = [ # Only enforce extended ruff rules for code in src/
|
|
"B", # flake8-bugbear
|
|
"C4", # flake8-comprehensions
|
|
"PIE", # flake8-pie
|
|
"RUF", # Ruff-specific
|
|
"SIM", # flake8-simplify
|
|
]
|
|
|
|
|
|
[tool.codespell]
|
|
ignore-words-list = "asend,shttp,te" |